build(deps): bump the dependencies group across 2 directories with 13 updates (#9124)
Bumps the dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger) | `4.9.5` | `4.9.6` | | [github.com/huandu/go-sqlbuilder](https://github.com/huandu/go-sqlbuilder) | `1.42.1` | `1.43.0` | | [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) | `3.1.1` | `3.2.0` | | [github.com/santhosh-tekuri/jsonschema/v6](https://github.com/santhosh-tekuri/jsonschema) | `6.0.2` | `6.0.3` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.1` | | [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.4` | `3.0.5` | | [golang.org/x/text](https://github.com/golang/text) | `0.40.0` | `0.41.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.0` | `1.83.1` | | google.golang.org/protobuf | `1.36.11` | `1.36.12` | Bumps the dependencies group with 5 updates in the /e2e directory: | Package | From | To | | --- | --- | --- | | google.golang.org/protobuf | `1.36.11` | `1.36.12` | | [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.10.0` | `1.11.0` | | [github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal) | `1.15.0` | `1.16.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.43.0` | `0.44.0` | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.55.0` | `1.57.0` | Updates `github.com/dgraph-io/badger/v4` from 4.9.5 to 4.9.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dgraph-io/badger/releases">github.com/dgraph-io/badger/v4's releases</a>.</em></p> <blockquote> <h2>v4.9.6</h2> <h2>What's Changed</h2> <ul> <li>fix(compaction): restore size-ratio base level selection, clamped to the first non-empty level by <a href="https://github.com/shiva-istari"><code>@shiva-istari</code></a> in <a href="https://redirect.github.com/dgraph-io/badger/pull/2330">dgraph-io/badger#2330</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dgraph-io/badger/compare/v4.9.5...v4.9.6">https://github.com/dgraph-io/badger/compare/v4.9.5...v4.9.6</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dgraph-io/badger/commit/fbd8d2eefad8be8757249767255faf989945b599"><code>fbd8d2e</code></a> fix(compaction): restore size-ratio base level selection, clamped to the firs...</li> <li>See full diff in <a href="https://github.com/dgraph-io/badger/compare/v4.9.5...v4.9.6">compare view</a></li> </ul> </details> <br /> Updates `github.com/huandu/go-sqlbuilder` from 1.42.1 to 1.43.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/huandu/go-sqlbuilder/releases">github.com/huandu/go-sqlbuilder's releases</a>.</em></p> <blockquote> <h2>v1.43.0</h2> <h2>What's Changed</h2> <ul> <li><code>[FIX]</code> Interpolate: keep ClickHouse whole-number floats and non-finite values typed correctly by <a href="https://github.com/youdie006"><code>@youdie006</code></a> in <a href="https://redirect.github.com/huandu/go-sqlbuilder/issues/244">#244</a></li> <li><code>[FIX]</code> Escape ANSI interpolation string literals in <a href="https://redirect.github.com/huandu/go-sqlbuilder/issues/246">#246</a></li> <li><code>[FIX]</code> Escape identifier delimiters in Flavor.Quote in <a href="https://redirect.github.com/huandu/go-sqlbuilder/issues/245">#245</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/youdie006"><code>@youdie006</code></a> made their first contribution in <a href="https://redirect.github.com/huandu/go-sqlbuilder/issues/244">#244</a></li> <li><a href="https://github.com/KrisKennawayDD"><code>@KrisKennawayDD</code></a> addressed two CVE issues</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/huandu/go-sqlbuilder/compare/v1.42.0...v1.43.0">https://github.com/huandu/go-sqlbuilder/compare/v1.42.0...v1.43.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/huandu/go-sqlbuilder/commit/1136e4bde200756487cd29c250a956d97a1877cc"><code>1136e4b</code></a> Merge fix: escape identifier delimiters in Flavor.Quote</li> <li><a href="https://github.com/huandu/go-sqlbuilder/commit/89526352f82e1e6d57081ee7286b92a308538dcc"><code>8952635</code></a> Merge fix: escape ANSI interpolation string literals</li> <li><a href="https://github.com/huandu/go-sqlbuilder/commit/ef74ab18a43b81c385add2a9018b9dfde79f5724"><code>ef74ab1</code></a> fix: escape identifier delimiters in Flavor.Quote</li> <li><a href="https://github.com/huandu/go-sqlbuilder/commit/08b3bf51eaf2c12869f49643dea61527b3fd0eaa"><code>08b3bf5</code></a> fix: escape ANSI interpolation string literals</li> <li><a href="https://github.com/huandu/go-sqlbuilder/commit/5136552f80657541618f3fe94624d31e54fb9c0e"><code>5136552</code></a> Merge pull request <a href="https://redirect.github.com/huandu/go-sqlbuilder/issues/244">#244</a> from youdie006/fix/243-clickhouse-float-literal</li> <li><a href="https://github.com/huandu/go-sqlbuilder/commit/c94589a4a52717394bd92b0c46fad1328bd3924e"><code>c94589a</code></a> Interpolate: keep ClickHouse whole-number floats and non-finite values typed ...</li> <li>See full diff in <a href="https://github.com/huandu/go-sqlbuilder/compare/v1.42.1...v1.43.0">compare view</a></li> </ul> </details> <br /> Updates `github.com/lestrrat-go/jwx/v3` from 3.1.1 to 3.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lestrrat-go/jwx/releases">github.com/lestrrat-go/jwx/v3's releases</a>.</em></p> <blockquote> <h2>v3.2.0</h2> <p>For more detailed release notes, see <a href="https://github.com/lestrrat-go/jwx/blob/v3.2.0/Changes">Changes</a>.</p> <h2>What's Changed</h2> <ul> <li>build(deps): bump github.com/lestrrat-go/dsig from 1.2.1 to 1.3.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2043">lestrrat-go/jwx#2043</a></li> <li>build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2159">lestrrat-go/jwx#2159</a></li> <li>build(deps): bump actions/stale from 10.2.0 to 10.3.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2174">lestrrat-go/jwx#2174</a></li> <li>build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2179">lestrrat-go/jwx#2179</a></li> <li>build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2180">lestrrat-go/jwx#2180</a></li> <li>build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2184">lestrrat-go/jwx#2184</a></li> <li>bump httprc to v3.0.6 by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2189">lestrrat-go/jwx#2189</a></li> <li>autodoc updates by <a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2190">lestrrat-go/jwx#2190</a></li> <li>build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2192">lestrrat-go/jwx#2192</a></li> <li>build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2226">lestrrat-go/jwx#2226</a></li> <li>build(deps): bump actions/cache from 5.0.5 to 6.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2231">lestrrat-go/jwx#2231</a></li> <li>build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2230">lestrrat-go/jwx#2230</a></li> <li>build(deps): bump actions/cache from 6.0.0 to 6.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2238">lestrrat-go/jwx#2238</a></li> <li>build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2242">lestrrat-go/jwx#2242</a></li> <li>fix misspellings in code comments by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2249">lestrrat-go/jwx#2249</a></li> <li>build(deps): bump actions/stale from 10.3.0 to 10.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2254">lestrrat-go/jwx#2254</a></li> <li>build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2250">lestrrat-go/jwx#2250</a></li> <li>build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2258">lestrrat-go/jwx#2258</a></li> <li>build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2261">lestrrat-go/jwx#2261</a></li> <li>bump x/crypto to v0.54.0 in codegen modules by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2266">lestrrat-go/jwx#2266</a></li> <li>[v3] retain unparseable JWK set keys, opt-in by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2265">lestrrat-go/jwx#2265</a></li> <li>[v3] fix per-call reject-dup-kid override by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2270">lestrrat-go/jwx#2270</a></li> <li>[v3] test jwe rejects UnsupportedKey placeholder by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2272">lestrrat-go/jwx#2272</a></li> <li>[v3] doc: recommend retain mode for third-party JWK sets as PQC rolls out by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2274">lestrrat-go/jwx#2274</a></li> <li>fix jwe JSON AAD serialization by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2276">lestrrat-go/jwx#2276</a></li> <li>add JWE authenticated data option by <a href="https://github.com/lestrrat"><code>@lestrrat</code></a> in <a href="https://redirect.github.com/lestrrat-go/jwx/pull/2278">lestrrat-go/jwx#2278</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0">https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/lestrrat-go/jwx/blob/v3.2.0/Changes">github.com/lestrrat-go/jwx/v3's changelog</a>.</em></p> <blockquote> <p>v3.2.0 27 Jul 2026</p> <ul> <li> <p>[jwe] Correct the JSON <code>"aad"</code> member so it contains only BASE64URL of the external Additional Authenticated Data, rather than the combined value used as the content-encryption AAD. Add <code>jwe.WithAuthenticateData</code> for encrypting JSON JWEs with external AAD; the value is included in the shared AEAD input for all recipients, and compact serialization rejects non-empty external AAD. (<a href="https://redirect.github.com/lestrrat-go/jwx/issues/2276">#2276</a>, <a href="https://redirect.github.com/lestrrat-go/jwx/issues/2278">#2278</a>)</p> </li> <li> <p>[jwk] Added opt-in retention of unparseable JWK Set entries. Passing <code>jwk.WithStrictKeySetParsing(false)</code> to <code>jwk.Parse</code> (or setting it globally via <code>jwk.Configure</code>) keeps an entry whose key type is not understood — for example a post-quantum key published alongside classical keys — as a <code>jwk.UnsupportedKey</code> placeholder instead of failing the whole set (RFC 7517 §5). The placeholder preserves the entry's original JSON (marshaling round-trips losslessly) and the parse error via <code>Reason()</code>; use <code>jwk.IsUnsupportedKey</code> to detect one. The default is unchanged: v3 still fails the whole set on the first unparseable entry, so existing callers see no difference. The same option exists in v4 with the opposite default (v4 retains by default, v3 stays strict by default); call sites that pass the option explicitly keep the same meaning across the v3→v4 migration. Placeholders are rejected by <code>jws</code>/<code>jwe</code> key selection, <code>jwk.Export</code>, <code>jwk.AssignKeyID</code>, and <code>jwk.PublicSetOf</code> (which accepts a new <code>jwk.WithOmitUnsupportedKeys(true)</code> to drop them). (<a href="https://redirect.github.com/lestrrat-go/jwx/issues/2263">#2263</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lestrrat-go/jwx/commit/94006b67ebcf1d1a7ca7d59ffdf22e0957ca91b1"><code>94006b6</code></a> release v3.2.0</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/04612cde3a69747109f9c84058c36a56e0dfdf2e"><code>04612cd</code></a> Merge pull request <a href="https://redirect.github.com/lestrrat-go/jwx/issues/2278">#2278</a> from lestrrat-go/feat-v3-jwe-authenticated-data</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/cd553bef38370c2cbaac1964e3957b0ffee8f2ce"><code>cd553be</code></a> Merge pull request <a href="https://redirect.github.com/lestrrat-go/jwx/issues/2276">#2276</a> from lestrrat-go/fix-v3-jwe-json-aad</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/f414ccf74d5a476690c895e3905697e01e057d99"><code>f414ccf</code></a> add JWE Changes entry</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/73e36fbd4e5c2c3bf9b681812a15da62697a3121"><code>73e36fb</code></a> add JWE authenticated data option</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/c937f0bdb96250f4a9127e8b45e2855d4240e3c3"><code>c937f0b</code></a> fix jwe lint issue</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/513776810e8fb4816f78efc786f25f2ac9f0f855"><code>5137768</code></a> fix jwe JSON AAD serialization</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/f55fa6a136a878765f94b69b62265bd619ebdcc7"><code>f55fa6a</code></a> recommend opting into retain for third-party JWK sets with PQC keys (<a href="https://redirect.github.com/lestrrat-go/jwx/issues/2274">#2274</a>)</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/701554ea8dc3ae579cef7bc2f6df51c7c42ade22"><code>701554e</code></a> [v3] test jwe rejects UnsupportedKey placeholder (<a href="https://redirect.github.com/lestrrat-go/jwx/issues/2272">#2272</a>)</li> <li><a href="https://github.com/lestrrat-go/jwx/commit/79ce4dbf89b8e174ce420b6e2db51ef29696093b"><code>79ce4db</code></a> fix per-call reject-dup-kid override of global (<a href="https://redirect.github.com/lestrrat-go/jwx/issues/2270">#2270</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0">compare view</a></li> </ul> </details> <br /> Updates `github.com/santhosh-tekuri/jsonschema/v6` from 6.0.2 to 6.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/santhosh-tekuri/jsonschema/releases">github.com/santhosh-tekuri/jsonschema/v6's releases</a>.</em></p> <blockquote> <h2>v6.0.3</h2> <h2>bugfixes:</h2> <ul> <li>empty instLocation for propetyNames and contentSchema</li> <li>fix intLocation for items and additionalItems validation</li> <li>check invalid floats NaN/Inf</li> <li>fix closing quote check in email validation</li> <li>ensure both are numbers in equals validation</li> </ul> <h2>features</h2> <ul> <li>ef59f39: ref like property in custom vocab</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/b0fc661f4939578bc429f408c18202573dbafcc4"><code>b0fc661</code></a> ci: upgrade golangci/golangci-lint-action from v4 to v6</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/3d8c98fc8f0deb2620f01ba22d5990c979150a1b"><code>3d8c98f</code></a> ci: upgrade actions/setup-go from v3 to v6</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/b0cc7ab9578d4ceb1af061e44e0b2d404c51a40b"><code>b0cc7ab</code></a> ci: upgrade actions/checkout from v3 to v7</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/4bdda8640a2dc1263ed1732081ee4835b43d5bea"><code>4bdda86</code></a> validator/fix: empty instLocation for propetyNames and contentSchema</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/833329db0d72627317932dba9d4893ea7b2fed5d"><code>833329d</code></a> fix/typo: fix type in error message</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/180cde331debc44accf6ebd941e666732ecb0f8a"><code>180cde3</code></a> misc: remove vim swap file (<a href="https://redirect.github.com/santhosh-tekuri/jsonschema/issues/254">#254</a>)</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/1a20556dd00b5a44904dcbd829682d9acae52ece"><code>1a20556</code></a> validator/items: fix instanceLocation</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/cfca0e321b701da4cef877445d4bada40e2ed744"><code>cfca0e3</code></a> validator: check invalid floats NaN/Inf (<a href="https://redirect.github.com/santhosh-tekuri/jsonschema/issues/249">#249</a>)</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/befd2c18b2f099ff9661665470e06cad75061ee4"><code>befd2c1</code></a> validator/additionalItems: fix instanceLocation (<a href="https://redirect.github.com/santhosh-tekuri/jsonschema/issues/253">#253</a>)</li> <li><a href="https://github.com/santhosh-tekuri/jsonschema/commit/dfcec1ce8b6c3060ff3e43277c0bc10b48707e16"><code>dfcec1c</code></a> format/email: add closing quote check (<a href="https://redirect.github.com/santhosh-tekuri/jsonschema/issues/251">#251</a>)</li> <li>Additional commits viewable in <a href="https://github.com/santhosh-tekuri/jsonschema/compare/v6.0.2...v6.0.3">compare view</a></li> </ul> </details> <br /> Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sirupsen/logrus/releases">github.com/sirupsen/logrus's releases</a>.</em></p> <blockquote> <h2>v1.10.1</h2> <h1>Logrus v1.10.1</h1> <p>This patch release fixes two issues in field formatting and handling:</p> <ul> <li>Fix a regression introduced in v1.10.0 where <code>TextFormatter</code> could panic when formatting nil or panicking <code>error</code> and <code>fmt.Stringer</code> values.</li> <li>Allow function-backed values implementing <code>error</code> to be used with <code>WithError</code>, <code>WithField</code>, and <code>WithFields</code>.</li> </ul> <p>Dependency Changes</p> <ul> <li>update github.com/stretchr/testify to v1.12.0</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sirupsen/logrus/compare/v1.10.0...v1.10.1">https://github.com/sirupsen/logrus/compare/v1.10.0...v1.10.1</a></p> <h2>v1.10.0</h2> <h1>Logrus v1.10.0</h1> <p>This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.</p> <h2>🚀 Performance</h2> <p>Major improvements across <code>TextFormatter</code>, entry handling, and common logger paths:</p> <ul> <li>~17% lower geomean runtime across the benchmark suite</li> <li>~27% higher geomean formatter throughput</li> <li>Common enabled logging paths are ~30–44% faster</li> <li><code>WithError</code> is ~40% faster</li> <li>Chained fields are ~46% faster</li> <li><code>TextFormatter</code> paths are up to ~40% faster</li> <li>Allocation counts are reduced by ~25–74% across measured <code>TextFormatter</code> cases, with the largest reductions in colored output</li> </ul> <p>The improvements also show up in complete logger paths:</p> <ul> <li>Logger + <code>TextFormatter</code> is ~31% faster, with ~24% fewer allocations</li> <li>Logger + <code>JSONFormatter</code> is ~21% faster, with ~10% fewer allocations</li> </ul> <p><code>JSONFormatter</code> itself remains largely unchanged in runtime performance, with small allocation reductions.</p> <h2>🔄 <code>log/slog</code> interoperability</h2> <p>v1.10 adds bidirectional interoperability between Logrus and Go's <code>log/slog</code>:</p> <ul> <li>A Logrus <code>slog</code> hook can forward existing Logrus entries to an <code>slog</code> logger.</li> <li><code>hooks/slog.NewHandler</code> implements <code>slog.Handler</code>, allowing <code>log/slog</code> records to use an existing Logrus logger and its hooks, formatter, and output.</li> <li>The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.</li> <li>Caller reporting is configured per handler, without requiring Logrus's logger-wide <code>ReportCaller</code> option.</li> <li>Custom <code>slog</code> levels can be mapped to Logrus levels.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md">github.com/sirupsen/logrus's changelog</a>.</em></p> <blockquote> <h2>1.10.1</h2> <p>Fixes:</p> <ul> <li>Fix a regression introduced in v1.10.0 where <code>TextFormatter</code> could panic when formatting nil or panicking <code>error</code> and <code>fmt.Stringer</code> values.</li> <li>Allow function-backed implementations of <code>error</code> as field values.</li> </ul> <h2>1.10.0</h2> <p>Fixes:</p> <ul> <li>Fix reentrant logging deadlocks in formatter paths.</li> <li>Fix race conditions in formatter and entry handling.</li> <li>Fix generic <code>Log</code>, <code>Logf</code>, <code>Logln</code>, and <code>LogFn</code> methods unexpectedly panicking when called with <code>PanicLevel</code>. Use the corresponding <code>Panic</code> methods when panic behavior is desired.</li> <li>Improve concurrency safety around formatter and hook access.</li> </ul> <p>Features:</p> <ul> <li>Add <code>slog</code> hook for forwarding Logrus entries to <code>log/slog</code>.</li> <li>Add <code>slog.Handler</code> for forwarding <code>log/slog</code> records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and <code>log/slog</code>.</li> <li>Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.</li> <li>Allow <code>Entry.Caller</code> to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when <code>ReportCaller</code> is enabled.</li> </ul> <p>Changed:</p> <ul> <li>Raise minimum supported Go version to 1.23.</li> <li>TextFormatter now renders <code>[]byte</code> values as raw/quoted strings instead of slice-of-ints.</li> <li>TextFormatter now uses distinct dimmed colors for debug and trace output.</li> <li>TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.</li> <li><code>Entry.HasCaller</code> is now deprecated in favor of checking <code>Entry.Caller</code> directly.</li> <li>Deprecated <code>MutexWrap</code>, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used directly.</li> </ul> <p>Performance:</p> <ul> <li>Significantly improve TextFormatter performance and reduce allocations.</li> <li>Optimize common Entry and Logger hot paths.</li> <li>Reduce allocations in caller reporting.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sirupsen/logrus/commit/8b673a9eb3a8c1b130907b9677f8d431c9ab1ae7"><code>8b673a9</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1583">#1583</a> from thaJeztah/release_1.10.1</li> <li><a href="https://github.com/sirupsen/logrus/commit/0b920add8d9ba31342949f575067ea6024db81a6"><code>0b920ad</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1584">#1584</a> from thaJeztah/more_coverage</li> <li><a href="https://github.com/sirupsen/logrus/commit/5e20694a7ac51fa08cb4e4c72259aac0e70d0a68"><code>5e20694</code></a> TextFormatter: cover nil pointer method receivers</li> <li><a href="https://github.com/sirupsen/logrus/commit/83127326e4b798e5dab17e3593cc34f845592d49"><code>8312732</code></a> update changelog for v1.10.1</li> <li><a href="https://github.com/sirupsen/logrus/commit/e987a4036b7f045048922c0c96903d99bf827f70"><code>e987a40</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1582">#1582</a> from thaJeztah/panic_handler</li> <li><a href="https://github.com/sirupsen/logrus/commit/17d574b11e6e884800c2a8cfc6d3d134dcf4d452"><code>17d574b</code></a> TextFormatter: recover panics from Error and String methods</li> <li><a href="https://github.com/sirupsen/logrus/commit/134c80f81c9667a2d8c306f159d474857a20b735"><code>134c80f</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1579">#1579</a> from thaJeztah/err_handling</li> <li><a href="https://github.com/sirupsen/logrus/commit/7350f4218b62e4e3e6e17f96755570f21a5628f9"><code>7350f42</code></a> logger: WithError: wrap logger.WithError for consistency</li> <li><a href="https://github.com/sirupsen/logrus/commit/b3369d2b710f2c5ed1566d6844bd204093bc3627"><code>b3369d2</code></a> entry: allow function-backed error fields</li> <li><a href="https://github.com/sirupsen/logrus/commit/108008340c69fe5ecb526940d7d156d716f4b452"><code>1080083</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1578">#1578</a> from thaJeztah/err_handling_tests</li> <li>Additional commits viewable in <a href="https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.1">compare view</a></li> </ul> </details> <br /> Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/yaml/go-yaml/commit/e16c7af9361b241fa02d91582fb59ce4954d8afc"><code>e16c7af</code></a> Remove empty go.sum file</li> <li><a href="https://github.com/yaml/go-yaml/commit/6abcd0160a1b7862e1218e06f4c89c4def2e2ccc"><code>6abcd01</code></a> Fix unhandled nil-errors in tests</li> <li><a href="https://github.com/yaml/go-yaml/commit/9481db7e399de284a2a4724a99ba72e5c091dcc5"><code>9481db7</code></a> Remove suite_test.go and gopkg.in/check.v1</li> <li><a href="https://github.com/yaml/go-yaml/commit/485f5fc46209ae5a04a2f65625666abfa2aeb6e8"><code>485f5fc</code></a> Use standard testing library for limit_test.go</li> <li><a href="https://github.com/yaml/go-yaml/commit/3e00046fba48895c457783532df04393f6838a44"><code>3e00046</code></a> Use standard testing library for node_test.go</li> <li><a href="https://github.com/yaml/go-yaml/commit/f6120587935491ae18b92f865105229b55dca89a"><code>f612058</code></a> Use standard testing library for decode_test.go</li> <li><a href="https://github.com/yaml/go-yaml/commit/078f958bf3468c154fef918c86d8494672e4650a"><code>078f958</code></a> Use standard testing library encode_test.go</li> <li><a href="https://github.com/yaml/go-yaml/commit/3847ac025d0626dfea2709ad6f8c2af4ef275bae"><code>3847ac0</code></a> [v3] backport CodeQL workflow</li> <li><a href="https://github.com/yaml/go-yaml/commit/16666636982f355faae9bccd3f85d1bf352b18d1"><code>1666663</code></a> Revert incorrect gofmt changes</li> <li><a href="https://github.com/yaml/go-yaml/commit/73290cb4afb161a1276969b4f21a7b6f6e1111b0"><code>73290cb</code></a> Retract v3 tags that cannot be installed</li> <li>See full diff in <a href="https://github.com/yaml/go-yaml/compare/v3.0.4...v3.0.5">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/text` from 0.40.0 to 0.41.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/text/commit/acdba6655fd45cdb5ab73c9d6a8981333bd65a39"><code>acdba66</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/text/commit/02aa981a75cb366b39e71729b935c15a7b4e146a"><code>02aa981</code></a> secure/precis: fix short destination buffer handling in Nickname profile</li> <li>See full diff in <a href="https://github.com/golang/text/compare/v0.40.0...v0.41.0">compare view</a></li> </ul> </details> <br /> Updates `google.golang.org/grpc` from 1.83.0 to 1.83.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.83.1</h2> <h1>Security</h1> <ul> <li>xds/rbac: Fix a bug where nested <code>Principal</code> or <code>Permission</code> rules with <code>:scheme</code> or <code>grpc-</code> prefixed header matchers were not rejected, which could cause DENY rules to fail open. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9258">#9258</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug"><code>@nvxbug</code></a></li> </ul> </li> <li>xds/rbac: Fix a bug where the <code>host</code> header matcher was not being replaced with <code>:authority</code> in nested <code>Principal</code> or <code>Permission</code> rules. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9258">#9258</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug"><code>@nvxbug</code></a></li> </ul> </li> <li>xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as <code>X-Role</code>, matched no header, which could cause DENY rules to fail open. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a>) <ul> <li>Special Thanks: <a href="https://github.com/alimony"><code>@alimony</code></a></li> </ul> </li> <li>xds/rbac: Fix a bug where a <code>:scheme</code> or <code>grpc-</code> prefixed header matcher was accepted when its name was not lowercase. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a>) <ul> <li>Special Thanks: <a href="https://github.com/alimony"><code>@alimony</code></a></li> </ul> </li> <li>xds/rbac: Fix a bug where a <code>Host</code> header matcher was not replaced with <code>:authority</code>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a>) <ul> <li>Special Thanks: <a href="https://github.com/alimony"><code>@alimony</code></a></li> </ul> </li> </ul> <h1>Performance</h1> <ul> <li>transport: Restrict memory overhead of buffering small data frames. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9331">#9331</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/1550d9e0cddb30ce99e61a2102e8294a49461e5e"><code>1550d9e</code></a> Change version to 1.83.1 (<a href="https://redirect.github.com/grpc/grpc-go/issues/9336">#9336</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/ebba6f3f1b206e2b4dc4d1d5a96d18430302c2fe"><code>ebba6f3</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/9258">#9258</a> and <a href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a> into v1.83.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9335">#9335</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77"><code>8cfeca0</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/9331">#9331</a> to v1.83.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9333">#9333</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/dec6951305e88906696f1d0a00dd2439363bc708"><code>dec6951</code></a> Change version to 1.83.1-dev (<a href="https://redirect.github.com/grpc/grpc-go/issues/9229">#9229</a>)</li> <li>See full diff in <a href="https://github.com/grpc/grpc-go/compare/v1.83.0...v1.83.1">compare view</a></li> </ul> </details> <br /> Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 Updates `github.com/microsoft/go-mssqldb` from 1.10.0 to 1.11.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/go-mssqldb/releases">github.com/microsoft/go-mssqldb's releases</a>.</em></p> <blockquote> <h2>v1.11.0</h2> <h2><a href="https://github.com/microsoft/go-mssqldb/compare/v1.10.0...v1.11.0">1.11.0</a> (2026-08-23)</h2> <h3>Features</h3> <ul> <li>add ADO.Net connection string synonyms (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/374">#374</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/d72f750358c4370852fc73cdda9f7f83b53903ff">d72f750</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>clarify NTLM URL encoding for URL DSNs (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/378">#378</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/551d62231613700aca651cb5b778cdc1db584893">551d622</a>)</li> <li>close TCP connection on all connect() error paths (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/367">#367</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/0e13fee2c0bf0efd38803976171cb30d1bc961ad">0e13fee</a>)</li> <li><strong>isProc:</strong> add <code>REVERT</code> builtin command (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/393">#393</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/31a9659ac4763e622fc9fbae6fcff44f30760164">31a9659</a>)</li> <li>prevent NTLM challenge out-of-bounds panic (DoS) (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/411">#411</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/81df9834c92c7709cdc180c92f8d9a06b9710981">81df983</a>)</li> <li>prevent panic on overflowing PRELOGIN option offset and length (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/415">#415</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/802d9f154ab83d7fb88d56f135f20787f5871f15">802d9f1</a>)</li> <li>prevent SQL Browser DAC response parsing panic (DoS) (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/414">#414</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/bc4cbf28590fba2f19fb0dfe7cf77891dddb1e1d">bc4cbf2</a>)</li> <li>quote table name and ORDER columns in bulk copy (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/416">#416</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/f925c5343a0fda33276785b765e5571dead35e15">f925c53</a>)</li> <li>replace deprecated reflect.SliceHeader with unsafe.Slice (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/366">#366</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/836048ac320da5b92d1c0f7038ba5ac562768f10">836048a</a>), closes <a href="https://redirect.github.com/microsoft/go-mssqldb/issues/272">#272</a></li> <li>return float64 for REAL columns in readFixedType (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/381">#381</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/abddba82884f2b672b88088a1849cb547194a27d">abddba8</a>)</li> <li>strip port from AKV URLs for AllowedLocations and endpoint (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/369">#369</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/7fab98a2b5b3d57b933a554b6abe15114b5857b3">7fab98a</a>)</li> <li><strong>types:</strong> cap initial PLP buffer allocation (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/409">#409</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/f0882915fbf71953d3251bd7482325dd62924050">f088291</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li>add comprehensive benchmark suite with CI regression detection (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/376">#376</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/b9354415013929850e1a48856661d1109be661a9">b935441</a>)</li> <li>fast path for pure ASCII decoding in CharsetToUTF8 (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/431">#431</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/db5179626672ada427888117b399963d2c3a642b">db51796</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md">github.com/microsoft/go-mssqldb's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/microsoft/go-mssqldb/compare/v1.10.0...v1.11.0">1.11.0</a> (2026-08-23)</h2> <h3>Features</h3> <ul> <li>add ADO.Net connection string synonyms (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/374">#374</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/d72f750358c4370852fc73cdda9f7f83b53903ff">d72f750</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>clarify NTLM URL encoding for URL DSNs (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/378">#378</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/551d62231613700aca651cb5b778cdc1db584893">551d622</a>)</li> <li>close TCP connection on all connect() error paths (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/367">#367</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/0e13fee2c0bf0efd38803976171cb30d1bc961ad">0e13fee</a>)</li> <li><strong>isProc:</strong> add <code>REVERT</code> builtin command (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/393">#393</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/31a9659ac4763e622fc9fbae6fcff44f30760164">31a9659</a>)</li> <li>prevent NTLM challenge out-of-bounds panic (DoS) (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/411">#411</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/81df9834c92c7709cdc180c92f8d9a06b9710981">81df983</a>)</li> <li>prevent panic on overflowing PRELOGIN option offset and length (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/415">#415</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/802d9f154ab83d7fb88d56f135f20787f5871f15">802d9f1</a>)</li> <li>prevent SQL Browser DAC response parsing panic (DoS) (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/414">#414</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/bc4cbf28590fba2f19fb0dfe7cf77891dddb1e1d">bc4cbf2</a>)</li> <li>quote table name and ORDER columns in bulk copy (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/416">#416</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/f925c5343a0fda33276785b765e5571dead35e15">f925c53</a>)</li> <li>replace deprecated reflect.SliceHeader with unsafe.Slice (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/366">#366</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/836048ac320da5b92d1c0f7038ba5ac562768f10">836048a</a>), closes <a href="https://redirect.github.com/microsoft/go-mssqldb/issues/272">#272</a></li> <li>return float64 for REAL columns in readFixedType (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/381">#381</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/abddba82884f2b672b88088a1849cb547194a27d">abddba8</a>)</li> <li>strip port from AKV URLs for AllowedLocations and endpoint (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/369">#369</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/7fab98a2b5b3d57b933a554b6abe15114b5857b3">7fab98a</a>)</li> <li><strong>types:</strong> cap initial PLP buffer allocation (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/409">#409</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/f0882915fbf71953d3251bd7482325dd62924050">f088291</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li>add comprehensive benchmark suite with CI regression detection (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/376">#376</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/b9354415013929850e1a48856661d1109be661a9">b935441</a>)</li> <li>fast path for pure ASCII decoding in CharsetToUTF8 (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/431">#431</a>) (<a href="https://github.com/microsoft/go-mssqldb/commit/db5179626672ada427888117b399963d2c3a642b">db51796</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/go-mssqldb/commit/ecf85606f8cfedae0be026042581596a92642edd"><code>ecf8560</code></a> chore(main): release 1.11.0 (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/380">#380</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/68c1f2881a02ccf279f9f3b26eedd000810ba3bf"><code>68c1f28</code></a> test: add TDS response fuzz harness and end-to-end target (layer 1/4) (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/419">#419</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/46b5c6acf6bac5ff9836e6ac1dab45f39ecbd881"><code>46b5c6a</code></a> chore(deps): bump the golang-x group across 1 directory with 2 updates (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/433">#433</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/5e6cedb53122dd6fe373fc4ed951e4d88a1f64f3"><code>5e6cedb</code></a> ci: run appveyor on SQL Server 2025 and drop the duplicate job (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/436">#436</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/ae25ae5725f31a0d83a46333e957de87f3a78f41"><code>ae25ae5</code></a> ci: test the supported Go releases and drop the EOL toolchain pin (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/439">#439</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/6f21949ccc8c3e19491fe70338c94008f4de02ba"><code>6f21949</code></a> chore(deps): bump github.com/stretchr/testify in the testing group (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/434">#434</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/8bb55efebf2760aae814f8976f8fd86da2d96d9f"><code>8bb55ef</code></a> chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/432">#432</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/db5179626672ada427888117b399963d2c3a642b"><code>db51796</code></a> perf: fast path for pure ASCII decoding in CharsetToUTF8 (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/431">#431</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/f925c5343a0fda33276785b765e5571dead35e15"><code>f925c53</code></a> fix: quote table name and ORDER columns in bulk copy (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/416">#416</a>)</li> <li><a href="https://github.com/microsoft/go-mssqldb/commit/bc4cbf28590fba2f19fb0dfe7cf77891dddb1e1d"><code>bc4cbf2</code></a> fix: prevent SQL Browser DAC response parsing panic (DoS) (<a href="https://redirect.github.com/microsoft/go-mssqldb/issues/414">#414</a>)</li> <li>Additional commits viewable in <a href="https://github.com/microsoft/go-mssqldb/compare/v1.10.0...v1.11.0">compare view</a></li> </ul> </details> <br /> Updates `github.com/rogpeppe/go-internal` from 1.15.0 to 1.16.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rogpeppe/go-internal/commit/49d4e9ddb921430d6bb9ed28aeafc16676a18c65"><code>49d4e9d</code></a> testscript/plugin: new package (<a href="https://redirect.github.com/rogpeppe/go-internal/issues/307">#307</a>)</li> <li><a href="https://github.com/rogpeppe/go-internal/commit/b82995bfb9f2a89a0cb6ef37b3c4da096c1a87fc"><code>b82995b</code></a> testscript: add dynamic command capability (<a href="https://redirect.github.com/rogpeppe/go-internal/issues/306">#306</a>)</li> <li><a href="https://github.com/rogpeppe/go-internal/commit/5cab5df19260dc7e91f4ae9d2d41d0cbe300b70b"><code>5cab5df</code></a> goproxytest: make .mod and .info files optional (<a href="https://redirect.github.com/rogpeppe/go-internal/issues/305">#305</a>)</li> <li>See full diff in <a href="https://github.com/rogpeppe/go-internal/compare/v1.15.0...v1.16.0">compare view</a></li> </ul> </details> <br /> Updates `github.com/testcontainers/testcontainers-go` from 0.43.0 to 0.44.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/testcontainers/testcontainers-go/releases">github.com/testcontainers/testcontainers-go's releases</a>.</em></p> <blockquote> <h2>v0.44.0</h2> <h1>What's Changed</h1> <h2>🔒 Security</h2> <ul> <li>security: fix Dependabot alerts for grpc and OTel (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3835">#3835</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> </ul> <h2>🚀 Features</h2> <ul> <li>feat: allow overriding the session ID (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3051">#3051</a>) <a href="https://github.com/jcmfernandes"><code>@jcmfernandes</code></a></li> <li>feat: add Azure SQL Edge module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3787">#3787</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add S3Mock module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3781">#3781</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Fake-GCS-Server module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3770">#3770</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Typesense module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3786">#3786</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Firebird module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3771">#3771</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add CouchDB module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3768">#3768</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Mosquitto module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3774">#3774</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Papercut-SMTP module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3777">#3777</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Timeplus module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3784">#3784</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Solr module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3783">#3783</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add SFTP module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3782">#3782</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add RavenDB module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3780">#3780</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add QuestDB module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3779">#3779</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Presto module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3778">#3778</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add OrientDB module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3776">#3776</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Nginx module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3775">#3775</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Mailpit module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3773">#3773</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add Trino module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3785">#3785</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add KurrentDB module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3772">#3772</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add CrateDB module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3769">#3769</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add ActiveMQ Classic module (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3767">#3767</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>feat: add ability to chain WithConfigModifier, WithEndpointSettingsModifier and WithHostConfigModifier (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3733">#3733</a>) <a href="https://github.com/LaurentGoderre"><code>@LaurentGoderre</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>fix: escape the container name in the Docker name filter (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3837">#3837</a>) <a href="https://github.com/jcmfernandes"><code>@jcmfernandes</code></a></li> <li>fix: should print max information by default (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3459">#3459</a>) <a href="https://github.com/strowk"><code>@strowk</code></a></li> <li>fix: read exec exit code only after draining the output stream (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3766">#3766</a>) <a href="https://github.com/dean-island"><code>@dean-island</code></a></li> <li>fix: properly wait for Ryuk startup when reusing reaper (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3761">#3761</a>) <a href="https://github.com/karsov"><code>@karsov</code></a></li> <li>fix(openfga): remove playground wait from Run and up image to v1.18.0 (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3745">#3745</a>) <a href="https://github.com/selvakannanjr"><code>@selvakannanjr</code></a></li> </ul> <h2>📖 Documentation</h2> <ul> <li>docs: fix incomplete CleanupContainer documentation (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3826">#3826</a>) <a href="https://github.com/Hashim1999164"><code>@Hashim1999164</code></a></li> <li>docs: fix typo in SkipIfProviderIsNotHealthy docstring (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3764">#3764</a>) <a href="https://github.com/salandered"><code>@salandered</code></a></li> <li>chore: update modules usage metrics (2026-07) (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3759">#3759</a>) @<a href="https://github.com/apps/github-actions">github-actions[bot]</a></li> <li>chore: update usage metrics (2026-07) (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3757">#3757</a>) @<a href="https://github.com/apps/github-actions">github-actions[bot]</a></li> <li>chore(metrics): usage metrics for modules (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3737">#3737</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> <li>docs(site): add missing languages and reorder docs navigation (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3735">#3735</a>) <a href="https://github.com/mdelapenya"><code>@mdelapenya</code></a></li> </ul> <h2>🧹 Housekeeping</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/007bd6b1407fe3f2ab9487479e8bd841e16a1c97"><code>007bd6b</code></a> chore: use new version (v0.44.0) in modules and examples</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/6fdd2fd00ad94cd3dbf2f5cecf74fc96e170843a"><code>6fdd2fd</code></a> feat: allow overriding the session ID (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3051">#3051</a>)</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/0cfd2f94624f299772a3d5a481933e1799948769"><code>0cfd2f9</code></a> chore(deps): bump slackapi/slack-github-action from 3.0.3 to 4.0.0 (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3788">#3788</a>)</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/5dda4cd7fe5fb6236e759a68c97b49520a3440fa"><code>5dda4cd</code></a> chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3789">#3789</a>)</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/8cfecf926c89cc05ac8975e3ce6c06c60a972e6e"><code>8cfecf9</code></a> chore(deps): bump docker/setup-docker-action from 5.1.0 to 5.4.0 (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3790">#3790</a>)</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/1d054f65b267de328a85dc3a297ba6efa547e1b4"><code>1d054f6</code></a> fix: escape the container name in the Docker name filter (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3837">#3837</a>)</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/2f869d63aff281becff0e71429a6c3fc7aaba0ba"><code>2f869d6</code></a> fix: should print max information by default (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3459">#3459</a>)</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/62941e8563efc64a06513ce68e9abc441cd66baa"><code>62941e8</code></a> chore(azurite): tidy module dependencies (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3838">#3838</a>)</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/632ee7bb3a4ef83c2945ea271b210c5bb0d8e957"><code>632ee7b</code></a> security: fix Dependabot alerts for grpc and OTel (<a href="https://redirect.github.com/testcontainers/testcontainers-go/issues/3835">#3835</a>)</li> <li><a href="https://github.com/testcontainers/testcontainers-go/commit/caa68c6c38710ed997f08f6b144f932195e2f8f9"><code>caa68c6</code></a> chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1...</li> <li>Additional commits viewable in <a href="https://github.com/testcontainers/testcontainers-go/compare/v0.43.0...v0.44.0">compare view</a></li> </ul> </details> <br /> Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 Updates `modernc.org/sqlite` from 1.55.0 to 1.57.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md">modernc.org/sqlite's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <ul> <li> <p>2026-08-19 v1.57.0:</p> <ul> <li>Add an opt-in <code>_defensive</code> DSN query parameter that turns on SQLite's defensive mode for the connection, disabling the SQL-level features that let ordinary statements deliberately corrupt the database file. When <code>_defensive=1</code> (or any <code>strconv.ParseBool</code> true value) is supplied, the driver calls <code>sqlite3_db_config</code> with <code>SQLITE_DBCONFIG_DEFENSIVE</code> immediately after <code>sqlite3_open_v2</code> and before every other parameter is applied, so the PRAGMAs the driver itself runs, the <code>_pragma</code> list, and every statement the caller prepares are all subject to it. On such a connection <code>PRAGMA writable_schema=ON</code>, <code>PRAGMA journal_mode=OFF</code> and <code>PRAGMA schema_version=N</code> become silent no-ops, and writes to a virtual table's shadow tables (fts5's <code>_data</code>, <code>_idx</code> and so on) and to <code>sqlite_dbpage</code> fail with "table ... may not be modified"; reading those tables, ordinary use of the virtual tables that own them, and <code>VACUUM</code> are unaffected. The flag has no PRAGMA equivalent, so <code>sqlite3_db_config</code> — and therefore a DSN parameter — is the only way to reach it short of dropping to <code>modernc.org/sqlite/lib</code>. The value is parsed before <code>sqlite3_open_v2</code>, so an invalid one fails the connection without creating the database file, and the parameter must appear at most once: a repeated <code>_defensive</code> is an error rather than letting the first value silently win. Absence of the parameter, or <code>_defensive=0</code>, leaves SQLite's default behavior unchanged; existing DSNs continue to work byte-for-byte. Two limits are worth stating plainly, since the name invites more confidence than the flag earns. Defensive mode is a hardening measure, not a sandbox for hostile database files: it is one of several steps <a href="https://www.sqlite.org/security.html">SQLite recommends</a> for that purpose, and this build compiles with neither <code>SQLITE_TRUSTED_SCHEMA=0</code> nor <code>SQLITE_DQS=0</code> and exposes no authorizer. And it is a property of the connection, not of the database file — a second handle opened on the same file without the parameter is unrestricted.</li> <li>Reject the one DSN combination defensive mode would otherwise swallow in silence. <code>_defensive=1</code> together with <code>_journal_mode=OFF</code> (or <code>_journal=OFF</code>) now fails the connection instead of opening one in which neither parameter was honoured: SQLite turns <code>PRAGMA journal_mode=OFF</code> into a no-op that still reports success, so the driver would have accepted the mode, executed it, and left the journal untouched without telling anyone. The check runs in the validation phase introduced in v1.55.0, before any statement executes, so a rejected DSN cannot leave the database half-configured. <code>_pragma</code> remains the exception it has always been: <code>_pragma=journal_mode(OFF)</code> alongside <code>_defensive=1</code> still runs and is still silently ignored by SQLite. Only DSNs using <code>_defensive</code> can be affected, and that parameter is new, so no DSN that opened before changes behavior.</li> <li>See [GitHub pull request <a href="https://gitlab.com/cznic/sqlite/-/work_items/6">#6</a>](<a href="https://redirect.github.com/modernc-org/sqlite/pull/6">modernc-org/sqlite#6</a>), thanks wsman!</li> <li>Ship the sqlite-vec license notice this module has been missing. <code>modernc.org/sqlite/vec</code> has bundled the transpiled <a href="https://github.com/asg017/sqlite-vec">sqlite-vec</a> sources since v1.47.0, but the module carried only its own BSD-3-Clause <code>LICENSE</code> and the public-domain SQLite notice. sqlite-vec is Copyright (c) 2024 Alex Garcia, dual-licensed Apache-2.0 OR MIT and used here under MIT, whose terms require the copyright and permission notice to accompany substantial portions of the software — which 2.8 MB of transpiled <code>vec/</code> plainly is. The notice now ships as <code>LICENSE-SQLITE_VEC</code> in the module root, byte-identical to the <code>LICENSE-MIT</code> in the upstream v0.1.9 archive and named after the file <code>modernc.org/libsqlite_vec</code> extracts it into. Attribution was never absent — <code>vec</code>'s package documentation has named the extension, pinned the version and linked upstream — but the license text itself was, and the omission was ours: <code>vendor_libs/main.go</code> copied the per-target transpiles and nothing else. It now copies the notice alongside them and fails the vendoring run if it cannot, so a <code>make vendor</code> can no longer quietly drop it. The <code>vec</code> package documentation gained a License section recording that the package is under a different license from the rest of this module.</li> <li><strong>The SQLite notice is renamed from <code>SQLITE-LICENSE</code> to <code>LICENSE-SQLITE</code></strong>; update any direct links to it. Its contents are unchanged and SQLite remains public domain. The name now matches both the new <code>LICENSE-SQLITE_VEC</code> beside it and the <code>LICENSE-<upstream></code> convention every other modernc.org repository follows, but it is more than cosmetic: <code>go mod vendor</code> selects the files it copies into a downstream <code>vendor/</code> tree by matching each name against a fixed list of prefixes — <code>LICENSE</code> among them — so a name merely <em>ending</em> in <code>LICENSE</code> was never propagated. Both bundled notices now travel with the code into vendored builds, which is where the MIT terms on <code>vec/</code> keep applying. No code changes; no behavior changes.</li> <li>Let a caller-constructed <code>Driver</code> register its own functions, collations and virtual table modules. <code>Driver</code> has always held four categories of registration state, but only <code>RegisterConnectionHook</code> could put anything on a constructed one: functions and collations were reachable through the package-level API alone, and modules through the package-level driver only, which left the <code>modules</code> field written and read through that instance and so process-global state wearing a per-instance field. <code>Driver</code> now has <code>RegisterFunction</code>, <code>RegisterScalarFunction</code>, <code>RegisterDeterministicScalarFunction</code>, <code>RegisterCollationUtf8</code> and <code>RegisterModule</code>, plus <code>Must*</code> variants of the first four, each registering on that <code>Driver</code> alone; the methods are safe to call concurrently, and the zero <code>Driver</code> is ready to use as-is. <code>vtab.RegisterModule</code> also honours its <code>db</code> argument now: a non-nil <code>db</code> registers on the driver backing it when that driver implements the new <code>vtab.ModuleRegisterer</code>, while a nil <code>db</code> keeps targeting the driver this package registers as <code>sqlite</code>. One existing pattern changes behavior, narrowly and loudly: <code>vtab.RegisterModule(db, ...)</code> where <code>db</code> was opened on a caller-constructed <code>Driver</code> used to discard the <code>db</code> argument and land on the <code>sqlite</code> driver, reaching every connection in the process; it now lands on the constructed driver alone, so a <code>sql.Open("sqlite")</code> connection that used to resolve such a module gets <code>no such module</code> instead. The same pattern is also the one way an existing program could hold one module name on both a constructed <code>Driver</code> and the package-level one: there the first of the two registrations used to win and the second was refused as already registered, whereas now the package-level implementation wins on the constructed <code>Driver</code>'s connections regardless of the order they ran in. Reaching that case at all means the program ignored an error the older version returned. Two smaller deviations round out the list: <code>Driver.RegisterModule</code> reports no error for such a collision, and <code>vtab.RegisterModule</code> now validates its name and module arguments before the not-implemented check, so a call with an empty nam... _Description has been truncated_ --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Sebastian Spaink <sebastianspaink@gmail.com>
D
dependabot[bot] committed
88c2ee0cdc9087ab1c3f09b95fa2b9ba5c8f69f5
Parent: 6913f18
Committed by GitHub <noreply@github.com>
on 9/1/2026, 7:44:53 PM