Update dependency RabbitMQ.Client to v7

[dependencyupdates]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
RabbitMQ.Client (source)	6.8.1 → 7.2.1

---

Release Notes

rabbitmq/rabbitmq-dotnet-client (RabbitMQ.Client)

v7.2.1

Full Changelog

Fixed bugs:

• The Channel has been closed exception from HeartBeatReadCallback #​1884
• Publisher confirms: _confirmSemaphore broken by cancelled CancellationToken allows concurrent access, corrupts _nextPublishSeqNo; #​1900
• Auto-recovery attempts to restore bindings to deleted queues causing recovery failures #​1905

Closed issues:

• Closing Channel does NOT remove the cached RecordedBinding, which will cause AutoRecovery fail #​1904

Merged pull requests:

• Catch all exceptions in HeartbeatWriteTimerCallback and HeartbeatReadTimerCallback to avoid crash #​1876 (klettier)
• Add 'contents: read' to workflow permissions to increase the OpenSSF scorecard of the repo #​1880 (pavlofilatov1)
• Added TryComplete instead of comple during channel shutdown #​1885 (patriktiain)
• Update GHA via actions-up #​1886 (lukebakken)
• Add workflow to check for GHA updates #​1887 (lukebakken)
• Use dependabot to update actions refs #​1896 (lukebakken)
• Bump actions/checkout from 6.0.1 to 6.0.2 #​1897 (app/dependabot)
• Bump github/codeql-action from 3 to 4 #​1898 (app/dependabot)
• Bump actions/cache from 5.0.2 to 5.0.3 #​1899 (app/dependabot)
• Fix unconditional semaphore release in BasicPublishAsync when Cancell… #​1901 (EvheniyHlushko)
• Connection recovery: remove recorded bindings of auto-delete entities #​1906 (michaelklishin)
• Pre-7.2.1 release preparation #​1909 (lukebakken)

v7.2.0

Full Changelog

Implemented enhancements:

• Add support for SslStreamCertificateContext in SslOption #​1864
• Consider including MessageId tag in RabbitMQActivitySource during BasicPublish #​1849
• Consider allowing to set remote span as parent instead of link when propagating context via RabbitMQ #​1666
• Make ConnectionFactory a real Factory pattern #​1844
• Release an abstractions package #​1833
• Replace IReadOnlyBasicProperties, IAmqpHeader generic type constraints in IChannel.BasicPublishAsync() with a single interface constraint. #​1813

Fixed bugs:

• ObjectDisposedException from MaybeHandlePublisherConfirmationTcsOnChannelShutdownAsync closing connection when CloseChannel Continuation is cancelled #​1865
• Possible connection leak when trying to create first connection #​1856
• Semaphore exception when publishing with confirmation #​1818
• Cancellation token not canceled in AsyncEventingBasicConsumer.ReceivedAsync #​1787
• Event handlers for Channel.ChannelShutdownAsync and Consumer.ShutdownAsync are all called on the last registration? #​1837
• Exception details lost when using async API #​1831
• Recovery loop is not cancelled on connection dispose #​1825
• Memory leak in Connection SharedArraypool #​1817
• AutorecoveringConnection Memory Leak #​1808

Closed issues:

• Ship public API changes #​1834
• Update v7 migration guide #​1724
• IConnectionFactory does not contain properties that are present in the class and are needed to correctly configure the connection. #​1836
• Unexpected AMQP close-reason, initiated by Peer, code=504, text='CHANNEL_ERROR - expected 'channel.open' #​1835
• Ship RabbitMQ.Client.OAuth2 2.0.0 #​1727

Merged pull requests:

• Prepare PublicAPI for next release #​1874 (lukebakken)
• Do not handle publisher confirms when disposed #​1873 (lukebakken)
• Bump versions #​1872 (lukebakken)
• Added option to specify ClientCertificateContext in .NET 8+ #​1866 (tyb-dev)
• fix: prevent possible connection leak in AutorecoveringConnection during creation #​1857 (krisz2000)
• Closes#1849: include a message id tag in rabbitmqactivitysource for published messages #​1852 (YayBurritos)
• Ensure Connection and Channel cancellation token properly float into handlers #​1740 (danielmarbach)
• Improve AsyncManualResetEvent implementation to address races #​1843 (danielmarbach)
• Pin .NET SDK versions for CI/CD runs #​1842 (danielmarbach)
• Cancel recovery CTS on connection Dispose #​1839 (AndreReise)
• Prevent downstream dependencies to pickup MinVer as a depencency #​1838 (romerod)
• Add dedicated exception for basic.return messages. #​1832 (lukebakken)
• Investigate & fix SemaphoreFullException #​1819 (lukebakken)
• Allow parent/child relationship in Opentelemetry spans #​1779 (meum)

v7.1.2

Full Changelog

Closed issues:

• RabbitMQ client for .net ignores connection string #​1807

Fixed bugs:

• ObjectDisposedException persists #​1802

Merged pull requests:

• Skip flaky test #​1810 (lukebakken)
• Address ObjectDisposedException #​1809 (lukebakken)
• Serialize sequence number as long #​1806 (lukebakken)

v7.1.1

Full Changelog

Implemented enhancements:

• Port IntAllocator from rabbitmq-java-client #​1786

Fixed bugs:

• Intermittent deadlock when closing a channel using CloseAsync in 7.x #​1751
• Bug in IntervalList causes leak in locks. #​1784

Merged pull requests:

• Fix handling when rate limit lease can't be acquired. #​1794 (lukebakken)
• Demonstrate handling of Channel.Close #​1791 (lukebakken)
• Port IntAllocator from rabbitmq-java-client #​1790 (lukebakken)
• Fix bug in IntervalList #​1785 (lukebakken)

v7.1.0

Full Changelog

Fixed bugs:

• Intermittent deadlock when closing a channel using CloseAsync in 7.x #​1751
• ObjectDisposedException when connection is closed from the server #​1760
• Disposing Connection after closing it with timeout causes deadlock #​1759
• ObjectDisposedException when connection is closed from the server #​1760
• Disposing Connection after closing it with timeout causes deadlock #​1759
• Intermittent deadlock when closing a channel using CloseAsync in 7.x #​1751
• Connection Recovery is triggered without the old connection being closed #​1767
• Cancelling ModelSendAsync can close the connection when it shouldn't #​1750
• ObjectDisposedException when channel is closed by RabbitMQ due to a channel exception #​1749

Merged pull requests:

• Fix rare deadlock, second try #​1782 (lukebakken)
• Fix #​1777 #​1781 (lukebakken)
• Create cancellation token from timeout #​1775 (lukebakken)
• Allow setting heartbeat timeout to TimeSpan.Zero #​1773 (lukebakken)
• Track down ObjectDisposedExceptions #​1772 (lukebakken)
• Fix very rare deadlock #​1771 (lukebakken)
• Fix typos #​1770 (sungam3r)
• Remove whitespaces from csproj files #​1768 (sungam3r)
• Misc items #​1766 (lukebakken)
• Ensure broker-originated channel closure completes #​1764 (lukebakken)
• Update copyright year to 2025 #​1755 (lukebakken)
• Handle OperationCanceledException in RPC continuations #​1753 (lukebakken)
• Update NuGet packages #​1748 (lukebakken)
• Set TestTfmsInParallel to false for Integration tests #​1745 (lukebakken)
• Toxiproxy manager change #​1744 (lukebakken)
• Address flaky integration tests #​1742 (lukebakken)
• Simplify preprocessor directives #​1741 (danielmarbach)
• chore: bump regular System.Text.RegularExpressions due to a known CVE in earlier versions #​1735 (aygalinc)
• More updates for the current OTel (OpenTelemetry) conventions #​1717 (iinuwa)

Closed issues:

• Throw exception during CreateConnectionAsync in case of wrong credentials #​1777
• Exception when disabling heartbeat with v7 #​1756
• Throw exception during CreateConnectionAsync in case of wrong credentials #​1777
• Exception when disabling heartbeat with v7 #​1756
• IChannel thread safety #​1722

Implemented enhancements:

• Single Active consumer #​1723
• OpenTelemetry: Update messaging.operation span attribute to latest OTel Semantic Conventions #​1715
• 7.0 release checklist / misc items #​1413

v7.0.0

Full Changelog

Merged pull requests:

• 7.0.0 CHANGELOG #​1719 (lukebakken)
• Fix build warnings in API #​1718 (lukebakken)
• Change OTel attribute messaging.operation to messaging.operation.type #​1716 (iinuwa)
• Throw when lease not acquired. This can happen then the rate limiter doesn't allow queuing or is generally wrongly configured #​1714 (danielmarbach)

Merged pull requests:

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

Commands to ignore dependencies

You can trigger dependency actions by commenting on this PR:

• @particularbot ignore this major version
• @particularbot ignore this minor version
• @particularbot ignore this dependency