chore(deps): bump the python-dependencies group with 3 updates

[dependabot]

Bumps the python-dependencies group with 3 updates: boto3, botocore and confluent-kafka.

Updates boto3 from 1.43.36 to 1.43.40

Commits

• dd59a59 Merge branch 'release-1.43.40'
• b416ca0 Bumping version to 1.43.40
• b228d05 Add changelog entries from botocore
• 121db7a Merge branch 'release-1.43.39'
• 00141f6 Merge branch 'release-1.43.39' into develop
• 310317d Bumping version to 1.43.39
• ff7c1cf Add changelog entries from botocore
• 805c683 Update CODEOWNERS to shared Python SDK and CLI team (#4809)
• efcfb65 Merge branch 'release-1.43.38'
• d7aa957 Merge branch 'release-1.43.38' into develop
• Additional commits viewable in compare view

Updates botocore from 1.43.36 to 1.43.40

Commits

• c1894c1 Merge branch 'release-1.43.40'
• fc560a4 Bumping version to 1.43.40
• 420c584 Update endpoints model
• e00fad7 Update to latest models
• 3f29544 Merge branch 'release-1.43.39'
• db6ca71 Merge branch 'release-1.43.39' into develop
• 97d313f Bumping version to 1.43.39
• bcfbd50 Update endpoints model
• 0813a0f Update to latest models
• ea9157a Update CODEOWNERS to shared Python SDK and CLI team (#3740)
• Additional commits viewable in compare view

Updates confluent-kafka from 2.14.2 to 2.15.0

Release notes

Sourced from confluent-kafka's releases.

v2.15.0

KIP-932 Queues for Kafka – Now in Preview

confluent-kafka-python 2.15.0 adds a Preview implementation of the KIP-932 share consumer (Queues for Kafka). Members of a share group cooperatively consume from the same partitions with per-record acquire/acknowledge semantics and redelivery, providing queue-like consumption on top of Kafka.

• New ShareConsumer and DeserializingShareConsumer clients: subscribe, batch poll (poll() returns a Messages batch), and close (with context-manager support).
• Implicit (default) and explicit acknowledgement modes (share.acknowledgement.mode), with AcknowledgeType ACCEPT / RELEASE / REJECT and Message.delivery_count().
• Synchronous and asynchronous commit (commit_sync / commit_async) and an acknowledgement-commit callback.
• Runtime SASL credential updates (set_sasl_credentials) and new IllegalStateException / ConcurrentModificationException exceptions.
• (#2217, #2239, #2241, #2252, #2253, #2265, #2273, #2277, #2279)

See the Share Consumer guide and the Share consumers section of librdkafka's INTRODUCTION.md.

Note: The share consumer is currently in Preview and should not be used in production environments. Its public interfaces may change before General Availability, and known limitations apply (see the guide). The share consumer is single-threaded and not thread-safe. It requires a broker with share groups enabled (generally available in Apache Kafka 4.2.0).

Features

• New optional install confluent-kafka[oauthbearer-aws] provides AWS IAM-based OAUTHBEARER authentication via AWS STS GetWebIdentityToken. Activate by setting sasl.oauthbearer.method=oidc, sasl.oauthbearer.metadata.authentication.type=aws_iam, and sasl.oauthbearer.config="region=...,audience=...". See the AWS IAM OAUTHBEARER guide for full configuration, and https://github.com/confluentinc/confluent-kafka-python/blob/HEAD/examples/oauth_oidc_ccloud_aws_iam.py for a worked example.

Enhancements

• Add support for union-of-pools and auto pool mapping for Schema Registry (#2182)

Fixes

• Fix Encryption fails when expanded union types have two references to the same record (@​ChristophMajcenAtXxxlutz, #2262)
• Make orjson optional in JSON serdes with stdlib json fallback (#2281)
• Handle non-http errors during retries (#2292)
• Use TLS certification verification with Hashicorp Vault (#2294)

confluent-kafka-python v2.15.0 is based on librdkafka v2.15.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Changelog

Sourced from confluent-kafka's changelog.

v2.15.0

KIP-932 Queues for Kafka – Now in Preview

confluent-kafka-python 2.15.0 adds a Preview implementation of the KIP-932 share consumer (Queues for Kafka). Members of a share group cooperatively consume from the same partitions with per-record acquire/acknowledge semantics and redelivery, providing queue-like consumption on top of Kafka.

• New ShareConsumer and DeserializingShareConsumer clients: subscribe, batch poll (poll() returns a Messages batch), and close (with context-manager support).
• Implicit (default) and explicit acknowledgement modes (share.acknowledgement.mode), with AcknowledgeType ACCEPT / RELEASE / REJECT and Message.delivery_count().
• Synchronous and asynchronous commit (commit_sync / commit_async) and an acknowledgement-commit callback.
• Runtime SASL credential updates (set_sasl_credentials) and new IllegalStateException / ConcurrentModificationException exceptions.
• (#2217, #2239, #2241, #2252, #2253, #2265, #2273, #2277, #2279)

See the Share Consumer guide and the Share consumers section of librdkafka's INTRODUCTION.md.

Note: The share consumer is currently in Preview and should not be used in production environments. Its public interfaces may change before General Availability, and known limitations apply (see the guide). The share consumer is single-threaded and not thread-safe. It requires a broker with share groups enabled (generally available in Apache Kafka 4.2.0).

Features

• New optional install confluent-kafka[oauthbearer-aws] provides AWS IAM-based OAUTHBEARER authentication via AWS STS GetWebIdentityToken. Activate by setting sasl.oauthbearer.method=oidc, sasl.oauthbearer.metadata.authentication.type=aws_iam, and sasl.oauthbearer.config="region=...,audience=...". See the AWS IAM OAUTHBEARER guide for full configuration, and https://github.com/confluentinc/confluent-kafka-python/blob/master/examples/oauth_oidc_ccloud_aws_iam.py for a worked example.

Enhancements

• Add support for union-of-pools and auto pool mapping for Schema Registry (#2182)

Fixes

• Fix Encryption fails when expanded union types have two references to the same record (@​ChristophMajcenAtXxxlutz, #2262)
• Make orjson optional in JSON serdes with stdlib json fallback (#2281)
• Handle non-http errors during retries (#2292)
• Use TLS certification verification with Hashicorp Vault (#2294)

confluent-kafka-python v2.15.0 is based on librdkafka v2.15.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Commits

• 8b1c7a6 v2.15.0 (#2302)
• ad3d779 Update changelog (#2301)
• ffbdc9f v2.15.0rc2 (#2300)
• 291f5b7 [KIP-932] Share consumer (Queues for Kafka) guide and external docs (#2298)
• cc51dc2 [KIP-932] - Update ShareConsumer api docs (#2295)
• 50e9228 Harden HCVault KMS TLS verify against empty CA value; add tests (#2296)
• 19d1b98 Use TLS certification verification with Hashicorp Vault (#2294)
• a697e38 DGS-23437: Enable client omit Confluent-Identity-Pool-Id (#2182)
• cc498ec AWS IAM OAUTHBEARER support via optional oauthbearer-aws module (#2267)
• b2edda3 [KIP-932] - Add usage examples for share consumer applications (#2288)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions