26.3 Stable Backport of #105222: Upgrade librdkafka to version 2.14.1

[zvonand]

Backport ClickHouse#105222 to 26.3: Update submodule

Changelog category (leave one):

• Build/Testing/Packaging Improvement

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):

Upgrade librdkafka to version 2.14.1 (ClickHouse#105222 by @antaljanosbenjamin)

Documentation entry for user-facing changes

...

CI/CD Options

Exclude tests:

• Fast test
• Integration Tests
• Stateless tests
• Stateful tests
• Performance tests
• Aarch64 tests
• All with ASAN
• All with TSAN
• All with MSAN
• All with UBSAN
• All with Coverage
• All Regression
• Disable CI Cache

Regression jobs to run:

• Fast suites (mostly <1h)
• Aggregate Functions (2h)
• Alter (1.5h)
• Benchmark (30m)
• ClickHouse Keeper (1h)
• Iceberg (2h)
• LDAP (1h)
• OAuth (5m)
• Parquet (1.5h)
• RBAC (1.5h)
• SSL Server (1h)
• S3 (2h)
• S3 Export (2h)
• Swarms (30m)
• Tiered Storage (2h)

[github-actions]

Workflow [PR], commit [6a89a5b]

[alsugiliazova]

Regression run https://github.com/Altinity/clickhouse-regression/actions/runs/27957492289

[alsugiliazova]

PR #1924 CI Triage Report

---

Verdict

Zero test regressions caused by this PR. Every failing check is the consequence of the PR's own CI configuration excluding aarch64/arm builds while leaving jobs that depend on those builds scheduled.

---

Diff scope

• contrib/librdkafka — submodule bump to v2.14.1
• tests/integration/test_kafka_bad_messages/test_1.py — 1 line change

Total: +2 / −2 across 2 files.

---

Failing checks — all infra/config, none test-caused

Check	Root cause
RegressionTestsAarch64 / Iceberg (1) / Iceberg (2)	Missing build_arm_binary/artifact_report_build_arm_binary.json (arm build skipped via PR ci_exclude_aarch64|arm)
RegressionTestsAarch64 / Parquet	Same — missing arm_binary build report
RegressionTestsAarch64 / ParquetS3 (minio) / ParquetS3 (aws_s3)	Same
RegressionTestsAarch64 / S3Export (part) / S3Export (partition)	Same
RegressionTestsAarch64 / Swarms	Same
Docker server image / Docker keeper image	AssertionError: URLS has not been read from build report — needs arm_release build that was skipped
SQLLogic test	S3 object not found: .../build_arm_release/clickhouse — needs arm_release build
DCO	ACTION_REQUIRED — sign-off missing on commits

Representative error messages

RegressionTestsAarch64 jobs:

AssertionError: Failed to get build report from
https://altinity-build-artifacts.s3.amazonaws.com/PRs/1924/6a89a5b5b1a4af872c24604ed4f39b1d6e26e678/build_arm_binary/artifact_report_build_arm_binary.json
<Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

SQLLogic test (Start ClickHouse step):

ERROR: S3 object not found: altinity-build-artifacts/PRs/1924/.../build_arm_release/clickhouse
chmod: cannot access '/home/ubuntu/_work/ClickHouse/ClickHouse/ci/tmp//clickhouse': No such file or directory

Docker server/keeper image:

AssertionError: URLS has not been read from build report
ERROR: Job killed, exit code [1]  - set status to [error].

---

Why these jobs failed

The PR body sets ci_exclude_aarch64|arm (and the asan/tsan/msan/ubsan/coverage exclusions). The Config Workflow's filtered_jobs confirms all arm builds were skipped:

"Build (arm_asan)":    "Skipped, job name includes excluded tag 'arm'"
"Build (arm_binary)":  "Skipped, job name includes excluded tag 'arm'"
"Build (arm_tsan)":    "Skipped, job name includes excluded tag 'arm'"
"Build (arm_release)": "Skipped, job name includes excluded tag 'arm'"

However, the PR still requested the following regression jobs to run:

ci_regression_iceberg, ci_regression_oauth, ci_regression_parquet,
ci_regression_s3_export, ci_regression_swarms

All of these regression suites run as RegressionTestsAarch64 / ... and need the build_arm_binary artifact. Likewise, Docker server/keeper image jobs produce multi-arch manifests and SQLLogic test runs on arm-release — all depend on the skipped arm builds.

---

Recommendations

1. Author action — Fix CI config: Either
   • Uncheck ci_exclude_aarch64|arm in the PR body so arm builds run and feed the Aarch64 regression / Docker / SQLLogic jobs, or
   • Also uncheck the requested regression suites (ci_regression_iceberg, oauth, parquet, s3_export, swarms) and skip the Docker/SQLLogic checks that need arm artifacts.
2. Author action — DCO: Sign off the commits to clear the DCO check.
3. No further test investigation needed. The librdkafka 2.14.1 backport itself passed every test that ran (Stateless, Integration including test_kafka_bad_messages, AST fuzzer, BuzzHouse, Stress, Compatibility). The CI failures are entirely caused by the PR's own opt-outs, not by the code change.

---