Skip to content

Bump Confluent.Kafka and 21 others#209

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/src/accounting/nuget-production-dependencies-fbbf117e27
Open

Bump Confluent.Kafka and 21 others#209
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/src/accounting/nuget-production-dependencies-fbbf117e27

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 6, 2026

Updated Confluent.Kafka from 2.5.3 to 2.13.0.

Release notes

Sourced from Confluent.Kafka's releases.

2.13.0

Enhancements

  • References librdkafka.redist 2.13.0. Refer to the librdkafka v2.13.0 release notes for more information.
  • Support Avro schema references for C# client (#​2534)
  • Add Accept-Version header (#​2536)
  • Handle evolution during field transformation (#​2541)
  • Re-enable deserialization optimization by removing unnecessary array conversions (#​2531)

Fixes

  • Ensure schemaId initialization is thread-safe (#​2540)
  • Ensure all deps are strongly named (#​2548)

2.12.0

KIP-848 – General Availability

Starting with Confluent.Kafka 2.12.0, the next generation consumer group rebalance protocol defined in KIP-848 is production-ready. Please refer to the following migration guide for moving from Classic to Consumer protocol.

Note: The new consumer group protocol defined in KIP-848 is not enabled by default. There are few contract change associated with the new protocol and might cause breaking changes. GroupProtocol configuration property dictates whether to use the new Consumer protocol or older Classic protocol. It defaults to Classic if not provided.

Enhancements

  • References librdkafka.redist 2.12.0. Refer to the librdkafka v2.12.0 release notes for more information.
  • OAuth OIDC method example for Kafka metadata based authentication with
    an Azure IMDS endpoint using an attached managed identity as principal (#​2526).

2.11.1

Enhancements

2.11.0

Enhancements

2.10.1

Enhancements

2.10.0

Enhancements

  • References librdkafka.redist 2.10.0. Refer to the librdkafka v2.10.0 release notes for more information.
  • [KIP-848] Group Config is now supported in AlterConfigs, IncrementalAlterConfigs and DescribeConfigs. (#​2366)

2.9.0

Enhancements

  • Add utilities to convert decimals from/to Protobuf (#​2424)
  • Add client credentials OAuth support (#​2426)
  • Add support for passing schema ID during serialization (#​2428)
  • Optimize schema registry client by caching results of LookupSchemaAsync (#​2429)
  • Use ConcurrentDictionary as default cache for Schema Registry client (#​2433)

Fixes

  • Fix JSON Schema validation to use latest schema if needed (#​2406)
  • Support Protobuf oneof fields in Data Contract rules (#​2413)

2.8.0

v2.8.0 is a feature release with the following features, fixes and enhancements:

Enhancements

  • References librdkafka.redist 2.8.0. Refer to the librdkafka v2.8.0 release notes for more information.
  • Add retry logic to RestService for Schema Registry (#​2353)
  • Add config for validating payloads against JSON Schema (#​2350)
  • Add ability to override disable flag and actions on a rule (#​2377)
  • Add AWS AssumeRole support to AWS KMS (#​2379)

Fixes

  • Retrieve version for writer schema when getting migrations (#​2358)
  • Add missing JSON Schema validate check (#​2372)
  • Ensure different key ids use different client instances (#​2374)
  • DGS-19409 Ensure Avro serde caches per subject (#​2387)
  • Update hash code for schema references so they can be retrieved correctly (#​2390)

2.6.1

v2.6.1 is a maintenance release with the following features, fixes and enhancements:

Enhancements

Fixes

  • Fix to continue supporting .NET Framework 4.6.2+ in core client library (#​2342).
  • Fix JSON Schema handling to not require use of $id (#​2339).
  • Update Caching.Memory to 8.0.1 to address CVE (#​23440.
  • Added Qualified and Custom reference name strategy approaches for protobuf references (#​2345).
  • Fix validate of SSL CA certs in Schema Registry client (#​2346).
  • Skip SSL certs validation when configured in Schema Registry client (#​2347).
  • Allow proxy to be specified in Schema Registry client (#​2348).

2.6.0

v2.6.0 is a feature release with the following features, fixes and enhancements:

Enhancements

  • KIP-848 EA: Admin API for listing consumer groups now has an optional filter to return only groups of given types (#​2323).
  • KIP-460 Admin Leader Election RPC (#​2320)
  • .NET 8 support with NJsonSchema 11 (#​2314)

confluent-kafka-dotnet is based on librdkafka v2.6.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Commits viewable in compare view.

Updated Google.Protobuf from 3.28.2 to 3.33.5.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Grpc.AspNetCore from 2.67.0 to 2.76.0.

Release notes

Sourced from Grpc.AspNetCore's releases.

2.76.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0

2.76.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0-pre1

2.71.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0

2.71.0-pre1

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0-pre1

2.70.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.67.0...v2.70.0

Commits viewable in compare view.

Updated Grpc.AspNetCore.HealthChecks from 2.67.0 to 2.76.0.

Release notes

Sourced from Grpc.AspNetCore.HealthChecks's releases.

2.76.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0

2.76.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0-pre1

2.71.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0

2.71.0-pre1

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0-pre1

2.70.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.67.0...v2.70.0

Commits viewable in compare view.

Updated Grpc.Net.Client from 2.67.0 to 2.76.0.

Release notes

Sourced from Grpc.Net.Client's releases.

2.76.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0

2.76.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0-pre1

2.71.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0

2.71.0-pre1

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0-pre1

2.70.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.67.0...v2.70.0

Commits viewable in compare view.

Updated Grpc.Tools from 2.66.0 to 2.78.0.

Release notes

Sourced from Grpc.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.TestHost from 8.0.11 to 8.0.23.

Release notes

Sourced from Microsoft.AspNetCore.TestHost's releases.

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 8.0.0 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.2.25163.2

You can build .NET 10.0 Preview 2 from the repository by cloning the release tag v10.0.0-preview.2.25163.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.1.25080.5

You can build .NET 10.0 Preview 1 from the repository by cloning the release tag v10.0.0-preview.1.25080.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.113

You can build .NET 9.0 from the repository by cloning the release tag v9.0.113 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.112

You can build .NET 9.0 from the repository by cloning the release tag v9.0.112 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.111

You can build .NET 9.0 from the repository by cloning the release tag v9.0.111 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.110

You can build .NET 9.0 from the repository by cloning the release tag v9.0.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.109

You can build .NET 9.0 from the repository by cloning the release tag v9.0.109 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.101

You can build .NET 9.0 from the repository by cloning the release tag v9.0.101 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.7

You can build .NET 9.0 from the repository by cloning the release tag v9.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.6

You can build .NET 9.0 from the repository by cloning the release tag v9.0.6 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.5

You can build .NET 9.0 from the repository by cloning the release tag v9.0.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.4

You can build .NET 9.0 from the repository by cloning the release tag v9.0.4 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.3

You can build .NET 9.0 from the repository by cloning the release tag v9.0.3 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.2

You can build .NET 9.0 from the repository by cloning the release tag v9.0.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.1

You can build .NET 9.0 from the repository by cloning the release tag v9.0.1 and following the build instructions in the [main README.md](https://github.com/dot...

Description has been truncated

@dependabot
Bump Confluent.Kafka and 21 others
cf81946 
Bumps Confluent.Kafka from 2.5.3 to 2.13.0
Bumps Google.Protobuf from 3.28.2 to 3.33.5
Bumps Grpc.AspNetCore from 2.67.0 to 2.76.0
Bumps Grpc.AspNetCore.HealthChecks from 2.67.0 to 2.76.0
Bumps Grpc.Net.Client from 2.67.0 to 2.76.0
Bumps Grpc.Tools from 2.66.0 to 2.78.0
Bumps Microsoft.AspNetCore.TestHost from 8.0.11 to 8.0.23
Bumps Microsoft.Extensions.Logging from 8.0.0 to 10.0.2
Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 18.0.1
Bumps Microsoft.VisualStudio.Azure.Containers.Tools.Targets from 1.21.0 to 1.23.0
Bumps OpenFeature from 2.1.0 to 2.11.1
Bumps OpenFeature.Contrib.Hooks.Otel from 0.2.0 to 0.2.1
Bumps OpenFeature.Contrib.Providers.Flagd from 0.3.0 to 0.3.5
Bumps OpenTelemetry.AutoInstrumentation from 1.9.0 to 1.14.1
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.10.0 to 1.15.0
Bumps OpenTelemetry.Extensions.Hosting from 1.10.0 to 1.15.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.10.1 to 1.15.0
Bumps OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.15.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.10.0 to 1.15.0
Bumps StackExchange.Redis from 2.8.22 to 2.10.14
Bumps xunit from 2.9.2 to 2.9.3
Bumps xunit.runner.visualstudio from 2.8.2 to 3.1.5

---
updated-dependencies:
- dependency-name: Confluent.Kafka
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Google.Protobuf
  dependency-version: 3.33.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.Tools
  dependency-version: 2.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production-dependencies
- dependency-name: Microsoft.VisualStudio.Azure.Containers.Tools.Targets
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.AutoInstrumentation
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.AspNetCore
  dependency-version: 2.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.AspNetCore.HealthChecks
  dependency-version: 2.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature.Contrib.Hooks.Otel
  dependency-version: 0.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature.Contrib.Providers.Flagd
  dependency-version: 0.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: StackExchange.Redis
  dependency-version: 2.10.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.Net.Client
  dependency-version: 2.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Microsoft.AspNetCore.TestHost
  dependency-version: 8.0.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production-dependencies
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Feb 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants