chore(deps): bump the benthos group across 1 directory with 2 updates

[dependabot]

Bumps the benthos group with 2 updates in the /collector directory: github.com/redpanda-data/benthos/v4 and github.com/redpanda-data/connect/public/bundle/free/v4.

Updates github.com/redpanda-data/benthos/v4 from 4.77.0 to 4.78.0

Changelog

Sourced from github.com/redpanda-data/benthos/v4's changelog.

4.78.0 - 2026-08-20

Added

• Input websocket: Added a max_message_size field that bounds the size of individual inbound messages via the underlying connection's read limit. (@​prakhargarg105)

Fixed

• Input file: The known file size is now passed to the scanner as a hint, allowing the to_the_end scanner to pre-allocate its read buffer instead of growing it repeatedly via io.ReadAll. This avoids the transient double-buffering that previously made peak memory roughly twice the file size when reading a whole file (measured ~59% fewer bytes allocated, and 36 allocations down to 2, for a 64 MiB file). The size is treated purely as a hint and never affects the bytes returned: sources of unknown size retain the exact io.ReadAll behaviour, pre-allocation from a hint is capped at 128 MiB to guard against wildly wrong sizes, a hint that overestimates the content does not pin the excess capacity for the message's lifetime, and the decompress scanner strips the hint before it reaches its child, as it describes the compressed stream. Deprecated string codec configs are unaffected. (@​rockdatasrl001)

Commits

• 8791a12 chore: bump changelog (#480)
• 95d2a32 fix(scanner): pre-size the to_the_end read buffer from a source size … (#478)
• 8547dfb websocket: add a max_message_size read limit to the input (#479)
• 2653a0d chore: bump to Go 1.26.6- #4707 (#477)
• 70c0dfc cl: update changelog (#466)
• See full diff in compare view

Updates github.com/redpanda-data/connect/public/bundle/free/v4 from 4.105.0 to 4.106.0

Release notes

Sourced from github.com/redpanda-data/connect/public/bundle/free/v4's releases.

v4.106.0

For installation instructions check out the getting started guide.

Added

• salesforce_cdc: Added decode-failure bounds and classification of schema-fetch errors (deterministic vs transient) to prevent infinite retry loops and livelocks, with terminal failures surfaced clearly to the health check. (@​squiidz, #4689)
• mongodb, mongodb_cdc: Added AWS IAM authentication (MONGODB-AWS) for MongoDB Atlas to the mongodb input, output, processor and cache, and to the mongodb_cdc input, via a new aws configuration block supporting the ambient credential chain, static keys, and assume-role chaining. (@​squiidz, #4690)
• mongodb_cdc: The input now checkpoints as soon as the initial snapshot completes and is fully acknowledged, so restarts resume the stream instead of re-running the snapshot; a stream position that can no longer be resumed from (for example one that has aged out of the oplog) is recovered by re-running the snapshot, bounded by a breaker that fails loudly instead of churning, with a new on_unresumable_position field controlling the lossy no-snapshot case (default fail) and a new checkpoint_write_timeout field bounding the detached checkpoint writes (the post-snapshot store and the recovery clear). (@​squiidz, #4690)

Fixed

• aws_dynamodb_cdc: Fixed silent data loss in snapshot handling by gating checkpoint persistence on downstream acknowledgments, ensuring rejected batches are redelivered instead of skipped. (@​squiidz, #4687)
• aws_dynamodb_cdc: Fixed stream rotation and restart scenarios where start_from: latest was incorrectly applied to child shards and checkpoint-less shards discovered after initial setup, causing silent loss of backlog. (@​squiidz, #4687)
• cockroachdb_changefeed: Fixed unbounded silent data loss where transaction rows and backfill batches sharing timestamps could skip data on restart; now checkpoints only persist resolved timestamps to guarantee no loss. (@​squiidz, #4688)
• salesforce_cdc: Fixed multiple silent-loss paths in Pub/Sub gRPC handling and ack functions: full buffer now applies backpressure instead of dropping events, schema/decode failures reconnect without losing batches, and nacks now pin checkpoints. (@​squiidz, #4689)
• salesforce_cdc: Fixed off-by-one error in schema-retry budgeting and credential refresh in unanchored schema retries to prevent indefinite stalls under the default unlimited reconnect policy. (@​squiidz, #4689)

Changed

• aws_dynamodb_cdc: Added auto_replay_nacks support to automatically retry transient downstream failures in-process, with nacks now advancing checkpoints when auto_replay_nacks is disabled. (@​squiidz, #4687)
• cockroachdb_changefeed: Changed nack handling to advance cursors when auto_replay_nacks is disabled, treating it as an opt-in to drop rejected messages per the framework contract. (@​squiidz, #4688)
• general: Updated CDC connector documentation across Microsoft SQL Server, MongoDB, and OracleDB with measured performance characteristics, scaling limitations, and configuration guidance based on real-world benchmarking. (@​prakhargarg105, #4691)

The full change log can be found here.

Changelog

Sourced from github.com/redpanda-data/connect/public/bundle/free/v4's changelog.

4.106.0 - 2026-08-20

Added

• salesforce_cdc: Added decode-failure bounds and classification of schema-fetch errors (deterministic vs transient) to prevent infinite retry loops and livelocks, with terminal failures surfaced clearly to the health check. (@​squiidz, #4689)
• mongodb, mongodb_cdc: Added AWS IAM authentication (MONGODB-AWS) for MongoDB Atlas to the mongodb input, output, processor and cache, and to the mongodb_cdc input, via a new aws configuration block supporting the ambient credential chain, static keys, and assume-role chaining. (@​squiidz, #4690)
• mongodb_cdc: The input now checkpoints as soon as the initial snapshot completes and is fully acknowledged, so restarts resume the stream instead of re-running the snapshot; a stream position that can no longer be resumed from (for example one that has aged out of the oplog) is recovered by re-running the snapshot, bounded by a breaker that fails loudly instead of churning, with a new on_unresumable_position field controlling the lossy no-snapshot case (default fail) and a new checkpoint_write_timeout field bounding the detached checkpoint writes (the post-snapshot store and the recovery clear). (@​squiidz, #4690)

Fixed

• aws_dynamodb_cdc: Fixed silent data loss in snapshot handling by gating checkpoint persistence on downstream acknowledgments, ensuring rejected batches are redelivered instead of skipped. (@​squiidz, #4687)
• aws_dynamodb_cdc: Fixed stream rotation and restart scenarios where start_from: latest was incorrectly applied to child shards and checkpoint-less shards discovered after initial setup, causing silent loss of backlog. (@​squiidz, #4687)
• cockroachdb_changefeed: Fixed unbounded silent data loss where transaction rows and backfill batches sharing timestamps could skip data on restart; now checkpoints only persist resolved timestamps to guarantee no loss. (@​squiidz, #4688)
• salesforce_cdc: Fixed multiple silent-loss paths in Pub/Sub gRPC handling and ack functions: full buffer now applies backpressure instead of dropping events, schema/decode failures reconnect without losing batches, and nacks now pin checkpoints. (@​squiidz, #4689)
• salesforce_cdc: Fixed off-by-one error in schema-retry budgeting and credential refresh in unanchored schema retries to prevent indefinite stalls under the default unlimited reconnect policy. (@​squiidz, #4689)

Changed

• aws_dynamodb_cdc: Added auto_replay_nacks support to automatically retry transient downstream failures in-process, with nacks now advancing checkpoints when auto_replay_nacks is disabled. (@​squiidz, #4687)
• cockroachdb_changefeed: Changed nack handling to advance cursors when auto_replay_nacks is disabled, treating it as an opt-in to drop rejected messages per the framework contract. (@​squiidz, #4688)
• general: Updated CDC connector documentation across Microsoft SQL Server, MongoDB, and OracleDB with measured performance characteristics, scaling limitations, and configuration guidance based on real-world benchmarking. (@​prakhargarg105, #4691)

Commits

• 2b1d3c8 Update changelog for v4.106.0 (#4714)
• f804913 chore: bump benthos to v4.78.0 (#4715)
• dca40a5 mongodb: add AWS IAM authentication (MONGODB-AWS) for Atlas (#4690)
• a7c0d6e salesforce_cdc: apply backpressure instead of dropping events on full buffer ...
• 1e58f98 aws_dynamodb_cdc: ack-gate snapshot checkpoints and fix shard start_from hand...
• 04fde5b chore: bump to Go 1.26.6 (#4707)
• abcc75c cockroachdb_changefeed: checkpoint on RESOLVED timestamps (CON-504) (#4688)
• 97153bf docs: correct CDC connector docs with measured behavior from benchmarking (#4...
• 78161cc chore: update bundle dependencies for v4.105.0 (#4700)
• See full diff in compare view

[turip]

@dependabot rebase

[turip]

Approved: Benthos and Redpanda Connect updates with the resolved Go module metadata; latest CI is green.