fix(deps): update module github.com/ibm/sarama to v1.46.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/IBM/sarama	v1.45.2 -> v1.46.2

---

Release Notes

IBM/sarama (github.com/IBM/sarama)

v1.46.2: Version 1.46.2 (2025-10-10)

Compare Source

What's Changed

A big focus on improving our support for newer protocol versions in this release, particularly supporting a wider range of flexible versions

🎉 New Features / Improvements

• chore: support V5 ListOffsets by @​dnwe in #​3308
• feat: support DeleteGroups V2 protocol by @​hindessm in #​3320
• feat: support DeleteTopics V4 protocol by @​hindessm in #​3321
• feat: support CreateTopics V5 protocol by @​hindessm in #​3322
• feat: support IncrementalAlterConfigs V1 protocol by @​hindessm in #​3319
• feat: support DescribeGroups V5 protocol by @​hindessm in #​3331
• feat: support SyncGroup V4 protocol by @​hindessm in #​3332
• feat: support LeaveGroup V4 protocol by @​hindessm in #​3334
• feat: support Heartbeat V4 protocol by @​hindessm in #​3335
• feat: support JoinGroup V6 protocol by @​hindessm in #​3339
• feat: support DescribeClientQuotas V1 protocol by @​dnwe in #​3342

🐛 Fixes

• fix: update map rather than create a new map by @​hindessm in #​3302
• fix: metadata_response valid version range by @​hindessm in #​3304
• fix: add V4 as valid CreateTopicsResponse by @​dnwe in #​3305
• fix: correct requiredVersion for DescribeLogDirsResponse by @​dnwe in #​3306
• fix: extend TestAllocateBodyProtocolVersions for more testing by @​dnwe in #​3307
• fix: non-flexible ElectLeadersRequest V0/V1 encode/decode by @​hindessm in #​3312
• fix: make alterPartitionReassignmentsBlock consistent by @​hindessm in #​3313
• fix: correct decodeRequest bytesRead return value by @​hindessm in #​3314
• fix: decoder issues by @​hindessm in #​3327
• fix: improve KIP-511 behaviour on older Kafka clusters by @​dnwe in #​3328
• fix: return correct error when encoding by @​hindessm in #​3333
• fix: correct ApiVersionsResponse handling of ErrUnsupportedVersion by @​dnwe in #​3337

📦 Dependency updates

• chore(deps): update ossf/scorecard-action action to v2.4.3 by @​renovate[bot] in #​3318
• fix(deps): update module golang.org/x/net to v0.46.0 by @​renovate[bot] in #​3343

🔧 Maintenance

• chore: remove redundant insufficient data checks by @​hindessm in #​3300
• refactor: use struct rather than map with one entry by @​hindessm in #​3301
• chore(ci): adopt gotestsum and re-run flakes by @​dnwe in #​3311
• refactor: Flexible encoding/decoding refactoring by @​hindessm in #​3317
• chore(fvt): refactor docker-compose and support KRaft by @​dnwe in #​3323
• fix(fvt): simplify retry using testify's EventuallyWithT by @​dnwe in #​3324
• chore: add 3.9.1 and 4.1.0 version constants and FVT by @​dnwe in #​3325
• refactor: get/put for KError by @​hindessm in #​3326
• refactor: get/put for throttle time ms time.Duration by @​hindessm in #​3330
• chore(fvt): improve testFuncConsumerGroupMember by @​dnwe in #​3329

➕ Other Changes

• fix(fvt): check err before usage by @​dnwe in #​3338

Full Changelog: IBM/sarama@v1.46.1...v1.46.2

v1.46.1: Version 1.46.1 (2025-09-18)

Compare Source

[!NOTE]
The go.mod directive has been bumped to 1.24.0 as the minimum version of Go required for the module. This was necessary to continue to receive updates from some of the third party dependencies that Sarama makes use of.

What's Changed

🎉 New Features / Improvements

• feat: support more describe log dirs versions (V2-V4) by @​hindessm in #​3293
• feat: support V5 ListConsumerGroups protocol by @​hindessm in #​3292
• feat: add SASLv1 support for Kerberos by @​dnwe in #​3279

🐛 Fixes

• fix: add read deadline to tls write by @​bvalente in #​3283

📦 Dependency updates

• chore(deps): bump go directive to 1.24.0 and golang.org/x/{crypto,net,sync} by @​dependabot[bot] in #​3288
• chore(deps): bump the golang-x group across 6 directories with 1 update by @​dependabot[bot] in #​3291
• chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @​dependabot[bot] in #​3274

🔧 Maintenance

• chore: refactor to use modern atomic types by @​Sahil-4555 in #​3277
• chore: pre-commit autoupdate to latest by @​dnwe in #​3278
• chore: apply modernize fixes from gopls by @​dnwe in #​3297
• chore(config): update comments of sarama.Config.Metadata.SingleFlight by @​gunli in #​3296
• chore(client): update comments of client methods by @​gunli in #​3295

New Contributors

• @​Sahil-4555 made their first contribution in #​3277
• @​bvalente made their first contribution in #​3283
• @​gunli made their first contribution in #​3296

Full Changelog: IBM/sarama@v1.46.0...v1.46.1

v1.46.0: Version 1.46.0 (2025-08-25)

Compare Source

[!NOTE]
This release contains significant changes. Notably Sarama will now use the ApiVersionRequest response from each broker to aid in selecting the protocol version to use. The existing Version field in sarama.Config will continue to provide a "pinning" mechanism, but can safely be set to a maximum or higher value than the remote cluster and sarama will sensibly pick compatible versions. There is also a performance improvement relating to MetadataRequests whereby Sarama will avoid having more than a single request to each broker in-flight at any given time. These new (optimal) behaviour is on by default can be opt-ed out via the Metadata.SingleFlight field in Config.

What's Changed

🎉 New Features / Improvements

• feat(protocol): negotiate API versions by @​trapped in #​3209
• feat: option to group metadata refreshes so only one is in-flight at a time by @​cupcicm in #​3225
• feat: use singleflight metadata by default by @​dnwe in #​3231
• feat(protocol): support CreateTopicRequest V4 by @​dnwe in #​3238
• feat: always send ApiVersionsRequest and fallback to v0 by @​dnwe in #​3234

🐛 Fixes

• fix(consumer): stuck on the batch with zero records length by @​sterligov in #​3221
• fix: sync response header version to clamped request header by @​trapped in #​3223
• fix(decoder): handle null arrays correctly by @​dnwe in #​3144
• fix: hardcode lz4 writer blocksize to 64kb by @​dnwe in #​3258

📦 Dependency updates

• chore(deps): bump the golang-x group across 1 directory with 2 updates by @​dependabot[bot] in #​3185
• chore(deps): bump the golang-x group across 7 directories with 2 updates by @​dependabot[bot] in #​3219
• fix(deps): update module golang.org/x/net to v0.43.0 by @​renovate[bot] in #​3244
• chore(deps): bump the golang-x group across 6 directories with 1 update by @​dependabot[bot] in #​3262
• chore(deps): update github/codeql-action action to v3.29.9 by @​renovate[bot] in #​3242
• fix(deps): update github.com/rcrowley/go-metrics digest to 65e299d by @​renovate[bot] in #​3164
• fix(deps): update module github.com/stretchr/testify to v1.11.0 by @​renovate[bot] in #​3268
• chore(deps): update docker/bake-action action to v6.9.0 by @​renovate[bot] in #​3264

🔧 Maintenance

• chore(lint): enable copyloopvar by @​alexandear in #​3214
• chore: fix inconsistent function name in comment by @​stellrust in #​3227
• chore(style): refactor compress.go for readability by @​dnwe in #​3260
• chore: replace unnecessary go-multierror dependency by @​bestbug456 in #​3243

New Contributors

• @​ibm-mend-app[bot] made their first contribution in #​3201
• @​alexandear made their first contribution in #​3214
• @​trapped made their first contribution in #​3209
• @​cupcicm made their first contribution in #​3225
• @​sterligov made their first contribution in #​3221
• @​stellrust made their first contribution in #​3227
• @​bestbug456 made their first contribution in #​3243

Full Changelog: IBM/sarama@v1.45.2...v1.46.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.0 -> 1.24.0
github.com/rcrowley/go-metrics	v0.0.0-20201227073835-cf1acfcdf475 -> v0.0.0-20250401214520-65e299d6c5c9
golang.org/x/crypto	v0.38.0 -> v0.43.0
golang.org/x/net	v0.40.0 -> v0.46.0
golang.org/x/text	v0.25.0 -> v0.30.0