fix(deps): update module github.com/ibm/sarama to v1.60.0

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/IBM/sarama	v1.43.3 → v1.60.0

---

Release Notes

IBM/sarama (github.com/IBM/sarama)

v1.60.0: Version 1.60.0 (2026-07-13)

Compare Source

What's Changed

🎉 New Features / Improvements

• feat: support Metadata V11 by @​dnwe in #​3636
• feat: support Produce V10 by @​dnwe in #​3637
• feat: support DescribeProducers v0 by @​dnwe in #​3659
• feat: support DescribeTransactions v0 by @​dnwe in #​3661
• feat: support int64 arrays in flexible protocol by @​dnwe in #​3662
• feat: support ListTransactions v0 and v1 by @​dnwe in #​3663
• feat: more flexible protocols for kafka28 parity by @​dnwe in #​3664
• feat: support KIP-516 topic ids by @​dnwe in #​3666

🐛 Fixes

• fix: correct fetch v12 tagged struct encoding by @​dnwe in #​3638
• fix: map new metadata request v8 to kafka 2.3.0 by @​fereidani in #​3642
• fix: handle zstd encoder and decoder construction errors by @​fereidani in #​3643
• fix: release retry mute on shutdown handoff by @​dnwe in #​3645
• fix: order non-idempotent connection retries by @​dnwe in #​3644

📦 Dependency updates

• chore(deps): bump the golang-x group across 1 directory with 3 updates by @​dependabot[bot] in #​3660
• chore(deps): update docker/setup-buildx-action action to v4.2.0 by @​renovate[bot] in #​3658
• chore(deps): update docker/bake-action action to v7.3.0 by @​renovate[bot] in #​3652
• chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.0 by @​dependabot[bot] in #​3651
• chore(deps): update golangci/golangci-lint-action action to v9.3.0 by @​renovate[bot] in #​3648

➕ Other Changes

• fix: correct typos in comments and godoc by @​maxtaran2010 in #​3656

New Contributors

• @​fereidani made their first contribution in #​3642
• @​maxtaran2010 made their first contribution in #​3656

Full Changelog: IBM/sarama@v1.50.3...v1.60.0

v1.50.3: Version 1.50.3 (2026-06-15)

Compare Source

What's Changed

🎉 New Features / Improvements

• feat: support Fetch v12 by @​dnwe in #​3609
• feat: support CreateTopics v6 by @​dnwe in #​3622
• feat: support DeleteTopics v5 by @​dnwe in #​3624
• feat: support AddPartitionsToTxn v3 by @​hindessm in #​3625
• feat: support Produce v9 by @​dnwe in #​3629
• feat: support CreatePartitions v3 by @​dnwe in #​3631
• feat: expose broker features from ApiVersions v3 by @​dnwe in #​3633
• feat: support UpdateFeatures by @​dnwe in #​3632
• feat: add OnAssignmentBalanceStrategy, the onAssignment half of the assignor contract by @​lizthegrey in #​3627
• feat: support ApiVersions V4 and discover upgradable features in test by @​dnwe in #​3634

🐛 Fixes

• fix: avoid makeslice "len out of range" panics on invalid response by @​hindessm in #​3612
• fix: avoid makeslice panic in request decode too by @​dnwe in #​3613
• fix(test): wait for leaders after topic create by @​dnwe in #​3623
• fix(consumer): don't panic on requeue after unref by @​dnwe in #​3630

📦 Dependency updates

• chore(deps): update golang-x to v0.53.0 by @​renovate[bot] in #​3618
• fix(deps): update module golang.org/x/sys to v0.46.0 - autoclosed by @​renovate[bot] in #​3617
• fix(deps): update module golang.org/x/sync to v0.21.0 by @​renovate[bot] in #​3616
• fix(deps): update module golang.org/x/net to v0.56.0 by @​renovate[bot] in #​3626

🔧 Maintenance

• chore: update default Kafka version to 2.6 by @​dnwe in #​3608
• chore: more protocol version placeholders by @​hindessm in #​3610
• chore: extend fuzz testing to more types by @​dnwe in #​3614
• chore: clean up Int32 array encode/decode by @​hindessm in #​3619
• chore: apply Go's modernize fixes by @​dnwe in #​3621

Full Changelog: IBM/sarama@v1.50.2...v1.50.3

v1.50.2: Version 1.50.2 (2026-06-05)

Compare Source

What's Changed

🎉 New Features / Improvements

• feat(consumer): add support for SyncGroupRequest/Response v5 (KIP-559) by @​dnwe in #​3591
• feat(txn): add protocol support for TxnOffsetCommit v3 by @​dnwe in #​3592
• feat(txn): support consumer group metadata in TxnOffsetCommit v3 by @​dnwe in #​3593
• feat(admin): add protocol support for DeleteRecords v2 (KIP-482) by @​dnwe in #​3594
• feat(protocol): add support for DescribeConfigs v3 and v4 by @​dnwe in #​3596
• feat(admin): add DescribeConfigs for multiple resources by @​dnwe in #​3600
• feat(consumer): option to cap decompressed batch size by @​dnwe in #​3604

🐛 Fixes

• fix(admin): retry ACL and SCRAM ops on stale controller by @​dnwe in #​3598

📦 Dependency updates

• fix(deps): update module github.com/pierrec/lz4/v4 to v4.1.27 by @​renovate[bot] in #​3597

Full Changelog: IBM/sarama@v1.50.1...v1.50.2

v1.50.1: Version 1.50.1 (2026-05-27)

Compare Source

What's Changed

🐛 Fixes

• fix: correct requiredVersion for V8 JoinGroup and add protocol version placeholders by @​dnwe in #​3585

Full Changelog: IBM/sarama@v1.50.0...v1.50.1

v1.50.0: Version 1.50.0 (2026-05-27)

Compare Source

What's Changed

🎉 New Features / Improvements

• feat: add Java-compatible murmur2 partitioner by @​dnwe in #​3567
• feat(protocol): support LeaveGroupRequest/Response v5 (KIP-800) by @​dnwe in #​3576
• feat(protocol): support JoinGroupRequest/Response v8 (KIP-800) by @​dnwe in #​3577
• feat(consumer_group): set cancellation cause on session context by @​prakhar7651 in #​3575
• feat(consumer_group): send KIP-800 reason on JoinGroup and LeaveGroup by @​dnwe in #​3584
• feat: add Kafka 4.3.0 version placeholder by @​dnwe in #​3587
• feat(admin): support OffsetFetchRequest v8 by @​dnwe in #​3565

🐛 Fixes

• fix(client): don't log ErrNoTopicsToUpdateMetadata every tick by @​dnwe in #​3566
• fix(broker): snapshot fetch meters before deferred Mark by @​dnwe in #​3563
• fix: prevent len out of range panic on 32bit architectures by @​gibmat in #​3579
• fix(offset): retry fetchInitialOffset on top-level coordinator errors by @​dnwe in #​3574

📦 Dependency updates

• chore(deps): update docker/bake-action action to v7.2.0 by @​renovate[bot] in #​3568
• fix(deps): update module golang.org/x/sys to v0.45.0 by @​renovate[bot] in #​3570
• chore(deps): update golangci/golangci-lint-action action to v9.2.1 by @​renovate[bot] in #​3571
• chore(deps): update module golang.org/x/crypto to v0.52.0 by @​renovate[bot] in #​3572
• fix(deps): update module golang.org/x/net to v0.55.0 by @​renovate[bot] in #​3573
• chore(deps): update docker/setup-buildx-action action to v4.1.0 by @​renovate[bot] in #​3578

🔧 Maintenance

• refactor: replace eapache/queue with generic ring buffer by @​dnwe in #​3560
• test(fvt): use a per-message timeout in follower failover test by @​dnwe in #​3562

New Contributors

• @​gibmat made their first contribution in #​3579
• @​prakhar7651 made their first contribution in #​3575

Full Changelog: IBM/sarama@v1.49.0...v1.50.0

v1.49.0: Version 1.49.0 (2026-05-18)

Compare Source

What's Changed

🚨 Breaking Changes

• fix(consumer): decouple FetchRequest.MaxBytes from MaxResponseSize by @​dnwe in #​3538

🎉 New Features / Improvements

• feat(consumer): warn on sustained partition retries by @​dnwe in #​3535
• feat(producer): add Produce v8 request/response support by @​dnwe in #​3540
• feat(consumer): cap partition consumer retries by @​dnwe in #​3539
• feat: support FindCoordinator V3 protocol by @​hindessm in #​3544
• feat: support describe acls v2 by @​hindessm in #​3548
• feat: support create acls v2 by @​hindessm in #​3549
• feat: support delete acls v2 by @​hindessm in #​3550
• feat: support sasl authenticate v2 by @​hindessm in #​3551
• feat: support create partitions v2 by @​hindessm in #​3554
• feat: support join group v7 by @​hindessm in #​3555

🐛 Fixes

• fix: flexible decoder out-of-bounds panic by @​hindessm in #​3543
• fix(consumer): size partial-batch retry correctly by @​dnwe in #​3541
• feat(consumer): add OffsetCommit v8 request/response support by @​dnwe in #​3545
• fix: decode nullable ACL describe error messages by @​dnwe in #​3552
• fix(consumer): lease preferred read replicas by @​dnwe in #​3553
• fix(producer): honour Retry.Backoff in idempotent retryBatch by @​dnwe in #​3557

🔧 Maintenance

• chore: better bounds checking by @​hindessm in #​3546
• chore: bump deps in ./examples tree by @​dnwe in #​3558
• docs: add AlterPartitionReassignments example and functional test by @​dnwe in #​3556

Full Changelog: IBM/sarama@v1.48.2...v1.49.0

v1.48.2: Version 1.48.2 (2026-05-13)

Compare Source

What's Changed

🎉 New Features / Improvements

• feat(admin): add KIP-396 list/alter offsets APIs by @​DCjanus in #​3419
• feat: add SubscriptionUserDataProvider hook for BalanceStrategy by @​lizthegrey in #​3506
• perf(zstd): scale idle zstd encoder cap to GOMAXPROCS by @​lizthegrey in #​3507

🐛 Fixes

• fix: retry ListTopics on transient transport errors by @​huynhanx03 in #​3497
• test(fvt): only safeClose if we created by @​dnwe in #​3530
• fix(client): scope metadata refresh errors to requested topics by @​dnwe in #​3532

🔧 Maintenance

• test(fvt): speedup functional test runs by @​dnwe in #​3528

Full Changelog: IBM/sarama@v1.48.1...v1.48.2

v1.48.1: Version 1.48.1 (2026-05-10)

Compare Source

What's Changed

🐛 Fixes

• perf: cache topic batch-size metric lookup by @​huynhanx03 in #​3498
• fix: stabilise TestFuncTxnProduceAndCommitOffset flakes by @​dnwe in #​3517
• test: relax producer batch metrics assertions by @​DCjanus in #​3523
• fix: prevent race during partition consumer close by @​dnwe in #​3524
• fix: return leaderless errors in metadata refresh by @​dnwe in #​3525

📦 Dependency updates

• chore(deps): update dependency golangci/golangci-lint to v2.12.1 by @​renovate[bot] in #​3509
• chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by @​dependabot[bot] in #​3508
• chore(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 in the golang-x group across 1 directory by @​dependabot[bot] in #​3520
• chore(deps): update module golang.org/x/crypto to v0.51.0 by @​renovate[bot] in #​3521
• fix(deps): update module golang.org/x/net to v0.54.0 by @​renovate[bot] in #​3526
• chore(deps): update dependency golangci/golangci-lint to v2.12.2 by @​renovate[bot] in #​3515

🔧 Maintenance

• chore: add testifylint and fix lint warnings by @​dnwe in #​3522

New Contributors

• @​huynhanx03 made their first contribution in #​3498

Full Changelog: IBM/sarama@v1.48.0...v1.48.1

v1.48.0: Version 1.48.0 (2026-04-24)

Compare Source

What's Changed

🎉 New Features / Improvements

• feat(producer): partition muting for msg ordering by @​dnwe in #​3422

🐛 Fixes

• fix: handle nullable metadata in OffsetFetchResponse by @​dnwe in #​3473
• fix: nil response/done channels after SASLv1 failure by @​dnwe in #​3474
• fix(protocol): handle ElectLeaders V1 non-flexible headers by @​DCjanus in #​3478
• fix: correct a number of goroutine leaks by @​dnwe in #​3476
• fix: resolve deadlock in concurrent offset commits by @​dnwe in #​3477
• fix(consumer): avoid broker race in response feeder by @​DCjanus in #​3486
• fix: stop dispatcher for dying children in brokerConsumer.abort() by @​lizthegrey in #​3492
• fix: close broken tcp connections by @​Asphaltt in #​3384
• fix: add Unwrap() to DescribeConfigError and AlterConfigError by @​ShinThirty in #​3487

📦 Dependency updates

• chore(deps): update dependency golangci/golangci-lint to v2.11.1 by @​renovate[bot] in #​3462
• chore(deps): bump github.com/pierrec/lz4/v4 from 4.1.25 to 4.1.26 by @​dependabot[bot] in #​3461
• chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 in the golang-x group across 1 directory by @​dependabot[bot] in #​3466
• chore(deps): update module golang.org/x/crypto to v0.49.0 by @​renovate[bot] in #​3468
• chore(deps): update dependency golangci/golangci-lint to v2.11.3 by @​renovate[bot] in #​3464
• fix(deps): update module golang.org/x/net to v0.52.0 by @​renovate[bot] in #​3472
• fix(deps): update module github.com/klauspost/compress to v1.18.5 by @​renovate[bot] in #​3480
• chore(deps): update module golang.org/x/crypto to v0.50.0 by @​renovate[bot] in #​3489
• fix(deps): update module golang.org/x/net to v0.53.0 by @​renovate[bot] in #​3493
• chore(deps): update docker/setup-buildx-action action to v4 by @​renovate[bot] in #​3458
• chore(deps): update docker/bake-action action to v7.1.0 by @​renovate[bot] in #​3459

🔧 Maintenance

• chore: add kafka versions 3.9.2 and 4.2.0 by @​edoardocomar in #​3471

📝 Documentation

• Update the Kakfa Protocol Specification Link by @​MohishKhadse55 in #​3463

➕ Other Changes

• chore(deps): update dependency golangci/golangci-lint to v2.11.4 by @​renovate[bot] in #​3482
• fix: update API version URL as previous link was not working by @​MohishKhadse55 in #​3485

New Contributors

• @​MohishKhadse55 made their first contribution in #​3463
• @​Asphaltt made their first contribution in #​3384
• @​ShinThirty made their first contribution in #​3487

Full Changelog: IBM/sarama@v1.47.0...v1.48.0

v1.47.0: Version 1.47.0 (2026-02-27)

Compare Source

What's Changed

🎉 New Features / Improvements

• perf(admin): modernize DescribeCluster RPC handling by @​DCjanus in #​3390
• test: expand Java interop tests to cover all compression codecs by @​dnwe in #​3423

🐛 Fixes

• fix(client): add nilguards to updateBroker by @​dnwe in #​3393
• fix(broker): auto-close broken connections by @​DCjanus in #​3412
• fix: set version from IBM/sarama, not main app by @​adamdecaf in #​3415

🔧 Maintenance

• chore: finish up the move to atomic types by @​puellanivis in #​3399
• chore: tear down zk in functional tests by @​edoardocomar in #​3420
• chore: migrate from eapache/go-xerial-snappy to klauspost/compress/sn… by @​edoardocomar in #​3421
• fix(test): resolve FVT issues in Kafka v2.x interop tests by @​edoardocomar in #​3424
• feat: add kafka 4.1.1 constants and use in FVT by @​dnwe in #​3437
• chore: add Kafka 4.0.1 and replace 4.0.0 in FVT by @​edoardocomar in #​3439
• ci(lint): unblock Go 1.26 lint and handle gosec noise by @​DCjanus in #​3454

📦 Dependency updates

• chore(deps): update module golang.org/x/crypto to v0.45.0 [security] → v0.48.0 by @​renovate[bot] in #​3383, #​3425
• chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.45.0 across /examples (consumergroup, exactly_once, sasl_scram_client, http_server, txn_producer, interceptors) by @​dependabot[bot] in #​3382, #​3381, #​3380, #​3379, #​3378, #​3377
• fix(deps): update module golang.org/x/sync to v0.18.0 by @​renovate[bot] in #​3385
• fix(deps): update module golang.org/x/net to v0.49.0 → v0.51.0 by @​renovate[bot] and @​dependabot[bot] in #​3426, #​3427, #​3453
• chore(deps): update golangci/golangci-lint-action action to v9 → v9.2.0 by @​renovate[bot] in #​3370, #​3400
• chore(deps): update dependency golangci/golangci-lint to v2.6.2 → v2.8.0 by @​renovate[bot] in #​3366, #​3401
• chore(deps): update docker/bake-action action to v6.10.0 by @​renovate[bot] in #​3392
• chore(deps): update docker/setup-buildx-action action to v3.12.0 by @​renovate[bot] in #​3416
• chore(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.4 by @​dependabot[bot] in #​3397, #​3430, #​3442
• chore(deps): bump github.com/pierrec/lz4/v4 from 4.1.22 to 4.1.25 by @​dependabot[bot] in #​3411, #​3432
• chore(deps): bump the golang-x group across 1 directory with 2 updates by @​dependabot[bot] in #​3405
• chore(deps): bump github.com/xdg-go/scram from 1.1.2 to 1.2.0 in /examples/sasl_scram_client by @​dependabot[bot] in #​3394
• chore(deps): update dependency dominikh/go-tools to v2026 by @​renovate[bot] in #​3446

New Contributors

• @​DCjanus made their first contribution in #​3390
• @​edoardocomar made their first contribution in #​3420
• @​adamdecaf made their first contribution in #​3415

Full Changelog: IBM/sarama@v1.46.3...v1.47.0

v1.46.3: Version 1.46.3 (2025-10-26)

Compare Source

What's Changed

🐛 Fixes

• fix: wrap KError into error returned by IncrementalAlterConfig by @​prestona in #​3352
• fix: assign sequence when flushing retry buffers by @​dnwe in #​3362

📦 Dependency updates

• chore(deps): update dependency dominikh/go-tools to v2025 by @​renovate[bot] in #​3351
• chore(deps): update dependency vearutop/teststat to v0.1.27 by @​renovate[bot] in #​3350
• fix(deps): update module github.com/klauspost/compress to v1.18.1 by @​renovate[bot] in #​3355

🔧 Maintenance

• chore(ci): extract tool versions and add renovate customManagers by @​dnwe in #​3346

Full Changelog: IBM/sarama@v1.46.2...v1.46.3

v1.46.2: Version 1.46.2 (2025-10-10)

Compare Source

What's Changed

A big focus on improving our support for newer protocol versions in this release, particularly supporting a wider range of flexible versions

🎉 New Features / Improvements

• chore: support V5 ListOffsets by @​dnwe in #​3308
• feat: support DeleteGroups V2 protocol by @​hindessm in #​3320
• feat: support DeleteTopics V4 protocol by @​hindessm in #​3321
• feat: support CreateTopics V5 protocol by @​hindessm in #​3322
• feat: support IncrementalAlterConfigs V1 protocol by @​hindessm in #​3319
• feat: support DescribeGroups V5 protocol by @​hindessm in #​3331
• feat: support SyncGroup V4 protocol by @​hindessm in #​3332
• feat: support LeaveGroup V4 protocol by @​hindessm in #​3334
• feat: support Heartbeat V4 protocol by @​hindessm in #​3335
• feat: support JoinGroup V6 protocol by @​hindessm in #​3339
• feat: support DescribeClientQuotas V1 protocol by @​dnwe in #​3342

🐛 Fixes

• fix: update map rather than create a new map by @​hindessm in #​3302
• fix: metadata_response valid version range by @​hindessm in #​3304
• fix: add V4 as valid CreateTopicsResponse by @​dnwe in #​3305
• fix: correct requiredVersion for DescribeLogDirsResponse by @​dnwe in #​3306
• fix: extend TestAllocateBodyProtocolVersions for more testing by @​dnwe in #​3307
• fix: non-flexible ElectLeadersRequest V0/V1 encode/decode by @​hindessm in #​3312
• fix: make alterPartitionReassignmentsBlock consistent by @​hindessm in #​3313
• fix: correct decodeRequest bytesRead return value by @​hindessm in #​3314
• fix: decoder issues by @​hindessm in #​3327
• fix: improve KIP-511 behaviour on older Kafka clusters by @​dnwe in #​3328
• fix: return correct error when encoding by @​hindessm in #​3333
• fix: correct ApiVersionsResponse handling of ErrUnsupportedVersion by @​dnwe in #​3337

📦 Dependency updates

• chore(deps): update ossf/scorecard-action action to v2.4.3 by @​renovate[bot] in #​3318
• fix(deps): update module golang.org/x/net to v0.46.0 by @​renovate[bot] in #​3343

🔧 Maintenance

• chore: remove redundant insufficient data checks by @​hindessm in #​3300
• refactor: use struct rather than map with one entry by @​hindessm in #​3301
• chore(ci): adopt gotestsum and re-run flakes by @​dnwe in #​3311
• refactor: Flexible encoding/decoding refactoring by @​hindessm in #​3317
• chore(fvt): refactor docker-compose and support KRaft by @​dnwe in #​3323
• fix(fvt): simplify retry using testify's EventuallyWithT by @​dnwe in #​3324
• chore: add 3.9.1 and 4.1.0 version constants and FVT by @​dnwe in #​3325
• refactor: get/put for KError by @​hindessm in #​3326
• refactor: get/put for throttle time ms time.Duration by @​hindessm in #​3330
• chore(fvt): improve testFuncConsumerGroupMember by @​dnwe in #​3329

➕ Other Changes

• fix(fvt): check err before usage by @​dnwe in #​3338

Full Changelog: IBM/sarama@v1.46.1...v1.46.2

v1.46.1: Version 1.46.1 (2025-09-18)

Compare Source

[!NOTE]
The go.mod directive has been bumped to 1.24.0 as the minimum version of Go required for the module. This was necessary to continue to receive updates from some of the third party dependencies that Sarama makes use of.

What's Changed

🎉 New Features / Improvements

• feat: support more describe log dirs versions (V2-V4) by @​hindessm in #​3293
• feat: support V5 ListConsumerGroups protocol by @​hindessm in #​3292
• feat: add SASLv1 support for Kerberos by @​dnwe in #​3279

🐛 Fixes

• fix: add read deadline to tls write by @​bvalente in #​3283

📦 Dependency updates

• chore(deps): bump go directive to 1.24.0 and golang.org/x/{crypto,net,sync} by @​dependabot[bot] in #​3288
• chore(deps): bump the golang-x group across 6 directories with 1 update by @​dependabot[bot] in #​3291
• chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @​dependabot[bot] in #​3274

🔧 Maintenance

• chore: refactor to use modern atomic types by @​Sahil-4555 in #​3277
• chore: pre-commit autoupdate to latest by @​dnwe in #​3278
• chore: apply modernize fixes from gopls by @​dnwe in #​3297
• chore(config): update comments of sarama.Config.Metadata.SingleFlight by @​gunli in #​3296
• chore(client): update comments of client methods by @​gunli in #​3295

New Contributors

• @​Sahil-4555 made their first contribution in #​3277
• @​bvalente made their first contribution in #​3283
• @​gunli made their first contribution in #​3296

Full Changelog: IBM/sarama@v1.46.0...v1.46.1

v1.46.0: Version 1.46.0 (2025-08-25)

Compare Source

[!NOTE]
This release contains significant changes. Notably Sarama will now use the ApiVersionRequest response from each broker to aid in selecting the protocol version to use. The existing Version field in sarama.Config will continue to provide a "pinning" mechanism, but can safely be set to a maximum or higher value than the remote cluster and sarama will sensibly pick compatible versions. There is also a performance improvement relating to MetadataRequests whereby Sarama will avoid having more than a single request to each broker in-flight at any given time. These new (optimal) behaviour is on by default can be opt-ed out via the Metadata.SingleFlight field in Config.

What's Changed

🎉 New Features / Improvements

• feat(protocol): negotiate API versions by @​trapped in #​3209
• feat: option to group metadata refreshes so only one is in-flight at a time by @​cupcicm in #​3225
• feat: use singleflight metadata by default by @​dnwe in #​3231
• feat(protocol): support CreateTopicRequest V4 by @​dnwe in #​3238
• feat: always send ApiVersionsRequest and fallback to v0 by @​dnwe in #​3234

🐛 Fixes

• fix(consumer): stuck on the batch with zero records length by @​sterligov in #​3221
• fix: sync response header version to clamped request header by @​trapped in #​3223
• fix(decoder): handle null arrays correctly by @​dnwe in #​3144
• fix: hardcode lz4 writer blocksize to 64kb by @​dnwe in #​3258

📦 Dependency updates

• chore(deps): bump the golang-x group across 1 directory with 2 updates by @​dependabot[bot] in #​3185
• chore(deps): bump the golang-x group across 7 directories with 2 updates by @​dependabot[bot] in #​3219
• fix(deps): update module golang.org/x/net to v0.43.0 by @​renovate[bot] in #​3244
• chore(deps): bump the golang-x group across 6 directories with 1 update by @​dependabot[bot] in #​3262
• chore(deps): update github/codeql-action action to v3.29.9 by @​renovate[bot] in #​3242
• fix(deps): update github.com/rcrowley/go-metrics digest to 65e299d by @​renovate[bot] in #​3164
• fix(deps): update module github.com/stretchr/testify to v1.11.0 by @​renovate[bot] in #​3268
• chore(deps): update docker/bake-action action to v6.9.0 by @​renovate[bot] in #​3264

🔧 Maintenance

• chore(lint): enable copyloopvar by @​alexandear in #​3214
• chore: fix inconsistent function name in comment by @​stellrust in #​3227
• chore(style): refactor compress.go for readability by @​dnwe in #​3260
• chore: replace unnecessary go-multierror dependency by @​bestbug456 in #​3243

New Contributors

• @​ibm-mend-app[bot] made their first contribution in #​3201
• @​alexandear made their first contribution in #​3214
• @​trapped made their first contribution in #​3209
• @​cupcicm made their first contribution in #​3225
• @​sterligov made their first contribution in #​3221
• @​stellrust made their first contribution in #​3227
• @​bestbug456 made their first contribution in #​3243

Full Changelog: IBM/sarama@v1.45.2...v1.46.0

v1.45.2: Version 1.45.2 (2025-05-28)

Compare Source

What's Changed

🐛 Fixes

• fix(decoder): use configurable limit for max number of records in a record batch by @​rmb938 in #​3120
• fix: ensure mock SyncProducer's SendMessage returns msg.Partition instead of 0 by @​magiusdarrigo in #​3122
• fix: send null instead of empty string when describing default client quotas by @​petedannemann in #​3128
• fix: improve getMetricName performance by @​boekkooi-impossiblecloud in #​3156

📦 Dependency updates

• chore

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
golang.org/x/sync	v0.12.0 -> v0.17.0
github.com/klauspost/compress	v1.17.9 -> v1.18.1
github.com/pierrec/lz4/v4	v4.1.21 -> v4.1.22
github.com/rcrowley/go-metrics	v0.0.0-20201227073835-cf1acfcdf475 -> v0.0.0-20250401214520-65e299d6c5c9
golang.org/x/crypto	v0.36.0 -> v0.43.0
golang.org/x/net	v0.38.0 -> v0.46.0
golang.org/x/text	v0.23.0 -> v0.30.0