[deps]: Update RabbitMQ.Client to 7.2.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
RabbitMQ.Client (source)	7.1.2 → 7.2.1

---

Release Notes

rabbitmq/rabbitmq-dotnet-client (RabbitMQ.Client)

v7.2.1

Full Changelog

Fixed bugs:

• The Channel has been closed exception from HeartBeatReadCallback #​1884
• Publisher confirms: _confirmSemaphore broken by cancelled CancellationToken allows concurrent access, corrupts _nextPublishSeqNo; #​1900
• Auto-recovery attempts to restore bindings to deleted queues causing recovery failures #​1905

Closed issues:

• Closing Channel does NOT remove the cached RecordedBinding, which will cause AutoRecovery fail #​1904

Merged pull requests:

• Catch all exceptions in HeartbeatWriteTimerCallback and HeartbeatReadTimerCallback to avoid crash #​1876 (klettier)
• Add 'contents: read' to workflow permissions to increase the OpenSSF scorecard of the repo #​1880 (pavlofilatov1)
• Added TryComplete instead of comple during channel shutdown #​1885 (patriktiain)
• Update GHA via actions-up #​1886 (lukebakken)
• Add workflow to check for GHA updates #​1887 (lukebakken)
• Use dependabot to update actions refs #​1896 (lukebakken)
• Bump actions/checkout from 6.0.1 to 6.0.2 #​1897 (app/dependabot)
• Bump github/codeql-action from 3 to 4 #​1898 (app/dependabot)
• Bump actions/cache from 5.0.2 to 5.0.3 #​1899 (app/dependabot)
• Fix unconditional semaphore release in BasicPublishAsync when Cancell… #​1901 (EvheniyHlushko)
• Connection recovery: remove recorded bindings of auto-delete entities #​1906 (michaelklishin)
• Pre-7.2.1 release preparation #​1909 (lukebakken)

v7.2.0

Full Changelog

Implemented enhancements:

• Add support for SslStreamCertificateContext in SslOption #​1864
• Consider including MessageId tag in RabbitMQActivitySource during BasicPublish #​1849
• Consider allowing to set remote span as parent instead of link when propagating context via RabbitMQ #​1666
• Make ConnectionFactory a real Factory pattern #​1844
• Release an abstractions package #​1833
• Replace IReadOnlyBasicProperties, IAmqpHeader generic type constraints in IChannel.BasicPublishAsync() with a single interface constraint. #​1813

Fixed bugs:

• ObjectDisposedException from MaybeHandlePublisherConfirmationTcsOnChannelShutdownAsync closing connection when CloseChannel Continuation is cancelled #​1865
• Possible connection leak when trying to create first connection #​1856
• Semaphore exception when publishing with confirmation #​1818
• Cancellation token not canceled in AsyncEventingBasicConsumer.ReceivedAsync #​1787
• Event handlers for Channel.ChannelShutdownAsync and Consumer.ShutdownAsync are all called on the last registration? #​1837
• Exception details lost when using async API #​1831
• Recovery loop is not cancelled on connection dispose #​1825
• Memory leak in Connection SharedArraypool #​1817
• AutorecoveringConnection Memory Leak #​1808

Closed issues:

• Ship public API changes #​1834
• Update v7 migration guide #​1724
• IConnectionFactory does not contain properties that are present in the class and are needed to correctly configure the connection. #​1836
• Unexpected AMQP close-reason, initiated by Peer, code=504, text='CHANNEL_ERROR - expected 'channel.open' #​1835
• Ship RabbitMQ.Client.OAuth2 2.0.0 #​1727

Merged pull requests:

• Prepare PublicAPI for next release #​1874 (lukebakken)
• Do not handle publisher confirms when disposed #​1873 (lukebakken)
• Bump versions #​1872 (lukebakken)
• Added option to specify ClientCertificateContext in .NET 8+ #​1866 (tyb-dev)
• fix: prevent possible connection leak in AutorecoveringConnection during creation #​1857 (krisz2000)
• Closes#1849: include a message id tag in rabbitmqactivitysource for published messages #​1852 (YayBurritos)
• Ensure Connection and Channel cancellation token properly float into handlers #​1740 (danielmarbach)
• Improve AsyncManualResetEvent implementation to address races #​1843 (danielmarbach)
• Pin .NET SDK versions for CI/CD runs #​1842 (danielmarbach)
• Cancel recovery CTS on connection Dispose #​1839 (AndreReise)
• Prevent downstream dependencies to pickup MinVer as a depencency #​1838 (romerod)
• Add dedicated exception for basic.return messages. #​1832 (lukebakken)
• Investigate & fix SemaphoreFullException #​1819 (lukebakken)
• Allow parent/child relationship in Opentelemetry spans #​1779 (meum)

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-28724
• Link: https://bitwarden.atlassian.net/browse/PM-28724

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.45%. Comparing base (0ad7a10) to head (64c0f6c).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #6633   +/-   ##
=======================================
  Coverage   57.45%   57.45%           
=======================================
  Files        2032     2032           
  Lines       89415    89415           
  Branches     7951     7951           
=======================================
+ Hits        51369    51370    +1     
+ Misses      36203    36202    -1     
  Partials     1843     1843           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.