build(deps): Bump aiokafka from 0.10.0 to 0.12.0 in /services/journal-parser

[dependabot]

Bumps aiokafka from 0.10.0 to 0.12.0.

Release notes

Sourced from aiokafka's releases.

v0.12.0

New features:

• Build mac x86_64 wheels (pr #1029)
• Add support for Python 3.13, drop support for Python 3.8 due to end of life (pr #1061)
• Remove duplicate error logging during rebalance (pr #1025 by @​y4n9squared)

Bugfixes:

• Quote username in SCRAM auth (pr #1043)

Improved Documentation:

• Fix building of readthedocs documentation (pr #1034)
• Fix typo in producer documentation (pr #1036 by @​lgo)

v0.11.0

New features:

• Implement DeleteRecords API (KIP-204) (pr #969 by @​vmaurin)

Bugfixes:

• Fix serialization for batch (issue #886, pr #887 by @​ydjin0602)
• Fix type annotation for AIOKafkaAdminClient.create_partitions (pr #978 by @​alm0ra)
• Fix NotControllerError in AIOKafkaAdminClient.create_topics and other methods (issue #995)
• Fix unintended cancellation of fetcher task (issue #983, pr #1007 by @​apmorton)

Changelog

Sourced from aiokafka's changelog.

0.12.0 (2024-10-26)

New features:

• Build mac x86_64 wheels (pr #1029)
• Add support for Python 3.13, drop support for Python 3.8 due to end of life (pr #1061)
• Remove duplicate error logging during rebalance (pr #1025 by @​y4n9squared)

Bugfixes:

• Quote username in SCRAM auth (pr #1043)

Improved Documentation:

• Fix building of readthedocs documentation (pr #1034)
• Fix typo in producer documentation (pr #1036 by @​lgo)

0.11.0 (2024-06-30)

New features:

• Implement DeleteRecords API (KIP-204_) (pr #969 by @​vmaurin)

.. _KIP-204: https://cwiki.apache.org/confluence/display/KAFKA/KIP-204+%3A+Adding+records+deletion+operation+to+the+new+Admin+Client+API

Bugfixes:

• Fix serialization for batch (issue #886, pr #887 by @​ydjin0602)
• Fix type annotation for AIOKafkaAdminClient.create_partitions (pr #978 by @​alm0ra)
• Fix NotControllerError in AIOKafkaAdminClient.create_topics and other methods (issue #995)
• Fix unintended cancellation of fetcher task (issue #983, pr #1007 by @​apmorton)

Commits

• f6c79a0 Update actions, fix publishing (#1063)
• 7133562 Prepare 0.12.0 release
• f7861f6 Remove duplicate error log during rebalance (#1025)
• e7c9033 Add Python 3.13, remove 3.8 (#1061)
• 608ab24 Fix ClusterMetadata request_update() (#1056)
• 4cff9d7 Made classes enum.IntEnums where appropriate. (#1053)
• 01c60cd Quote username in SCRAM auth (#1043)
• e2afc03 fix type on producer docs (#1036)
• f9dbed1 Add readthedocs config (#1034)
• 2f976d0 Merge pull request #1030 from webknjaz/maintenance/gha-pypi-tokenless-publishing
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
pip/aiokafka	0.13.0	🟢 5.2	Details Check Score Reason Code-Review 🟢 4 Found 14/29 approved changesets -- score normalized to 4 Maintained 🟢 4 4 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 4 Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Packaging ⚠️ -1 packaging workflow not detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected SAST 🟢 7 SAST tool detected but not run on all commits

Scanned Files

• services/journal-parser/requirements.txt