fix(deps): update dependency com.rabbitmq:amqp-client to v5.33.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.rabbitmq:amqp-client (source)	5.32.0 → 5.33.0

---

Release Notes

rabbitmq/rabbitmq-java-client (com.rabbitmq:amqp-client)

v5.33.0: 5.33.0

Changes between 5.32.0 and 5.33.0

This is a maintenance release with bug fixes and dependency upgrades. It introduces minor breaking changes compared to 5.32.0 (see below for details). All users are encouraged to upgrade.

The RabbitMQ team normally maintain strict backward compatibility in minor versions. However, this release includes exceptional breaking changes that were necessary to patch security gaps and enforce secure-by-default behavior.

Breaking changes:

• Hostname verification is now enabled by default as soon as TLS is used.
• ConnectionFactory#useSslProtocol() now utilizes the JVM's default SSLContext, which validates the server certificate.
  • Note: This should primarily affect test environments, as useSslProtocol() was never intended for production use.
  • Action required: For test or development environments where certificate validation needs to be disabled, users can now explicitly switch to the new ConnectionFactory#useTlsWithNoVerification() method.
• JSON-RPC support classes now introduce an "allowlist". This change only impacts installations that explicitly utilize these classes.

Harden RPC support classes

GitHub PR: #​2002

Enable hostname verification by default

GitHub issue: #​2005

Introduce helper for dev/test TLS setup

GitHub PR: #​2001

Enforce inbound frame max more strictly

GitHub PRs: #​1995 #​1998

Bump dependencies

GitHub issue: #​1991

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.33.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.33.0'

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 44.43%. Comparing base (8d9eff2) to head (45139d1).

❌ Your project check has failed because the head coverage (2.89%) is below the target coverage (80.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #6557      +/-   ##
============================================
- Coverage     44.44%   44.43%   -0.01%     
+ Complexity     7516     7515       -1     
============================================
  Files          2315     2315              
  Lines         64238    64238              
  Branches       8543     8543              
============================================
- Hits          28548    28544       -4     
- Misses        33867    33870       +3     
- Partials       1823     1824       +1     

Flag	Coverage Δ
backend	66.84% <ø> (-0.02%)	⬇️
e2e	18.51% <ø> (+0.13%)	⬆️
frontend	2.89% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.