Skip to content

Bump the dependencies group with 4 updates #153

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jul 21, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 21, 2025

Bumps the dependencies group with 4 updates: io.strimzi:api, io.apicurio:apicurio-registry-serdes-avro-serde, io.apicurio:apicurio-registry-common and io.apicurio:apicurio-registry-serde-common.

Updates io.strimzi:api from 0.46.1 to 0.47.0

Release notes

Sourced from io.strimzi:api's releases.

0.47.0

⚠️ Important: Strimzi 0.47 is the last Strimzi version with support for Kubernetes 1.25 and 1.26. From Strimzi 0.48.0 on, we will support only Kubernetes 1.27 and newer.

Main changes since 0.46

This release contains the following new features and improvements:

  • Support for Kafka 3.9.1
  • Progress tracking for Cruise Control rebalances
  • Support for Kubernetes Image Volumes to mount custom plugins
  • Support for JsonTemplateLayout in Operators, Cruise Control, and Kafka 4.0.0
  • Support for Strimzi Metrics Reporter for the Kafka brokers / controllers

All changes can be found under the 0.47.0 milestone.

Maven artifacts

To test the Maven artifacts that are part of this release, use the 0.47.0 version in your pom.xml.

Upgrading from Strimzi 0.46.0

See the documentation for upgrade instructions.

Container images

The following container images are part of this release:

Name Image
Operators quay.io/strimzi/operator@sha256:589c4d63641d9a944462dd682f6e5febe8b38ff55b9253949b061aca16feb154
Apache Kafka 3.9.0 quay.io/strimzi/kafka@sha256:978e2ed5f0d315e8bf0ab0503ee839acbd9da01ca427e6581b59ac25d36bc9c9
Apache Kafka 3.9.1 quay.io/strimzi/kafka@sha256:8a793cdf5084cdb72c6663419530985158b16330a518720e9e9d1d96babbaf7e
Apache Kafka 4.0.0 quay.io/strimzi/kafka@sha256:551882f47a6d2dc8300bcfca251fffffc3379acb2724a7efe16f17c0c4f529fb
Strimzi Bridge quay.io/strimzi/kafka-bridge@sha256:428c5587f547dabfc995a73745569d113380c7e6b8bf0b2504c6a9a00d6c4608
Kaniko executor quay.io/strimzi/kaniko-executor@sha256:a5088c14d7b8bf1d336669cba047b971bf3ece8969647dae2c1e3a07a7be0c5e
Maven Builder quay.io/strimzi/maven-builder@sha256:c67a3ad3d92420ac8b7f8435eeec53ebffaea4e894e65414a7c47c20e3faba27

New Contributors

What's Changed

... (truncated)

Changelog

Sourced from io.strimzi:api's changelog.

0.47.0

  • Adding progress tracking for Cruise Control rebalances
  • Add support for Kafka 3.9.1
  • Fixed MirrorMaker 2 client rack init container override being ignored.
  • Support for Kubernetes Image Volumes to mount custom plugins
  • Adding support for JsonTemplateLayout in Operators, Cruise Control and Kafka 4.0.0 or greater.
  • Strimzi Drain Cleaner updated to 1.4.0 (included in the Strimzi installation files)
  • Added support for Strimzi Metrics Reporter to the Kafka brokers/controllers component.

Major changes, deprecations and removals

  • Strimzi 0.47.0 (and any of its patch releases) is the last Strimzi version with support for Kubernetes 1.25 and 1.26. From Strimzi 0.48.0 on, we will support only Kubernetes 1.27 and newer.

0.46.0

  • Add support for Kafka 4.0.0. Remove support for Kafka 3.8.0 and 3.8.1.
  • Support for ZooKeeper-based Apache Kafka clusters and for KRaft migration has been removed
  • Support for MirrorMaker 1 has been removed
  • Support for storage class overrides has been removed
  • Added support to configure dnsPolicy and dnsConfig using the template sections.
  • Store Kafka node certificates in separate Secrets, one Secret per pod.
  • Allow configuring ssl.principal.mapping.rules and custom trusted CAs in Kafka brokers with type: custom authentication
  • Moved HTTP bridge configuration to the ConfigMap setup by the operator.
  • Dependency updates (Vert.x 4.5.14, Netty 4.1.118.Final)
  • Moved Kafka Connect configuration to the ConfigMap created by the operator.
  • Update Kafka Exporter to 1.9.0
  • Adopted new Kafka Connect health check endpoint (see proposal 89).
  • Update standalone User Operator to handle Cluster CA cert Secret being missing when TLS is not needed.
  • Strimzi Drain Cleaner updated to 1.3.0 (included in the Strimzi installation files)
  • Implicit IPv4 preference when enabling JMX has been removed, and will now use JVM defaults. This will make the cluster boot up correctly in IPv6 only environments, where IPv4 preference will break it due to lack of IPv4 addresses.
  • Improved the MirrorMaker2 example Grafana dashboard to set metric units and include chart descriptions.
  • The ContinueReconciliationOnManualRollingUpdateFailure feature gate moves to GA stage and is permanently enabled without the possibility to disable it.
  • Update OAuth library to 0.16.2.
  • Update HTTP bridge to 0.32.0.
  • Kubernetes events emitted during a Pod restart updated to have the Kafka resource as the regardingObject and the Pod in the related field.
  • Kafka Connect truststore and keystore configurations now uses Kafka Kubernetes Config Provider to load PEM certificates directly from secrets.

Major changes, deprecations and removals

  • Support for ZooKeeper-based clusters and for migration from ZooKeeper-based clusters to KRaft has been removed. Please make sure all your clusters are using KRaft before upgrading to Strimzi 0.46.0 or newer!
  • Support for MirrorMaker 1 has been removed. Please make sure to migrate to MirrorMaker 2 before upgrading to Strimzi 0.46 or newer.
  • Strimzi EnvVar Configuration Provider (deprecated in Strimzi 0.38.0) and Strimzi MirrorMaker 2 Extensions (deprecated in Strimzi 0.28.0) plugins were removed from Strimzi container images. Please use the Apache Kafka EnvVarConfigProvider and Identity Replication Policy instead.
  • When using Kafka Connect or Kafka MirrorMaker 2 operands and upgrading from Strimzi 0.38 or older, make sure the StableConnectIdentities feature gate is enabled and StrimziPodSets are used before upgrading.

... (truncated)

Commits
  • 40b9fa2 Prepare for 0.47.0 release
  • a412924 Add documentation for tracking progress of Cruise Control rebalances. (#11529)
  • d3d15a7 Validate volume name when injecting trusted certificates + add corresponding ...
  • a53e3fa Speedup test runs by enabling asyncDeletion of deployed resources (#11626)
  • fc23a4f docs(overview): description list of strimzi advantages (#11599)
  • 0a578c1 Various Java cleanups in topic-operator (#11618)
  • 2c3de01 add option to use targetPortName in create service port function (#11510)
  • 64dc6f6 Ignore user config provider aliases with conflict (#11486)
  • 53d6451 Split vendors and users in ADOPTERS.md file (#11621)
  • 109e6c9 Add Drain Cleaner 1.4.0 to the Operators repository (#11625)
  • Additional commits viewable in compare view

Updates io.apicurio:apicurio-registry-serdes-avro-serde from 2.6.12.Final to 2.6.13.Final

Updates io.apicurio:apicurio-registry-common from 2.6.12.Final to 2.6.13.Final

Commits

Updates io.apicurio:apicurio-registry-serde-common from 2.6.12.Final to 2.6.13.Final

Commits

Updates io.apicurio:apicurio-registry-common from 2.6.12.Final to 2.6.13.Final

Commits

Updates io.apicurio:apicurio-registry-serde-common from 2.6.12.Final to 2.6.13.Final

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 4 updates: [io.strimzi:api](https://github.com/strimzi/strimzi-kafka-operator), io.apicurio:apicurio-registry-serdes-avro-serde, [io.apicurio:apicurio-registry-common](https://github.com/apicurio/apicurio-registry) and [io.apicurio:apicurio-registry-serde-common](https://github.com/apicurio/apicurio-registry).


Updates `io.strimzi:api` from 0.46.1 to 0.47.0
- [Release notes](https://github.com/strimzi/strimzi-kafka-operator/releases)
- [Changelog](https://github.com/strimzi/strimzi-kafka-operator/blob/main/CHANGELOG.md)
- [Commits](strimzi/strimzi-kafka-operator@0.46.1...0.47.0)

Updates `io.apicurio:apicurio-registry-serdes-avro-serde` from 2.6.12.Final to 2.6.13.Final

Updates `io.apicurio:apicurio-registry-common` from 2.6.12.Final to 2.6.13.Final
- [Release notes](https://github.com/apicurio/apicurio-registry/releases)
- [Commits](Apicurio/apicurio-registry@2.6.12.Final...2.6.13.Final)

Updates `io.apicurio:apicurio-registry-serde-common` from 2.6.12.Final to 2.6.13.Final
- [Release notes](https://github.com/apicurio/apicurio-registry/releases)
- [Commits](Apicurio/apicurio-registry@2.6.12.Final...2.6.13.Final)

Updates `io.apicurio:apicurio-registry-common` from 2.6.12.Final to 2.6.13.Final
- [Release notes](https://github.com/apicurio/apicurio-registry/releases)
- [Commits](Apicurio/apicurio-registry@2.6.12.Final...2.6.13.Final)

Updates `io.apicurio:apicurio-registry-serde-common` from 2.6.12.Final to 2.6.13.Final
- [Release notes](https://github.com/apicurio/apicurio-registry/releases)
- [Commits](Apicurio/apicurio-registry@2.6.12.Final...2.6.13.Final)

---
updated-dependencies:
- dependency-name: io.strimzi:api
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.apicurio:apicurio-registry-serdes-avro-serde
  dependency-version: 2.6.13.Final
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.apicurio:apicurio-registry-common
  dependency-version: 2.6.13.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.apicurio:apicurio-registry-serde-common
  dependency-version: 2.6.13.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.apicurio:apicurio-registry-common
  dependency-version: 2.6.13.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.apicurio:apicurio-registry-serde-common
  dependency-version: 2.6.13.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 21, 2025
@kornys kornys enabled auto-merge (squash) July 21, 2025 11:42
@kornys kornys merged commit ae2ff54 into main Jul 21, 2025
3 checks passed
@kornys kornys deleted the dependabot/maven/dependencies-1699b000a5 branch July 21, 2025 11:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant