Update confluent-kafka requirement from <2.14.0,>=2.4.0 to >=2.4.0,<2.15.0

[dependabot]

Updates the requirements on confluent-kafka to permit the latest version.

Release notes

Sourced from confluent-kafka's releases.

v2.14.0 is a feature release with the following features, fixes and enhancements:

Enhancements

• Implement async context manager protocol for AIOProducer and AIOConsumer (#2180)
• Add AssociatedNameStrategy (#2194)
• Add enableAt to RuleSet (#2218)

Fixes

• Ensure normalize.schemas config is passed during Protobuf ref lookup #2214
• Fix type annotations for context manager hooks so that they are correct for subclasses (#2181)
• Fix OAuth callback handling for Async IO clients to prevent initialization failures (#2219)

confluent-kafka-python v2.14.0 is based on librdkafka v2.14.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Changelog

Sourced from confluent-kafka's changelog.

v2.14.0 - 2026-04-01

v2.14.0 is a feature release with the following features, fixes and enhancements:

Enhancements

• Implement async context manager protocol for AIOProducer and AIOConsumer (#2180)
• Add AssociatedNameStrategy (#2194)
• Add enableAt to RuleSet (#2218)

Fixes

• Ensure normalize.schemas config is passed during Protobuf ref lookup #2214
• Fix type annotations for context manager hooks so that they are correct for subclasses (#2181)
• Fix OAuth callback handling for Async IO clients to prevent initialization failures (#2219)

confluent-kafka-python v2.14.0 is based on librdkafka v2.14.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

v2.13.2 - 2026-03-02

v2.13.2 is a maintenance release with the following fixes and enhancements:

Enhancements

• Add Confluent-Client-Version header to requests to SR, Python client (#2148)
• Add UAMI OAuth changes (#2189)

Fixes

• Fixed memory leak in Producer.produce() when called with headers and raises BufferError (queue full) or RuntimeError (producer closed). The allocated rd_headers memory is now properly freed in error paths before returning. Fixes Issue #2167.
• Fixed type hinting of KafkaError class, Consumer.__init()__, Producer.__init()__, Producer.produce() and Consumer.commit() and introduced a script in tools directory to keep error codes up to date. Fixes Issue #2168.
• Fix the token expiration logic in SR Oauth (#2177)
• Ensure use of cachetools is thread-safe (#2178)
• Remove passing resolver in json validate (#2186)
• Fix JSON schema resolver bug (#2188)

v2.13.0 - 2025-12-15

v2.13.0 is a feature release with the following features, fixes and enhancements:

Enhancements

• Enforced type hinting for all interfaces
• Handle OAuth Token Refreshes using background thread for Admin, Producer and Consumer clients (#2130)

... (truncated)

Commits

• a2f066d v2.14.0 (#2227)
• d80ff36 Add current release candidate to setup_all_versions.py (#2226)
• ea948da v2.14.0rc1 (#2224)
• 73c7953 Avoid redundant lookup_schema call in _get_reader_schema when use_schema_id i...
• 410a59c Add enableAt to RuleSet (#2218)
• f3af6aa Remove callback wrapping for oauth_cb in AIO clients (#2219)
• d313cac Fix return type signature for context managers (#2181)
• 40e8a6f Implement async context manager protocol for AIO clients (#2180)
• 0ed043f Fix typo (#1691)
• cc164a1 DGS-23025 Add AssociatedNameStrategy (#2194)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)