Made the conditions for enabling the features future proof, allowing to
remove RPC versions in a subsequent major Apache Kafka version without disabling
features. The existing checks were matching a single version instead of
a range and were failing if the older version was removed.
Happening since 1.x

Use `rd_kafka_ssl_probe_and_set_default_ca_location`  and set same CA search policy as Kafka SSL.

- on Windows try to load from certificate store or fallback to paths in case using msys2.
- on macOS use `probe` by default.
- on Linux use `probe` when configured, check default path for dynamic linked OpenSSL or fallback to `probe` when statically linked.


---------

Co-authored-by: Emanuele Sabellico <esabellico@confluent.io>

support for `jwt-bearer` grant type as mandated by the KIP.


---------

Co-authored-by: Emanuele Sabellico <esabellico@confluent.io>

* [KIP-848] Tests for ListGroups filter to list only given group types
* Fix doxygen tags order
* Improve ' test_ListConsumerGroups_helper' documentation

---------

Co-authored-by: mahajanadhitya <amahajan@confluent.io>

local tests to check a previous segfault is avoided with fast subscribe/unsubscribe changes.

Features `BROKER_BALANCED_CONSUMER` and `SASL_GSSAPI` don't depend on `JoinGroup v0` anymore (#5131)

`JoinGroup v0`  was removed in AK 4.0 and CP 8.0

When member is leaving with -2 a new member that is joining can replace the previous member id with the new one. If previous member didn't leave the new member joining with same group.instance.id is fenced in new protocol.

A data race happened when emptying buffers of a failing broker, in its thread,
with the statistics callback in main thread gathering the buffer counts.
Solved by resetting the atomic counters instead of initializing them.
Happening since 1.x

Closes #4522

[KIP-848] Fixed not adhering to HB interval when auto commit interval was less than HB interval (#5114)

* [KIP-8484] Mock tests specific for the new consumer group protocol
* Expedite HB only after coordinator actually changes
  Expedite coordinator query when there's a
  DESTROY_BROKER error.
* Flaky test 0067 fix

* Fix for devel assert "rkq->rkq_ts_last_poll_end >= rkq->rkq_ts_last_poll_start" in test 0056.

Partition queues can be not forwarded to the main poll queue so these timestamps must be per-queue instead of per-instance. We avoid checking if app polled should be called in case of internal poll calls where we're sure it's not a consume call, we also avoid checking it if "app polled" was already called by a dedicated consume function.

* Makefile: bash is required for LICENSES.txt
* Conditionally use the older or the newer CURLOPT

CURLOPT_PROTOCOLS_STR is available since CURL 7.85.0

* Failing test
* Fixes #5103

* Failing test
* Fixes #5102

Otherwise a NULL payload isn't accepted by the protocol and is causing a disconnection at every push interval

* Add failing test

* Fix producev(a) issue where topic metadata is queried for late

* Add changelog

* Fix compilation issues for older c stds

* Fix style check

* Address comments - part 1

* Address comments - part 2

* Address comments - part 3

* Address comments - Part 4

* Param tag fix

in case the client reaches the all brokers down state.

The client continue to select the bootstrap brokers given they have no connection and doesn't re-connect to the learned ones. Fixed by giving a chance to connect to the learned brokers even if there are new ones that never tried to connect.

Closes #5088

Handle the case where the bootstrap servers are NULL when re-bootstrapping:

Fix ubsan: call to function rd_kafka_topic_info_destroy through pointer to incorrect function type

Avoid NULL pointer dereference when rebootstrapping
given no `boostrap.servers` is present and brokers were added through `rd_kafka_brokers_add`

Closes #5057

---------

Co-authored-by: Marcin Krystianc <marcin.krystianc@gmail.com>

this avoids frequent dependency bot commits.

change define position to avoid conflicting auto-format