Skip to content

build(deps): bump the go-modules group across 1 directory with 6 updates - #424

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-de8f175337
Closed

build(deps): bump the go-modules group across 1 directory with 6 updates#424
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-de8f175337

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 6 updates in the / directory:

Package From To
github.com/apache/arrow-go/v18 18.7.0 18.8.0
github.com/apache/iceberg-go 0.6.0 0.7.0
github.com/nikolalohinski/gonja/v2 2.9.0 2.9.1
github.com/twmb/franz-go 1.21.7 1.22.1
github.com/twmb/franz-go/pkg/kmsg 1.13.1 1.14.0
modernc.org/sqlite 1.59.0 1.60.1

Updates github.com/apache/arrow-go/v18 from 18.7.0 to 18.8.0

Release notes

Sourced from github.com/apache/arrow-go/v18's releases.

Apache Arrow Go 18.8.0

What's Changed

... (truncated)

Commits
  • 72e9a56 perf(compute): add ARM64 NEON compression for null-free 32-bit fixed-width fi...
  • 89448e6 perf(compute): add ARM64 NEON comparisons for 8- and 16-bit integers (#1288)
  • 4caad58 perf(compute): SIMD-compact fragmented filters into take indices (#1287)
  • f9a71c0 chore: fix failing build tags (#1285)
  • 304ac00 perf(arrow/array): SIMD-pack boolean slices into bitmaps (#1283)
  • e521834 perf(internal/utils): add ARM64 NEON min/max for 8- and 16-bit integers (#1281)
  • 0b03215 fix(arrow/scalar): align timestamp timezone parsing (#1109)
  • 497a462 perf(compute): vectorize numeric to boolean casts (#1282)
  • f92c33a perf(compute): add ARM64 NEON constant multiplication (#1268)
  • e9cc75c perf(compute): vectorize mixed int32 filters with AVX2 (#1284)
  • Additional commits viewable in compare view

Updates github.com/apache/iceberg-go from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/apache/iceberg-go's releases.

Apache Iceberg Go 0.7.0

What's Changed

... (truncated)

Commits
  • 89a9104 perf(table): filter position-delete reads by file path (#1937)
  • 76c653b refactor(table): drop pterm from library path (#2061)
  • 117ed43 docs: expand security threat model (#1886)
  • 99bf5da fix(table): replace files must only match live files when removing data and d...
  • 7536627 perf(table): reuse partition path formatting plan (#1958)
  • a2b91ae ci: replace MinIO with RustFS in integration tests (#2055)
  • 85121cb fix(codec): nanosecond timestamp partitions in schema fingerprint (#2052)
  • 5d377f1 docs(io): document ADLS managed identity property divergence (#2024)
  • dce9757 perf(table): bound the scan reorder heap at scan concurrency above one (#2039)
  • 7dd7364 fix(table): validate deletion vector fields in RowDelta (#2004 follow-up) (#2...
  • Additional commits viewable in compare view

Updates github.com/nikolalohinski/gonja/v2 from 2.9.0 to 2.9.1

Commits
  • cc18d35 release(v2.9.1): update global gonja.version variable
  • cba6d3e parser: add structured SyntaxError type
  • 3672e43 fix: de-duplicate numbers by value in the unique filter
  • 2ff017f fix: render a nil slice element instead of panicking
  • e3fe5ef fix: replace hardcoded Jinja tag string with constant
  • ea777a6 feat: add support for Jinja tags in struct field resolution
  • 58431bf test: add integration tests for Jinja tag resolution and missing-field behavior
  • 9e0a73e fix: return an error from unique on unhashable elements
  • c217ccf fix: compare with EqualValueTo in Contains
  • eb34697 fix: make first and last work on mappings
  • Additional commits viewable in compare view

Updates github.com/twmb/franz-go from 1.21.7 to 1.22.1

Changelog

Sourced from github.com/twmb/franz-go's changelog.

v1.22.1

This patch has a few bug fixes in the share consumer (one via bug report, the others via a corresponding targeted audit), the 848 consumer (these found only via an audit), and some fixes in the RecordFormatter and RecordReader.

This patch also has produce and consume performance improvements that come with two minor behavior changes:

  • MaxBufferedRecords now has a default of 50K, up from 10K: 10K was chosen when I initially wrote this library and is a very low default limit for average sized records. The librdkafka default is 100K; 50K increases producer throughput while still keeping producer memory low.

  • PoolKRecords is deprecated and unused. The client now decodes fetched records straight into Records, so there is no need for pooling kmsg.Records.

Thanks to @​kmrgirish for the share consumer bug report (#1474), and to @​ajavanma and @​jakezwang for RecordReader and RecordFormatter fixes.

v1.22.0

This release supports Kafka 4.3 and 4.4, has a few new APIs, and has a few big internal improvements. In particular, I recommend checking out the new StreamingCompression option, as well as evaluating if you'd like to use RackAwarePartitioning. There are some behavior changes that you should read about below. The "next gen" rebalancer is now usable via the new ServerSideBalancer option. It's had a few releases to shake out bugs internally (via integration tests and LLM audits), but if you do experience a bug, please open an issue straightaway.

Some minor bug fixes (that were never reported) were found during the implementation that are not worth mentioning.

kfake has also been significantly extended and I recommend checking out the new APIs, in particular:

  • A new Fault type to make it easier to inject errors without Control functions
  • Group introspection cluster APIs
  • BlackholeProduce and SyntheticFetch APIs for benchmarking / play testing

My kcl CLI has been significantly expanded as well and is worth checking out. It supports essentially everything you can do with a cluster, and now allows you to run a full broker locally via kcl fake (in memory or a dumb disk backed localhost broker) - as well as setup the fake broker with fault injection. I've been running LLM audits and extensions to kcl in particular to try to shape it up to a "finalized" CLI shape. If you use it and have ideas

... (truncated)

Commits
  • b5a45cc Merge pull request #1480 from twmb/cl
  • da91dad changelog: note v1.22.1
  • 67a270e Merge pull request #1479 from twmb/kfake-fault-rules
  • f77970d kfake: make faults consistent across requests; let When call the cluster
  • 460b632 Merge pull request #1478 from twmb/kgo-848-audit-fixes
  • 400fd9a kfake: add waitHits for tests that wait on a fault handle
  • 7c6b867 kgo: fix 848 commit tracking, purge ordering, and revoke acks
  • 67711ba Merge pull request #1477 from twmb/kgo-share-fixes
  • 7cfc85b kgo: treat GROUP_ID_NOT_FOUND on leave as success
  • a4f81d0 kgo: fix share loop wakeups and ack sends
  • Additional commits viewable in compare view

Updates github.com/twmb/franz-go/pkg/kmsg from 1.13.1 to 1.14.0

Changelog

Sourced from github.com/twmb/franz-go/pkg/kmsg's changelog.

v1.14.0

This release contains a few new APIs, one behavior change, and one minor bugfix.

Bug fixes

Previously, HookBrokerRead and HookBrokerE2E could not be used at the same time. This has been fixed.

Behavior changes

PauseFetch{Topics,Partitions} now causes the client to drop all buffered fetches and kill all in-flight fetch requests. Importantly, this also means that once you pause, it is no longer possible for what you paused to be returned while polling. Previously, the client made no attempt to clear internal buffers / in flight requests, meaning you could receive paused data for a while.

Seed brokers now show up in logs as seed_### rather than seed ### (an underscore has been added).

Features

  • kgo.Offset now has an EpochOffset getter function that allows access to the actual epoch and offset that are inside the opaque Offset type.
  • AddConsumePartitions allows adding individual partitions to consume, and the new counterpart RemoveConsumePartitions allows removing individual partitions from being consumed. Removing is different from purging, please see the docs.
  • KeepRetryableFetchErrors bubbles up retryable errors to the end user that are encountered while fetching. By default, these errors are stripped.
  • kversion now supports Kafka 3.5
  • kversion now supports version guessing against KRaft by default
  • kgo.DialTLS now exists to even more easily opt into TLS.
  • kgo.Client.Opts now exists to return the original options that were used to configure the client, making initializing new clients easier.
  • kgo.NodeName returns a string form of a broker node name. Internally, seed brokers use math.MinInt32 for node IDs, which shows up as massively negative numbers in logs sometimes. NodeName can help convert that to seed_<#>.

Relevant commits

  • c3b083b improvement kgo: do not returned paused topics/partitions after pausing
  • e224e90 bugfix kgo: allow HookBrokerRead and HookBrokerE2E to both be called
  • 875761a feature kgo Offset: add EpochOffset getter field
  • c5d0fc5 kgo: add a debug log for stripping retryable errors from fetches
  • b45d663 kgo: add more context to opportunistic metadata loads while fetching
  • 9dae366 kgo: allow retries on dial timeouts
  • 00e4e76 kgo: tolerate buggy v1 group member metadata

... (truncated)

Commits

Updates modernc.org/sqlite from 1.59.0 to 1.60.1

Changelog

Sourced from modernc.org/sqlite's changelog.

Changelog

Entries for v1.38.1 through v1.44.1 and for v1.49.1 were added on 2026-09-05, reconstructed from the git history and the merge requests they cite; they were missing at release time.

  • 2026-09-30 v1.61.0:

  • 2026-09-29 v1.60.1:

    • Binding arguments to a statement is no longer quadratic in the number of its parameters, which made multi-row INSERTs with thousands of ? parameters slow. Resolves [GitHub issue #8](modernc-org/sqlite#8), thanks wencycool!

  • 2026-09-28 v1.60.0:

    • A fault while reading the memory-mapped -shm file of a WAL database no longer crashes the process. The statement fails with a disk I/O error, extended code SQLITE_IOERR_IN_PAGE (8714), and the connection stays usable, as in MSVC builds of SQLite. On by default on every platform and not switchable; lib.SehInject and lib.SehPending inject such a fault for tests. Resolves [GitLab issue #221](https://gitlab.com/cznic/sqlite/-/issues/221), thanks Roman (@​requilence) for the report, and supersedes libsqlite3!4 and [GitHub pull request #7](modernc-org/sqlite#7), thanks hazyhaar for the two rounds, the ccgo finding and the Windows Server runs!
    • Re-vendor lib/ from modernc.org/libsqlite3 v1.15.0 and vec/ from modernc.org/libsqlite_vec v0.6.0; SQLite stays 3.53.4 and sqlite-vec v0.1.9. Go 1.26 is now required, and the pinned modernc.org/libc becomes v1.77.1; as always, downstream go.mod files must pin the same modernc.org/libc version this repository's go.mod does, see [GitLab issue #177](https://gitlab.com/cznic/sqlite/-/issues/177).
    • Nine exported lib constants that never had a meaningful value are gone: INFINITY, MB_CUR_MAX, NAN, RESERVED_BYTE, SHARED_FIRST, SQLITE_CANTOPEN_BKPT, SQLITE_CORRUPT_BKPT, SQLITE_DEFAULT_LOOKASIDE and SQLITE_MISUSE_BKPT. The transpiler now evaluates object-like macros as C expressions, so other constants take their C value (lib.WALINDEX_PGSZ is 32768, not 0) and some appear; the full list is in libsqlite3's CHANGELOG under 2026-09-19.
    • make vendor now writes vendor.json, the modernc.org/libsqlite3 and modernc.org/libsqlite_vec commits and the Go toolchain lib/ and vec/ were vendored with, so git show vX.Y.Z:vendor.json says which revisions a release carries; the test suite fails when they no longer match. Tooling only. See [GitLab merge request #140](https://gitlab.com/cznic/sqlite/-/merge_requests/140).
    • vfs.FS.Close now refuses while a database opened through it is still open, returning an error that wraps the new vfs.ErrInUse and leaving the VFS registered. It used to free the VFS the open connection still called through, so the next query crashed the process or read through freed memory. Close the databases first, then the FS.
    • Fix handle reuse in modernc.org/sqlite/vfs on 32-bit targets: after 2^32 file opens in one process the handle counter wrapped and could overwrite a live entry, such as a file system registered at start-up, and crash. 64-bit targets were not affected.
    • The pluggable page cache now panics when a Cache breaks its contract by returning nil, or a different Page, from Fetch for a page SQLite still holds pinned. It used to free memory SQLite was still using, corrupting the database without an error. Only a Cache implementation with that bug is affected; modernc.org/sqlite/pcache is not.
    • Document three limits of the pluggable page cache on RegisterPageCache and Cache: it cannot be combined with modernc.org/sqlite/vec, PageCache.Create may be called concurrently, and under cache=shared a Cache is called from several goroutines. Documentation only.
    • Document in the package documentation that state set on a pooled connection is inherited by the next caller to borrow it, and that a connection reached through sql.Conn.Raw is not safe for concurrent use. Documentation only.
    • Add StrictPragmas, opt-in and off by default: once enabled, a connection whose _pragma DSN value holds more than one SQL statement fails to open with ErrMultiStatementPragma, before any DSN parameter is applied. A _pragma value runs as SQL text, so anything after a ; runs too. Recommended for any application whose DSN is not a compile-time constant.
    • Document SQLite's own URI query parameters on Driver.Open: mode, cache, immutable, nolock, psow and modeof, which have always worked in a DSN starting with file:, and the trap that a plain file name has its query stripped before SQLite sees it, so /path/to.db?mode=ro opens read-write. Resolves [GitLab issue #257](https://gitlab.com/cznic/sqlite/-/issues/257). Documentation only.
    • Add SECURITY.md, the vulnerability reporting policy: three private channels, what is in scope, that only the latest release is supported, and how a confirmed report is disclosed, including an entry in the Go vulnerability database so govulncheck reports it. IRP.md, linked from it, is the maintainers' incident response plan. Documentation only.
    • Add CONTRIBUTING.md: where to send a merge request, which files are generated and must not be edited by hand, how to build and test across the 20 supported targets, and the AUTHORS/CONTRIBUTORS convention. Documentation only.
    • Ship LICENSE-3RD-PARTY.md, a transitively flattened inventory of every third-party component this module carries with all seventeen license texts in full, and a Software Bill of Materials, sbom.cdx.json (CycloneDX 1.6) and sbom.spdx.json (SPDX 2.3), explained in SBOM.md. Both cover what a module-graph tool cannot see: the transpiled SQLite and sqlite-vec C, and the upstreams modernc.org/libc carries, musl among them. Documentation only.

  • 2026-09-15 v1.59.0:

    • Bump the pinned modernc.org/libc to v1.75.7 and re-vendor lib/ and vec/. The transpiled SQLite is unchanged, still 3.53.4. On the Linux targets the new libc replaces transpiled musl memcpy, memmove, memset, memcmp and strlen with native Go, cutting CPU time on query-heavy workloads by up to a third; see the new Performance section below. As always, downstream go.mod files must pin the same modernc.org/libc version this repository's go.mod does; see [GitLab issue #177](https://gitlab.com/cznic/sqlite/-/issues/177).
    • Hand user-defined function and aggregate callbacks a pooled *FunctionContext instead of allocating a fresh one per call, removing the last driver-side allocation per invocation. Like the argument slice, it is valid only for the duration of the callback and must not be retained past its return. Updates [GitLab issue #226](https://gitlab.com/cznic/sqlite/-/issues/226). See [GitLab merge request #137](https://gitlab.com/cznic/sqlite/-/merge_requests/137).
    • Add regression tests pinning the identity and the pooling of that context. See [GitLab merge request #138](https://gitlab.com/cznic/sqlite/-/merge_requests/138), thanks Ian Chechin!
    • Add a Performance section to the package documentation: measured CPU-time ratios of this driver against the same SQLite compiled from C, where the gap comes from, and the two consequences for applications — index the columns that ORDER BY, GROUP BY and WHERE use, and bound the database/sql pool with SetMaxOpenConns.

  • 2026-09-01 v1.58.0:

    • Upgrade to SQLite 3.53.4. It carries upstream's own fix for the journal-rollback data-corruption bug, so the local super-journal patch v1.56.0 introduced is dropped; recovery behavior is unchanged. Also bumps the pinned modernc.org/libc to v1.75.6; as always, downstream modules must pin the same version this one does, see [GitLab issue #177](https://gitlab.com/cznic/sqlite/-/issues/177).
    • Add opt-in support for Linux Open File Description (OFD) locks on database files, off by default; without opting in, locking behavior is byte-for-byte that of previous releases. A POSIX record lock is owned by the (process, inode) pair, so any Close of any descriptor of the database file anywhere in the process silently strips SQLite's locks; OFD locks survive that. Enable it process-wide with MODERNC_SQLITE_OFD_LOCK=1 in the environment, or with the new OFDLocking(true) before the first connection is opened; OFDLockingEnabled reports the mode in effect, and the new ErrOFDLockingTooLate and ErrOFDLockingUnavailable report a switch attempted too late and a platform or filesystem without the feature. Why it is process-wide rather than a DSN parameter, what WAL's -shm coordination still uses, and the /proc/locks measurements behind the design are in [GitLab issue #255](https://gitlab.com/cznic/sqlite/-/issues/255).
    • Resolves [GitLab issue #255](https://gitlab.com/cznic/sqlite/-/issues/255). See [GitLab merge request #136](https://gitlab.com/cznic/sqlite/-/merge_requests/136), thanks Nathan Herring (@​technosloth), and thanks Gani Georgiev (@​ganigeorgiev) for pressing the opt-in default!

  • 2026-08-19 v1.57.0:

    • Add an opt-in _defensive DSN query parameter turning on SQLite's defensive mode for the connection. On such a connection PRAGMA writable_schema=ON, PRAGMA journal_mode=OFF and PRAGMA schema_version=N become silent no-ops, and writes to a virtual table's shadow tables and to sqlite_dbpage fail. It is a hardening measure, not a sandbox for hostile database files, for which it is only one of the steps SQLite recommends, and it is a property of the connection, not of the file. Absent, or _defensive=0, nothing changes.
    • Reject _defensive=1 together with _journal_mode=OFF (or _journal=OFF) instead of opening a connection in which neither was honoured: SQLite turns that PRAGMA into a no-op that still reports success. Only DSNs using the new parameter can be affected. See [GitHub pull request #6](modernc-org/sqlite#6), thanks wsman!
    • Ship the sqlite-vec license notice this module has been missing since vec/ arrived in v1.47.0. sqlite-vec is Copyright (c) 2024 Alex Garcia, dual-licensed Apache-2.0 OR MIT and used here under MIT; the text now ships as LICENSE-SQLITE_VEC, and make vendor fails rather than quietly dropping it.
    • The SQLite notice is renamed from SQLITE-LICENSE to LICENSE-SQLITE; update any direct links to it. Its contents are unchanged. The rename is what makes go mod vendor carry both notices into downstream vendor/ trees: it selects license files by name prefix, so a name merely ending in LICENSE was never propagated.
    • Let a caller-constructed Driver register its own functions, collations and virtual table modules, through new RegisterFunction, RegisterScalarFunction, RegisterDeterministicScalarFunction, RegisterCollationUtf8 and RegisterModule methods plus Must* variants, and let vtab.RegisterModule honour its db argument. Behavior change: vtab.RegisterModule(db, ...) where db was opened on a caller-constructed Driver used to discard db and land on the registered sqlite driver, reaching every connection in the process; it now lands on that Driver alone, so a sql.Open("sqlite") connection that used to resolve such a module gets no such module. Everything else is additive, and the isolating change discussed in [GitLab issue #254](https://gitlab.com/cznic/sqlite/-/issues/254) is deliberately not made here. See [GitLab merge request #135](https://gitlab.com/cznic/sqlite/-/merge_requests/135), thanks Ian Chechin!
    • Promote freebsd/386, freebsd/arm and netbsd/amd64 from experimental to fully supported. The package documentation's platform table had carried seventeen entries while this module shipped, cross-built and tested twenty; all three have been in the builder matrix since v1.53.0 and pass the full suite on this release's commit. Documentation only — lib/ is byte-for-byte what v1.56.0 shipped.

  • 2026-08-03 v1.56.0:

    • Re-vendor the transpiled sources, picking up modernc.org/libsqlite3's patch for an upstream data-corruption bug in SQLite 3.53.3's journal rollback. A crash during the commit of a multi-database (ATTACH) transaction can leave a hot journal whose zeroed super-journal name still validates, so pager_playback() deletes it without playing it back and leaves the database corrupted. Not a transpilation artifact: a plain gcc build of stock 3.53.3 fails on the same bytes. The SQLite version is unchanged at 3.53.3, every supported target carries the patch, and it will be dropped once upstream ships its own fix.
    • Two targets change beyond that patch. linux/s390x now allocates C bit-fields MSB-first as the big-endian ABI requires, from modernc.org/cc/v4 v4.29.1. linux/riscv64 was regenerated on a host running GCC 11.4.0 rather than 13.3.0, which drops some unreferenced compiler-predefined macro constants and changes what PRAGMA compile_options reports; no SQLite code generation differs. Every other target is byte-identical to v1.55.0 apart from the patch above.
    • Bump the pinned modernc.org/libc to v1.74.4 and the remaining dependencies to their current releases. v1.74.2 and v1.74.3 are retracted upstream over a freeaddrinfo lock leak that deadlocks name resolution, and v1.74.4 is the fix. As always, downstream modules must pin the same modernc.org/libc version this one does, see [GitLab issue #177](https://gitlab.com/cznic/sqlite/-/issues/177).
    • Add NewConnector, returning a database/sql/driver.Connector for use with sql.OpenDB. It opens the same connections sql.Open("sqlite", dsn) does, from the same registered driver, so every function, collation, connection hook and virtual table module registered through this package applies to them. It exists for callers that need to interpose on the physical connections database/sql opens — tracing, metrics, connection-scoped setup — for which the alternative was sql.Register, which is process-global, panics on a repeated name and cannot be undone. A runnable sample is in examples/connector. Resolves [GitLab issue #253](https://gitlab.com/cznic/sqlite/-/issues/253), thanks Alessandro Segala (@​ItalyPaleAle)!

... (truncated)

Commits
  • b122d04 conn: bind statement arguments in linear time
  • 7d5a376 CHANGELOG.md: slim the v1.60.0 section
  • a604165 CHANGELOG.md: the SEH emulation, the re-vendor and the removed lib constants;...
  • fb4aac4 vendor.json: stamp lib/ from libsqlite3 v1.15.0 and vec/ from libsqlite_vec v...
  • 0f7ae7d Merge branch 'master' into seh-emulation
  • 2e43324 lib: re-vendor from modernc.org/libsqlite3 v1.15.0 (SEH emulation), pin libc ...

@dependabot
build(deps): bump the go-modules group across 1 directory with 6 updates
3cd2841 
Bumps the go-modules group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/apache/arrow-go/v18](https://github.com/apache/arrow-go) | `18.7.0` | `18.8.0` |
| [github.com/apache/iceberg-go](https://github.com/apache/iceberg-go) | `0.6.0` | `0.7.0` |
| [github.com/nikolalohinski/gonja/v2](https://github.com/nikolalohinski/gonja) | `2.9.0` | `2.9.1` |
| [github.com/twmb/franz-go](https://github.com/twmb/franz-go) | `1.21.7` | `1.22.1` |
| [github.com/twmb/franz-go/pkg/kmsg](https://github.com/twmb/franz-go) | `1.13.1` | `1.14.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.59.0` | `1.60.1` |



Updates `github.com/apache/arrow-go/v18` from 18.7.0 to 18.8.0
- [Release notes](https://github.com/apache/arrow-go/releases)
- [Commits](apache/arrow-go@v18.7.0...v18.8.0)

Updates `github.com/apache/iceberg-go` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/apache/iceberg-go/releases)
- [Commits](apache/iceberg-go@v0.6.0...v0.7.0)

Updates `github.com/nikolalohinski/gonja/v2` from 2.9.0 to 2.9.1
- [Commits](NikolaLohinski/gonja@v2.9.0...v2.9.1)

Updates `github.com/twmb/franz-go` from 1.21.7 to 1.22.1
- [Changelog](https://github.com/twmb/franz-go/blob/master/CHANGELOG.md)
- [Commits](twmb/franz-go@v1.21.7...v1.22.1)

Updates `github.com/twmb/franz-go/pkg/kmsg` from 1.13.1 to 1.14.0
- [Changelog](https://github.com/twmb/franz-go/blob/master/CHANGELOG.md)
- [Commits](twmb/franz-go@v1.13.1...v1.14.0)

Updates `modernc.org/sqlite` from 1.59.0 to 1.60.1
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.59.0...v1.60.1)

---
updated-dependencies:
- dependency-name: github.com/apache/arrow-go/v18
  dependency-version: 18.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/apache/iceberg-go
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/nikolalohinski/gonja/v2
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/twmb/franz-go
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/twmb/franz-go/pkg/kmsg
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: modernc.org/sqlite
  dependency-version: 1.60.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 10, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-modules-de8f175337 branch October 10, 2026 07:35
@github-actions github-actions Bot locked and limited conversation to collaborators Oct 10, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants