Skip to content

fix(deps): update go modules (non-major)#36

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-modules-(non-major)
Open

fix(deps): update go modules (non-major)#36
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-modules-(non-major)

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate bot commented Dec 19, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/adobe/ims-go v0.19.2v0.21.0 age adoption passing confidence
github.com/go-viper/mapstructure/v2 v2.4.0v2.5.0 age adoption passing confidence
github.com/knadh/koanf/providers/file v1.2.0v1.2.1 age adoption passing confidence
github.com/knadh/koanf/v2 v2.3.0v2.3.4 age adoption passing confidence
github.com/twmb/franz-go v1.20.5v1.20.7 age adoption passing confidence
github.com/twmb/franz-go/pkg/kadm v1.17.1v1.17.2 age adoption passing confidence
github.com/twmb/franz-go/pkg/kmsg v1.12.0v1.13.1 age adoption passing confidence
golang.org/x/sync v0.19.0v0.20.0 age adoption passing confidence

Release Notes

adobe/ims-go (github.com/adobe/ims-go)

v0.21.0

Compare Source

v0.20.0

Compare Source

go-viper/mapstructure (github.com/go-viper/mapstructure/v2)

v2.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: go-viper/mapstructure@v2.4.0...v2.5.0

knadh/koanf (github.com/knadh/koanf/providers/file)

v1.2.1

Compare Source

changelog for v1.2.0 -> v1.2.1

  • 29cce50 Merge pull request #​101 from e-nikolov/fix-pflag-map-types
  • 0202243 posflag: add support for pflag map types
twmb/franz-go (github.com/twmb/franz-go)

v1.20.7

Compare Source

===

This patch release fixes numerous niche bugs - some user reported, some found
while investigating other things - contains a few behavior improvements,
extensive kfake additions, and many test additions / improvements.

There have been extensive additions to kfake over the course of the past
month; kfake now supports transactions, the next generation consumer group
protocol, and more Kafka APIs. franz-go integration tests now run and pass
against kfake in CI.

Testing has further been extensively improved: integration tests now run
against the latest patch version of Kafka for all major Kafka versions going
back to 0.11.0. The existing test suite has been extended to run while opting
into the next generation consumer group. An integration test against Kerberos
has been added. For ~roughly the past year (maybe half year), all bugs found
have had regression tests added in kfake. This release massively extends the
kfake test suite -- both with behavior tests that were ported via Claude
directly to franz-go (with license attribution!) and with behavior tests that
Claude generated specifically for kfake.

The "next generation" (KIP-848) consumer group code in franz-go itself has some
improvements. These improvements were found after adding 848 code to kfake,
which allowed for much faster integration test looping. This looping was still
very slow for what it's worth; towards the end, integration tests would pass
~40+ times with race mode over the course of two hours before failing once.
Claude was instrumental with adding appropriate log lines and tracing logs for
diagnosing extremely niche failures; things also got slower when a few specific
log lines that would've helped weren't added the first time...

Anyway,

Bug fixes

  • Returns from PollRecords / PollFetches that contained ONLY an error (context
    cancellation or something) previously did not block rebalances, even if you
    opted into BlockRebalanceOnPoll.

  • If, while idempotently producing, the client encountered TIMED_OUT while
    producing (retryable), the client considered this a "we definitively did not
    produce" state, and allowed you to cancel the records. Well, maybe the records
    actually did get produced broker side eventually, and now you re-produce new
    records - the NEW records could be "deduplicated" due to how idempotency works.
    This one is a bit niche, if you're interested, you should read #​1217 and the
    two PRs that address it.

  • My original implementation of how Kerberos handled authentication was
    correct... for the time. I missed how it should have been touched up years
    ago and now 4.0 hard deprecates the old auth flow. So, that's been found,
    reported, and now fixed.

  • If a partition returned a retryable error in a metadata request (odd behavior
    already) the first time the client is discovering the partition (i.e. on
    startup), the client would not retry loading the partition right away (it
    would, but much later on standard metadata refresh).

  • There was a very subtle, basically un-encounterable data race while
    consuming. That was fixed in 5caaa1e0. It's so niche it's not worth
    writing more about here.

  • RequestCachedMetadata, broken for a few releases, has been fixed. I plan to
    switch kadm back to using it in the next kadm release.

  • There was a data race on client shutdown while leaving the group if you canceled
    the client context.

Improvements

  • ConnIdleTimeout is now obeyed more exactly, allowing you to more reliably reason
    about the maximum idle time. Thanks @​carsonip!

  • At the end of a group transact session, I force a heartbeat to kinda "force
    detect" the group is still alive (with some timing bounds). If the heartbeat
    detected any error - including REBALANCE_IN_PROGRESS - the session would
    abort no matter what. This has been changed to actually allow a commit (if
    that's what you're doing) in certain scenarios (notably: the client detects
    KIP-447 support on the broker and you are using RequireStable).

  • SetOffsets now does not let you set offsets for partitions that are not being
    consumed. Previously, you could, but it'd just create entries in a map that were
    never used. Those entries are no longer created.

  • ProduceSync now automatically un-lingers any partition that is produced to,
    causing more immediate flushes. This should resolve lag that was introduced
    from v1.20.0 where linger was set to 10ms by default. There are many usages of
    franz-go I've seen in the wild where ProduceSync is used in random places to
    produce one message before going back to other things.

  • 764eb29d improvement kgo: unlinger partitions in ProduceSync to avoid linger delay
  • d996bf71 bugfix kgo: fix data race during client shutdown with canceled context
  • 85b2c855 behavior change kgo: fix applySetOffsets to skip partitions not being consumed
  • 05de202b improvement kgo: allow commit despite rebalance with KIP-447 and RequireStable
  • e8a00cd6 improvement kgo: do not reuse idle connection after connIdleTimeout (thanks @​carsonip!)
  • 787ab9fe bugfix kgo: fix and enhance RequestCachedMetadata
  • 5caaa1e0 bugfix kgo: fix data race in allowUsable reading c.source after Swap
  • 40c144d3 bugfix kgo: check loadErr for new partitions on first metadata load
  • e430ea93 bugfix kgo: send SaslHandshake for GSSAPI mechanism
  • 702c4f75 bugfix kgo: error returns from polling should block rebalance
  • 32e1580a 0c086b05 bugfix kgo: poison batches to prevent future cancelation on two errors

v1.20.6

Compare Source

===

This patch release has two improvements.

Previously, you could not use poll functions multiple times if using
BlockRebalanceOnPoll, because rebalancing had a higher lock priority than
polling and would block all further poll calls. This has been changed to allow
you to call poll as much as you want until you AllowRebalance. Thanks
@​KiKoS0!

If brokers indicated they supported epochs, but then used -1 everywhere for
that epoch, Mark functions would ignore records being marked and you would
never commit progress. This was due to the client defaulting to a 0 epoch
internally (and not using it if the broker did not support it), meaning -1
would be ignored. Brokers that use indicate support but use -1 are now
supported. This was only found to be a problem against Azure Event Hubs.

  • 7cd5ea65 kgo: fix mark <=> epoch interaction, make epoch handling more resilient
  • 94fd8622 kgo: fix deadlock when polling multiple times while blocked from a rebalance

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Dec 19, 2025
@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch from 1fc5118 to 1daacdf Compare December 20, 2025 23:08
@renovate renovate bot changed the title fix(deps): update module github.com/knadh/koanf/providers/file to v1.2.1 fix(deps): update go modules (non-major) Dec 20, 2025
@renovate renovate bot changed the title fix(deps): update go modules (non-major) fix(deps): update module github.com/knadh/koanf/providers/file to v1.2.1 Jan 2, 2026
@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch 2 times, most recently from b0f229e to ba1f692 Compare January 2, 2026 18:34
@renovate renovate bot changed the title fix(deps): update module github.com/knadh/koanf/providers/file to v1.2.1 fix(deps): update go modules (non-major) Jan 2, 2026
@renovate
Copy link
Copy Markdown
Author

renovate bot commented Jan 2, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 6 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25 -> 1.25.0
github.com/golang-jwt/jwt/v5 v5.3.0 -> v5.3.1
github.com/klauspost/compress v1.18.1 -> v1.18.4
github.com/pierrec/lz4/v4 v4.1.22 -> v4.1.25
golang.org/x/crypto v0.45.0 -> v0.48.0
golang.org/x/net v0.47.0 -> v0.49.0
golang.org/x/sys v0.38.0 -> v0.41.0

@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch from ba1f692 to 46c0ede Compare January 12, 2026 18:51
@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch 3 times, most recently from 798a8e0 to 30de259 Compare January 25, 2026 06:43
@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch from 30de259 to 6e5fc27 Compare February 18, 2026 12:11
@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch 2 times, most recently from c811adf to 33fbe26 Compare March 8, 2026 14:50
@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch 2 times, most recently from fc795a0 to 27e404f Compare March 25, 2026 19:31
@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch 2 times, most recently from 5095b8c to 6fee5b9 Compare April 4, 2026 22:49
@renovate renovate bot force-pushed the renovate/go-modules-(non-major) branch from 6fee5b9 to 5e3599b Compare April 6, 2026 10:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants