Skip to content

chore(deps): bump github.com/twmb/franz-go/pkg/kmsg from 1.13.1 to 1.14.0 - #157

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/develop/github.com/twmb/franz-go/pkg/kmsg-1.14.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/develop/github.com/twmb/franz-go/pkg/kmsg-1.14.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/twmb/franz-go/pkg/kmsg from 1.13.1 to 1.14.0.

Changelog

Sourced from github.com/twmb/franz-go/pkg/kmsg's changelog.

v1.14.0

This release contains a few new APIs, one behavior change, and one minor bugfix.

Bug fixes

Previously, HookBrokerRead and HookBrokerE2E could not be used at the same time. This has been fixed.

Behavior changes

PauseFetch{Topics,Partitions} now causes the client to drop all buffered fetches and kill all in-flight fetch requests. Importantly, this also means that once you pause, it is no longer possible for what you paused to be returned while polling. Previously, the client made no attempt to clear internal buffers / in flight requests, meaning you could receive paused data for a while.

Seed brokers now show up in logs as seed_### rather than seed ### (an underscore has been added).

Features

  • kgo.Offset now has an EpochOffset getter function that allows access to the actual epoch and offset that are inside the opaque Offset type.
  • AddConsumePartitions allows adding individual partitions to consume, and the new counterpart RemoveConsumePartitions allows removing individual partitions from being consumed. Removing is different from purging, please see the docs.
  • KeepRetryableFetchErrors bubbles up retryable errors to the end user that are encountered while fetching. By default, these errors are stripped.
  • kversion now supports Kafka 3.5
  • kversion now supports version guessing against KRaft by default
  • kgo.DialTLS now exists to even more easily opt into TLS.
  • kgo.Client.Opts now exists to return the original options that were used to configure the client, making initializing new clients easier.
  • kgo.NodeName returns a string form of a broker node name. Internally, seed brokers use math.MinInt32 for node IDs, which shows up as massively negative numbers in logs sometimes. NodeName can help convert that to seed_<#>.

Relevant commits

  • c3b083b improvement kgo: do not returned paused topics/partitions after pausing
  • e224e90 bugfix kgo: allow HookBrokerRead and HookBrokerE2E to both be called
  • 875761a feature kgo Offset: add EpochOffset getter field
  • c5d0fc5 kgo: add a debug log for stripping retryable errors from fetches
  • b45d663 kgo: add more context to opportunistic metadata loads while fetching
  • 9dae366 kgo: allow retries on dial timeouts
  • 00e4e76 kgo: tolerate buggy v1 group member metadata

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/twmb/franz-go/pkg/kmsg](https://github.com/twmb/franz-go) from 1.13.1 to 1.14.0.
- [Changelog](https://github.com/twmb/franz-go/blob/master/CHANGELOG.md)
- [Commits](twmb/franz-go@v1.13.1...v1.14.0)

---
updated-dependencies:
- dependency-name: github.com/twmb/franz-go/pkg/kmsg
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the deps Go module dependencies (usually opened by Dependabot) label Sep 22, 2026
@coderabbitai

coderabbitai Bot commented Sep 22, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 67098ebe-c98e-4903-84aa-8db31d51e78d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​twmb/​franz-go/​pkg/​kmsg@​v1.13.1 ⏵ v1.14.0100 +1100100100100

View full report

@github-actions github-actions Bot added the size/XS PR changes < 50 lines label Sep 22, 2026
@lerian-studio

Copy link
Copy Markdown
Contributor

🔒 Security Scan Results — lib-streaming

✅ PR Mergeable — no blocking findings

Stage Status Blocking?
Filesystem Scan ✅ Clean —
Docker Image Scan ➖ Skipped —
Docker Hub Health Score ➖ Skipped —
Pre-release Version Check ✅ Clean —

Trivy

Filesystem Scan

✅ No vulnerabilities or secrets found.


Pre-release Version Check

✅ No unstable version pins found.


🔍 View full scan logs

@github-actions

github-actions Bot commented Sep 22, 2026 •

Copy link
Copy Markdown

🔍 PR Validation Summary

🚫 PR Blocked — 2 blocking failures

Check Status Blocking
Source Branch ❌ failure yes
PR Title ✅ success yes
PR Description ✅ success yes
Breaking Change Guard ✅ success yes
Blocking Checks Runtime ❌ failure yes
Commit Signatures ✅ success yes
PR Size ⏭️ skipped no
Auto Labels ⏭️ skipped no
PR Metadata ⏭️ skipped no

Fix the blocking checks above before merge.


🔍 View workflow run

@lerian-studio

Copy link
Copy Markdown
Contributor

📊 Unit Test Coverage Report: app

Metric Value
Overall Coverage 86.8% ✅ PASS
Threshold 80%

Coverage by Package

Package Coverage
github.com/LerianStudio/lib-streaming/v4/billing 97.3%
github.com/LerianStudio/lib-streaming/v4/internal/cloudevents 93.7%
github.com/LerianStudio/lib-streaming/v4/internal/config 86.8%
github.com/LerianStudio/lib-streaming/v4/internal/consumer 92.3%
github.com/LerianStudio/lib-streaming/v4/internal/contract 85.0%
github.com/LerianStudio/lib-streaming/v4/internal/dlqheader 40.0%
github.com/LerianStudio/lib-streaming/v4/internal/emitter 100.0%
github.com/LerianStudio/lib-streaming/v4/internal/kafkasec 84.9%
github.com/LerianStudio/lib-streaming/v4/internal/manifest 84.0%
github.com/LerianStudio/lib-streaming/v4/internal/producer 89.1%
github.com/LerianStudio/lib-streaming/v4/internal/transport/eventbridge 87.3%
github.com/LerianStudio/lib-streaming/v4/internal/transport/kafka 56.4%
github.com/LerianStudio/lib-streaming/v4/internal/transport/rabbitmq 93.2%
github.com/LerianStudio/lib-streaming/v4/internal/transport/sqs 84.4%
github.com/LerianStudio/lib-streaming/v4/internal/transport 96.7%
github.com/LerianStudio/lib-streaming/v4/streamingtest 90.7%
github.com/LerianStudio/lib-streaming/v4 86.2%

Generated by Go PR Analysis workflow

Base automatically changed from develop to main September 23, 2026 11:38
@github-actions

Copy link
Copy Markdown

⚠️ Invalid Source Branch

Pull requests to main can only come from:

  • develop
  • release-candidate
  • hotfix/*

Your source branch: dependabot/go_modules/develop/github.com/twmb/franz-go/pkg/kmsg-1.14.0

Please change the base branch or create a PR from an allowed branch.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Go module dependencies (usually opened by Dependabot) size/XS PR changes < 50 lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant