pypi / kombu
kombu
What changed in kombu 5, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-25.
2 breaking1 security4 new APIs and options1 performance3 behavior and defaults10 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initkombu 521 changes
Breaking changes 2
MongoDB URI options are lowercase and flattened, so settings such as replicaSet=test_rs appear as options['replicaset'].
UTC datetimes are now timezone-aware, using datetime.now(timezone.utc) instead of datetime.utcnow().
Security 1
AWS SSL transport validates secure connections.
New APIs and options 4
Adds support for credential_provider with the Redis broker.
QoS accepts an optional max_prefetch parameter to cap how many messages workers hold in memory; it defaults to unlimited (None).
Adds sts_token_buffer_time to SQS transport options.
SQS queue tags can be set in the initial boto3.sqs.create_queue call via transport_options.
Performance 1
Removes a nested query from SQLAlchemy _size.
Behavior and default changes 3
Fixes the default value for SQS receive message.
Redis transport, including Sentinel, propagates the client_name connection parameter so connections appear with meaningful names in monitoring tools.
SQS support for receiving message attributes is enhanced, and string message bodies are allowed.
Fixes and other changes 10
Improves error handling during ack deadline extension.
Fixes credential_provider compatibility with redis versions below 5.3.0.
Passes ACL credentials to master_for() when using SentinelChannel.
Closing the hub now also removes the global event loop reference.
Redis transport now propagates brpop_timeout from transport_options to the Channel's _brpop_start timeout.
Fixes body bytes encoding in curl.py.
Pidbox queues work on RabbitMQ 4.x brokers that reject transient, non-exclusive queues.
Redis transport now propagates polling_interval from transport_options to the Channel's _brpop_start timeout.
Restores compatibility with recent gevent releases that monkey-patch the standard library queue.
When redelivering an SQS message, visibility timeout is applied based on wait_time_seconds (long polling time).