Skip to content

build(deps): Bump @confluentinc/kafka-javascript from 1.4.0 to 1.8.0 #8657

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): Bump @confluentinc/kafka-javascript from 1.4.0 to 1.8.0 #8657

dependabot wants to merge 1 commit into from
+4,303 −1,646

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 3, 2026

Bumps @confluentinc/kafka-javascript from 1.4.0 to 1.8.0.

Release notes

Sourced from @​confluentinc/kafka-javascript's releases.

v1.8.0 is a feature release. It is supported for all usage.

Enhancements

  1. References librdkafka v2.13.0. Refer to the librdkafka v2.13.0 release notes for more information.
  2. Export CelExecutor/CelFieldExecutor in schemaregistry index.ts (#412).
  3. Minor improvement to rule failure message (#419).
  4. Prevent a condition that causes fetch failures when max batch size is set or the default one and there's a low consumption rate (#418 @​LucioFranco, #424).

Fixes

  1. fix(deps): update dependency validator to v13.15.22 [security] (#413).
  2. Prevent max message cache size reaching zero by having a minimum of 1 message per worker after the round up (#424).

v1.8.0-rc2

What's Changed

New Contributors

Full Changelog: confluentinc/confluent-kafka-javascript@v1.7.0...v1.8.0-rc2

v1.8.0-rc1

What's Changed

Full Changelog: confluentinc/confluent-kafka-javascript@v1.7.0...v1.8.0-rc1

v1.7.0 is a feature release. It is supported for all usage.

Enhancements

  1. References librdkafka v2.12.1. Refer to the librdkafka v2.12.1 release notes for more information.
  2. Configurable batch size through the js.consumer.max.batch.size property and cache size through the js.consumer.max.cache.size.per.worker.ms property (#393).
  3. Statistics callback now available when using the promisified API with all

... (truncated)

Changelog

Sourced from @​confluentinc/kafka-javascript's changelog.

confluent-kafka-javascript 1.8.0

v1.8.0 is a feature release. It is supported for all usage.

Enhancements

  1. References librdkafka v2.13.0. Refer to the librdkafka v2.13.0 release notes for more information.
  2. Export CelExecutor/CelFieldExecutor in schemaregistry index.ts (#412).
  3. Minor improvement to rule failure message (#419).
  4. Prevent a condition that causes fetch failures when max batch size is set or the default one and there's a low consumption rate (#418 @​LucioFranco, #424).

Fixes

  1. fix(deps): update dependency validator to v13.15.22 [security] (#413).
  2. Prevent max message cache size reaching zero by having a minimum of 1 message per worker after the round up (#424).

confluent-kafka-javascript 1.7.0

v1.7.0 is a feature release. It is supported for all usage.

Enhancements

  1. References librdkafka v2.12.1. Refer to the librdkafka v2.12.1 release notes for more information.
  2. Configurable batch size through the js.consumer.max.batch.size property and cache size through the js.consumer.max.cache.size.per.worker.ms property (#393).
  3. Statistics callback now available when using the promisified API with all client types (#399).
  4. Fix for at-least-once guarantee not ensured in case a seek happens on one partition and there are messages being fetched about other partitions (#393).
  5. Avoid returning a negative lag in case there is no cached offset for the HWM (#406).

confluent-kafka-javascript 1.6.0

v1.6.0 is a feature release. It is supported for all usage.

Enhancements

  1. References librdkafka v2.12.0. Refer to the librdkafka v2.12.0 release notes for more information.
  2. OAuth OIDC method example for Kafka metadata based authentication with an Azure IMDS endpoint using an attached managed identity as principal (#377).

confluent-kafka-javascript 1.5.0

v1.5.0 is a feature release. It is supported for all usage.

... (truncated)

Commits
  • 80053e8 release v1.8.0 with librdkafka v2.13.0 (#426)
  • 0dda0b4 release v1.8.0-rc2 with librdkafka v2.13.0-RC2 (#425)
  • fab45d2 Prevent max message cache size reaching zero by having a minimum of 1 message...
  • 8151be6 v1.8.0 rc1 (#422)
  • ef8e9d8 Minor improvement ot rule failure message (#419)
  • 7a2fd8f fix(deps): update dependency validator to v13.15.22 [security] (#413)
  • 3c05806 Export CelExecutor/CelFieldExecutor in index.ts (#412)
  • 99bff68 Minor update to README to remove Early Access description (#411)
  • 5743d1c v1.7.0 (#410)
  • d7d2743 v1.7.0-rc1 (#409)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
build(deps): Bump @confluentinc/kafka-javascript from 1.4.0 to 1.8.0
ff5af06 
Bumps [@confluentinc/kafka-javascript](https://github.com/confluentinc/confluent-kafka-javascript) from 1.4.0 to 1.8.0.
- [Release notes](https://github.com/confluentinc/confluent-kafka-javascript/releases)
- [Changelog](https://github.com/confluentinc/confluent-kafka-javascript/blob/master/CHANGELOG.md)
- [Commits](confluentinc/confluent-kafka-javascript@v1.4.0...v1.8.0)

---
updated-dependencies:
- dependency-name: "@confluentinc/kafka-javascript"
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 3, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 3, 2026 02:18
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 3, 2026
@changeset-bot
Copy link

changeset-bot bot commented Feb 3, 2026

⚠️ No Changeset found

Latest commit: ff5af06

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel
Copy link

vercel bot commented Feb 3, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs-v2 Ready Ready Preview, Comment Feb 3, 2026 2:33am
nebula Ready Ready Preview, Comment Feb 3, 2026 2:33am
thirdweb_playground Error Error Feb 3, 2026 2:33am
thirdweb-www Error Error Feb 3, 2026 2:33am
wallet-ui Ready Ready Preview, Comment Feb 3, 2026 2:33am

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Feb 3, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security
Copy link

socket-security bot commented Feb 3, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​wagmi/​cli@​2.8.0 ⏵ 2.9.077 -201007795 +4100
Updated@​confluentinc/​kafka-javascript@​1.4.0 ⏵ 1.8.093 +2100100 +195 -180

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code packages

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants