Skip to content
Open
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion requirements.txt
Original file line number Diff line number Diff line change
@@ -1 +1 @@
confluent-kafka>=2.11.0,<2.12.0
confluent-kafka>=2.12.1
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing upper bound on confluent-kafka dependency version

Medium Severity

The confluent-kafka dependency previously had an upper bound (<2.12.0) but the new specification (>=2.12.1) removes it entirely. Since this is a published library (sentry-arroyo), a future major version of confluent-kafka (e.g., 3.x) with breaking API changes would be accepted by this constraint, potentially breaking downstream consumers at install time.

Fix in Cursor Fix in Web

Loading