Update dependency RabbitMQ.Client to v7

[dependencyupdates]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
RabbitMQ.Client (source)	6.8.1 → 7.2.1

---

Release Notes

rabbitmq/rabbitmq-dotnet-client (RabbitMQ.Client)

v7.2.1

Full Changelog

Fixed bugs:

• The Channel has been closed exception from HeartBeatReadCallback #​1884
• Publisher confirms: _confirmSemaphore broken by cancelled CancellationToken allows concurrent access, corrupts _nextPublishSeqNo; #​1900
• Auto-recovery attempts to restore bindings to deleted queues causing recovery failures #​1905

Closed issues:

• Closing Channel does NOT remove the cached RecordedBinding, which will cause AutoRecovery fail #​1904

Merged pull requests:

• Catch all exceptions in HeartbeatWriteTimerCallback and HeartbeatReadTimerCallback to avoid crash #​1876 (klettier)
• Add 'contents: read' to workflow permissions to increase the OpenSSF scorecard of the repo #​1880 (pavlofilatov1)
• Added TryComplete instead of comple during channel shutdown #​1885 (patriktiain)
• Update GHA via actions-up #​1886 (lukebakken)
• Add workflow to check for GHA updates #​1887 (lukebakken)
• Use dependabot to update actions refs #​1896 (lukebakken)
• Bump actions/checkout from 6.0.1 to 6.0.2 #​1897 (app/dependabot)
• Bump github/codeql-action from 3 to 4 #​1898 (app/dependabot)
• Bump actions/cache from 5.0.2 to 5.0.3 #​1899 (app/dependabot)
• Fix unconditional semaphore release in BasicPublishAsync when Cancell… #​1901 (EvheniyHlushko)
• Connection recovery: remove recorded bindings of auto-delete entities #​1906 (michaelklishin)
• Pre-7.2.1 release preparation #​1909 (lukebakken)

v7.2.0

Full Changelog

Implemented enhancements:

• Add support for SslStreamCertificateContext in SslOption #​1864
• Consider including MessageId tag in RabbitMQActivitySource during BasicPublish #​1849
• Consider allowing to set remote span as parent instead of link when propagating context via RabbitMQ #​1666
• Make ConnectionFactory a real Factory pattern #​1844
• Release an abstractions package #​1833
• Replace IReadOnlyBasicProperties, IAmqpHeader generic type constraints in IChannel.BasicPublishAsync() with a single interface constraint. #​1813

Fixed bugs:

• ObjectDisposedException from MaybeHandlePublisherConfirmationTcsOnChannelShutdownAsync closing connection when CloseChannel Continuation is cancelled #​1865
• Possible connection leak when trying to create first connection #​1856
• Semaphore exception when publishing with confirmation #​1818
• Cancellation token not canceled in AsyncEventingBasicConsumer.ReceivedAsync #​1787
• Event handlers for Channel.ChannelShutdownAsync and Consumer.ShutdownAsync are all called on the last registration? #​1837
• Exception details lost when using async API #​1831
• Recovery loop is not cancelled on connection dispose #​1825
• Memory leak in Connection SharedArraypool #​1817
• AutorecoveringConnection Memory Leak #​1808

Closed issues:

• Ship public API changes #​1834
• Update v7 migration guide #​1724
• IConnectionFactory does not contain properties that are present in the class and are needed to correctly configure the connection. #​1836
• Unexpected AMQP close-reason, initiated by Peer, code=504, text='CHANNEL_ERROR - expected 'channel.open' #​1835
• Ship RabbitMQ.Client.OAuth2 2.0.0 #​1727

Merged pull requests:

• Prepare PublicAPI for next release #​1874 (lukebakken)
• Do not handle publisher confirms when disposed #​1873 (lukebakken)
• Bump versions #​1872 (lukebakken)
• Added option to specify ClientCertificateContext in .NET 8+ #​1866 (tyb-dev)
• fix: prevent possible connection leak in AutorecoveringConnection during creation #​1857 (krisz2000)
• Closes#1849: include a message id tag in rabbitmqactivitysource for published messages #​1852 (YayBurritos)
• Ensure Connection and Channel cancellation token properly float into handlers #​1740 (danielmarbach)
• Improve AsyncManualResetEvent implementation to address races #​1843 (danielmarbach)
• Pin .NET SDK versions for CI/CD runs #​1842 (danielmarbach)
• Cancel recovery CTS on connection Dispose #​1839 (AndreReise)
• Prevent downstream dependencies to pickup MinVer as a depencency #​1838 (romerod)
• Add dedicated exception for basic.return messages. #​1832 (lukebakken)
• Investigate & fix SemaphoreFullException #​1819 (lukebakken)
• Allow parent/child relationship in Opentelemetry spans #​1779 (meum)

v7.1.2

Full Changelog

Closed issues:

• RabbitMQ client for .net ignores connection string #​1807

Fixed bugs:

• ObjectDisposedException persists #​1802

Merged pull requests:

• Skip flaky test #​1810 (lukebakken)
• Address ObjectDisposedException #​1809 (lukebakken)
• Serialize sequence number as long #​1806 (lukebakken)

v7.1.1

Full Changelog

Implemented enhancements:

• Port IntAllocator from rabbitmq-java-client #​1786

Fixed bugs:

• Intermittent deadlock when closing a channel using CloseAsync in 7.x #​1751
• Bug in IntervalList causes leak in locks. #​1784

Merged pull requests:

• Fix handling when rate limit lease can't be acquired. #​1794 (lukebakken)
• Demonstrate handling of Channel.Close #​1791 (lukebakken)
• Port IntAllocator from rabbitmq-java-client #​1790 (lukebakken)
• Fix bug in IntervalList #​1785 (lukebakken)

v7.1.0

Full Changelog

Fixed bugs:

• Intermittent deadlock when closing a channel using CloseAsync in 7.x #​1751
• ObjectDisposedException when connection is closed from the server #​1760
• Disposing Connection after closing it with timeout causes deadlock #​1759
• ObjectDisposedException when connection is closed from the server #​1760
• Disposing Connection after closing it with timeout causes deadlock #​1759
• Intermittent deadlock when closing a channel using CloseAsync in 7.x #​1751
• Connection Recovery is triggered without the old connection being closed #​1767
• Cancelling ModelSendAsync can close the connection when it shouldn't #​1750
• ObjectDisposedException when channel is closed by RabbitMQ due to a channel exception #​1749

Merged pull requests:

• Fix rare deadlock, second try #​1782 (lukebakken)
• Fix #​1777 #​1781 (lukebakken)
• Create cancellation token from timeout #​1775 (lukebakken)
• Allow setting heartbeat timeout to TimeSpan.Zero #​1773 (lukebakken)
• Track down ObjectDisposedExceptions #​1772 (lukebakken)
• Fix very rare deadlock #​1771 (lukebakken)
• Fix typos #​1770 (sungam3r)
• Remove whitespaces from csproj files #​1768 (sungam3r)
• Misc items #​1766 (lukebakken)
• Ensure broker-originated channel closure completes #​1764 (lukebakken)
• Update copyright year to 2025 #​1755 (lukebakken)
• Handle OperationCanceledException in RPC continuations #​1753 (lukebakken)
• Update NuGet packages #​1748 (lukebakken)
• Set TestTfmsInParallel to false for Integration tests #​1745 (lukebakken)
• Toxiproxy manager change #​1744 (lukebakken)
• Address flaky integration tests #​1742 (lukebakken)
• Simplify preprocessor directives #​1741 (danielmarbach)
• chore: bump regular System.Text.RegularExpressions due to a known CVE in earlier versions #​1735 (aygalinc)
• More updates for the current OTel (OpenTelemetry) conventions #​1717 (iinuwa)

Closed issues:

• Throw exception during CreateConnectionAsync in case of wrong credentials #​1777
• Exception when disabling heartbeat with v7 #​1756
• Throw exception during CreateConnectionAsync in case of wrong credentials #​1777
• Exception when disabling heartbeat with v7 #​1756
• IChannel thread safety #​1722

Implemented enhancements:

• Single Active consumer #​1723
• OpenTelemetry: Update messaging.operation span attribute to latest OTel Semantic Conventions #​1715
• 7.0 release checklist / misc items #​1413

v7.0.0

Full Changelog

Merged pull requests:

• 7.0.0 CHANGELOG #​1719 (lukebakken)
• Fix build warnings in API #​1718 (lukebakken)
• Change OTel attribute messaging.operation to messaging.operation.type #​1716 (iinuwa)
• Throw when lease not acquired. This can happen then the rate limiter doesn't allow queuing or is generally wrongly configured #​1714 (danielmarbach)

Merged pull requests:

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

Commands to ignore dependencies

You can trigger dependency actions by commenting on this PR:

• @particularbot ignore this major version
• @particularbot ignore this minor version
• @particularbot ignore this dependency

[dependencyupdates]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.