build(deps): Bump @confluentinc/kafka-javascript from 1.4.0 to 1.8.0

[dependabot]

Bumps @confluentinc/kafka-javascript from 1.4.0 to 1.8.0.

Release notes

Sourced from @​confluentinc/kafka-javascript's releases.

v1.8.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.13.0. Refer to the librdkafka v2.13.0 release notes for more information.
2. Export CelExecutor/CelFieldExecutor in schemaregistry index.ts (#412).
3. Minor improvement to rule failure message (#419).
4. Prevent a condition that causes fetch failures when max batch size is set or the default one and there's a low consumption rate (#418 @​LucioFranco, #424).

Fixes

1. fix(deps): update dependency validator to v13.15.22 [security] (#413).
2. Prevent max message cache size reaching zero by having a minimum of 1 message per worker after the round up (#424).

v1.8.0-rc2

What's Changed

• Minor update to README to remove Early Availability description by @​rayokota in confluentinc/confluent-kafka-javascript#411
• Export CelExecutor/CelFieldExecutor in index.ts by @​rayokota in confluentinc/confluent-kafka-javascript#412
• fix(deps): update dependency validator to v13.15.22 [security] (master) by @​renovatebot-confluentinc[bot] in confluentinc/confluent-kafka-javascript#413
• Minor improvement to rule failure message by @​rayokota in confluentinc/confluent-kafka-javascript#419
• New release v1.8.0 rc1 by @​k-raina in confluentinc/confluent-kafka-javascript#422
• Prevent max message cache size reaching zero by having a minimum of 1 message per worker after the round up by @​emasab in confluentinc/confluent-kafka-javascript#424
• release v1.8.0-rc2 with librdkafka v2.13.0-RC2 by @​k-raina in confluentinc/confluent-kafka-javascript#425

New Contributors

• @​k-raina made their first contribution in confluentinc/confluent-kafka-javascript#422

Full Changelog: confluentinc/confluent-kafka-javascript@v1.7.0...v1.8.0-rc2

v1.8.0-rc1

What's Changed

• Minor update to README to remove Early Availability description by @​rayokota in confluentinc/confluent-kafka-javascript#411
• Export CelExecutor/CelFieldExecutor in index.ts by @​rayokota in confluentinc/confluent-kafka-javascript#412
• fix(deps): update dependency validator to v13.15.22 [security] (master) by @​renovatebot-confluentinc[bot] in confluentinc/confluent-kafka-javascript#413
• Minor improvement to rule failure message by @​rayokota in confluentinc/confluent-kafka-javascript#419

Full Changelog: confluentinc/confluent-kafka-javascript@v1.7.0...v1.8.0-rc1

v1.7.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.12.1. Refer to the librdkafka v2.12.1 release notes for more information.
2. Configurable batch size through the js.consumer.max.batch.size property and cache size through the js.consumer.max.cache.size.per.worker.ms property (#393).
3. Statistics callback now available when using the promisified API with all

... (truncated)

Changelog

Sourced from @​confluentinc/kafka-javascript's changelog.

confluent-kafka-javascript 1.8.0

v1.8.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.13.0. Refer to the librdkafka v2.13.0 release notes for more information.
2. Export CelExecutor/CelFieldExecutor in schemaregistry index.ts (#412).
3. Minor improvement to rule failure message (#419).
4. Prevent a condition that causes fetch failures when max batch size is set or the default one and there's a low consumption rate (#418 @​LucioFranco, #424).

Fixes

1. fix(deps): update dependency validator to v13.15.22 [security] (#413).
2. Prevent max message cache size reaching zero by having a minimum of 1 message per worker after the round up (#424).

confluent-kafka-javascript 1.7.0

v1.7.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.12.1. Refer to the librdkafka v2.12.1 release notes for more information.
2. Configurable batch size through the js.consumer.max.batch.size property and cache size through the js.consumer.max.cache.size.per.worker.ms property (#393).
3. Statistics callback now available when using the promisified API with all client types (#399).
4. Fix for at-least-once guarantee not ensured in case a seek happens on one partition and there are messages being fetched about other partitions (#393).
5. Avoid returning a negative lag in case there is no cached offset for the HWM (#406).

confluent-kafka-javascript 1.6.0

v1.6.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.12.0. Refer to the librdkafka v2.12.0 release notes for more information.
2. OAuth OIDC method example for Kafka metadata based authentication with an Azure IMDS endpoint using an attached managed identity as principal (#377).

confluent-kafka-javascript 1.5.0

v1.5.0 is a feature release. It is supported for all usage.

... (truncated)

Commits

• 80053e8 release v1.8.0 with librdkafka v2.13.0 (#426)
• 0dda0b4 release v1.8.0-rc2 with librdkafka v2.13.0-RC2 (#425)
• fab45d2 Prevent max message cache size reaching zero by having a minimum of 1 message...
• 8151be6 v1.8.0 rc1 (#422)
• ef8e9d8 Minor improvement ot rule failure message (#419)
• 7a2fd8f fix(deps): update dependency validator to v13.15.22 [security] (#413)
• 3c05806 Export CelExecutor/CelFieldExecutor in index.ts (#412)
• 99bff68 Minor update to README to remove Early Access description (#411)
• 5743d1c v1.7.0 (#410)
• d7d2743 v1.7.0-rc1 (#409)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[changeset-bot]

⚠️ No Changeset found

Latest commit: ff5af06

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs-v2	Ready	Preview, Comment	Feb 3, 2026 2:33am
nebula	Ready	Preview, Comment	Feb 3, 2026 2:33am
thirdweb_playground	Error		Feb 3, 2026 2:33am
thirdweb-www	Error		Feb 3, 2026 2:33am
wallet-ui	Ready	Preview, Comment	Feb 3, 2026 2:33am

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​wagmi/​cli@​2.8.0 ⏵ 2.9.0	-20			+4
	@​confluentinc/​kafka-javascript@​1.4.0 ⏵ 1.8.0	+2		+1	-1

View full report