confluentinc/confluent-kafka-python v2.16.1

on GitHub

Fixes

• Require certifi>=2026.10.19 for the Schema Registry client. When
  ssl.ca.location is not set (and the SSL_CERT_FILE and SSL_CERT_DIR
  environment variables are not set), the client verifies Schema Registry
  certificates against the certifi CA bundle, and earlier certifi releases
  still trust the eMudhra root whose intermediate CA keys were compromised
  (details). This update does not change custom trust stores configured through ssl.ca.location, SSL_CERT_FILE or SSL_CERT_DIR.
• Fix MetadataTags.__hash__ raising TypeError on unhashable list values so schemas with metadata.tags can be cached (#2385)
• Fix TopicPartition string formatting showing %I32d instead of the partition number on Windows (#2374)

confluent-kafka-python 2.16.1 is based on librdkafka 2.16.0, see the
librdkafka release notes
for a complete list of changes, enhancements, fixes and upgrade considerations.