Bump qs and @confluentinc/kafka-javascript

[dependabot]

Removes qs. It's no longer used after updating ancestor dependency @confluentinc/kafka-javascript. These dependencies need to be updated together.

Removes qs

Updates @confluentinc/kafka-javascript from 0.3.0 to 1.7.0

Release notes

Sourced from @​confluentinc/kafka-javascript's releases.

v1.7.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.12.1. Refer to the librdkafka v2.12.1 release notes for more information.
2. Configurable batch size through the js.consumer.max.batch.size property and cache size through the js.consumer.max.cache.size.per.worker.ms property (#393).
3. Statistics callback now available when using the promisified API with all client types (#399).
4. Fix for at-least-once guarantee not ensured in case a seek happens on one partition and there are messages being fetched about other partitions (#393).
5. Avoid returning a negative lag in case there is no cached offset for the HWM (#406).

v1.7.0-rc1 is a release candidate feature release. It's not supported.

Enhancements

1. Avoid returning a negative lag in case there is no cached offset for the HWM (#406).

v1.7.0-alpha.1 is an alpha feature release. It's not supported.

Enhancements

1. References librdkafka v2.12.1. Refer to the librdkafka v2.12.1 release notes for more information.
2. Statistics callback now available when using the promisified API with all client types (#399).

v1.6.1-alpha.1

v1.6.1 is an alpha maintenance release. It's not supported.

Enhancements

1. Configurable batch size through the js.consumer.max.batch.size property (#389).
2. Fix for at-least-once guarantee not ensured in case a seek happens on one partition and there are messages being fetched about other partitions (#393).

v1.6.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.12.0. Refer to the librdkafka v2.12.0 release notes for more information.
2. OAuth OIDC method example for Kafka metadata based authentication with an Azure IMDS endpoint using an attached managed identity as principal (#377).

v1.6.0-rc4

Pre release of v1.6.0

v1.5.0 is a feature release. It is supported for all usage.

... (truncated)

Changelog

Sourced from @​confluentinc/kafka-javascript's changelog.

confluent-kafka-javascript 1.7.0

v1.7.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.12.1. Refer to the librdkafka v2.12.1 release notes for more information.
2. Configurable batch size through the js.consumer.max.batch.size property and cache size through the js.consumer.max.cache.size.per.worker.ms property (#393).
3. Statistics callback now available when using the promisified API with all client types (#399).
4. Fix for at-least-once guarantee not ensured in case a seek happens on one partition and there are messages being fetched about other partitions (#393).
5. Avoid returning a negative lag in case there is no cached offset for the HWM (#406).

confluent-kafka-javascript 1.6.0

v1.6.0 is a feature release. It is supported for all usage.

Enhancements

1. References librdkafka v2.12.0. Refer to the librdkafka v2.12.0 release notes for more information.
2. OAuth OIDC method example for Kafka metadata based authentication with an Azure IMDS endpoint using an attached managed identity as principal (#377).

confluent-kafka-javascript 1.5.0

v1.5.0 is a feature release. It is supported for all usage.

Enhancements

1. Adds support for highWatermark, offsetLag(), and offsetLagLow() in eachBatch callback (#317).

Fixes

1. Fix issue of delay of up to 5s in receiving messages after pause and resume, or seek (#285, #363).

confluent-kafka-javascript v1.4.1

v1.4.1 is a maintenance release. It is supported for all usage.

Enhancements

1. References librdkafka v2.11.1. Refer to the librdkafka v2.11.1 release notes for more information.

... (truncated)

Commits

• 5743d1c v1.7.0 (#410)
• d7d2743 v1.7.0-rc1 (#409)
• 8241d96 Don't return negative offset lags except for -1 when -1001 is the high waterm...
• 3723cd4 DGS-22899 Fix support for wrapped Avro unions (#402)
• b4f49e1 chore: migrate to sonarqube enterprise (#398)
• fffefdd 1.7.0-alpha.1: Updated lockfile with Node 24 (#401)
• 530ad99 v1.7.0-alpha.0 (#400)
• 744588a Stats callback in promisified api (#399)
• 728c609 DGS-22077 Handle evolution during field transformation (#396)
• 2f84999 Configurable batch size (#393)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.