chore(deps): bump the gomod group across 1 directory with 2 updates

[dependabot]

Bumps the gomod group with 2 updates in the / directory: github.com/nats-io/nats.go and github.com/sirupsen/logrus.

Updates github.com/nats-io/nats.go from 1.53.1 to 1.54.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.54.0

Changelog

This release raises the minimum supported Go version to 1.26 and adds support for nats-server v2.15 stream and consumer info fields.

ADDED

• Core NATS:
  • nats.MultipathTCP() option to enable or disable MPTCP for outbound connections (#2145)
  • Conn.ConnectedDomain() to read the JetStream domain advertised by the connected server (#2139)
• JetStream:
  • ClusterInfo.Desired, PeerInfo.Peer, PeerInfo.Pending and StreamSourceInfo.Seq in stream and consumer info, reported by nats-server v2.15 (#2144)
  • Nats-Schedule-Rollup header const and WithScheduleRollup() publish option (#2142)

FIXED

• Core NATS:
  • Panic in DecodeHeadersMsg on inline status tokens shorter than 3 characters. Thanks @​nikitha-m for the contribution (#2101)
  • Data race on Subscription.sid between applyNewSID and removeSub (#2122)
• JetStream:
  • Messages() iterator going silent after a reconnect that completes between Next() calls. Thanks @​1995parham for the contribution (#2135)
  • Legacy ordered consumer silently losing messages when the subscription hits its pending limits (#2137)
  • Legacy ordered consumer reset resurrecting an unsubscribed or draining subscription (#2133)

IMPROVED

• Core NATS:
  • Avoid allocation when parsing header message arguments with a fifth token. Thanks @​0xAozora for the contribution (#2130)
  • Preallocate reply subject buffers. Thanks @​0xAozora for the contribution (#2123)
• JetStream:
  • Prevent doErr closure escaping to the heap in async publish reply handling. Thanks @​0xAozora for the contribution (#2127)
  • Fix typo in Publisher interface methods comment. Thanks @​sreeram77 for the contribution (#2120)
• Minimum Go version is now 1.26 (#2146)
• Bump klauspost/compress to v1.20.0 and nkeys to v0.4.16 (#2117, #2146)
• Tests run locally without docker via an in-process ntf tester (#2131), and CI now runs against nats-server v2.15.0 (#2146)
• Fix flaky cluster restart tests (#2141) and list consumers test against latest server (#2138)

Complete Changes

nats-io/nats.go@v1.53.1...v1.54.0

Commits

• 7a8404a Release v1.54.0 (#2148)
• 240fb1f [IMPROVED] Bump dependencies and update server version in CI (#2146)
• 203d828 [FIXED] Panic in DecodeHeadersMsg on status tokens shorter than 3 characters ...
• dc92fca [FIXED] Ordered consumer silently losing messages on slow consumer (#2137)
• e18cea8 [IMPROVED] Prevent doErr closure escaping to heap (#2127)
• d8d8c09 [ADDED] nats.MultipathTCP() for enabling or disabling MPTCP (#2145)
• e95c424 [FIXED] Flaky cluster restart tests: waitForStream must see a stream leader (...
• e3abbf4 [ADDED] Nats-Schedule-Rollup header const and publish options (#2142)
• f1289db [ADDED] Desired state, peer ID/pending and source seq in stream and consumer ...
• b84f783 Ignore Claude Code local files and .worktrees (#2140)
• Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

• update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

• Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

Commits

• 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
• 4f94653 update changelog for v1.10.2
• 87434bb Merge pull request #1585 from thaJeztah/bump_testify
• e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions