chore(deps): bump github.com/confluentinc/confluent-kafka-go/v2 from 2.15.1 to 2.16.0

[dependabot]

Bumps github.com/confluentinc/confluent-kafka-go/v2 from 2.15.1 to 2.16.0.

Release notes

Sourced from github.com/confluentinc/confluent-kafka-go/v2's releases.

v2.16.0

This is a feature release:

• The serializers and deserializers can now be integrated into the Kafka producer and consumer through the SerializingProducer and DeserializingConsumer. The cluster ID is automatically passed to the serde when needed, for example in the AssociatedNameStrategy case, and resolved lazily, when the serde looks a subject up, so that creating the producer or the consumer never waits on a broker. It's also possible to get the cluster ID independently, in order to keep the Kafka and Schema Registry client separate (#1583). This API - SerializingProducer, DeserializingConsumer, the Kafka serde builders and the ClusterID method of Producer and Consumer - is experimental and subject to change or removal.

Enhancements

• Add support for saving Azure key version with DEK (#1577)
• Pass context when clients make KEK calls to DEK Registry (#1579)
• Add support for inline validation rules (#1592)
• Add Variant, Decimal, and Timestamp CEL functions (#1595)
• Add GetAllSubjectsIncludeDeleted to the Schema Registry client to list soft-deleted subjects (#1614)
• Bump golang.org/x/crypto to v0.56.0 to fix: GO-2026-6303, GO-2026-6354, GO-2026-6355 in x/crypto/ssh (#1599).
• Note: the golang.org/x/crypto bump pulls in that module's own go 1.26.0 directive, raising this module's go directive from 1.25.0 to 1.26.0. Users on Go 1.25.x with GOTOOLCHAIN=auto (the default since Go 1.21) will fetch a 1.26 toolchain transparently; users with GOTOOLCHAIN=local must upgrade to Go 1.26.0 or later.

Fixes

• Remove the Schema Registry client's dependency on the CGo-based kafka package, which broke CGO_ENABLED=0 builds and pulled in librdkafka just to read a version string. The Confluent-Client-Version header now reports the confluent-kafka-go module version, resolved from build info (#1529, #1607)

confluent-kafka-go is based on librdkafka 2.16.0, see the librdkafka 2.16.0 release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Changelog

Sourced from github.com/confluentinc/confluent-kafka-go/v2's changelog.

v2.16.0

This is a feature release:

• The serializers and deserializers can now be integrated into the Kafka producer and consumer through the SerializingProducer and DeserializingConsumer. The cluster ID is automatically passed to the serde when needed, for example in the AssociatedNameStrategy case, and resolved lazily, when the serde looks a subject up, so that creating the producer or the consumer never waits on a broker. It's also possible to get the cluster ID independently, in order to keep the Kafka and Schema Registry client separate (#1583). This API - SerializingProducer, DeserializingConsumer, the Kafka serde builders and the ClusterID method of Producer and Consumer - is experimental and subject to change or removal.

Enhancements

• Add support for saving Azure key version with DEK (#1577)
• Pass context when clients make KEK calls to DEK Registry (#1579)
• Add support for inline validation rules (#1592)
• Add Variant, Decimal, and Timestamp CEL functions (#1595)
• Add GetAllSubjectsIncludeDeleted to the Schema Registry client to list soft-deleted subjects (#1614)
• Bump golang.org/x/crypto to v0.56.0 to fix: GO-2026-6303, GO-2026-6354, GO-2026-6355 in x/crypto/ssh (#1599).
• Note: the golang.org/x/crypto bump pulls in that module's own go 1.26.0 directive, raising this module's go directive from 1.25.0 to 1.26.0. Users on Go 1.25.x with GOTOOLCHAIN=auto (the default since Go 1.21) will fetch a 1.26 toolchain transparently; users with GOTOOLCHAIN=local must upgrade to Go 1.26.0 or later.

Fixes

• Remove the Schema Registry client's dependency on the CGo-based kafka package, which broke CGO_ENABLED=0 builds and pulled in librdkafka just to read a version string. The Confluent-Client-Version header now reports the confluent-kafka-go module version, resolved from build info (#1529, #1607)

confluent-kafka-go is based on librdkafka 2.16.0, see the librdkafka 2.16.0 release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Commits

• 465b765 Import v2.16.0 (#1631)
• cbcc84e Documentation and error code update for librdkafka v2.16.0
• db0437a librdkafka static bundle v2.16.0
• b7a8dfe confluent-kafka-go version v2.16.0
• 2bd57f5 Fix string builder copy in wildcard matcher (#1619)
• 3701f54 Close Schema Registry response bodies before failover (#1618)
• d68e6b7 Integrate Schema Registry serdes into librdkafka producer/consumer (Go) (#1583)
• c493e4c Import v2.16.0-RC4 (#1620)
• 1cdecca Documentation and error code update for librdkafka v2.16.0-RC4
• efcf6e4 librdkafka static bundle v2.16.0-RC4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: openmeterio/openmeter/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 6f4389be-33ce-47b4-bd5f-9db22e1198dd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}