SIGN IN SIGN UP

build(deps): bump the dependencies group across 2 directories with 13 updates (#9124)

Bumps the dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger)
| `4.9.5` | `4.9.6` |
|
[github.com/huandu/go-sqlbuilder](https://github.com/huandu/go-sqlbuilder)
| `1.42.1` | `1.43.0` |
| [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) |
`3.1.1` | `3.2.0` |
|
[github.com/santhosh-tekuri/jsonschema/v6](https://github.com/santhosh-tekuri/jsonschema)
| `6.0.2` | `6.0.3` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) |
`1.9.4` | `1.10.1` |
| [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.4` |
`3.0.5` |
| [golang.org/x/text](https://github.com/golang/text) | `0.40.0` |
`0.41.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.0` |
`1.83.1` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |

Bumps the dependencies group with 5 updates in the /e2e directory:

| Package | From | To |
| --- | --- | --- |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |
|
[github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb)
| `1.10.0` | `1.11.0` |
|
[github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal)
| `1.15.0` | `1.16.0` |
|
[github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go)
| `0.43.0` | `0.44.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.55.0` |
`1.57.0` |


Updates `github.com/dgraph-io/badger/v4` from 4.9.5 to 4.9.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dgraph-io/badger/releases">github.com/dgraph-io/badger/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.9.6</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(compaction): restore size-ratio base level selection, clamped to
the first non-empty level by <a
href="https://github.com/shiva-istari"><code>@​shiva-istari</code></a>
in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2330">dgraph-io/badger#2330</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dgraph-io/badger/compare/v4.9.5...v4.9.6">https://github.com/dgraph-io/badger/compare/v4.9.5...v4.9.6</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dgraph-io/badger/commit/fbd8d2eefad8be8757249767255faf989945b599"><code>fbd8d2e</code></a>
fix(compaction): restore size-ratio base level selection, clamped to the
firs...</li>
<li>See full diff in <a
href="https://github.com/dgraph-io/badger/compare/v4.9.5...v4.9.6">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/huandu/go-sqlbuilder` from 1.42.1 to 1.43.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/huandu/go-sqlbuilder/releases">github.com/huandu/go-sqlbuilder's
releases</a>.</em></p>
<blockquote>
<h2>v1.43.0</h2>
<h2>What's Changed</h2>
<ul>
<li><code>[FIX]</code> Interpolate: keep ClickHouse whole-number floats
and non-finite values typed correctly by <a
href="https://github.com/youdie006"><code>@​youdie006</code></a> in <a
href="https://redirect.github.com/huandu/go-sqlbuilder/issues/244">#244</a></li>
<li><code>[FIX]</code> Escape ANSI interpolation string literals in <a
href="https://redirect.github.com/huandu/go-sqlbuilder/issues/246">#246</a></li>
<li><code>[FIX]</code> Escape identifier delimiters in Flavor.Quote in
<a
href="https://redirect.github.com/huandu/go-sqlbuilder/issues/245">#245</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/youdie006"><code>@​youdie006</code></a>
made their first contribution in <a
href="https://redirect.github.com/huandu/go-sqlbuilder/issues/244">#244</a></li>
<li><a
href="https://github.com/KrisKennawayDD"><code>@​KrisKennawayDD</code></a>
addressed two CVE issues</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/huandu/go-sqlbuilder/compare/v1.42.0...v1.43.0">https://github.com/huandu/go-sqlbuilder/compare/v1.42.0...v1.43.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/huandu/go-sqlbuilder/commit/1136e4bde200756487cd29c250a956d97a1877cc"><code>1136e4b</code></a>
Merge fix: escape identifier delimiters in Flavor.Quote</li>
<li><a
href="https://github.com/huandu/go-sqlbuilder/commit/89526352f82e1e6d57081ee7286b92a308538dcc"><code>8952635</code></a>
Merge fix: escape ANSI interpolation string literals</li>
<li><a
href="https://github.com/huandu/go-sqlbuilder/commit/ef74ab18a43b81c385add2a9018b9dfde79f5724"><code>ef74ab1</code></a>
fix: escape identifier delimiters in Flavor.Quote</li>
<li><a
href="https://github.com/huandu/go-sqlbuilder/commit/08b3bf51eaf2c12869f49643dea61527b3fd0eaa"><code>08b3bf5</code></a>
fix: escape ANSI interpolation string literals</li>
<li><a
href="https://github.com/huandu/go-sqlbuilder/commit/5136552f80657541618f3fe94624d31e54fb9c0e"><code>5136552</code></a>
Merge pull request <a
href="https://redirect.github.com/huandu/go-sqlbuilder/issues/244">#244</a>
from youdie006/fix/243-clickhouse-float-literal</li>
<li><a
href="https://github.com/huandu/go-sqlbuilder/commit/c94589a4a52717394bd92b0c46fad1328bd3924e"><code>c94589a</code></a>
Interpolate: keep ClickHouse whole-number floats and non-finite values
typed ...</li>
<li>See full diff in <a
href="https://github.com/huandu/go-sqlbuilder/compare/v1.42.1...v1.43.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/lestrrat-go/jwx/v3` from 3.1.1 to 3.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lestrrat-go/jwx/releases">github.com/lestrrat-go/jwx/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.2.0</h2>
<p>For more detailed release notes, see <a
href="https://github.com/lestrrat-go/jwx/blob/v3.2.0/Changes">Changes</a>.</p>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump github.com/lestrrat-go/dsig from 1.2.1 to 1.3.0 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2043">lestrrat-go/jwx#2043</a></li>
<li>build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2159">lestrrat-go/jwx#2159</a></li>
<li>build(deps): bump actions/stale from 10.2.0 to 10.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2174">lestrrat-go/jwx#2174</a></li>
<li>build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2179">lestrrat-go/jwx#2179</a></li>
<li>build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2180">lestrrat-go/jwx#2180</a></li>
<li>build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2184">lestrrat-go/jwx#2184</a></li>
<li>bump httprc to v3.0.6 by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2189">lestrrat-go/jwx#2189</a></li>
<li>autodoc updates by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2190">lestrrat-go/jwx#2190</a></li>
<li>build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2192">lestrrat-go/jwx#2192</a></li>
<li>build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2226">lestrrat-go/jwx#2226</a></li>
<li>build(deps): bump actions/cache from 5.0.5 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2231">lestrrat-go/jwx#2231</a></li>
<li>build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2230">lestrrat-go/jwx#2230</a></li>
<li>build(deps): bump actions/cache from 6.0.0 to 6.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2238">lestrrat-go/jwx#2238</a></li>
<li>build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2242">lestrrat-go/jwx#2242</a></li>
<li>fix misspellings in code comments by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2249">lestrrat-go/jwx#2249</a></li>
<li>build(deps): bump actions/stale from 10.3.0 to 10.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2254">lestrrat-go/jwx#2254</a></li>
<li>build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2250">lestrrat-go/jwx#2250</a></li>
<li>build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2258">lestrrat-go/jwx#2258</a></li>
<li>build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2261">lestrrat-go/jwx#2261</a></li>
<li>bump x/crypto to v0.54.0 in codegen modules by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2266">lestrrat-go/jwx#2266</a></li>
<li>[v3] retain unparseable JWK set keys, opt-in by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2265">lestrrat-go/jwx#2265</a></li>
<li>[v3] fix per-call reject-dup-kid override by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2270">lestrrat-go/jwx#2270</a></li>
<li>[v3] test jwe rejects UnsupportedKey placeholder by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2272">lestrrat-go/jwx#2272</a></li>
<li>[v3] doc: recommend retain mode for third-party JWK sets as PQC
rolls out by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2274">lestrrat-go/jwx#2274</a></li>
<li>fix jwe JSON AAD serialization by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2276">lestrrat-go/jwx#2276</a></li>
<li>add JWE authenticated data option by <a
href="https://github.com/lestrrat"><code>@​lestrrat</code></a> in <a
href="https://redirect.github.com/lestrrat-go/jwx/pull/2278">lestrrat-go/jwx#2278</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0">https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/lestrrat-go/jwx/blob/v3.2.0/Changes">github.com/lestrrat-go/jwx/v3's
changelog</a>.</em></p>
<blockquote>
<p>v3.2.0 27 Jul 2026</p>
<ul>
<li>
<p>[jwe] Correct the JSON <code>&quot;aad&quot;</code> member so it
contains only
BASE64URL of the external Additional Authenticated Data, rather than the
combined value used as the content-encryption AAD. Add
<code>jwe.WithAuthenticateData</code> for encrypting JSON JWEs with
external AAD;
the value is included in the shared AEAD input for all recipients, and
compact serialization rejects non-empty external AAD. (<a
href="https://redirect.github.com/lestrrat-go/jwx/issues/2276">#2276</a>,
<a
href="https://redirect.github.com/lestrrat-go/jwx/issues/2278">#2278</a>)</p>
</li>
<li>
<p>[jwk] Added opt-in retention of unparseable JWK Set entries. Passing
<code>jwk.WithStrictKeySetParsing(false)</code> to
<code>jwk.Parse</code> (or setting it
globally via <code>jwk.Configure</code>) keeps an entry whose key type
is not
understood — for example a post-quantum key published alongside
classical keys — as a <code>jwk.UnsupportedKey</code> placeholder
instead of
failing the whole set (RFC 7517 §5). The placeholder preserves the
entry's original JSON (marshaling round-trips losslessly) and the
parse error via <code>Reason()</code>; use
<code>jwk.IsUnsupportedKey</code> to detect one.
The default is unchanged: v3 still fails the whole set on the first
unparseable entry, so existing callers see no difference. The same
option exists in v4 with the opposite default (v4 retains by
default, v3 stays strict by default); call sites that pass the
option explicitly keep the same meaning across the v3→v4 migration.
Placeholders
are rejected by <code>jws</code>/<code>jwe</code> key selection,
<code>jwk.Export</code>,
<code>jwk.AssignKeyID</code>, and <code>jwk.PublicSetOf</code> (which
accepts a new
<code>jwk.WithOmitUnsupportedKeys(true)</code> to drop them). (<a
href="https://redirect.github.com/lestrrat-go/jwx/issues/2263">#2263</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/94006b67ebcf1d1a7ca7d59ffdf22e0957ca91b1"><code>94006b6</code></a>
release v3.2.0</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/04612cde3a69747109f9c84058c36a56e0dfdf2e"><code>04612cd</code></a>
Merge pull request <a
href="https://redirect.github.com/lestrrat-go/jwx/issues/2278">#2278</a>
from lestrrat-go/feat-v3-jwe-authenticated-data</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/cd553bef38370c2cbaac1964e3957b0ffee8f2ce"><code>cd553be</code></a>
Merge pull request <a
href="https://redirect.github.com/lestrrat-go/jwx/issues/2276">#2276</a>
from lestrrat-go/fix-v3-jwe-json-aad</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/f414ccf74d5a476690c895e3905697e01e057d99"><code>f414ccf</code></a>
add JWE Changes entry</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/73e36fbd4e5c2c3bf9b681812a15da62697a3121"><code>73e36fb</code></a>
add JWE authenticated data option</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/c937f0bdb96250f4a9127e8b45e2855d4240e3c3"><code>c937f0b</code></a>
fix jwe lint issue</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/513776810e8fb4816f78efc786f25f2ac9f0f855"><code>5137768</code></a>
fix jwe JSON AAD serialization</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/f55fa6a136a878765f94b69b62265bd619ebdcc7"><code>f55fa6a</code></a>
recommend opting into retain for third-party JWK sets with PQC keys (<a
href="https://redirect.github.com/lestrrat-go/jwx/issues/2274">#2274</a>)</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/701554ea8dc3ae579cef7bc2f6df51c7c42ade22"><code>701554e</code></a>
[v3] test jwe rejects UnsupportedKey placeholder (<a
href="https://redirect.github.com/lestrrat-go/jwx/issues/2272">#2272</a>)</li>
<li><a
href="https://github.com/lestrrat-go/jwx/commit/79ce4dbf89b8e174ce420b6e2db51ef29696093b"><code>79ce4db</code></a>
fix per-call reject-dup-kid override of global (<a
href="https://redirect.github.com/lestrrat-go/jwx/issues/2270">#2270</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/santhosh-tekuri/jsonschema/v6` from 6.0.2 to 6.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/santhosh-tekuri/jsonschema/releases">github.com/santhosh-tekuri/jsonschema/v6's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.3</h2>
<h2>bugfixes:</h2>
<ul>
<li>empty instLocation for propetyNames and contentSchema</li>
<li>fix intLocation for items and additionalItems validation</li>
<li>check invalid floats NaN/Inf</li>
<li>fix closing quote check in email validation</li>
<li>ensure both are numbers in equals validation</li>
</ul>
<h2>features</h2>
<ul>
<li>ef59f39: ref like property in custom vocab</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/b0fc661f4939578bc429f408c18202573dbafcc4"><code>b0fc661</code></a>
ci: upgrade golangci/golangci-lint-action from v4 to v6</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/3d8c98fc8f0deb2620f01ba22d5990c979150a1b"><code>3d8c98f</code></a>
ci: upgrade actions/setup-go from v3 to v6</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/b0cc7ab9578d4ceb1af061e44e0b2d404c51a40b"><code>b0cc7ab</code></a>
ci: upgrade actions/checkout from v3 to v7</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/4bdda8640a2dc1263ed1732081ee4835b43d5bea"><code>4bdda86</code></a>
validator/fix: empty instLocation for propetyNames and
contentSchema</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/833329db0d72627317932dba9d4893ea7b2fed5d"><code>833329d</code></a>
fix/typo: fix type in error message</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/180cde331debc44accf6ebd941e666732ecb0f8a"><code>180cde3</code></a>
misc: remove vim swap file (<a
href="https://redirect.github.com/santhosh-tekuri/jsonschema/issues/254">#254</a>)</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/1a20556dd00b5a44904dcbd829682d9acae52ece"><code>1a20556</code></a>
validator/items: fix instanceLocation</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/cfca0e321b701da4cef877445d4bada40e2ed744"><code>cfca0e3</code></a>
validator: check invalid floats NaN/Inf (<a
href="https://redirect.github.com/santhosh-tekuri/jsonschema/issues/249">#249</a>)</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/befd2c18b2f099ff9661665470e06cad75061ee4"><code>befd2c1</code></a>
validator/additionalItems: fix instanceLocation (<a
href="https://redirect.github.com/santhosh-tekuri/jsonschema/issues/253">#253</a>)</li>
<li><a
href="https://github.com/santhosh-tekuri/jsonschema/commit/dfcec1ce8b6c3060ff3e43277c0bc10b48707e16"><code>dfcec1c</code></a>
format/email: add closing quote check (<a
href="https://redirect.github.com/santhosh-tekuri/jsonschema/issues/251">#251</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/santhosh-tekuri/jsonschema/compare/v6.0.2...v6.0.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sirupsen/logrus/releases">github.com/sirupsen/logrus's
releases</a>.</em></p>
<blockquote>
<h2>v1.10.1</h2>
<h1>Logrus v1.10.1</h1>
<p>This patch release fixes two issues in field formatting and
handling:</p>
<ul>
<li>Fix a regression introduced in v1.10.0 where
<code>TextFormatter</code> could panic
when formatting nil or panicking <code>error</code> and
<code>fmt.Stringer</code> values.</li>
<li>Allow function-backed values implementing <code>error</code> to be
used with
<code>WithError</code>, <code>WithField</code>, and
<code>WithFields</code>.</li>
</ul>
<p>Dependency Changes</p>
<ul>
<li>update github.com/stretchr/testify to v1.12.0</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sirupsen/logrus/compare/v1.10.0...v1.10.1">https://github.com/sirupsen/logrus/compare/v1.10.0...v1.10.1</a></p>
<h2>v1.10.0</h2>
<h1>Logrus v1.10.0</h1>
<p>This release focuses on substantial performance improvements,
concurrency correctness, and better interoperability with modern Go
logging APIs.</p>
<h2>🚀 Performance</h2>
<p>Major improvements across <code>TextFormatter</code>, entry handling,
and common logger paths:</p>
<ul>
<li>~17% lower geomean runtime across the benchmark suite</li>
<li>~27% higher geomean formatter throughput</li>
<li>Common enabled logging paths are ~30–44% faster</li>
<li><code>WithError</code> is ~40% faster</li>
<li>Chained fields are ~46% faster</li>
<li><code>TextFormatter</code> paths are up to ~40% faster</li>
<li>Allocation counts are reduced by ~25–74% across measured
<code>TextFormatter</code> cases, with the largest reductions in colored
output</li>
</ul>
<p>The improvements also show up in complete logger paths:</p>
<ul>
<li>Logger + <code>TextFormatter</code> is ~31% faster, with ~24% fewer
allocations</li>
<li>Logger + <code>JSONFormatter</code> is ~21% faster, with ~10% fewer
allocations</li>
</ul>
<p><code>JSONFormatter</code> itself remains largely unchanged in
runtime performance, with small allocation reductions.</p>
<h2>🔄 <code>log/slog</code> interoperability</h2>
<p>v1.10 adds bidirectional interoperability between Logrus and Go's
<code>log/slog</code>:</p>
<ul>
<li>A Logrus <code>slog</code> hook can forward existing Logrus entries
to an <code>slog</code> logger.</li>
<li><code>hooks/slog.NewHandler</code> implements
<code>slog.Handler</code>, allowing <code>log/slog</code> records to use
an existing Logrus logger and its hooks, formatter, and output.</li>
<li>The handler preserves levels, fields, groups, context, record
timestamps, and optionally caller information.</li>
<li>Caller reporting is configured per handler, without requiring
Logrus's logger-wide <code>ReportCaller</code> option.</li>
<li>Custom <code>slog</code> levels can be mapped to Logrus levels.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md">github.com/sirupsen/logrus's
changelog</a>.</em></p>
<blockquote>
<h2>1.10.1</h2>
<p>Fixes:</p>
<ul>
<li>Fix a regression introduced in v1.10.0 where
<code>TextFormatter</code> could panic
when formatting nil or panicking <code>error</code> and
<code>fmt.Stringer</code> values.</li>
<li>Allow function-backed implementations of <code>error</code> as field
values.</li>
</ul>
<h2>1.10.0</h2>
<p>Fixes:</p>
<ul>
<li>Fix reentrant logging deadlocks in formatter paths.</li>
<li>Fix race conditions in formatter and entry handling.</li>
<li>Fix generic <code>Log</code>, <code>Logf</code>, <code>Logln</code>,
and <code>LogFn</code> methods unexpectedly
panicking when called with <code>PanicLevel</code>. Use the
corresponding <code>Panic</code>
methods when panic behavior is desired.</li>
<li>Improve concurrency safety around formatter and hook access.</li>
</ul>
<p>Features:</p>
<ul>
<li>Add <code>slog</code> hook for forwarding Logrus entries to
<code>log/slog</code>.</li>
<li>Add <code>slog.Handler</code> for forwarding <code>log/slog</code>
records to a Logrus logger,
including levels, fields, groups, context, time, and optional caller
reporting. The hook and handler can also be combined to help migrate
between Logrus and <code>log/slog</code>.</li>
<li>Add minimal, composable logging interfaces for each log level. This
enables
consumers to depend on narrower interfaces, making it easier to
substitute
or adapt logging implementations.</li>
<li>Allow <code>Entry.Caller</code> to be set explicitly and preserve it
across derived
entries, enabling custom caller detection without Logrus overwriting
caller information when <code>ReportCaller</code> is enabled.</li>
</ul>
<p>Changed:</p>
<ul>
<li>Raise minimum supported Go version to 1.23.</li>
<li>TextFormatter now renders <code>[]byte</code> values as raw/quoted
strings instead of slice-of-ints.</li>
<li>TextFormatter now uses distinct dimmed colors for debug and trace
output.</li>
<li>TextFormatter now automatically enables colors on Windows terminals
with ANSI support,
matching the behavior on other platforms.</li>
<li><code>Entry.HasCaller</code> is now deprecated in favor of checking
<code>Entry.Caller</code> directly.</li>
<li>Deprecated <code>MutexWrap</code>, which was unintentionally exposed
as public API.
It remains available as an alias for compatibility but should not be
used
directly.</li>
</ul>
<p>Performance:</p>
<ul>
<li>Significantly improve TextFormatter performance and reduce
allocations.</li>
<li>Optimize common Entry and Logger hot paths.</li>
<li>Reduce allocations in caller reporting.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sirupsen/logrus/commit/8b673a9eb3a8c1b130907b9677f8d431c9ab1ae7"><code>8b673a9</code></a>
Merge pull request <a
href="https://redirect.github.com/sirupsen/logrus/issues/1583">#1583</a>
from thaJeztah/release_1.10.1</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/0b920add8d9ba31342949f575067ea6024db81a6"><code>0b920ad</code></a>
Merge pull request <a
href="https://redirect.github.com/sirupsen/logrus/issues/1584">#1584</a>
from thaJeztah/more_coverage</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/5e20694a7ac51fa08cb4e4c72259aac0e70d0a68"><code>5e20694</code></a>
TextFormatter: cover nil pointer method receivers</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/83127326e4b798e5dab17e3593cc34f845592d49"><code>8312732</code></a>
update changelog for v1.10.1</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/e987a4036b7f045048922c0c96903d99bf827f70"><code>e987a40</code></a>
Merge pull request <a
href="https://redirect.github.com/sirupsen/logrus/issues/1582">#1582</a>
from thaJeztah/panic_handler</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/17d574b11e6e884800c2a8cfc6d3d134dcf4d452"><code>17d574b</code></a>
TextFormatter: recover panics from Error and String methods</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/134c80f81c9667a2d8c306f159d474857a20b735"><code>134c80f</code></a>
Merge pull request <a
href="https://redirect.github.com/sirupsen/logrus/issues/1579">#1579</a>
from thaJeztah/err_handling</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/7350f4218b62e4e3e6e17f96755570f21a5628f9"><code>7350f42</code></a>
logger: WithError: wrap logger.WithError for consistency</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/b3369d2b710f2c5ed1566d6844bd204093bc3627"><code>b3369d2</code></a>
entry: allow function-backed error fields</li>
<li><a
href="https://github.com/sirupsen/logrus/commit/108008340c69fe5ecb526940d7d156d716f4b452"><code>1080083</code></a>
Merge pull request <a
href="https://redirect.github.com/sirupsen/logrus/issues/1578">#1578</a>
from thaJeztah/err_handling_tests</li>
<li>Additional commits viewable in <a
href="https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/yaml/go-yaml/commit/e16c7af9361b241fa02d91582fb59ce4954d8afc"><code>e16c7af</code></a>
Remove empty go.sum file</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/6abcd0160a1b7862e1218e06f4c89c4def2e2ccc"><code>6abcd01</code></a>
Fix unhandled nil-errors in tests</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/9481db7e399de284a2a4724a99ba72e5c091dcc5"><code>9481db7</code></a>
Remove suite_test.go and gopkg.in/check.v1</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/485f5fc46209ae5a04a2f65625666abfa2aeb6e8"><code>485f5fc</code></a>
Use standard testing library for limit_test.go</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/3e00046fba48895c457783532df04393f6838a44"><code>3e00046</code></a>
Use standard testing library for node_test.go</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/f6120587935491ae18b92f865105229b55dca89a"><code>f612058</code></a>
Use standard testing library for decode_test.go</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/078f958bf3468c154fef918c86d8494672e4650a"><code>078f958</code></a>
Use standard testing library encode_test.go</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/3847ac025d0626dfea2709ad6f8c2af4ef275bae"><code>3847ac0</code></a>
[v3] backport CodeQL workflow</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/16666636982f355faae9bccd3f85d1bf352b18d1"><code>1666663</code></a>
Revert incorrect gofmt changes</li>
<li><a
href="https://github.com/yaml/go-yaml/commit/73290cb4afb161a1276969b4f21a7b6f6e1111b0"><code>73290cb</code></a>
Retract v3 tags that cannot be installed</li>
<li>See full diff in <a
href="https://github.com/yaml/go-yaml/compare/v3.0.4...v3.0.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `golang.org/x/text` from 0.40.0 to 0.41.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/text/commit/acdba6655fd45cdb5ab73c9d6a8981333bd65a39"><code>acdba66</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/text/commit/02aa981a75cb366b39e71729b935c15a7b4e146a"><code>02aa981</code></a>
secure/precis: fix short destination buffer handling in Nickname
profile</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.40.0...v0.41.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.83.1</h2>
<h1>Security</h1>
<ul>
<li>xds/rbac: Fix a bug where nested <code>Principal</code> or
<code>Permission</code> rules with <code>:scheme</code> or
<code>grpc-</code> prefixed header matchers were not rejected, which
could cause DENY rules to fail open. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9258">#9258</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@​nvxbug</code></a></li>
</ul>
</li>
<li>xds/rbac: Fix a bug where the <code>host</code> header matcher was
not being replaced with <code>:authority</code> in nested
<code>Principal</code> or <code>Permission</code> rules. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9258">#9258</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@​nvxbug</code></a></li>
</ul>
</li>
<li>xds/rbac: Fix a bug where a header matcher whose name was not
lowercase, such as <code>X-Role</code>, matched no header, which could
cause DENY rules to fail open. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/alimony"><code>@​alimony</code></a></li>
</ul>
</li>
<li>xds/rbac: Fix a bug where a <code>:scheme</code> or
<code>grpc-</code> prefixed header matcher was accepted when its name
was not lowercase. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/alimony"><code>@​alimony</code></a></li>
</ul>
</li>
<li>xds/rbac: Fix a bug where a <code>Host</code> header matcher was not
replaced with <code>:authority</code>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/alimony"><code>@​alimony</code></a></li>
</ul>
</li>
</ul>
<h1>Performance</h1>
<ul>
<li>transport: Restrict memory overhead of buffering small data frames.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/9331">#9331</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/1550d9e0cddb30ce99e61a2102e8294a49461e5e"><code>1550d9e</code></a>
Change version to 1.83.1 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9336">#9336</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/ebba6f3f1b206e2b4dc4d1d5a96d18430302c2fe"><code>ebba6f3</code></a>
Cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/9258">#9258</a>
and <a
href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a>
into v1.83.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9335">#9335</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77"><code>8cfeca0</code></a>
Cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/9331">#9331</a> to
v1.83.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9333">#9333</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/dec6951305e88906696f1d0a00dd2439363bc708"><code>dec6951</code></a>
Change version to 1.83.1-dev (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9229">#9229</a>)</li>
<li>See full diff in <a
href="https://github.com/grpc/grpc-go/compare/v1.83.0...v1.83.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `github.com/microsoft/go-mssqldb` from 1.10.0 to 1.11.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/go-mssqldb/releases">github.com/microsoft/go-mssqldb's
releases</a>.</em></p>
<blockquote>
<h2>v1.11.0</h2>
<h2><a
href="https://github.com/microsoft/go-mssqldb/compare/v1.10.0...v1.11.0">1.11.0</a>
(2026-08-23)</h2>
<h3>Features</h3>
<ul>
<li>add ADO.Net connection string synonyms (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/374">#374</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/d72f750358c4370852fc73cdda9f7f83b53903ff">d72f750</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>clarify NTLM URL encoding for URL DSNs (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/378">#378</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/551d62231613700aca651cb5b778cdc1db584893">551d622</a>)</li>
<li>close TCP connection on all connect() error paths (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/367">#367</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/0e13fee2c0bf0efd38803976171cb30d1bc961ad">0e13fee</a>)</li>
<li><strong>isProc:</strong> add <code>REVERT</code> builtin command (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/393">#393</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/31a9659ac4763e622fc9fbae6fcff44f30760164">31a9659</a>)</li>
<li>prevent NTLM challenge out-of-bounds panic (DoS) (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/411">#411</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/81df9834c92c7709cdc180c92f8d9a06b9710981">81df983</a>)</li>
<li>prevent panic on overflowing PRELOGIN option offset and length (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/415">#415</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/802d9f154ab83d7fb88d56f135f20787f5871f15">802d9f1</a>)</li>
<li>prevent SQL Browser DAC response parsing panic (DoS) (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/414">#414</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/bc4cbf28590fba2f19fb0dfe7cf77891dddb1e1d">bc4cbf2</a>)</li>
<li>quote table name and ORDER columns in bulk copy (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/416">#416</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/f925c5343a0fda33276785b765e5571dead35e15">f925c53</a>)</li>
<li>replace deprecated reflect.SliceHeader with unsafe.Slice (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/366">#366</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/836048ac320da5b92d1c0f7038ba5ac562768f10">836048a</a>),
closes <a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/272">#272</a></li>
<li>return float64 for REAL columns in readFixedType (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/381">#381</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/abddba82884f2b672b88088a1849cb547194a27d">abddba8</a>)</li>
<li>strip port from AKV URLs for AllowedLocations and endpoint (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/369">#369</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/7fab98a2b5b3d57b933a554b6abe15114b5857b3">7fab98a</a>)</li>
<li><strong>types:</strong> cap initial PLP buffer allocation (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/409">#409</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/f0882915fbf71953d3251bd7482325dd62924050">f088291</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>add comprehensive benchmark suite with CI regression detection (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/376">#376</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/b9354415013929850e1a48856661d1109be661a9">b935441</a>)</li>
<li>fast path for pure ASCII decoding in CharsetToUTF8 (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/431">#431</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/db5179626672ada427888117b399963d2c3a642b">db51796</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md">github.com/microsoft/go-mssqldb's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/microsoft/go-mssqldb/compare/v1.10.0...v1.11.0">1.11.0</a>
(2026-08-23)</h2>
<h3>Features</h3>
<ul>
<li>add ADO.Net connection string synonyms (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/374">#374</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/d72f750358c4370852fc73cdda9f7f83b53903ff">d72f750</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>clarify NTLM URL encoding for URL DSNs (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/378">#378</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/551d62231613700aca651cb5b778cdc1db584893">551d622</a>)</li>
<li>close TCP connection on all connect() error paths (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/367">#367</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/0e13fee2c0bf0efd38803976171cb30d1bc961ad">0e13fee</a>)</li>
<li><strong>isProc:</strong> add <code>REVERT</code> builtin command (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/393">#393</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/31a9659ac4763e622fc9fbae6fcff44f30760164">31a9659</a>)</li>
<li>prevent NTLM challenge out-of-bounds panic (DoS) (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/411">#411</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/81df9834c92c7709cdc180c92f8d9a06b9710981">81df983</a>)</li>
<li>prevent panic on overflowing PRELOGIN option offset and length (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/415">#415</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/802d9f154ab83d7fb88d56f135f20787f5871f15">802d9f1</a>)</li>
<li>prevent SQL Browser DAC response parsing panic (DoS) (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/414">#414</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/bc4cbf28590fba2f19fb0dfe7cf77891dddb1e1d">bc4cbf2</a>)</li>
<li>quote table name and ORDER columns in bulk copy (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/416">#416</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/f925c5343a0fda33276785b765e5571dead35e15">f925c53</a>)</li>
<li>replace deprecated reflect.SliceHeader with unsafe.Slice (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/366">#366</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/836048ac320da5b92d1c0f7038ba5ac562768f10">836048a</a>),
closes <a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/272">#272</a></li>
<li>return float64 for REAL columns in readFixedType (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/381">#381</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/abddba82884f2b672b88088a1849cb547194a27d">abddba8</a>)</li>
<li>strip port from AKV URLs for AllowedLocations and endpoint (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/369">#369</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/7fab98a2b5b3d57b933a554b6abe15114b5857b3">7fab98a</a>)</li>
<li><strong>types:</strong> cap initial PLP buffer allocation (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/409">#409</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/f0882915fbf71953d3251bd7482325dd62924050">f088291</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>add comprehensive benchmark suite with CI regression detection (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/376">#376</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/b9354415013929850e1a48856661d1109be661a9">b935441</a>)</li>
<li>fast path for pure ASCII decoding in CharsetToUTF8 (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/431">#431</a>)
(<a
href="https://github.com/microsoft/go-mssqldb/commit/db5179626672ada427888117b399963d2c3a642b">db51796</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/ecf85606f8cfedae0be026042581596a92642edd"><code>ecf8560</code></a>
chore(main): release 1.11.0 (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/380">#380</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/68c1f2881a02ccf279f9f3b26eedd000810ba3bf"><code>68c1f28</code></a>
test: add TDS response fuzz harness and end-to-end target (layer 1/4)
(<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/419">#419</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/46b5c6acf6bac5ff9836e6ac1dab45f39ecbd881"><code>46b5c6a</code></a>
chore(deps): bump the golang-x group across 1 directory with 2 updates
(<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/433">#433</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/5e6cedb53122dd6fe373fc4ed951e4d88a1f64f3"><code>5e6cedb</code></a>
ci: run appveyor on SQL Server 2025 and drop the duplicate job (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/436">#436</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/ae25ae5725f31a0d83a46333e957de87f3a78f41"><code>ae25ae5</code></a>
ci: test the supported Go releases and drop the EOL toolchain pin (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/439">#439</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/6f21949ccc8c3e19491fe70338c94008f4de02ba"><code>6f21949</code></a>
chore(deps): bump github.com/stretchr/testify in the testing group (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/434">#434</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/8bb55efebf2760aae814f8976f8fd86da2d96d9f"><code>8bb55ef</code></a>
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/432">#432</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/db5179626672ada427888117b399963d2c3a642b"><code>db51796</code></a>
perf: fast path for pure ASCII decoding in CharsetToUTF8 (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/431">#431</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/f925c5343a0fda33276785b765e5571dead35e15"><code>f925c53</code></a>
fix: quote table name and ORDER columns in bulk copy (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/416">#416</a>)</li>
<li><a
href="https://github.com/microsoft/go-mssqldb/commit/bc4cbf28590fba2f19fb0dfe7cf77891dddb1e1d"><code>bc4cbf2</code></a>
fix: prevent SQL Browser DAC response parsing panic (DoS) (<a
href="https://redirect.github.com/microsoft/go-mssqldb/issues/414">#414</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/microsoft/go-mssqldb/compare/v1.10.0...v1.11.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/rogpeppe/go-internal` from 1.15.0 to 1.16.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rogpeppe/go-internal/commit/49d4e9ddb921430d6bb9ed28aeafc16676a18c65"><code>49d4e9d</code></a>
testscript/plugin: new package (<a
href="https://redirect.github.com/rogpeppe/go-internal/issues/307">#307</a>)</li>
<li><a
href="https://github.com/rogpeppe/go-internal/commit/b82995bfb9f2a89a0cb6ef37b3c4da096c1a87fc"><code>b82995b</code></a>
testscript: add dynamic command capability (<a
href="https://redirect.github.com/rogpeppe/go-internal/issues/306">#306</a>)</li>
<li><a
href="https://github.com/rogpeppe/go-internal/commit/5cab5df19260dc7e91f4ae9d2d41d0cbe300b70b"><code>5cab5df</code></a>
goproxytest: make .mod and .info files optional (<a
href="https://redirect.github.com/rogpeppe/go-internal/issues/305">#305</a>)</li>
<li>See full diff in <a
href="https://github.com/rogpeppe/go-internal/compare/v1.15.0...v1.16.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/testcontainers/testcontainers-go` from 0.43.0 to
0.44.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/testcontainers/testcontainers-go/releases">github.com/testcontainers/testcontainers-go's
releases</a>.</em></p>
<blockquote>
<h2>v0.44.0</h2>
<h1>What's Changed</h1>
<h2>🔒 Security</h2>
<ul>
<li>security: fix Dependabot alerts for grpc and OTel (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3835">#3835</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
</ul>
<h2>🚀 Features</h2>
<ul>
<li>feat: allow overriding the session ID (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3051">#3051</a>)
<a
href="https://github.com/jcmfernandes"><code>@​jcmfernandes</code></a></li>
<li>feat: add Azure SQL Edge module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3787">#3787</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add S3Mock module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3781">#3781</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Fake-GCS-Server module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3770">#3770</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Typesense module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3786">#3786</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Firebird module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3771">#3771</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add CouchDB module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3768">#3768</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Mosquitto module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3774">#3774</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Papercut-SMTP module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3777">#3777</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Timeplus module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3784">#3784</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Solr module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3783">#3783</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add SFTP module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3782">#3782</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add RavenDB module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3780">#3780</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add QuestDB module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3779">#3779</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Presto module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3778">#3778</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add OrientDB module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3776">#3776</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Nginx module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3775">#3775</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Mailpit module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3773">#3773</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add Trino module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3785">#3785</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add KurrentDB module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3772">#3772</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add CrateDB module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3769">#3769</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add ActiveMQ Classic module (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3767">#3767</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>feat: add ability to chain WithConfigModifier,
WithEndpointSettingsModifier and WithHostConfigModifier (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3733">#3733</a>)
<a
href="https://github.com/LaurentGoderre"><code>@​LaurentGoderre</code></a></li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>fix: escape the container name in the Docker name filter (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3837">#3837</a>)
<a
href="https://github.com/jcmfernandes"><code>@​jcmfernandes</code></a></li>
<li>fix: should print max information by default (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3459">#3459</a>)
<a href="https://github.com/strowk"><code>@​strowk</code></a></li>
<li>fix: read exec exit code only after draining the output stream (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3766">#3766</a>)
<a
href="https://github.com/dean-island"><code>@​dean-island</code></a></li>
<li>fix: properly wait for Ryuk startup when reusing reaper (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3761">#3761</a>)
<a href="https://github.com/karsov"><code>@​karsov</code></a></li>
<li>fix(openfga): remove playground wait from Run and up image to
v1.18.0 (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3745">#3745</a>)
<a
href="https://github.com/selvakannanjr"><code>@​selvakannanjr</code></a></li>
</ul>
<h2>📖 Documentation</h2>
<ul>
<li>docs: fix incomplete CleanupContainer documentation (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3826">#3826</a>)
<a
href="https://github.com/Hashim1999164"><code>@​Hashim1999164</code></a></li>
<li>docs: fix typo in SkipIfProviderIsNotHealthy docstring (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3764">#3764</a>)
<a
href="https://github.com/salandered"><code>@​salandered</code></a></li>
<li>chore: update modules usage metrics (2026-07) (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3759">#3759</a>)
@<a
href="https://github.com/apps/github-actions">github-actions[bot]</a></li>
<li>chore: update usage metrics (2026-07) (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3757">#3757</a>)
@<a
href="https://github.com/apps/github-actions">github-actions[bot]</a></li>
<li>chore(metrics): usage metrics for modules (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3737">#3737</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
<li>docs(site): add missing languages and reorder docs navigation (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3735">#3735</a>)
<a
href="https://github.com/mdelapenya"><code>@​mdelapenya</code></a></li>
</ul>
<h2>🧹 Housekeeping</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/007bd6b1407fe3f2ab9487479e8bd841e16a1c97"><code>007bd6b</code></a>
chore: use new version (v0.44.0) in modules and examples</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/6fdd2fd00ad94cd3dbf2f5cecf74fc96e170843a"><code>6fdd2fd</code></a>
feat: allow overriding the session ID (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3051">#3051</a>)</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/0cfd2f94624f299772a3d5a481933e1799948769"><code>0cfd2f9</code></a>
chore(deps): bump slackapi/slack-github-action from 3.0.3 to 4.0.0 (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3788">#3788</a>)</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/5dda4cd7fe5fb6236e759a68c97b49520a3440fa"><code>5dda4cd</code></a>
chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3789">#3789</a>)</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/8cfecf926c89cc05ac8975e3ce6c06c60a972e6e"><code>8cfecf9</code></a>
chore(deps): bump docker/setup-docker-action from 5.1.0 to 5.4.0 (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3790">#3790</a>)</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/1d054f65b267de328a85dc3a297ba6efa547e1b4"><code>1d054f6</code></a>
fix: escape the container name in the Docker name filter (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3837">#3837</a>)</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/2f869d63aff281becff0e71429a6c3fc7aaba0ba"><code>2f869d6</code></a>
fix: should print max information by default (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3459">#3459</a>)</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/62941e8563efc64a06513ce68e9abc441cd66baa"><code>62941e8</code></a>
chore(azurite): tidy module dependencies (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3838">#3838</a>)</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/632ee7bb3a4ef83c2945ea271b210c5bb0d8e957"><code>632ee7b</code></a>
security: fix Dependabot alerts for grpc and OTel (<a
href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3835">#3835</a>)</li>
<li><a
href="https://github.com/testcontainers/testcontainers-go/commit/caa68c6c38710ed997f08f6b144f932195e2f8f9"><code>caa68c6</code></a>
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
from 1...</li>
<li>Additional commits viewable in <a
href="https://github.com/testcontainers/testcontainers-go/compare/v0.43.0...v0.44.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `modernc.org/sqlite` from 1.55.0 to 1.57.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md">modernc.org/sqlite's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<ul>
<li>
<p>2026-08-19 v1.57.0:</p>
<ul>
<li>Add an opt-in <code>_defensive</code> DSN query parameter that turns
on SQLite's defensive mode for the connection, disabling the SQL-level
features that let ordinary statements deliberately corrupt the database
file. When <code>_defensive=1</code> (or any
<code>strconv.ParseBool</code> true value) is supplied, the driver calls
<code>sqlite3_db_config</code> with
<code>SQLITE_DBCONFIG_DEFENSIVE</code> immediately after
<code>sqlite3_open_v2</code> and before every other parameter is
applied, so the PRAGMAs the driver itself runs, the <code>_pragma</code>
list, and every statement the caller prepares are all subject to it. On
such a connection <code>PRAGMA writable_schema=ON</code>, <code>PRAGMA
journal_mode=OFF</code> and <code>PRAGMA schema_version=N</code> become
silent no-ops, and writes to a virtual table's shadow tables (fts5's
<code>_data</code>, <code>_idx</code> and so on) and to
<code>sqlite_dbpage</code> fail with &quot;table ... may not be
modified&quot;; reading those tables, ordinary use of the virtual tables
that own them, and <code>VACUUM</code> are unaffected. The flag has no
PRAGMA equivalent, so <code>sqlite3_db_config</code> — and therefore a
DSN parameter — is the only way to reach it short of dropping to
<code>modernc.org/sqlite/lib</code>. The value is parsed before
<code>sqlite3_open_v2</code>, so an invalid one fails the connection
without creating the database file, and the parameter must appear at
most once: a repeated <code>_defensive</code> is an error rather than
letting the first value silently win. Absence of the parameter, or
<code>_defensive=0</code>, leaves SQLite's default behavior unchanged;
existing DSNs continue to work byte-for-byte. Two limits are worth
stating plainly, since the name invites more confidence than the flag
earns. Defensive mode is a hardening measure, not a sandbox for hostile
database files: it is one of several steps <a
href="https://www.sqlite.org/security.html">SQLite recommends</a> for
that purpose, and this build compiles with neither
<code>SQLITE_TRUSTED_SCHEMA=0</code> nor <code>SQLITE_DQS=0</code> and
exposes no authorizer. And it is a property of the connection, not of
the database file — a second handle opened on the same file without the
parameter is unrestricted.</li>
<li>Reject the one DSN combination defensive mode would otherwise
swallow in silence. <code>_defensive=1</code> together with
<code>_journal_mode=OFF</code> (or <code>_journal=OFF</code>) now fails
the connection instead of opening one in which neither parameter was
honoured: SQLite turns <code>PRAGMA journal_mode=OFF</code> into a no-op
that still reports success, so the driver would have accepted the mode,
executed it, and left the journal untouched without telling anyone. The
check runs in the validation phase introduced in v1.55.0, before any
statement executes, so a rejected DSN cannot leave the database
half-configured. <code>_pragma</code> remains the exception it has
always been: <code>_pragma=journal_mode(OFF)</code> alongside
<code>_defensive=1</code> still runs and is still silently ignored by
SQLite. Only DSNs using <code>_defensive</code> can be affected, and
that parameter is new, so no DSN that opened before changes
behavior.</li>
<li>See [GitHub pull request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/6">#6</a>](<a
href="https://redirect.github.com/modernc-org/sqlite/pull/6">modernc-org/sqlite#6</a>),
thanks wsman!</li>
<li>Ship the sqlite-vec license notice this module has been missing.
<code>modernc.org/sqlite/vec</code> has bundled the transpiled <a
href="https://github.com/asg017/sqlite-vec">sqlite-vec</a> sources since
v1.47.0, but the module carried only its own BSD-3-Clause
<code>LICENSE</code> and the public-domain SQLite notice. sqlite-vec is
Copyright (c) 2024 Alex Garcia, dual-licensed Apache-2.0 OR MIT and used
here under MIT, whose terms require the copyright and permission notice
to accompany substantial portions of the software — which 2.8 MB of
transpiled <code>vec/</code> plainly is. The notice now ships as
<code>LICENSE-SQLITE_VEC</code> in the module root, byte-identical to
the <code>LICENSE-MIT</code> in the upstream v0.1.9 archive and named
after the file <code>modernc.org/libsqlite_vec</code> extracts it into.
Attribution was never absent — <code>vec</code>'s package documentation
has named the extension, pinned the version and linked upstream — but
the license text itself was, and the omission was ours:
<code>vendor_libs/main.go</code> copied the per-target transpiles and
nothing else. It now copies the notice alongside them and fails the
vendoring run if it cannot, so a <code>make vendor</code> can no longer
quietly drop it. The <code>vec</code> package documentation gained a
License section recording that the package is under a different license
from the rest of this module.</li>
<li><strong>The SQLite notice is renamed from
<code>SQLITE-LICENSE</code> to <code>LICENSE-SQLITE</code></strong>;
update any direct links to it. Its contents are unchanged and SQLite
remains public domain. The name now matches both the new
<code>LICENSE-SQLITE_VEC</code> beside it and the
<code>LICENSE-&lt;upstream&gt;</code> convention every other modernc.org
repository follows, but it is more than cosmetic: <code>go mod
vendor</code> selects the files it copies into a downstream
<code>vendor/</code> tree by matching each name against a fixed list of
prefixes — <code>LICENSE</code> among them — so a name merely
<em>ending</em> in <code>LICENSE</code> was never propagated. Both
bundled notices now travel with the code into vendored builds, which is
where the MIT terms on <code>vec/</code> keep applying. No code changes;
no behavior changes.</li>
<li>Let a caller-constructed <code>Driver</code> register its own
functions, collations and virtual table modules. <code>Driver</code> has
always held four categories of registration state, but only
<code>RegisterConnectionHook</code> could put anything on a constructed
one: functions and collations were reachable through the package-level
API alone, and modules through the package-level driver only, which left
the <code>modules</code> field written and read through that instance
and so process-global state wearing a per-instance field.
<code>Driver</code> now has <code>RegisterFunction</code>,
<code>RegisterScalarFunction</code>,
<code>RegisterDeterministicScalarFunction</code>,
<code>RegisterCollationUtf8</code> and <code>RegisterModule</code>, plus
<code>Must*</code> variants of the first four, each registering on that
<code>Driver</code> alone; the methods are safe to call concurrently,
and the zero <code>Driver</code> is ready to use as-is.
<code>vtab.RegisterModule</code> also honours its <code>db</code>
argument now: a non-nil <code>db</code> registers on the driver backing
it when that driver implements the new
<code>vtab.ModuleRegisterer</code>, while a nil <code>db</code> keeps
targeting the driver this package registers as <code>sqlite</code>. One
existing pattern changes behavior, narrowly and loudly:
<code>vtab.RegisterModule(db, ...)</code> where <code>db</code> was
opened on a caller-constructed <code>Driver</code> used to discard the
<code>db</code> argument and land on the <code>sqlite</code> driver,
reaching every connection in the process; it now lands on the
constructed driver alone, so a <code>sql.Open(&quot;sqlite&quot;)</code>
connection that used to resolve such a module gets <code>no such
module</code> instead. The same pattern is also the one way an existing
program could hold one module name on both a constructed
<code>Driver</code> and the package-level one: there the first of the
two registrations used to win and the second was refused as already
registered, whereas now the package-level implementation wins on the
constructed <code>Driver</code>'s connections regardless of the order
they ran in. Reaching that case at all means the program ignored an
error the older version returned. Two smaller deviations round out the
list: <code>Driver.RegisterModule</code> reports no error for such a
collision, and <code>vtab.RegisterModule</code> now validates its name
and module arguments before the not-implemented check, so a call with an
empty nam...

_Description has been truncated_

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sebastian Spaink <sebastianspaink@gmail.com>
D
dependabot[bot] committed
88c2ee0cdc9087ab1c3f09b95fa2b9ba5c8f69f5
Parent: 6913f18
Committed by GitHub <noreply@github.com> on 9/1/2026, 7:44:53 PM