NO-SNOW Ignore major updates on Kafka dependencies

[sfc-gh-mbobowski]

Overview

NO-SNOW Ignore major updates on Kafka dependencies

Dependabot gets confused with Confluent Kafka versioning and wants to update to community edition like here. Preventing major updates should stop this behavior because ce / cs updates are not present in 3.x.x (source)

Pre-review checklist

• This change should be part of a Behavior Change Release. See go/behavior-change.
• This change has passed Merge gate tests
• Snowpipe Changes
• Snowpipe Streaming Changes
• This change is TEST-ONLY
• This change is README/Javadocs only
• This change is protected by a config parameter <PARAMETER_NAME> eg snowflake.ingestion.method.
  • Yes - Added end to end and Unit Tests.
  • No - Suggest why it is not param protected
• Is his change protected by parameter <PARAMETER_NAME> on the server side?
  • The parameter/feature is not yet active in production (partial rollout or PrPr, see Changes for Unreleased Features and Fixes).
  • If there is an issue, it can be safely mitigated by turning the parameter off. This is also verified by a test (See go/ppp).

[sfc-gh-dseweryn]

I was thinking that there may be a better way to make dependabot what we want but apparently there is no easy way. We should probably spend the time elsewhere. Question though — how will we keep the kafka updated? There are already versions 3.7.1 and 3.8.0 available.

[sfc-gh-mbobowski]

I was thinking that there may be a better way to make dependabot what we want but apparently there is no easy way. We should probably spend the time elsewhere. Question though — how will we keep the kafka updated? There are already versions 3.7.1 and 3.8.0 available.

@sfc-gh-dseweryn not sure if I understand your question. The dependabot will keep track of the new Kafka releases that are not major so basically anything 3.x.y is valid.

[sfc-gh-dseweryn]

There are already versions 3.7.1 and 3.8.0 available.

This was only a side-note that we're not on top of the available versions.
I meant that if 4.0.0 will be released we won't notice

[sfc-gh-mbobowski]

There are already versions 3.7.1 and 3.8.0 available.

This was only a side-note that we're not on top of the available versions. I meant that if 4.0.0 will be released we won't notice

That's true we have to track it on our own.