Skip to content

chore: Bump github.com/IBM/sarama from 1.50.2 to 1.50.3#5485

Merged
kodiakhq[bot] merged 2 commits into
mainfrom
dependabot/go_modules/github.com/IBM/sarama-1.50.3
Jun 23, 2026
Merged

chore: Bump github.com/IBM/sarama from 1.50.2 to 1.50.3#5485
kodiakhq[bot] merged 2 commits into
mainfrom
dependabot/go_modules/github.com/IBM/sarama-1.50.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/IBM/sarama from 1.50.2 to 1.50.3.

Release notes

Sourced from github.com/IBM/sarama's releases.

Version 1.50.3 (2026-06-15)

What's Changed

🎉 New Features / Improvements

🐛 Fixes

📦 Dependency updates

🔧 Maintenance

Full Changelog: IBM/sarama@v1.50.2...v1.50.3

Changelog

Sourced from github.com/IBM/sarama's changelog.

Changelog

Commits
  • ff2eaba feat: support ApiVersions V4
  • 0483979 test: discover upgradable features via ApiVersions
  • d39f8ea feat: add OnAssignmentBalanceStrategy, the onAssignment half of the assignor ...
  • 498dceb feat(admin): add ClusterAdmin UpdateFeatures
  • 5f48502 feat: support UpdateFeatures v0
  • 36c1c46 feat: expose broker features from ApiVersions v3 (#3633)
  • b7d6106 feat: support CreatePartitions v3 (#3631)
  • fdbaec7 feat: support Produce v9 (#3629)
  • 277248f fix(consumer): don't panic on requeue after unref (#3630)
  • ce73e81 fix(deps): update module golang.org/x/net to v0.56.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore: Bump github.com/IBM/sarama from 1.50.2 to 1.50.3
89a6833 
Bumps [github.com/IBM/sarama](https://github.com/IBM/sarama) from 1.50.2 to 1.50.3.
- [Release notes](https://github.com/IBM/sarama/releases)
- [Changelog](https://github.com/IBM/sarama/blob/main/CHANGELOG.md)
- [Commits](IBM/sarama@v1.50.2...v1.50.3)

---
updated-dependencies:
- dependency-name: github.com/IBM/sarama
  dependency-version: 1.50.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added automerge dependencies Pull requests that update a dependency file labels Jun 23, 2026
@netlify

netlify Bot commented Jun 23, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for go-feature-flag-doc-preview canceled.

Name Link
🔨 Latest commit 48cdb16
🔍 Latest deploy log https://app.netlify.com/projects/go-feature-flag-doc-preview/deploys/6a39dd625ad87e0008b4a791

@github-actions github-actions Bot requested a review from thomaspoignant June 23, 2026 01:03
@greptile-apps

greptile-apps Bot commented Jun 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Greptile Summary

This PR bumps github.com/IBM/sarama from v1.50.2 to v1.50.3 via Dependabot. The change touches only go.mod and go.sum.

  • Picks up several upstream bug fixes including panic prevention on invalid broker responses and a consumer panic fix on requeue-after-unref.
  • Adds support for newer Kafka protocol versions (Fetch v12, Produce v9, CreateTopics v6, etc.) and updates transitive golang.org/x/* dependencies.

Confidence Score: 5/5

Safe to merge — only go.mod and go.sum are modified, picking up a patch-level sarama release with bug fixes and no breaking API changes.

The change is a patch-version bump (1.50.2 → 1.50.3) of a single Kafka client library. The upstream release focuses on bug fixes (panic prevention, consumer stability) and new Kafka protocol version support, with no API surface changes that would affect the go-feature-flag codebase.

No files require special attention.

Important Files Changed

Filename Overview
go.mod Single-line version bump of github.com/IBM/sarama from v1.50.2 to v1.50.3; no other changes.
go.sum Hash entries for IBM/sarama updated to reflect the new v1.50.3 module checksums; no other changes.

Flowchart

 
%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[go-feature-flag] -->|uses| B[github.com/IBM/sarama]
    B -- v1.50.2 --> C[Old: Fetch v11, Produce v8\nNo makeslice panic fix]
    B -- v1.50.3 --> D[New: Fetch v12, Produce v9\nPanic fixes, newer Kafka protocol support]
    D -->|transitive deps updated| E[golang.org/x/net v0.56.0\ngolang.org/x/sync v0.21.0\ngolang.org/x/sys v0.46.0]
Loading 
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[go-feature-flag] -->|uses| B[github.com/IBM/sarama]
    B -- v1.50.2 --> C[Old: Fetch v11, Produce v8\nNo makeslice panic fix]
    B -- v1.50.3 --> D[New: Fetch v12, Produce v9\nPanic fixes, newer Kafka protocol support]
    D -->|transitive deps updated| E[golang.org/x/net v0.56.0\ngolang.org/x/sync v0.21.0\ngolang.org/x/sys v0.46.0]
Loading

Reviews (2): Last reviewed commit: "Merge branch 'main' into dependabot/go_m..." | Re-trigger Greptile

@codecov

codecov Bot commented Jun 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.71%. Comparing base (0b7fcb6) to head (48cdb16).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #5485   +/-   ##
=======================================
  Coverage   86.71%   86.71%           
=======================================
  Files         160      160           
  Lines        7037     7037           
=======================================
  Hits         6102     6102           
  Misses        694      694           
  Partials      241      241

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@kodiakhq kodiakhq Bot merged commit afe3ba8 into main Jun 23, 2026
28 checks passed
@kodiakhq kodiakhq Bot deleted the dependabot/go_modules/github.com/IBM/sarama-1.50.3 branch June 23, 2026 01:18
@sonarqubecloud

sonarqubecloud Bot commented Jun 23, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@gofeatureflag-bot gofeatureflag-bot mentioned this pull request Jun 23, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kodiakhq kodiakhq[bot] kodiakhq[bot] approved these changes

@thomaspoignant thomaspoignant Awaiting requested review from thomaspoignant

Assignees

@thomaspoignant thomaspoignant

Labels

automerge dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thomaspoignant