[dependabot]

Updates the requirements on confluent-kafka to permit the latest version.

Release notes

Sourced from confluent-kafka's releases.

v2.16.1

Fixes

• Require certifi>=2026.10.19 for the Schema Registry client. When ssl.ca.location is not set (and the SSL_CERT_FILE and SSL_CERT_DIR environment variables are not set), the client verifies Schema Registry certificates against the certifi CA bundle, and earlier certifi releases still trust the eMudhra root whose intermediate CA keys were compromised (details). This update does not change custom trust stores configured through ssl.ca.location, SSL_CERT_FILE or SSL_CERT_DIR.
• Fix MetadataTags.__hash__ raising TypeError on unhashable list values so schemas with metadata.tags can be cached (#2385)
• Fix TopicPartition string formatting showing %I32d instead of the partition number on Windows (#2374)

confluent-kafka-python 2.16.1 is based on librdkafka 2.16.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Changelog

Sourced from confluent-kafka's changelog.

v2.16.1

Fixes

• Require certifi>=2026.10.19 for the Schema Registry client. When ssl.ca.location is not set (and the SSL_CERT_FILE and SSL_CERT_DIR environment variables are not set), the client verifies Schema Registry certificates against the certifi CA bundle, and earlier certifi releases still trust the eMudhra root whose intermediate CA keys were compromised (details). This update does not change custom trust stores configured through ssl.ca.location, SSL_CERT_FILE or SSL_CERT_DIR; keep those up to date separately.
• Fix MetadataTags.__hash__ raising TypeError on unhashable list values so schemas with metadata.tags can be cached (#2385)
• Fix TopicPartition string formatting showing %I32d instead of the partition number on Windows (#2374)

confluent-kafka-python 2.16.1 is based on librdkafka 2.16.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

v2.16.0

v2.16.0 is a feature release with the following features, fixes and enhancements:

Enhancements

• confluent_kafka now declares itself GIL-safe, enabling real multi-core parallelism on free-threaded CPython builds. See the Multithreading Guide for thread-safety details and free-threaded caveats. (#2347)
• Add Python 3.14t wheels (#2352)
• Add Linux s390x (IBM Z) wheels, including Python 3.14t (#2360)
• Producer close() now aborts any open transaction (#2347)
• Async IO Consumer's default worker pool size has been increased from 2 to 100 (#2347)
• Add support for CPython free-threading (PEP 703) to enable true multi-core parallel execution in No-GIL environments (#2347)
• SerializingProducer and DeserializingConsumer accept a serde builder when not passing a ready-made serde, through the new key.serializer.builder / value.serializer.builder and key.deserializer.builder / value.deserializer.builder configuration properties. Serdes built this way, and any Schema Registry client the builder created for them, are owned by the client and closed by its close(); ready-made serdes remain the application's. This API is experimental (#2364).
• Serdes that resolve subjects through the Schema Registry associated subject name strategy are now given the Kafka cluster id automatically. The id is resolved lazily, on the first subject lookup, so creating a client never waits on a broker, and concurrent lookups share a single cluster_id() call; until a broker has been reached the lookup raises a SerializationError naming subject.name.strategy.kafka.cluster.id, which can be set to supply the id explicitly. The new serde hooks (set_cluster_id_resolver(), close()) are experimental (#2364).
• New Producer.cluster_id(), Consumer.cluster_id() and AdminClient.cluster_id() (also on AIOProducer and AIOConsumer), returning the id of the cluster the client is connected to. This API is

... (truncated)

Commits

• 4d30686 2.16.1 (#2403)
• 83f66df 2.16.1rc1 (#2399)
• fbb7c3b Require certifi>=2026.10.19 for the Schema Registry client (#2398)
• 469f81c Fix TopicPartition string formatting on Windows (#2376)
• 47d1240 Fix MetadataTags hash with list values (#2385) (#2388)
• 4a1bcb0 Copy pyproject.toml into smoketest temp dir so asyncio_mode=auto applies (#2384)
• 16ba967 Fix Unicode errors in string serialization (#2379)
• 73a71f8 2.16.0 (#2380)
• 20614ae Integrate Schema Registry serdes into the Kafka clients: serde builders, clus...
• 7f2e72f Add s390x wheels to the build and verification matrix (#2360)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: flink, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

DORA Metrics

• Window: last 30 days
• Branch: main
• Deployment frequency: 0 total / 0.0 per week
• Lead time for changes: avg n/a / median n/a
• Change failure rate: n/a (0/0)
• MTTR: n/a across 0 incident(s)

MTTR note: No GitHub Actions or deployment log history available.