build(deps): bump the go_modules group across 6 directories with 6 updates by dependabot[bot] · Pull Request #189 · Gaucho-Racing/Mapache · GitHub

Bumps the go_modules group with 3 updates in the /auth directory: github.com/golang-jwt/jwt/v4, github.com/jackc/pgx/v5 and github.com/quic-go/quic-go.
Bumps the go_modules group with 2 updates in the /foreman directory: github.com/jackc/pgx/v5 and github.com/quic-go/quic-go.
Bumps the go_modules group with 2 updates in the /gr24 directory: golang.org/x/crypto and github.com/eclipse/paho.mqtt.golang.
Bumps the go_modules group with 2 updates in the /gr25 directory: golang.org/x/crypto and github.com/eclipse/paho.mqtt.golang.
Bumps the go_modules group with 1 update in the /gr26 directory: github.com/quic-go/quic-go.
Bumps the go_modules group with 2 updates in the /vehicle directory: github.com/jackc/pgx/v5 and github.com/quic-go/quic-go.

Updates github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

Release notes

Sourced from github.com/golang-jwt/jwt/v4's releases.

v4.5.2

See GHSA-mh63-6h87-95cp

Full Changelog: golang-jwt/jwt@v4.5.1...v4.5.2

Commits

2f0e9ad Backporting 0951d18 to v4
See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.6.0 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

The non-default simple protocol is used.

A dollar quoted string literal is used in the SQL query.

That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.

The value of that placeholder is controllable by the attacker.

e.g.
attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)
This is unlikely to occur outside of a contrived scenario.

5.9.1 (March 22, 2026)

Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)

5.9.0 (March 21, 2026)

This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.

It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.

It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.

Require Go 1.25+

Add SCRAM-SHA-256-PLUS support (Adam Brightwell)

Add OAuth authentication support for PostgreSQL 18 (David Schneider)

Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)

Add tsvector type support (Adam Brightwell)

Skip Describe Portal for cached prepared statements reducing network round trips

Make LoadTypes query easier to support on "postgres-like" servers (Jelte Fennema-Nio)

Default empty user to current OS user matching libpq behavior (ShivangSrivastava)

Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)

Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)

Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)

Make RowsAffected faster (Abhishek Chanda)

Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)

Fix: ContextWatcher goroutine leak (Hank Donnay)

Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)

... (truncated)

Commits

0aeabbc Release v5.9.2
60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
e34e452 doc: Add godoc links
08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
96b4dbd Remove unstable test
acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
2f81f1f Update max_protocol_version and min_protocol_version defaults
4e4eaed Release v5.9.1
6273188 Fix batch result format corruption when using cached prepared statements
Additional commits viewable in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.59.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.1

This patch release backports quic-go/quic-go#5642, which adds validation for HTTP/3 trailers.

Commits

438abf0 http3: implement trailer validation logic (#5642)
See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.6.0 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

The non-default simple protocol is used.

A dollar quoted string literal is used in the SQL query.

That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.

The value of that placeholder is controllable by the attacker.

e.g.
attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)
This is unlikely to occur outside of a contrived scenario.

5.9.1 (March 22, 2026)

Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)

5.9.0 (March 21, 2026)

This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.

It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.

It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.

Require Go 1.25+

Add SCRAM-SHA-256-PLUS support (Adam Brightwell)

Add OAuth authentication support for PostgreSQL 18 (David Schneider)

Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)

Add tsvector type support (Adam Brightwell)

Skip Describe Portal for cached prepared statements reducing network round trips

Make LoadTypes query easier to support on "postgres-like" servers (Jelte Fennema-Nio)

Default empty user to current OS user matching libpq behavior (ShivangSrivastava)

Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)

Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)

Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)

Make RowsAffected faster (Abhishek Chanda)

Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)

Fix: ContextWatcher goroutine leak (Hank Donnay)

Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)

... (truncated)

Commits

0aeabbc Release v5.9.2
60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
e34e452 doc: Add godoc links
08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
96b4dbd Remove unstable test
acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
2f81f1f Update max_protocol_version and min_protocol_version defaults
4e4eaed Release v5.9.1
6273188 Fix batch result format corruption when using cached prepared statements
Additional commits viewable in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.59.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.1

This patch release backports quic-go/quic-go#5642, which adds validation for HTTP/3 trailers.

Commits

438abf0 http3: implement trailer validation logic (#5642)
See full diff in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.59.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.1

This patch release backports quic-go/quic-go#5642, which adds validation for HTTP/3 trailers.

Commits

438abf0 http3: implement trailer validation logic (#5642)
See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.6.0 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

The non-default simple protocol is used.

A dollar quoted string literal is used in the SQL query.

That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.

The value of that placeholder is controllable by the attacker.

e.g.
attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)
This is unlikely to occur outside of a contrived scenario.

5.9.1 (March 22, 2026)

Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)

5.9.0 (March 21, 2026)

This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.

It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.

It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.

Require Go 1.25+

Add SCRAM-SHA-256-PLUS support (Adam Brightwell)

Add OAuth authentication support for PostgreSQL 18 (David Schneider)

Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)

Add tsvector type support (Adam Brightwell)

Skip Describe Portal for cached prepared statements reducing network round trips

Make LoadTypes query easier to support on "postgres-like" servers (Jelte Fennema-Nio)

Default empty user to current OS user matching libpq behavior (ShivangSrivastava)

Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)

Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)

Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)

Make RowsAffected faster (Abhishek Chanda)

Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)

Fix: ContextWatcher goroutine leak (Hank Donnay)

Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)

... (truncated)

Commits

0aeabbc Release v5.9.2
60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
e34e452 doc: Add godoc links
08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
96b4dbd Remove unstable test
acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
2f81f1f Update max_protocol_version and min_protocol_version defaults
4e4eaed Release v5.9.1
6273188 Fix batch result format corruption when using cached prepared statements
Additional commits viewable in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.59.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.1

This patch release backports quic-go/quic-go#5642, which adds validation for HTTP/3 trailers.

Commits

438abf0 http3: implement trailer validation logic (#5642)
See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.6.0 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

The non-default simple protocol is used.

A dollar quoted string literal is used in the SQL query.

That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.

The value of that placeholder is controllable by the attacker.

e.g.
attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)
This is unlikely to occur outside of a contrived scenario.

5.9.1 (March 22, 2026)

Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)

5.9.0 (March 21, 2026)

This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.

It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.

It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.

Require Go 1.25+

Add SCRAM-SHA-256-PLUS support (Adam Brightwell)

Add OAuth authentication support for PostgreSQL 18 (David Schneider)

Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)

Add tsvector type support (Adam Brightwell)

Skip Describe Portal for cached prepared statements reducing network round trips

Make LoadTypes query easier to support on "postgres-like" servers (Jelte Fennema-Nio)

Default empty user to current OS user matching libpq behavior (ShivangSrivastava)

Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)

Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)

Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)

Make RowsAffected faster (Abhishek Chanda)

Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)

Fix: ContextWatcher goroutine leak (Hank Donnay)

Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)

... (truncated)

Commits

0aeabbc Release v5.9.2
60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
e34e452 doc: Add godoc links
08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
96b4dbd Remove unstable test
acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
2f81f1f Update max_protocol_version and min_protocol_version defaults
4e4eaed Release v5.9.1
6273188 Fix batch result format corruption when using cached prepared statements
Additional commits viewable in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.59.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.1

This patch release backports quic-go/quic-go#5642, which adds validation for HTTP/3 trailers.

Commits

438abf0 http3: implement trailer validation logic (#5642)
See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.6.0 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

The non-default simple protocol is used.

A dollar quoted string literal is used in the SQL query.

That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.

The value of that placeholder is controllable by the attacker.

e.g.
attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)
This is unlikely to occur outside of a contrived scenario.

5.9.1 (March 22, 2026)

Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)

5.9.0 (March 21, 2026)

This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.

It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.

It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.

Require Go 1.25+

Add SCRAM-SHA-256-PLUS support (Adam Brightwell)

Add OAuth authentication support for PostgreSQL 18 (David Schneider)

Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)

Add tsvector type support (Adam Brightwell)

Skip Describe Portal for cached prepared statements reducing network round trips

Make LoadTypes query easier to support on "postgres-like" servers (Jelte Fennema-Nio)

Default empty user to current OS user matching libpq behavior (ShivangSrivastava)

Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)

Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)

Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)

Make RowsAffected faster (Abhishek Chanda)

Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)

Fix: ContextWatcher goroutine leak (Hank Donnay)

Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)

... (truncated)

Commits

0aeabbc Release v5.9.2
60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
e34e452 doc: Add godoc links
08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
96b4dbd Remove unstable test
acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
2f81f1f Update max_protocol_version and min_protocol_version defaults
4e4eaed Release v5.9.1
6273188 Fix batch result format corruption when using cached prepared statements
Additional commits viewable in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.59.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.1

This patch release backports quic-go/quic-go#5642, which adds validation for HTTP/3 trailers.

Commits

438abf0 http3: implement trailer validation logic (#5642)
See full diff in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.59.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.1

This patch release backports quic-go/quic-go#5642, which adds validation for HTTP/3 trailers.

Commits

438abf0 http3: implement trailer validation logic (#5642)
See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.6.0 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

The non-default simple protocol is used.

A dollar quoted string literal is used in the SQL query.

That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.

The value of that placeholder is controllable by the attacker.

e.g.
attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)
This is unlikely to occur outside of a contrived scenario.

5.9.1 (March 22, 2026)

Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)

5.9.0 (March 21, 2026)

This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.

It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.

It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.

Require Go 1.25+

Add SCRAM-SHA-256-PLUS support (Adam Brightwell)

Add OAuth authentication support for PostgreSQL 18 (David Schneider)

Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)

Add tsvector type support (Adam Brightwell)

Skip Describe Portal for cached prepared statements reducing network round trips

Make LoadTypes query easier to support on "postgres-like" servers (Jelte Fennema-Nio)

Default empty user to current OS user matching libpq behavior (ShivangSrivastava)

Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)

Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)

Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)

Make RowsAffected faster (Abhishek Chanda)

Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)

Fix: ContextWatcher goroutine leak (Hank Donnay)

Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)

... (truncated)

Commits

0aeabbc Release v5.9.2
60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
e34e452 doc: Add godoc links
08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
96b4dbd Remove unstable test
acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
2f81f1f Update max_protocol_version and min_protocol_version defaults
4e4eaed Release v5.9.1
6273188 Fix batch result format corruption when using cached prepared statements
Additional commits viewable in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.59.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.1

This patch release backports quic-go/quic-go#5642, which adds validation for HTTP/3 trailers.

Commits

438abf0 http3: implement trailer validation logic (#5642)
See full diff in compare view

Updates golang.org/x/crypto from 0.23.0 to 0.45.0

Commits

4e0068c go.mod: update golang.org/x dependencies
e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
f91f7a7 ssh/agent: prevent panic on malformed constraint
2df4153 acme/autocert: let automatic renewal work with short lifetime certs
bcf6a84 acme: pass context to request
b4f2b62 ssh: fix error message on unsupported cipher
79ec3a5 ssh: allow to bind to a hostname in remote forwarding
122a78f go.mod: update golang.org/x dependencies
c0531f9 all: eliminate vet diagnostics
0997000 all: fix some comments
Additional commits viewable in compare view

Updates golang.org/x/net from 0.25.0 to 0.47.0

Commits

9a29643 go.mod: update golang.org/x dependencies
07cefd8 context: deprecate
5ac9dac publicsuffix: don't treat ip addresses as domain names
d1f64cc quic: use testing/synctest
fff0469 http2: document that RFC 7540 prioritization does not work with small payloads
f35e3a4 http2: fix weight overflow in RFC 7540 write scheduler
89adc90 http2: fix typo referring to RFC 9218 as RFC 9128 instead
8d76a2c quic: don't defer MAX_STREAMS frames indefinitely
027f8b7 quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE
dec9fe7 dns/dnsmessage: update SVCB packing to prohibit name compression
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.23.0 to 0.45.0

Commits

4e0068c go.mod: update golang.org/x dependencies
e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
f91f7a7 ssh/agent: prevent panic on malformed constraint
2df4153 acme/autocert: let automatic renewal work with short lifetime certs
bcf6a84 acme: pass context to request
b4f2b62 ssh: fix error message on unsupported cipher
79ec3a5 ssh: allow to bind to a hostname in remote forwarding
122a78f go.mod: update golang.org/x dependencies
c0531f9 all: eliminate vet diagnostics
0997000 all: fix some comments
Additional commits viewable in compare view

Updates golang.org/x/net from 0.25.0 to 0.47.0

Commits

9a29643 go.mod: update golang.org/x dependencies
07cefd8 context: deprecate
5ac9dac publicsuffix: don't treat ip addresses as domain names
d1f64cc quic: use testing/synctest
fff0469 http2: document that RFC 7540 prioritization does not work with small payloads
f35e3a4 http2: fix weight overflow in RFC 7540 write scheduler
89adc90 http2: fix typo referring to RFC 9218 as RFC 9128 instead
8d76a2c quic: don't defer MAX_STREAMS frames indefinitely
027f8b7 quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE
dec9fe7 dns/dnsmessage: update SVCB packing to prohibit name compression
Additional commits viewable in compare view

Updates github.com/eclipse/paho.mqtt.golang from 1.4.3 to 1.5.1

Release notes

Sourced from github.com/eclipse/paho.mqtt.golang's releases.

v1.5.1

This is a minor release incorporating changes made in the 14 months since v1.5.0 (including updating dependencies, and raising the Go version to 1.24). The changes are relatively minor but address a potential security issue (CVE-2025-10543), possible panic, enable users to better monitor the connection status, and incorporate a few optimisations.

Thanks to those who have provided fixes/enhancements included in this release!

Special thanks to Paul Gerste at Sonar for reporting issue #730 via the Eclipse security team (fix was implemented in PR #714 in May, github issue created just prior to this release). This issue arose where a topic > 65535 bytes was passed to the Publish function, due to the way the data was encoded the topic could leak into the message body. Please see issue #730 or CVE-2025-10543 for further details.

What's Changed

Updating go dependencies from pub and sub into the containers before building by @JefJrFigueiredo in eclipse-paho/paho.mqtt.golang#691

Optimize TCP connection logic by @geekeryy in eclipse-paho/paho.mqtt.golang#713

Fields over 65535 bytes not encoded correctly by @MattBrittan in eclipse-paho/paho.mqtt.golang#714

Reduce slice allocations in route dispatch by @alespour in eclipse-paho/paho.mqtt.golang#710

Add a ConnectionNotificationHandler by @RangelReale in eclipse-paho/paho.mqtt.golang#727

Potential panic when using manual ACK by @MattBrittan in eclipse-paho/paho.mqtt.golang#729

Full Changelog: eclipse-paho/paho.mqtt.golang@v1.5.0...v1.5.1

v1.5.0

In the year since the release of v1.4.3 the majority of changes have been small incremental improvements/fixes. One notable change is that Go v1.20+ is now required (due to PR #646).

What's Changed

Wrap connection network errors by @adriansmares in eclipse/paho.mqtt.golang#646

Clarify use of token.WaitTimeout by @MattBrittan in eclipse/paho.mqtt.golang#659

fix (#661): Add NewClientOptionsReader for mocking purposes. by @avmunm in eclipse/paho.mqtt.golang#662

fix: fix keep-alive timeouts on small intervals by @lefinal in eclipse/paho.mqtt.golang#667

Replace the time.After with the timer for efficiency. by @DVasselli in eclipse/paho.mqtt.golang#671

fix: deprecation warnings for ioutil by @vruge in eclipse/paho.mqtt.golang#665

fix: issue 675：goroutine leak when connectionUp(true) return error by @kiqi007 in eclipse/paho.mqtt.golang#678

Update dependencies by @MattBrittan in eclipse/paho.mqtt.golang#683

New Contributors

@adriansmares made their first contribution in eclipse/paho.mqtt.golang#646

@avmunm made their first contribution in eclipse/paho.mqtt.golang#662

@lefinal made their first contribution in eclipse/paho.mqtt.golang#667

@DVasselli made their first contribution in eclipse/paho.mqtt.golang#671

@vruge made their first contribution in eclipse/paho.mqtt.golang#665

@kiqi007 made their first contribution in eclipse/paho.mqtt.golang#678

Full Changelog: eclipse-paho/paho.mqtt.golang@v1.4.3...v1.5.0

Commits

b305237 Update dependencies in docker examples
35ee03d Potential panic when using manual ACK
433bd22 address data race in test
4debe3a Potential panic when using manual ACK
601453b Resolve issues in fvt_client_test
439e2ab Dependency update (also rise Go version to 1.24)
d276593 ConnectionNotificationHandler - generic callback for all types of connection ...
8a350a9 notifications
5620c5e notifications
45048cc notifications
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.23.0 to 0.45.0

Commits

4e0068c go.mod: update golang.org/x dependencies
e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
f91f7a7 ssh/agent: prevent panic on malformed constraint
2df4153 acme/autocert: let automatic renewal work with short lifetime certs
bcf6a84 acme: pass context to request
b4f2b62 ssh: fix error message on unsupported cipher
79ec3a5 ssh: allow to bind to a hostname in remote forwarding
122a78f go.mod: update golang.org/x dependencies
c0531f9 all: eliminate vet diagnostics
0997000 all: fix some comments
Additional commits viewable in compare view

Updates golang.org/x/net from 0.25.0 to 0.47.0

Commits

9a29643 go.mod: update golang.org/x dependencies
07cefd8 context: deprecate
5ac9dac publicsuffix: don't treat ip addresses as domain names
d1f64cc quic: use testing/synctest
fff0469 http2: document that RFC 7540 prioritization does not work with small payloads
f35e3a4 http2: fix weight overflow in RFC 7540 write scheduler
89adc90 http2: fix typo referring to RFC 9218 as RFC 9128 instead
8d76a2c quic: don't defer MAX_STREAMS frames indefinitely
027f8b7 quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE
dec9fe7 dns/dnsmessage: update SVCB packing to prohibit name compression
Additional commits viewable in compare view

Updates github.com/eclipse/paho.mqtt.golang from 1.4.3 to 1.5.1

Release notes

Sourced from github.com/eclipse/paho.mqtt.golang's releases.

v1.5.1

This is a minor release incorporating changes made in the 14 months since v1.5.0 (including updating dependencies, and raising the Go version to 1.24). The changes are relatively minor but address a potential security issue (CVE-2025-10543), possible panic, enable users to better monitor the connection status, and incorporate a few optimisations.

Thanks to those who have provided fixes/enhancements included in this release!

Special thanks to Paul Gerste at Sonar for reporting issue #730 via the Eclipse security team (fix was implemented in PR #714 in May, github issue created just prior to this release). This issue arose where a topic > 65535 bytes was passed to the Publish function, due to the way the data was encoded the topic could leak into the message body. Please see issue #730 or CVE-2025-10543 for further details.

What's Changed

Updating go dependencies from pub and sub into the containers before building by @JefJrFigueiredo in eclipse-paho/paho.mqtt.golang#691

Optimize TCP connection logic by @geekeryy in eclipse-paho/paho.mqtt.golang#713

Fields over 65535 bytes not encoded correctly by @MattBrittan in eclipse-paho/paho.mqtt.golang#714

Reduce slice allocations in route dispatch by @alespour in eclipse-paho/paho.mqtt.golang#710

Add a ConnectionNotificationHandler by @RangelReale in eclipse-paho/paho.mqtt.golang#727

Potential panic when using manual ACK by @MattBrittan in eclipse-paho/paho.mqtt.golang#729

Full Changelog: eclipse-paho/paho.mqtt.golang@v1.5.0...v1.5.1

v1.5.0

In the year since the release of v1.4.3 the majority of changes have been small incremental improvements/fixes. One notable change is that Go v1.20+ is now required (due to PR #646).

What's Changed

Wrap connection network errors by @adriansmares in eclipse/paho.mqtt.golang#646

Clarify use of token.WaitTimeout by @MattBrittan in eclipse/paho.mqtt.golang#659

fix (#661): Add NewClientOptionsReader for mocking purposes. by @avmunm in eclipse/paho.mqtt.golang#662

fix: fix keep-alive timeouts on small intervals by @lefinal in eclipse/paho.mqtt.golang#667

Replace the time.After with the timer for efficiency. by @DVasselli in eclipse/paho.mqtt.golang#671

fix: deprecation warnings for ioutil by @vruge in eclipse/paho.mqtt.golang#665

fix: issue 675：goroutine leak when connectionUp(true) return error by @kiqi007 in eclipse/paho.mqtt.golang#678

Update dependencies by @MattBrittan in eclipse/paho.mqtt.golang#683

New Contributors

@adriansmares made their first contribution in ec...
Description has been truncated

…dates Bumps the go_modules group with 3 updates in the /auth directory: [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt), [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) and [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go). Bumps the go_modules group with 2 updates in the /foreman directory: [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) and [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go). Bumps the go_modules group with 2 updates in the /gr24 directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [github.com/eclipse/paho.mqtt.golang](https://github.com/eclipse/paho.mqtt.golang). Bumps the go_modules group with 2 updates in the /gr25 directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [github.com/eclipse/paho.mqtt.golang](https://github.com/eclipse/paho.mqtt.golang). Bumps the go_modules group with 1 update in the /gr26 directory: [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go). Bumps the go_modules group with 2 updates in the /vehicle directory: [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) and [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go). Updates `github.com/golang-jwt/jwt/v4` from 4.5.1 to 4.5.2 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Commits](golang-jwt/jwt@v4.5.1...v4.5.2) Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `golang.org/x/crypto` from 0.23.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.25.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `golang.org/x/crypto` from 0.23.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.25.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `github.com/eclipse/paho.mqtt.golang` from 1.4.3 to 1.5.1 - [Release notes](https://github.com/eclipse/paho.mqtt.golang/releases) - [Commits](eclipse-paho/paho.mqtt.golang@v1.4.3...v1.5.1) Updates `golang.org/x/crypto` from 0.23.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.25.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `github.com/eclipse/paho.mqtt.golang` from 1.4.3 to 1.5.1 - [Release notes](https://github.com/eclipse/paho.mqtt.golang/releases) - [Commits](eclipse-paho/paho.mqtt.golang@v1.4.3...v1.5.1) Updates `golang.org/x/crypto` from 0.23.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.25.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `golang.org/x/crypto` from 0.23.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.25.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `golang.org/x/crypto` from 0.23.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.25.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `golang.org/x/crypto` from 0.31.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.33.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `golang.org/x/crypto` from 0.31.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.33.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `github.com/eclipse/paho.mqtt.golang` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/eclipse/paho.mqtt.golang/releases) - [Commits](eclipse-paho/paho.mqtt.golang@v1.4.3...v1.5.1) Updates `golang.org/x/crypto` from 0.31.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.33.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `github.com/eclipse/paho.mqtt.golang` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/eclipse/paho.mqtt.golang/releases) - [Commits](eclipse-paho/paho.mqtt.golang@v1.4.3...v1.5.1) Updates `golang.org/x/crypto` from 0.31.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.33.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `golang.org/x/crypto` from 0.31.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.33.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `golang.org/x/crypto` from 0.31.0 to 0.45.0 - [Commits](golang/crypto@v0.23.0...v0.45.0) Updates `golang.org/x/net` from 0.33.0 to 0.47.0 - [Commits](golang/net@v0.25.0...v0.47.0) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/jackc/pgx/v5` from 5.8.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/jackc/pgx/v5` from 5.8.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) Updates `github.com/jackc/pgx/v5` from 5.8.0 to 5.9.2 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.6.0...v5.9.2) Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.59.0...v0.59.1) --- updated-dependencies: - dependency-name: github.com/golang-jwt/jwt/v4 dependency-version: 4.5.2 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/eclipse/paho.mqtt.golang dependency-version: 1.5.1 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/eclipse/paho.mqtt.golang dependency-version: 1.5.1 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/eclipse/paho.mqtt.golang dependency-version: 1.5.1 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/eclipse/paho.mqtt.golang dependency-version: 1.5.1 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>

Superseded by #191.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 5, 2026

dependabot Bot closed this Jun 5, 2026

dependabot Bot deleted the dependabot/go_modules/auth/go_modules-9493e3cc5c branch June 5, 2026 18:06

build(deps): bump the go_modules group across 6 directories with 6 updates by dependabot[bot] · Pull Request #189 · Gaucho-Racing/Mapache · GitHub

Uh oh!

build(deps): bump the go_modules group across 6 directories with 6 updates - #189

build(deps): bump the go_modules group across 6 directories with 6 updates#189
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/auth/go_modules-9493e3cc5c

dependabot Bot commented on behalf of github Jun 5, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

build(deps): bump the go_modules group across 6 directories with 6 updates by dependabot[bot] · Pull Request #189 · Gaucho-Racing/Mapache · GitHub

Uh oh!

build(deps): bump the go_modules group across 6 directories with 6 updates - #189

Conversation

dependabot Bot commented on behalf of github Jun 5, 2026

v4.5.2

5.9.2 (April 18, 2026)

5.9.1 (March 22, 2026)

5.9.0 (March 21, 2026)

v0.59.1

5.9.2 (April 18, 2026)

5.9.1 (March 22, 2026)

5.9.0 (March 21, 2026)

v0.59.1

v0.59.1

5.9.2 (April 18, 2026)

5.9.1 (March 22, 2026)

5.9.0 (March 21, 2026)

v0.59.1

5.9.2 (April 18, 2026)

5.9.1 (March 22, 2026)

5.9.0 (March 21, 2026)

v0.59.1

5.9.2 (April 18, 2026)

5.9.1 (March 22, 2026)

5.9.0 (March 21, 2026)

v0.59.1

v0.59.1

5.9.2 (April 18, 2026)

5.9.1 (March 22, 2026)

5.9.0 (March 21, 2026)

v0.59.1

v1.5.1

What's Changed

v1.5.0

What's Changed

New Contributors

v1.5.1

What's Changed

v1.5.0

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Jun 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants