Update confluent-kafka requirement from <2.12.0,>=2.4.0 to >=2.4.0,<2.13.0

[dependabot]

Updates the requirements on confluent-kafka to permit the latest version.

Release notes

Sourced from confluent-kafka's releases.

v2.12.0

confluent-kafka-python v2.12.0

v2.12.0 is a feature release with the following enhancements:

KIP-848 – General Availability

Starting with confluent-kafka-python 2.12.0, the next generation consumer group rebalance protocol defined in KIP-848 is production-ready. Please refer to the following migration guide for moving from classic to consumer protocol.

Note: The new consumer group protocol defined in KIP-848 is not enabled by default. There are few contract change associated with the new protocol and might cause breaking changes. group.protocol configuration property dictates whether to use the new consumer protocol or older classic protocol. It defaults to classic if not provided.

AsyncIO Producer (experimental)

Introduces beta class AIOProducer for asynchronous message production in asyncio applications.

Added

• AsyncIO Producer (experimental): Introduces beta class AIOProducer for asynchronous message production in asyncio applications. This API offloads blocking librdkafka calls to a thread pool and schedules common callbacks (error_cb, throttle_cb, stats_cb, oauth_cb, logger) onto the event loop for safe usage inside async frameworks.

Features

• Batched async produce: await AIOProducer(...).produce(topic, value=...) buffers messages and flushes when the buffer threshold or timeout is reached.
• Async lifecycle: await producer.flush(), await producer.purge(), and transactional operations (init_transactions, begin_transaction, commit_transaction, abort_transaction).

Limitations

• Per-message headers are not supported in the current batched async produce path. If headers are required, use the synchronous Producer.produce(...) or offload a sync produce call to a thread executor within your async app.

Guidance

• Use the AsyncIO Producer inside async apps/servers (FastAPI/Starlette, aiohttp, asyncio tasks) to avoid blocking the event loop.
• For batch jobs, scripts, or highest-throughput pipelines without an event loop, the synchronous Producer remains recommended.

Enhancement and Fixes

• Kafka OAuth/OIDC metadata based authentication examples with Azure IMDS (#2083).

confluent-kafka-python v2.12.0 is based on librdkafka v2.12.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Changelog

Sourced from confluent-kafka's changelog.

v2.12.0 - 2025-10-09

v2.12.0 is a feature release with the following enhancements:

KIP-848 – General Availability

Starting with confluent-kafka-python 2.12.0, the next generation consumer group rebalance protocol defined in KIP-848 is production-ready. Please refer to the following migration guide for moving from classic to consumer protocol.

Note: The new consumer group protocol defined in KIP-848 is not enabled by default. There are few contract change associated with the new protocol and might cause breaking changes. group.protocol configuration property dictates whether to use the new consumer protocol or older classic protocol. It defaults to classic if not provided.

AsyncIO Producer (experimental)

Introduces beta class AIOProducer for asynchronous message production in asyncio applications.

Added

• AsyncIO Producer (experimental): Introduces beta class AIOProducer for asynchronous message production in asyncio applications. This API offloads blocking librdkafka calls to a thread pool and schedules common callbacks (error_cb, throttle_cb, stats_cb, oauth_cb, logger) onto the event loop for safe usage inside async frameworks.

Features

• Batched async produce: await AIOProducer(...).produce(topic, value=...) buffers messages and flushes when the buffer threshold or timeout is reached.
• Async lifecycle: await producer.flush(), await producer.purge(), and transactional operations (init_transactions, begin_transaction, commit_transaction, abort_transaction).

Limitations

• Per-message headers are not supported in the current batched async produce path. If headers are required, use the synchronous Producer.produce(...) or offload a sync produce call to a thread executor within your async app.

Guidance

• Use the AsyncIO Producer inside async apps/servers (FastAPI/Starlette, aiohttp, asyncio tasks) to avoid blocking the event loop.
• For batch jobs, scripts, or highest-throughput pipelines without an event loop, the synchronous Producer remains recommended.

Enhancement and Fixes

• Kafka OAuth/OIDC metadata based authentication examples with Azure IMDS (#2083).

confluent-kafka-python v2.12.0 is based on librdkafka v2.12.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

... (truncated)

Commits

• 3a25bfa Update version to 2.12.0 for the main release (#2096)
• bf845ae Updated env variable MACOSX_DEPLOYMENT_TARGET to 15 for 3.13 python wheel gen...
• ddeafbe Added migration guide for KIP-848 (#2090)
• 3a988e2 OAuth Azure IMDS Kafka example (#2083)
• 48ad122 2.12.0rc2 (#2086)
• f443ea6 Moved async into experimental package for regular release (#2089)
• adc1b81 DGS-22404 Add AppRole auth for HC Vault (#2084)
• a3b43aa Remove hardcoded param (#2075)
• 9304bd6 V2.12.0b1 Image Build Fixes (#2082)
• f878765 Merge async branch to master (#2080)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)