CORE-2055: updated dependencies and switched to a new AMQP client lib…

[slr71]

…rary

https://github.com/streadway/amqp is no longer maintained, and a new fork has been created at https://github.com/rabbitmq/amqp091-go. The primary purpose of this change is to switch to the new library. While I was making changes, I also updated other dependencies.

Note: this does introduce a breaking change. QueueInspect method is deprecated, and the suggestion is to call QueueDeclarePassive instead. Unfortunately, QueueDeclarePassive requires more parameters, and I changed the function signature in order to add the relevant parameters.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	go.opentelemetry.io/​otel@​v1.35.0 ⏵ v1.36.0	+1
	github.com/​rabbitmq/​amqp091-go@​v1.10.0
	go.opentelemetry.io/​otel/​trace@​v1.35.0 ⏵ v1.36.0	+1

View full report

[ianmcorvidae]

Looks good to me.

Took a bit for me to understand the QueueInspect vs. QueueDeclarePassive thing, so linking the reasoning from the upstream library a bit: rabbitmq/amqp091-go#167 and rabbitmq/amqp091-go#165 -- it looks like since QueueInspect assumed no special parameters it would fail on some queues that set those parameters. Once adding support for those parameters it's exactly identical to QueueDeclarePassive, so all seems well with these changes!

I'm not sure how much of a pain it'll be to update services using this. Hopefully not too bad or at least hopefully mostly just updating the imports. I suppose one way or another we'll see.

[slr71]

Thanks for the review and for the links! Yeah, I'm hoping that migrating to the new function signature won't be too painful.