dev: bump the safe group across 1 directory with 44 updates

[dependabot]

Bumps the safe group with 30 updates in the / directory:

Package	From	To
github.com/KimMachineGun/automemlimit	0.7.4	0.7.5
github.com/aws/aws-sdk-go	1.55.7	1.55.8
github.com/aws/aws-sdk-go-v2/config	1.29.12	1.32.7
github.com/aws/aws-sdk-go-v2/service/s3	1.78.2	1.96.0
github.com/coder/websocket	1.8.13	1.8.14
github.com/eclipse/paho.mqtt.golang	1.5.0	1.5.1
github.com/emersion/go-smtp	0.22.0	0.24.0
github.com/envoyproxy/protoc-gen-validate	1.2.1	1.3.0
github.com/getsentry/sentry-go	0.34.1	0.42.0
github.com/grpc-ecosystem/grpc-gateway/v2	2.27.1	2.27.7
github.com/jackc/pgx/v5	5.7.5	5.8.0
github.com/jarcoal/httpmock	1.4.0	1.4.1
github.com/klauspost/compress	1.18.0	1.18.3
github.com/lib/pq	1.10.9	1.11.1
github.com/nats-io/nats-server/v2	2.11.4	2.12.4
github.com/prometheus/client_golang	1.22.0	1.23.2
github.com/redis/go-redis/v9	9.11.0	9.17.3
github.com/spf13/cast	1.9.2	1.10.0
github.com/spf13/cobra	1.9.1	1.10.2
github.com/spf13/viper	1.20.1	1.21.0
github.com/throttled/throttled/v2	2.13.0	2.15.0
github.com/uptrace/bun	1.2.14	1.2.16
github.com/uptrace/bun/dialect/pgdialect	1.2.14	1.2.16
github.com/uptrace/bun/driver/pgdriver	1.2.14	1.2.16
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux	0.62.0	0.65.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	0.62.0	0.65.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	0.62.0	0.65.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	1.37.0	1.40.0
go.thethings.network/lorawan-stack-legacy/v2	2.1.0	2.1.1
go.uber.org/zap	1.27.0	1.27.1

Updates github.com/KimMachineGun/automemlimit from 0.7.4 to 0.7.5

Release notes

Sourced from github.com/KimMachineGun/automemlimit's releases.

v0.7.5

What's Changed

• fix(memlimit): respect parent cgroup limits in v2 (KimMachineGun/automemlimit#31) by @​KimMachineGun in KimMachineGun/automemlimit@6d12049

Full Changelog: KimMachineGun/automemlimit@v0.7.4...v0.7.5

Commits

• 6d12049 fix(memlimit): respect parent cgroup limits in v2 (#31)
• See full diff in compare view

Updates github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

• Mark the module and all packages as deprecated.
  • This SDK has entered end-of-support.

Commits

• 070853e release v1.55.8 (2025-07-31)
• bb0168e Add deprecation warnings everywhere and remove some README content
• 7ce44f3 aws
• 6d9a26d remove doc issue tmpl
• 239002f deprecate service packages and HLLs
• 70c4177 deprecate main runtime packages
• bbdd4e9 deprecate
• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.32.7

Commits

• 5a96470 Release 2024-12-19
• 653aa80 Regenerated Clients
• d02b239 Update endpoints model
• 698d709 Update API model
• 885de40 Fix improper use of Printf-style functions (#2934)
• 858298a Release 2024-12-18
• f58264a Regenerated Clients
• df31082 Update endpoints model
• 346690e Update API model
• 4515454 Release 2024-12-17
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.78.2 to 1.96.0

Commits

• bdb98c5 Release 2026-01-28
• c878d57 Regenerated Clients
• 4f5d503 Update API model
• b7bf952 Feat release s3 transfer manager v2 (#3293)
• 0baa1dc Release 2026-01-27
• 11eae4b Regenerated Clients
• 297caa5 Update endpoints model
• 43d96e4 Update API model
• de58dc6 Release 2026-01-26
• dba39e6 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/coder/websocket from 1.8.13 to 1.8.14

Release notes

Sourced from github.com/coder/websocket's releases.

v1.8.14

Changes

• fix: match Origin scheme if defined in OriginPatterns by @​mafredri in coder/websocket#536
• refactor: use context.AfterFunc to track timeouts instead of goroutine by @​ash2k in coder/websocket#532
• refactor: add ErrMessageTooBig sentinel error for limited reads by @​DanielleMaywood in coder/websocket#535
• build: update to Go 1.23 by @​mafredri in coder/websocket#524
• build: add Makefile by @​mafredri in coder/websocket#525
• chore: update LICENSE file by @​mtojek in coder/websocket#526
• chore: apply various modernisations by @​Jacalz in coder/websocket#531

New Contributors

• @​mtojek made their first contribution in coder/websocket#526
• @​ash2k made their first contribution in coder/websocket#532
• @​DanielleMaywood made their first contribution in coder/websocket#535

Full Changelog: coder/websocket@v1.8.13...v1.8.14

Commits

• 7d7c644 refactor: add ErrMessageTooBig sentinel error for limited reads (#535)
• c7846ea refactor: use context.AfterFunc to track timeouts instead of goroutine (#532)
• e11dd4e fix: match Origin scheme if defined in OriginPatterns (#536)
• 91013c1 chore: apply various modernisations (#531)
• efb626b chore: update LICENSE file (#526)
• 246891f build: add Makefile (#525)
• 778d161 build: update to Go 1.23 (#524)
• See full diff in compare view

Updates github.com/eclipse/paho.mqtt.golang from 1.5.0 to 1.5.1

Release notes

Sourced from github.com/eclipse/paho.mqtt.golang's releases.

v1.5.1

This is a minor release incorporating changes made in the 14 months since v1.5.0 (including updating dependencies, and raising the Go version to 1.24). The changes are relatively minor but address a potential security issue (CVE-2025-10543), possible panic, enable users to better monitor the connection status, and incorporate a few optimisations.

Thanks to those who have provided fixes/enhancements included in this release!

Special thanks to Paul Gerste at Sonar for reporting issue #730 via the Eclipse security team (fix was implemented in PR #714 in May, github issue created just prior to this release). This issue arose where a topic > 65535 bytes was passed to the Publish function, due to the way the data was encoded the topic could leak into the message body. Please see issue #730 or CVE-2025-10543 for further details.

What's Changed

• Updating go dependencies from pub and sub into the containers before building by @​JefJrFigueiredo in eclipse-paho/paho.mqtt.golang#691
• Optimize TCP connection logic by @​geekeryy in eclipse-paho/paho.mqtt.golang#713
• Fields over 65535 bytes not encoded correctly by @​MattBrittan in eclipse-paho/paho.mqtt.golang#714
• Reduce slice allocations in route dispatch by @​alespour in eclipse-paho/paho.mqtt.golang#710
• Add a ConnectionNotificationHandler by @​RangelReale in eclipse-paho/paho.mqtt.golang#727
• Potential panic when using manual ACK by @​MattBrittan in eclipse-paho/paho.mqtt.golang#729

Full Changelog: eclipse-paho/paho.mqtt.golang@v1.5.0...v1.5.1

Commits

• b305237 Update dependencies in docker examples
• 35ee03d Potential panic when using manual ACK
• 433bd22 address data race in test
• 4debe3a Potential panic when using manual ACK
• 601453b Resolve issues in fvt_client_test
• 439e2ab Dependency update (also rise Go version to 1.24)
• d276593 ConnectionNotificationHandler - generic callback for all types of connection ...
• 8a350a9 notifications
• 5620c5e notifications
• 45048cc notifications
• Additional commits viewable in compare view

Updates github.com/emersion/go-smtp from 0.22.0 to 0.24.0

Commits

• ab24fe7 Remove superfluous validateLine() calls in sendMail()
• 6944e33 Implement MT-PRIORITY (RFC 6710)
• 54dd31d Implement DELIVERBY (RFC 2852)
• See full diff in compare view

Updates github.com/envoyproxy/protoc-gen-validate from 1.2.1 to 1.3.0

Release notes

Sourced from github.com/envoyproxy/protoc-gen-validate's releases.

v1.3.0

What's Changed

• Update README.md by @​nicksnyder in bufbuild/protoc-gen-validate#1233
• Fix unreliable asset generation by @​nicksnyder in bufbuild/protoc-gen-validate#1235
• Add Maven developers entry by @​pkwarren in bufbuild/protoc-gen-validate#1237
• Bump the java group across 1 directory with 5 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1230
• Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 in the go group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1239
• Fix in rule for repeated int32 by @​mortezaPRK in bufbuild/protoc-gen-validate#1240
• Bump the python-root group across 1 directory with 8 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1243
• Support in rule for repeated int32 and int64 fields by @​mortezaPRK in bufbuild/protoc-gen-validate#1241
• Bump protobuf from 5.29.1 to 5.29.3 in /python in the python group across 1 directory by @​dependabot[bot] in bufbuild/protoc-gen-validate#1244
• Link to migration guide by @​nicksnyder in bufbuild/protoc-gen-validate#1247
• Bump the go group across 1 directory with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1251
• Bump the go-tests group across 1 directory with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1250
• Bump flake8 from 7.1.1 to 7.1.2 in the python-root group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1249
• Bump com.google.api.grpc:proto-google-common-protos from 2.50.1 to 2.52.0 in /java in the java group across 1 directory by @​dependabot[bot] in bufbuild/protoc-gen-validate#1248
• Bump jinja2 from 3.1.4 to 3.1.5 in /python by @​dependabot[bot] in bufbuild/protoc-gen-validate#1213
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /java in the java group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1252
• Bump com.google.api.grpc:proto-google-common-protos from 2.52.0 to 2.53.0 in /java in the java group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1254
• Bump jinja2 from 3.1.5 to 3.1.6 in /python by @​dependabot[bot] in bufbuild/protoc-gen-validate#1255
• Bump the python-root group with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1253
• Bump the java group in /java with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1259
• Bump setuptools from 75.8.2 to 76.0.0 in the python-root group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1258
• Bump golang.org/x/net from 0.35.0 to 0.37.0 in /tests in the go-tests group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1257
• Bump protobuf from 5.29.3 to 6.30.1 in the python-root group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1261
• Bump the java group across 1 directory with 5 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1270
• Bump the go-tests group across 1 directory with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1267
• Bump the java group in /java with 3 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1274
• Fix incompatibility with --incompatible_disable_starlark_host_transitions by @​meteorcloudy in bufbuild/protoc-gen-validate#1275
• Bump com.google.api.grpc:proto-google-common-protos from 2.55.0 to 2.55.3 in /java in the java group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1277
• Switch to publish to Maven Central by @​pkwarren in bufbuild/protoc-gen-validate#1278
• Bump golang.org/x/net from 0.39.0 to 0.40.0 in /tests in the go-tests group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1280
• Bump the python-root group across 1 directory with 3 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1268
• Bump com.google.api.grpc:proto-google-common-protos from 2.55.3 to 2.56.0 in /java in the java group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1279
• Bump the java group in /java with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1281
• Bump setuptools from 80.4.0 to 80.7.1 in the python-root group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1282
• Bump setuptools from 80.7.1 to 80.8.0 in the python-root group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1283
• Bump the python-root group with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1284
• Bump the java group in /java with 3 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1285
• Bump the java group across 1 directory with 5 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1293
• Bump flake8 from 7.2.0 to 7.3.0 in the python-root group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1289
• Bump protobuf from 5.29.3 to 5.29.5 in /python by @​dependabot[bot] in bufbuild/protoc-gen-validate#1288
• Bump golang.org/x/net from 0.40.0 to 0.41.0 in /tests in the go-tests group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1286
• Bump golang.org/x/net from 0.41.0 to 0.42.0 in /tests in the go-tests group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1297
• Bump the java group in /java with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1296
• Bump build from 1.2.2.post1 to 1.3.0 in the python-root group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1295
• Bump the java group in /java with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1299
• Bump the go-tests group in /tests with 2 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1298
• Bump the java group in /java with 4 updates by @​dependabot[bot] in bufbuild/protoc-gen-validate#1301
• Bump google.golang.org/protobuf from 1.36.7 to 1.36.8 in /tests in the go-tests group by @​dependabot[bot] in bufbuild/protoc-gen-validate#1300

... (truncated)

Commits

• 4eb9011 Python 3.13 support in validator.py (#1326)
• ad5af80 Bump golang.org/x/net from 0.46.0 to 0.47.0 in /tests in the go-tests group (...
• b02a069 Bump the java group across 1 directory with 3 updates (#1328)
• c3d7b9b Bump the java group in /java with 3 updates (#1323)
• 0b3cccf Bump actions/upload-artifact from 4 to 5 in the github-actions group (#1324)
• 3c1639c Bump golang.org/x/net from 0.44.0 to 0.46.0 in /tests in the go-tests group (...
• 552d005 Bump the java group in /java with 2 updates (#1320)
• 519c9ce Bump google.golang.org/protobuf from 1.36.9 to 1.36.10 in /tests in the go-te...
• 962aec3 Bump the java group in /java with 3 updates (#1316)
• e1caab2 Bump isort from 6.0.1 to 6.1.0 in the python-root group (#1317)
• Additional commits viewable in compare view

Updates github.com/getsentry/sentry-go from 0.34.1 to 0.42.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.42.0

Breaking Changes 🛠

• refactor Telemetry Processor to use TelemetryItem instead of ItemConvertible by @​giortzisg in #1180
  • remove ToEnvelopeItem from single log items
  • rename TelemetryBuffer to Telemetry Processor to adhere to spec
  • remove unsed ToEnvelopeItem(dsn) from Event.

New Features ✨

• Add metric support by @​aldy505 in #1151
  • support for three metric methods (counter, gauge, distribution)
  • custom metric units
  • unexport batchlogger

Internal Changes 🔧

Release

• Fix changelog-preview permissions by @​BYK in #1181
• Switch from action-prepare-release to Craft by @​BYK in #1167

Other

• (repo) Add Claude Code settings with basic permissions by @​philipphofmann in #1175
• Update release and changelog-preview workflows by @​giortzisg in #1177
• Bump echo to 4.10.1 by @​giortzisg in #1174

0.41.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.41.0.

Features

• Add HTTP client integration for distributed tracing via sentryhttpclient package (#876)
  • Provides an http.RoundTripper implementation that automatically creates spans for outgoing HTTP requests
  • Supports trace propagation targets configuration via WithTracePropagationTargets option
  • Example usage:

    import sentryhttpclient "github.com/getsentry/sentry-go/httpclient"
    roundTripper := sentryhttpclient.NewSentryRoundTripper(nil)
    client := &http.Client{
    Transport: roundTripper,
    }

• Add ClientOptions.PropagateTraceparent option to control W3C traceparent header propagation in outgoing HTTP requests (#1161)
• Add SpanID field to structured logs (#1169)

0.40.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.40.0.

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.42.0

Breaking Changes 🛠

• refactor Telemetry Processor to use TelemetryItem instead of ItemConvertible by @​giortzisg in #1180
  • remove ToEnvelopeItem from single log items
  • rename TelemetryBuffer to Telemetry Processor to adhere to spec
  • remove unsed ToEnvelopeItem(dsn) from Event.

New Features ✨

• Add metric support by @​aldy505 in #1151
  • support for three metric methods (counter, gauge, distribution)
  • custom metric units
  • unexport batchlogger

Internal Changes 🔧

Release

• Fix changelog-preview permissions by @​BYK in #1181
• Switch from action-prepare-release to Craft by @​BYK in #1167

Other

• (repo) Add Claude Code settings with basic permissions by @​philipphofmann in #1175
• Update release and changelog-preview workflows by @​giortzisg in #1177
• Bump echo to 4.10.1 by @​giortzisg in #1174

0.41.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.41.0.

Features

• Add HTTP client integration for distributed tracing via sentryhttpclient package (#876)
  • Provides an http.RoundTripper implementation that automatically creates spans for outgoing HTTP requests
  • Supports trace propagation targets configuration via WithTracePropagationTargets option
  • Example usage:

    import sentryhttpclient "github.com/getsentry/sentry-go/httpclient"
    roundTripper := sentryhttpclient.NewSentryRoundTripper(nil)
    client := &http.Client{
    Transport: roundTripper,
    }

• Add ClientOptions.PropagateTraceparent option to control W3C traceparent header propagation in outgoing HTTP requests (#1161)
• Add SpanID field to structured logs (#1169)

... (truncated)

Commits

• 2100422 release: 0.42.0
• ba17897 refactor!: update Telemetry Processor logic (#1180)
• 5d2aa89 feat: Add metrics support (#1151)
• e090e4a ci(release): Fix changelog-preview permissions (#1181)
• 9d2368e ci: update release and changelog-preview workflows (#1177)
• c551ab5 ci(release): Switch from action-prepare-release to Craft (#1167)
• 21b1d0f chore(repo): Add Claude Code settings with basic permissions (#1175)
• e84cccc chore: ignore local Claude settings (#1176)
• b9f4109 chore: bump echo to 4.10.1 (#1174)
• 9c96788 Merge branch 'release/0.41.0'
• Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.1 to 2.27.7

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.7

Re-release of v2.26.7 as v2.27.7 for correct semver ordering.

v2.27.6

What's Changed

• feat(generator): harden opaque imports and fix snake case to go casing by @​kellen-miller in grpc-ecosystem/grpc-gateway#6279
• fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple files by @​franchb in grpc-ecosystem/grpc-gateway#6275

New Contributors

• @​franchb made their first contribution in grpc-ecosystem/grpc-gateway#6275

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.5...v2.27.6

v2.27.5

What's Changed

• Issue5799 by @​rohitlohar45 in grpc-ecosystem/grpc-gateway#6123
• fix: Add example repo in Java to README by @​majiayu000 in grpc-ecosystem/grpc-gateway#6199
• fix: Use summary/description instead of title for field comments in openapi gen by @​iamrajiv in grpc-ecosystem/grpc-gateway#6223
• fix(gengateway): use pointer for bodyData in OpaqueAPI PATCH requests by @​kop in grpc-ecosystem/grpc-gateway#6246
• fix(gengateway): use opaque chain for setting path params by @​kellen-miller in grpc-ecosystem/grpc-gateway#6215

New Contributors

• @​majiayu000 made their first contribution in grpc-ecosystem/grpc-gateway#6199
• @​kellen-miller made their first contribution in grpc-ecosystem/grpc-gateway#6215

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.4...v2.27.5

v2.27.4

What's Changed

• feat: support deprecated field for OpenAPI parameters by @​lachlancooper in grpc-ecosystem/grpc-gateway#6068
• fix(openapiv2): Invalid entries in body parameter schema required array when using body: "field_name" by @​rdark in grpc-ecosystem/grpc-gateway#6088
• fix(openapiv2): prevent nested required fields hoisting to parent schema by @​rdark in grpc-ecosystem/grpc-gateway#6078
• [issue-6080] Fix strict no-$ref-siblings rule violations by @​jgreffe in grpc-ecosystem/grpc-gateway#6099
• Dockerfile: upgrade openjdk version by @​johanbrandhorst in grpc-ecosystem/grpc-gateway#6130
• fix: Exclude methods without HTTP bindings from OpenAPI definitions by @​iamrajiv in grpc-ecosystem/grpc-gateway#6030
• Add note about Authorization header forwarding by @​MicahParks in grpc-ecosystem/grpc-gateway#6185
• fix(gengateway): correct body field decoding in opaque API mode by @​kop in grpc-ecosystem/grpc-gateway#6197

New Contributors

• @​lachlancooper made their first contribution in grpc-ecosystem/grpc-gateway#6068
• @​rdark made their first contribution in grpc-ecosystem/grpc-gateway#6088
• @​jgreffe made their first contribution in grpc-ecosystem/grpc-gateway#6099
• @​MicahParks made their first contribution in grpc-ecosystem/grpc-gateway#6185

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.3...v2.27.4

v2.27.3

What's Changed

... (truncated)

Commits

• 3406565 Update gorelease base version to v2.27.7
• 8be4c86 Revert "feat(generator): harden opaque imports and fix snake case to go casin...
• 63cba54 chore(deps): update googleapis digest to 46c183b (#6298)
• 37163bf chore(deps): update actions/cache digest to cdf6c1f (#6297)
• 64aa277 chore(deps): update googleapis digest to fe6c208 (#6296)
• 7181022 chore(deps): update dependency bazel_features to v1.41.0 (#6293)
• c39289d chore(deps): update dependency com_github_bazelbuild_buildtools to v8.5.1 (#6...
• 6e3b4f3 Update gorelease base version to v2.27.6
• e380725 chore(deps): update docker/login-action digest to c94ce9f (#6291)
• bba4e0a fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple...
• Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.7.5 to 5.8.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.8.0 (December 26, 2025)

• Require Go 1.24+
• Remove golang.org/x/crypto dependency
• Add OptionShouldPing to control ResetSession ping behavior (ilyam8)
• Fix: Avoid overflow when MaxConns is set to MaxInt32
• Fix: Close batch pipeline after a query error (Anthonin Bonnefoy)
• Faster shutdown of pgxpool.Pool background goroutines (Blake Gentry)
• Add pgxpool ping timeout (Amirsalar Safaei)
• Fix: Rows.FieldDescriptions for empty query
• Scan unknown types into *any as string or []byte based on format code
• Optimize pgtype.Numeric (Philip Dubé)
• Add AfterNetConnect hook to pgconn.Config
• Fix: Handle for preparing statements that fail during the Describe phase
• Fix overflow in numeric scanning (Ilia Demianenko)
• Fix: json/jsonb sql.Scanner source type is []byte
• Migrate from math/rand to math/rand/v2 (Mathias Bogaert)
• Optimize internal iobufpool (Mathias Bogaert)
• Optimize stmtcache invalidation (Mathias Bogaert)
• Fix: missing error case in interval parsing (Maxime Soulé)
• Fix: invalidate statement/description cache in Exec (James Hartig)
• ColumnTypeLength method return the type length for varbit type (DengChan)
• Array and Composite codecs handle typed nils

5.7.6 (September 8, 2025)

• Use ParseConfigError in pgx.ParseConfig and pgxpool.ParseConfig (Yurasov Ilia)
• Add PrepareConn hook to pgxpool (Jonathan Hall)
• Reduce allocations in QueryContext (Dominique Lefevre)
• Add MarshalJSON and UnmarshalJSON for pgtype.Uint32 (Panos Koutsovasilis)
• Configure ping behavior on pgxpool with ShouldPing (Christian Kiely)
• zeronull int types implement Int64Valuer and Int64Scanner (Li Zeghong)
• Fix panic when receiving terminate connection message during CopyFrom (Michal Drausowski)
• Fix statement cache not being invalidated on error during batch (Muhammadali Nazarov)

Commits

• fe8740a Release v5.8.0
• e5dde5a Skip test on CockroachDB
• 06f2d82 Remove trailing space
• 2cf78dd Merge pull request #2448 from DengChan/column_type_lenth_varbit
• 2d1c4ef Skip tests on CockroachDB
• 1a5fa7f Array and Composite codecs handle typed nils
• 5736d09 ColumnTypeLength method return the type length for varbit type.
• 4c1308c Revert "stdlib matches native pgx scanning support"
• 14ce2b7 Skip test on CockroachDB
• 65b2724 Merge pull request #2443 from jameshartig/x-invalidate-cache-in-exec
• Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

• test: also test with go v1.25 and use golangci-lint v2.4.0 by @​maxatome in jarcoal/httpmock#164
• Avoid data race when closing body by @​DavyJohnes in jarcoal/httpmock#165

New Contributors

• @​DavyJohnes made his first contribution in jarcoal/httpmock#165

Full Changelog: jarcoal/httpmock@v1.4.0...v1.4.1

Commits

• 314d58a fix: protect all body-related methods with mutext
• e482896 fix: avoid data race when closing body
• c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
• See full diff in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.3

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.3

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

v1.18.2

What's Changed

• flate: Fix invalid encoding on level 9 with single value input by @​klauspost in klauspost/compress#1115
• flate: reduce stateless allocations by @​RXamzin in klauspost/compress#1106
• build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 in the github-actions group by @​dependabot[bot] in klauspost/compress#1111

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

• @​RXamzin made their first contribution in klauspost/compress#1106

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

v1.18.1

What's Changed

• zstd: Fix incorrect buffer size in dictionary encodes by @​klauspost in klauspost/compress#1059
• s2: check for cap, not len of buffer in EncodeBetter/Best by @​vdarulis in klauspost/compress#1080
• zstd: Add simple zstd EncodeTo/DecodeTo functions by @​klauspost in klauspost/compress#1079
• zlib: Avoiding extra allocation in zlib.reader.Reset by @​travelpolicy in klauspost/compress#1086
• gzhttp: remove redundant err check in zstdReader by @​ryanfowler in klauspost/compress#1090
• Run modernize. Deprecate Go 1.22 by @​klauspost in klauspost/compress#1095
• flate: Simplify matchlen by @​klauspost in klauspost/compress#1101
• flate: Add examples by @​klauspost in