{"id":8718,"name":"github.com/jackc/pgx/v5","ecosystem":"go","repository_url":"https://github.com/jackc/pgx","issues_count":1584,"created_at":"2025-06-06T22:25:52.821Z","updated_at":"2025-06-06T22:25:52.821Z","purl":"pkg:golang/github.com/jackc/pgx/v5","metadata":{"id":4189768,"name":"github.com/jackc/pgx/v5","ecosystem":"go","description":"Package pgx is a PostgreSQL database driver.\n\npgx provides a native PostgreSQL driver and can act as a database/sql driver. The native PostgreSQL interface is similar\nto the database/sql interface while providing better speed and access to PostgreSQL specific features. Use\ngithub.com/jackc/pgx/v5/stdlib to use pgx as a database/sql compatible driver. See that package's documentation for\ndetails.\n\nThe primary way of establishing a connection is with pgx.Connect:\n\nThe database connection string can be in URL or key/value format. Both PostgreSQL settings and pgx settings can be\nspecified here. In addition, a config struct can be created by ParseConfig and modified before establishing the\nconnection with ConnectConfig to configure settings such as tracing that cannot be configured with a connection\nstring.\n\n*pgx.Conn represents a single connection to the database and is not concurrency safe. Use package\ngithub.com/jackc/pgx/v5/pgxpool for a concurrency safe connection pool.\n\npgx implements Query in the familiar database/sql style. However, pgx provides generic functions such as CollectRows and\nForEachRow that are a simpler and safer way of processing rows than manually calling defer rows.Close(), rows.Next(),\nrows.Scan, and rows.Err().\n\nCollectRows can be used collect all returned rows into a slice.\n\nForEachRow can be used to execute a callback function for every row. This is often easier than iterating over rows\ndirectly.\n\npgx also implements QueryRow in the same style as database/sql.\n\nUse Exec to execute a query that does not return a result set.\n\npgx uses the pgtype package to converting Go values to and from PostgreSQL values. It supports many PostgreSQL types\ndirectly and is customizable and extendable. User defined data types such as enums, domains,  and composite types may\nrequire type registration. See that package's documentation for details.\n\nTransactions are started by calling Begin.\n\nThe Tx returned from Begin also implements the Begin method. This can be used to implement pseudo nested transactions.\nThese are internally implemented with savepoints.\n\nUse BeginTx to control the transaction mode. BeginTx also can be used to ensure a new transaction is created instead of\na pseudo nested transaction.\n\nBeginFunc and BeginTxFunc are functions that begin a transaction, execute a function, and commit or rollback the\ntransaction depending on the return value of the function. These can be simpler and less error prone to use.\n\nPrepared statements can be manually created with the Prepare method. However, this is rarely necessary because pgx\nincludes an automatic statement cache by default. Queries run through the normal Query, QueryRow, and Exec functions are\nautomatically prepared on first execution and the prepared statement is reused on subsequent executions. See ParseConfig\nfor information on how to customize or disable the statement cache.\n\nUse CopyFrom to efficiently insert multiple rows at a time using the PostgreSQL copy protocol. CopyFrom accepts a\nCopyFromSource interface. If the data is already in a [][]any use CopyFromRows to wrap it in a CopyFromSource interface.\nOr implement CopyFromSource to avoid buffering the entire data set in memory.\n\nWhen you already have a typed array using CopyFromSlice can be more convenient.\n\nCopyFrom can be faster than an insert with as few as 5 rows.\n\npgx can listen to the PostgreSQL notification system with the `Conn.WaitForNotification` method. It blocks until a\nnotification is received or the context is canceled.\n\npgx supports tracing by setting ConnConfig.Tracer. To combine several tracers you can use the multitracer.Tracer.\n\nIn addition, the tracelog package provides the TraceLog type which lets a traditional logger act as a Tracer.\n\nFor debug tracing of the actual PostgreSQL wire protocol messages see github.com/jackc/pgx/v5/pgproto3.\n\ngithub.com/jackc/pgx/v5/pgconn contains a lower level PostgreSQL driver roughly at the level of libpq. pgx.Conn is\nimplemented on top of pgconn. The Conn.PgConn() method can be used to access this lower layer.\n\nBy default pgx automatically uses prepared statements. Prepared statements are incompatible with PgBouncer. This can be\ndisabled by setting a different QueryExecMode in ConnConfig.DefaultQueryExecMode.","homepage":"https://github.com/jackc/pgx","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/jackc/pgx","keywords_array":[],"namespace":"github.com/jackc/pgx","versions_count":37,"first_release_published_at":"2022-03-19T22:01:12.000Z","latest_release_published_at":"2025-05-17T22:14:14.000Z","latest_release_number":"v5.7.5","last_synced_at":"2025-06-06T09:30:46.902Z","created_at":"2022-04-12T19:50:42.221Z","updated_at":"2025-06-06T09:30:46.902Z","registry_url":"https://pkg.go.dev/github.com/jackc/pgx/v5","install_command":"go get github.com/jackc/pgx/v5","documentation_url":"https://pkg.go.dev/github.com/jackc/pgx/v5#section-documentation","metadata":{},"repo_metadata":{"id":7752997,"uuid":"9120526","full_name":"jackc/pgx","owner":"jackc","description":"PostgreSQL driver and toolkit for Go","archived":false,"fork":false,"pushed_at":"2025-05-10T16:30:57.000Z","size":5525,"stargazers_count":11770,"open_issues_count":222,"forks_count":905,"subscribers_count":103,"default_branch":"master","last_synced_at":"2025-05-12T21:46:39.945Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/jackc/pgx/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jackc.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2013-03-30T19:06:26.000Z","updated_at":"2025-05-12T21:36:13.000Z","dependencies_parsed_at":"2024-01-13T04:56:14.197Z","dependency_job_id":"a92c4626-e572-4a14-89d2-9506f56d3327","html_url":"https://github.com/jackc/pgx","commit_stats":{"total_commits":3453,"total_committers":338,"mean_commits":"10.215976331360947","dds":0.2479003764842166,"last_synced_commit":"c76a650f75781d7114612d848922868ab190e868"},"previous_names":[],"tags_count":101,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jackc","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":256062740,"owners_count":22330987,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"jackc","name":"Jack Christensen","uuid":"94130","kind":"user","description":"","email":"","website":"http://www.jackchristensen.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/94130?v=4","repositories_count":101,"last_synced_at":"2023-03-10T19:06:53.876Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/jackc","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T19:00:58.283Z","updated_at":"2023-03-10T19:06:53.889Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jackc","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jackc/repositories"},"tags":[{"name":"v5.7.4","sha":"04bcc0219dc3acf67f27e68decd6dffe97334779","kind":"commit","published_at":"2025-03-25T01:04:45.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.7.4","html_url":"https://github.com/jackc/pgx/releases/tag/v5.7.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.4/manifests"},{"name":"v5.7.3","sha":"5c1fbf4806cb7fc61f88e0808fb6bdabbac6df3f","kind":"commit","published_at":"2025-03-22T02:02:03.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.7.3","html_url":"https://github.com/jackc/pgx/releases/tag/v5.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.3/manifests"},{"name":"v5.7.2","sha":"24fbe353ed5c3f53d379b3ae370229a5638a2868","kind":"commit","published_at":"2024-12-21T15:25:36.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.7.2","html_url":"https://github.com/jackc/pgx/releases/tag/v5.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.2/manifests"},{"name":"v5.7.1","sha":"672c4a3a24849b1f34857817e6ed76f6581bbe90","kind":"commit","published_at":"2024-09-10T12:25:07.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.7.1","html_url":"https://github.com/jackc/pgx/releases/tag/v5.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.1/manifests"},{"name":"v5.7.0","sha":"d1205a6dbccfcf0e53cc3c39741b4a0f60f209ae","kind":"commit","published_at":"2024-09-07T15:23:34.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.7.0","html_url":"https://github.com/jackc/pgx/releases/tag/v5.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.7.0/manifests"},{"name":"v5.6.0","sha":"572d7fff326f1befdbf9f36a0c0a2b6661432079","kind":"commit","published_at":"2024-05-25T16:35:25.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.6.0","html_url":"https://github.com/jackc/pgx/releases/tag/v5.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.6.0/manifests"},{"name":"v5.5.5","sha":"78a0a2bf410b28c08359fc8c7550c1200589521c","kind":"commit","published_at":"2024-03-09T18:16:20.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.5.5","html_url":"https://github.com/jackc/pgx/releases/tag/v5.5.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.5/manifests"},{"name":"v4.18.3","sha":"8f05c4741a1f381d845d07f3b6fe01dbf6d67d43","kind":"commit","published_at":"2024-03-09T18:15:53.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.18.3","html_url":"https://github.com/jackc/pgx/releases/tag/v4.18.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.18.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.18.3/manifests"},{"name":"v5.5.4","sha":"da6f2c98f2664b215b40b1606551fdfcc7f3ea5c","kind":"commit","published_at":"2024-03-04T15:12:06.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.5.4","html_url":"https://github.com/jackc/pgx/releases/tag/v5.5.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.4/manifests"},{"name":"v4.18.2","sha":"14690df4c533758df97f7cc561cb9062155045c6","kind":"commit","published_at":"2024-03-04T14:59:37.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.18.2","html_url":"https://github.com/jackc/pgx/releases/tag/v4.18.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.18.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.18.2/manifests"},{"name":"v5.5.3","sha":"6f8f6ede6c67ce6b755feafe5c44f93577545147","kind":"commit","published_at":"2024-02-03T18:52:29.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.5.3","html_url":"https://github.com/jackc/pgx/releases/tag/v5.5.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.3/manifests"},{"name":"v5.5.2","sha":"b7de418d46878f65f91c377297d98b8b1a9c406d","kind":"commit","published_at":"2024-01-13T17:08:35.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.5.2","html_url":"https://github.com/jackc/pgx/releases/tag/v5.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.2/manifests"},{"name":"v5.5.1","sha":"ba05097642a802eb5a76343f27a9a3515ed86498","kind":"commit","published_at":"2023-12-09T18:59:44.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.5.1","html_url":"https://github.com/jackc/pgx/releases/tag/v5.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.1/manifests"},{"name":"v5.5.0","sha":"96f5f9cd952eccb28ce575089953c8ba7d99d77b","kind":"commit","published_at":"2023-11-04T15:27:32.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.5.0","html_url":"https://github.com/jackc/pgx/releases/tag/v5.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.5.0/manifests"},{"name":"v5.4.3","sha":"d17440d5c7e24c6e7cfbf5fe2ce66aabf310fadf","kind":"commit","published_at":"2023-08-05T13:36:48.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.4.3","html_url":"https://github.com/jackc/pgx/releases/tag/v5.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.4.3/manifests"},{"name":"v5.4.2","sha":"038fc448c1cc91b9372a6a0d151789f41536f033","kind":"commit","published_at":"2023-07-12T02:29:54.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.4.2","html_url":"https://github.com/jackc/pgx/releases/tag/v5.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.4.2/manifests"},{"name":"v5.4.1","sha":"74ab538d2a75e2fbf29d807e5698ba1102880313","kind":"commit","published_at":"2023-06-18T13:27:21.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.4.1","html_url":"https://github.com/jackc/pgx/releases/tag/v5.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.4.1/manifests"},{"name":"v5.4.0","sha":"461b9fa36eaca55a1d2fcd46871cbd1dc2bbac89","kind":"commit","published_at":"2023-06-14T14:41:17.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.4.0","html_url":"https://github.com/jackc/pgx/releases/tag/v5.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.4.0/manifests"},{"name":"v4.18.1","sha":"13468eb321a0bacbb0cbdfddb1ea1d62e68e0652","kind":"commit","published_at":"2023-02-28T01:58:50.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.18.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.18.1/manifests"},{"name":"v5.3.1","sha":"7ec6ee7b0ad9ecb4cf885b6630fd36b022e89755","kind":"commit","published_at":"2023-02-28T01:57:26.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.3.1","html_url":"https://github.com/jackc/pgx/releases/tag/v5.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.3.1/manifests"},{"name":"v5.3.0","sha":"c5daa3a814b9ddda1d8ed7e685d467d4210cbc45","kind":"commit","published_at":"2023-02-11T15:15:31.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.3.0","html_url":"https://github.com/jackc/pgx/releases/tag/v5.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.3.0/manifests"},{"name":"v4.18.0","sha":"dfaa30d68cff197700f4c4bd2909af56570ce040","kind":"commit","published_at":"2023-02-11T14:44:18.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.18.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.18.0/manifests"},{"name":"v5.2.0","sha":"17f8f7af630362aaff74534a899bf2b0953f40c0","kind":"commit","published_at":"2022-12-06T02:41:55.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.2.0","html_url":"https://github.com/jackc/pgx/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.2.0/manifests"},{"name":"v5.1.1","sha":"8ad1394f4c8aa044ddcade4064d421ee3688f7fc","kind":"commit","published_at":"2022-11-18T01:47:09.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.1.1","html_url":"https://github.com/jackc/pgx/releases/tag/v5.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.1.1/manifests"},{"name":"v5.1.0","sha":"b4d2eae7771495a344d7fa1bf24d2dcff3b76c35","kind":"commit","published_at":"2022-11-12T17:02:55.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.1.0","html_url":"https://github.com/jackc/pgx/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.1.0/manifests"},{"name":"v5.0.4","sha":"987de3874e0fc18b8c468d27cb9de9b2cd67540c","kind":"commit","published_at":"2022-10-25T00:11:50.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.4","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.4/manifests"},{"name":"v5.0.3","sha":"11e5f68ff643f317048fb5a26ce0aa208776b845","kind":"commit","published_at":"2022-10-15T00:11:11.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.3","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.3/manifests"},{"name":"v5.0.2","sha":"094ad9c9d830a33089b85d8dfca538c4de1dcdba","kind":"commit","published_at":"2022-10-08T23:58:17.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.2","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.2/manifests"},{"name":"v5.0.1","sha":"0aa681f3a3f2809e650cfc0475c8db4c8da05a8c","kind":"commit","published_at":"2022-09-24T16:15:31.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.1","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"4fc4f9a60337af3bd7c6abdf6c71460712d112fc","kind":"commit","published_at":"2022-09-17T15:36:36.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0/manifests"},{"name":"v5.0.0-beta.5","sha":"ee2622a8e699a7b052f272b08a6354bfdb90dbcd","kind":"commit","published_at":"2022-09-06T23:32:10.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-beta.5","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.5/manifests"},{"name":"v4.17.2","sha":"d42b399be3ec4153ccd7e8b84ee50e60751a6936","kind":"commit","published_at":"2022-09-03T18:42:36.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.17.2","html_url":"https://github.com/jackc/pgx/releases/tag/v4.17.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.17.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.17.2/manifests"},{"name":"v5.0.0-beta.4","sha":"f015ced1bf367cb1f28613dfbfd729157a2de342","kind":"commit","published_at":"2022-09-03T18:20:19.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-beta.4","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.4/manifests"},{"name":"v4.17.1","sha":"f5cdf0d3830993734c77e3c998dcd74d84c2b9f7","kind":"commit","published_at":"2022-08-27T23:18:41.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.17.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.17.1/manifests"},{"name":"v5.0.0-beta.3","sha":"fe3a4f31503fd23b9e560ed372bd365368b7f880","kind":"commit","published_at":"2022-08-23T02:01:18.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-beta.3","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.3/manifests"},{"name":"v5.0.0-beta.2","sha":"8eae4a2a3e9ab5ab6b39185c4dc8f25a743a29be","kind":"commit","published_at":"2022-08-13T15:19:49.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-beta.2","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.2/manifests"},{"name":"v5.0.0-beta.1","sha":"1819959d079a607f53fa6fa7659cbaa73894a679","kind":"commit","published_at":"2022-08-06T11:41:33.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-beta.1","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-beta.1/manifests"},{"name":"v4.17.0","sha":"5768a0c0bddfdefad0596d8a3da61fc7dccac32a","kind":"commit","published_at":"2022-08-06T11:24:41.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.17.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.17.0/manifests"},{"name":"v5.0.0-alpha.5","sha":"a5b4f888c221566c3034bda659afa460701a256e","kind":"commit","published_at":"2022-07-16T23:16:19.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-alpha.5","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.5/manifests"},{"name":"v5.0.0-alpha.4","sha":"585022440b6f015d2c54f80cd46b55e1499472d7","kind":"commit","published_at":"2022-06-25T23:11:39.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-alpha.4","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.4/manifests"},{"name":"v4.16.1","sha":"8b9b4055f3b679999adde4a0ab44eb6e1ea536c7","kind":"commit","published_at":"2022-05-07T12:14:53.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.16.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.16.1/manifests"},{"name":"v5.0.0-alpha.3","sha":"107196ab0c90528a41a9c2910e158763ac320cd4","kind":"commit","published_at":"2022-04-23T23:45:38.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-alpha.3","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.3/manifests"},{"name":"v4.16.0","sha":"8c1815e02e2f584ef74f868fa8f0efd469e8980b","kind":"commit","published_at":"2022-04-22T01:15:18.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.16.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.16.0/manifests"},{"name":"v5.0.0-alpha.2","sha":"8cf6721d66722439e94f939a4dee58895a071f40","kind":"commit","published_at":"2022-04-02T21:55:05.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-alpha.2","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.2/manifests"},{"name":"v5.0.0-alpha.1","sha":"8c18d7808bdf0ccad2887914c78f7b71d0e66e5e","kind":"commit","published_at":"2022-03-19T22:01:12.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v5.0.0-alpha.1","html_url":"https://github.com/jackc/pgx/releases/tag/v5.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v5.0.0-alpha.1/manifests"},{"name":"v4.15.0","sha":"2b7de82ef43e637b3ef444f9d8162e50f1cab3ee","kind":"commit","published_at":"2022-02-07T17:03:06.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.15.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.15.0/manifests"},{"name":"v4.14.1","sha":"9fdaf7da810405df8360184341085defbcf79446","kind":"commit","published_at":"2021-11-29T03:46:52.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.14.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.14.1/manifests"},{"name":"v4.14.0","sha":"9da0a7aef7ade9d2f722d641fc8d203486d8be55","kind":"commit","published_at":"2021-11-20T16:48:31.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.14.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.14.0/manifests"},{"name":"v4.13.0","sha":"8f33ed07cd0381609da01a602d311f321aaa9e10","kind":"commit","published_at":"2021-07-24T15:59:24.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.13.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.13.0/manifests"},{"name":"v4.12.0","sha":"9ee04e87e3b61738ebc9b27e7f2ca794cb8ae5fe","kind":"commit","published_at":"2021-07-10T15:06:00.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.12.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.12.0/manifests"},{"name":"v4.11.0","sha":"909b81a16372d7e2574b2b11e8993895bdd5a065","kind":"commit","published_at":"2021-03-25T14:21:28.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.11.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.11.0/manifests"},{"name":"v4.10.1","sha":"fc4d50f6c2a089099c0b63a8373cc1827d65b2ea","kind":"commit","published_at":"2020-12-19T16:18:49.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.10.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.10.1/manifests"},{"name":"v4.10.0","sha":"e14638e1251942ee8ce1397c5f834c988fec897e","kind":"commit","published_at":"2020-12-04T01:50:07.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.10.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.10.0/manifests"},{"name":"v4.9.2","sha":"eeaa26abee918c4afe6437ac4ab75c32d36609df","kind":"commit","published_at":"2020-11-04T01:24:54.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.9.2","html_url":"https://github.com/jackc/pgx/releases/tag/v4.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.9.2/manifests"},{"name":"v4.9.1","sha":"9898beaa2d43f18c6a37e03841c1aae8705415b1","kind":"commit","published_at":"2020-10-31T22:36:36.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.9.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.9.1/manifests"},{"name":"v4.9.0","sha":"2a8ae6f269e17c44d25cd0f713eaa6356547206e","kind":"commit","published_at":"2020-09-26T16:58:01.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.9.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.9.0/manifests"},{"name":"v4.8.1","sha":"e9579e6249e256e49cf95154c38d45367e22179e","kind":"commit","published_at":"2020-07-30T03:19:49.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.8.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.8.1/manifests"},{"name":"v4.8.0","sha":"b8c58578800a761503418bda703cc31b02b5957c","kind":"commit","published_at":"2020-07-22T11:49:50.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.8.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.8.0/manifests"},{"name":"v4.7.2","sha":"42cbd0fa462082363eb2fa3302c69a9d2bb2fabc","kind":"commit","published_at":"2020-07-14T17:07:51.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.7.2","html_url":"https://github.com/jackc/pgx/releases/tag/v4.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.7.2/manifests"},{"name":"v4.7.1","sha":"3568b908c03beaf0846015658ca9fd3123c51823","kind":"commit","published_at":"2020-06-29T15:43:18.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.7.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.7.1/manifests"},{"name":"v4.7.0","sha":"34cbb611383a339852ea9fc6e5d5aa6e1e4d5091","kind":"commit","published_at":"2020-06-27T17:31:13.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.7.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.7.0/manifests"},{"name":"v4.6.0","sha":"0446492fe9dc68afff5926b15ec74412ac9c390b","kind":"commit","published_at":"2020-03-30T16:35:02.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.6.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.6.0/manifests"},{"name":"v4.5.0","sha":"576f99a35e6fbaee12c601d0c09ab0f1eac46836","kind":"commit","published_at":"2020-03-07T19:32:17.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.5.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.5.0/manifests"},{"name":"v4.4.1","sha":"542c9a97f13892c0c57f95e04426208f72dabe4c","kind":"commit","published_at":"2020-02-14T23:59:33.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.4.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.4.1/manifests"},{"name":"v4.4.0","sha":"ea0eacc0b65e7cc7e1dbe77322778eeec1bde323","kind":"commit","published_at":"2020-02-05T17:31:22.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.4.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.4.0/manifests"},{"name":"v3.6.2","sha":"a413de981978e4100d5736af7aaa2b392511612f","kind":"commit","published_at":"2020-01-24T22:16:15.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.6.2","html_url":"https://github.com/jackc/pgx/releases/tag/v3.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.6.2/manifests"},{"name":"v4.3.0","sha":"105928875106502d318f47396f6f370dc59945de","kind":"commit","published_at":"2020-01-24T03:05:53.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.3.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.3.0/manifests"},{"name":"v4.2.1","sha":"69048c281c7cc134b9dd4ed3883e1c639c211d75","kind":"commit","published_at":"2020-01-13T14:51:08.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.2.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"7a394d5c78aad33fd88a4c3d847ad21093e62f62","kind":"commit","published_at":"2020-01-12T01:25:23.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.2.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.2.0/manifests"},{"name":"v3.6.1","sha":"621a7ed1b809be7eb2773275d44cf288a37c9153","kind":"commit","published_at":"2020-01-12T00:51:46.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.6.1","html_url":"https://github.com/jackc/pgx/releases/tag/v3.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.6.1/manifests"},{"name":"v4.1.2","sha":"f3a3ee1a0e5c8fc8991928bcd06fdbcd1ee9d05c","kind":"commit","published_at":"2019-10-23T01:51:52.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.1.2","html_url":"https://github.com/jackc/pgx/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.1.2/manifests"},{"name":"v4.1.1","sha":"3da4ea1a978845440c59b7a6bd42294dd32a5d7c","kind":"commit","published_at":"2019-10-21T18:57:39.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.1.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"e8a20809ddb90c39a1d281d15f40bd47b5e2f4db","kind":"commit","published_at":"2019-10-12T16:28:39.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.1.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.1.0/manifests"},{"name":"v4.0.1","sha":"0a50ae89beb7a0d95177e798161b3262dcd26a55","kind":"commit","published_at":"2019-09-20T04:03:52.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.0.1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"28ad4873d3817802074177603ff9cefbb4dc9449","kind":"commit","published_at":"2019-09-15T01:45:50.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.0.0","html_url":"https://github.com/jackc/pgx/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0/manifests"},{"name":"v3.6.0","sha":"c73e7d75061bb42b0282945710f344cfe1113d10","kind":"commit","published_at":"2019-09-15T01:14:24.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.6.0","html_url":"https://github.com/jackc/pgx/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.6.0/manifests"},{"name":"v4.0.0-rc2","sha":"7d053e4d5cfb0c299119174447cc8a6bcc3baa5c","kind":"commit","published_at":"2019-09-10T23:38:10.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.0.0-rc2","html_url":"https://github.com/jackc/pgx/releases/tag/v4.0.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0-rc2/manifests"},{"name":"v4.0.0-rc1","sha":"be8ed87408efbb35444fd660d51265c5047d2786","kind":"commit","published_at":"2019-09-02T17:27:02.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.0.0-rc1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.0.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0-rc1/manifests"},{"name":"v4.0.0-pre2","sha":"486d64daed097e108284f9781ec0a1b56f01f2b5","kind":"commit","published_at":"2019-08-28T02:18:25.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.0.0-pre2","html_url":"https://github.com/jackc/pgx/releases/tag/v4.0.0-pre2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0-pre2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0-pre2/manifests"},{"name":"v4.0.0-pre1","sha":"da16226e0a70277d394b5d4285bbc343bc84f202","kind":"commit","published_at":"2019-06-29T18:59:11.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v4.0.0-pre1","html_url":"https://github.com/jackc/pgx/releases/tag/v4.0.0-pre1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0-pre1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v4.0.0-pre1/manifests"},{"name":"v3.5.0","sha":"a1d6202434aa40c3624688f6c2cacbc27eef5472","kind":"commit","published_at":"2019-06-29T16:19:29.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.5.0","html_url":"https://github.com/jackc/pgx/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.5.0/manifests"},{"name":"v3.4.0","sha":"8faa4453fc7051d1076053f8854077753ab912f2","kind":"commit","published_at":"2019-05-03T20:52:30.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.4.0","html_url":"https://github.com/jackc/pgx/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"c59c9cac59ab95eceb0c12ff338923c62f411ea2","kind":"commit","published_at":"2018-12-01T17:13:13.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.3.0","html_url":"https://github.com/jackc/pgx/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"89f1e6ac7276b61d885db5e5aed6fcbedd1c7e31","kind":"commit","published_at":"2018-08-07T14:28:28.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.2.0","html_url":"https://github.com/jackc/pgx/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"da3231b0b66e2e74cdb779f1d46c5e958ba8be27","kind":"commit","published_at":"2018-01-15T17:48:07.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.1.0","html_url":"https://github.com/jackc/pgx/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.1.0/manifests"},{"name":"v3.0.1","sha":"66918e80dfde8d5cb09af9aebf40e2cce2eb0cc0","kind":"commit","published_at":"2017-08-12T22:45:57.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.0.1","html_url":"https://github.com/jackc/pgx/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"69494780a8906839b5d2e9a72640846e96fe183b","kind":"commit","published_at":"2017-07-24T13:53:57.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v3.0.0","html_url":"https://github.com/jackc/pgx/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v3.0.0/manifests"},{"name":"v2.11.0","sha":"9bd22f689ac9f0f5445fb5dad24569d5cadf1773","kind":"commit","published_at":"2017-06-05T13:57:30.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.11.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.11.0/manifests"},{"name":"v2.10.0","sha":"97c01fb52451c10e686fb847ad390338bf1799ae","kind":"commit","published_at":"2017-03-17T13:06:00.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.10.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.10.0/manifests"},{"name":"v2.9.0","sha":"2508faa9ced29f4bbb3a39483e4b5ac2627a7c48","kind":"commit","published_at":"2016-08-26T12:39:15.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.9.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.9.0/manifests"},{"name":"v2.8.1","sha":"9edd770c70e274b7ef67fa9f4039c824be0f8bda","kind":"commit","published_at":"2016-03-24T20:38:55.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.8.1","html_url":"https://github.com/jackc/pgx/releases/tag/v2.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.8.1/manifests"},{"name":"v2.8.0","sha":"410a7646bcf03a1ad5fc98709b10d1f50b231c19","kind":"commit","published_at":"2016-03-18T20:22:35.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.8.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.8.0/manifests"},{"name":"v2.7.1","sha":"3262ee23f3cab228cd306668e256fa8c0f01bbc5","kind":"commit","published_at":"2015-10-26T17:09:46.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.7.1","html_url":"https://github.com/jackc/pgx/releases/tag/v2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.7.1/manifests"},{"name":"v2.7.0","sha":"1e9206fc6c7edfffa344525aa1cf8c24b62699b0","kind":"commit","published_at":"2015-10-16T21:37:45.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.7.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"e69d2bba264e32495e6eb35e138ad54065123b2a","kind":"commit","published_at":"2015-09-03T18:03:52.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.6.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"d46a762159f7b7c97b24c9dfacc0b985e48fa3e1","kind":"commit","published_at":"2015-04-15T13:12:17.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.5.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"3beff78461024ef68c99923573d77fe393a82217","kind":"commit","published_at":"2014-10-03T20:00:20.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.4.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"68034af72120a228e13f59571b7c2ab077092770","kind":"commit","published_at":"2014-09-16T21:59:13.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.3.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"5dbc03602d6490439492efbefaa04774d18e4226","kind":"commit","published_at":"2014-09-05T16:14:11.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.2.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.2.0/manifests"},{"name":"v2.1.0","sha":"61bf7d841afd37d86d6fb92a4788813eb1b79027","kind":"commit","published_at":"2014-07-18T21:51:11.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.1.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"f7171f34e71a2d63d59f721bdb1cc158e3f53624","kind":"commit","published_at":"2014-07-14T13:16:03.000Z","download_url":"https://codeload.github.com/jackc/pgx/tar.gz/v2.0.0","html_url":"https://github.com/jackc/pgx/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jackc%2Fpgx/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2025-05-24T10:03:34.719Z","dependent_packages_count":3079,"downloads":null,"downloads_period":null,"dependent_repos_count":4965,"rankings":{"downloads":null,"dependent_repos_count":0.11766023628641688,"dependent_packages_count":0.11406363517722509,"stargazers_count":0.7502509913774057,"forks_count":1.0875094153879037,"docker_downloads_count":0.19082537885054685,"average":0.4520619314158997},"purl":"pkg:golang/github.com/jackc/pgx/v5","advisories":[{"uuid":"GSA_kwCzR0hTQS1tcnd3LTI3dmMtZ2dods4AA5wA","url":"https://github.com/advisories/GHSA-mrww-27vc-gghv","title":"pgx SQL Injection via Protocol Message Size Overflow","description":"### Impact\n\nSQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.\n\n### Patches\n\nThe problem is resolved in v4.18.2 and v5.5.4.\n\n### Workarounds\n\nReject user input large enough to cause a single query or bind message to exceed 4 GB in size.\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-03-04T20:43:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8","https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv","https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007","https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4","https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8","https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df","https://nvd.nist.gov/vuln/detail/CVE-2024-27304","https://www.youtube.com/watch?v=Tfg1B8u1yvE","https://github.com/advisories/GHSA-mrww-27vc-gghv"],"source_kind":"github","identifiers":["GHSA-mrww-27vc-gghv","CVE-2024-27304"],"repository_url":"https://github.com/jackc/pgproto3","blast_radius":41.766202379173,"packages":[{"versions":[{"first_patched_version":"5.5.4","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.5.4"}],"ecosystem":"go","package_name":"github.com/jackc/pgx/v5"},{"versions":[{"first_patched_version":"4.18.2","vulnerable_version_range":"\u003c 4.18.2"}],"ecosystem":"go","package_name":"github.com/jackc/pgx/v4"},{"versions":[{"first_patched_version":"5.5.4","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.5.4"},{"first_patched_version":"4.18.2","vulnerable_version_range":"\u003c 4.18.2"}],"ecosystem":"go","package_name":"github.com/jackc/pgx"}],"created_at":"2024-03-04T21:04:41.847Z","updated_at":"2024-12-12T22:30:36.000Z","epss_percentage":0.00044,"epss_percentile":0.11522},{"uuid":"GSA_kwCzR0hTQS1mcXBnLXJxNzYtOTlwcc4AA9m6","url":"https://github.com/advisories/GHSA-fqpg-rq76-99pq","title":"Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx","description":"Pipeline can panic when PgConn is busy or closed.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-07-05T20:08:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/jackc/pgx/commit/dfd198003a03dbb96e4607b0d3a0bb9a7398ccb7","https://github.com/advisories/GHSA-fqpg-rq76-99pq"],"source_kind":"github","identifiers":["GHSA-fqpg-rq76-99pq"],"repository_url":"https://github.com/jackc/pgx","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"5.5.2","vulnerable_version_range":"\u003c 5.5.2"}],"ecosystem":"go","package_name":"github.com/jackc/pgx/v5"}],"created_at":"2024-07-05T21:05:25.580Z","updated_at":"2024-07-05T20:08:27.000Z","epss_percentage":null,"epss_percentile":null}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/jackc/pgx/v5","docker_dependents_count":855,"docker_downloads_count":1070278118,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/jackc/pgx/v5","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/jackc/pgx/v5/dependencies","status":null,"funding_links":[],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjackc%2Fpgx%2Fv5/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjackc%2Fpgx%2Fv5/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjackc%2Fpgx%2Fv5/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjackc%2Fpgx%2Fv5/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1882895,"maintainers_count":0,"namespaces_count":723926,"keywords_count":97872,"github":"golang","metadata":{"funded_packages_count":39346},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-06-06T05:22:27.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},"unique_repositories_count":879,"unique_repositories_count_past_30_days":15,"recent_issues":[{"uuid":"4815632529","node_id":"PR_kwDOSOSmh87uKoh6","number":64,"state":"closed","title":"chore(deps): bump the go-minor-patch group across 1 directory with 9 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-13T03:10:27.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-06T03:09:35.000Z","updated_at":"2026-07-13T03:10:29.000Z","time_to_close":604852,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-patch","update_count":9,"packages":[{"name":"github.com/coder/websocket","old_version":"1.8.14","new_version":"1.8.15","repository_url":"https://github.com/coder/websocket"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/minio/minio-go/v7","old_version":"7.2.0","new_version":"7.2.1","repository_url":"https://github.com/minio/minio-go"},{"name":"github.com/pressly/goose/v3","old_version":"3.27.1","new_version":"3.27.2","repository_url":"https://github.com/pressly/goose"},{"name":"github.com/redis/go-redis/v9","old_version":"9.20.0","new_version":"9.21.0","repository_url":"https://github.com/redis/go-redis"},{"name":"github.com/testcontainers/testcontainers-go","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"github.com/testcontainers/testcontainers-go/modules/postgres","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"golang.org/x/crypto","old_version":"0.52.0","new_version":"0.53.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/time","old_version":"0.11.0","new_version":"0.15.0","repository_url":"https://github.com/golang/time"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 9 updates in the /server directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/coder/websocket](https://github.com/coder/websocket) | `1.8.14` | `1.8.15` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.2.0` | `7.2.1` |\n| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.27.1` | `3.27.2` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.20.0` | `9.21.0` |\n| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [github.com/testcontainers/testcontainers-go/modules/postgres](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |\n| [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.15.0` |\n\n\nUpdates `github.com/coder/websocket` from 1.8.14 to 1.8.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coder/websocket/releases\"\u003egithub.com/coder/websocket's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.15\u003c/h2\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: fix typo in Accept function by \u003ca href=\"https://github.com/IgorSilvestre\"\u003e\u003ccode\u003e@​IgorSilvestre\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/544\"\u003ecoder/websocket#544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: transmit in single frame when compression enabled by \u003ca href=\"https://github.com/DanielleMaywood\"\u003e\u003ccode\u003e@​DanielleMaywood\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/552\"\u003ecoder/websocket#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add document for AI agents (AGENTS.md) by \u003ca href=\"https://github.com/mafredri\"\u003e\u003ccode\u003e@​mafredri\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/547\"\u003ecoder/websocket#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove mention of resolved issue in README by \u003ca href=\"https://github.com/tamird\"\u003e\u003ccode\u003e@​tamird\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/556\"\u003ecoder/websocket#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix lint issue by \u003ca href=\"https://github.com/mafredri\"\u003e\u003ccode\u003e@​mafredri\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/557\"\u003ecoder/websocket#557\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix roadmap links after repo transfer by \u003ca href=\"https://github.com/GeObts\"\u003e\u003ccode\u003e@​GeObts\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/558\"\u003ecoder/websocket#558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid per-frame cleanup closures on read to remove 2 allocs per frame read by \u003ca href=\"https://github.com/mitchellh\"\u003e\u003ccode\u003e@​mitchellh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/565\"\u003ecoder/websocket#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003econn: skip timeout callbacks for background contexts by \u003ca href=\"https://github.com/mitchellh\"\u003e\u003ccode\u003e@​mitchellh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/566\"\u003ecoder/websocket#566\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/IgorSilvestre\"\u003e\u003ccode\u003e@​IgorSilvestre\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/544\"\u003ecoder/websocket#544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tamird\"\u003e\u003ccode\u003e@​tamird\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/556\"\u003ecoder/websocket#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/GeObts\"\u003e\u003ccode\u003e@​GeObts\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/558\"\u003ecoder/websocket#558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mitchellh\"\u003e\u003ccode\u003e@​mitchellh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/565\"\u003ecoder/websocket#565\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coder/websocket/compare/v1.8.14...v1.8.15\"\u003ehttps://github.com/coder/websocket/compare/v1.8.14...v1.8.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/9c8faadccd1b679e811a79ce506f8a10237251ad\"\u003e\u003ccode\u003e9c8faad\u003c/code\u003e\u003c/a\u003e conn: skip timeout callbacks for background contexts (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/70393646f4d7f38613019f50c3dc78cead816191\"\u003e\u003ccode\u003e7039364\u003c/code\u003e\u003c/a\u003e avoid per-frame cleanup closures on read to remove 2 allocs per frame read (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/d099e1621e8d0f080c9f3b87c5a8587e0b722723\"\u003e\u003ccode\u003ed099e16\u003c/code\u003e\u003c/a\u003e docs: fix roadmap links (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/c98e9dc2d6f69af6172dd1ed212c48b35fc54f22\"\u003e\u003ccode\u003ec98e9dc\u003c/code\u003e\u003c/a\u003e docs: fix lint issue (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/557\"\u003e#557\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/39b7b07a7a6e733c564d43921fc1b7ea16370b5b\"\u003e\u003ccode\u003e39b7b07\u003c/code\u003e\u003c/a\u003e docs: remove mention of resolved issue in README (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/556\"\u003e#556\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/9f473adfa59519d1e0295cd7a988d965085b701a\"\u003e\u003ccode\u003e9f473ad\u003c/code\u003e\u003c/a\u003e docs: add document for AI agents (AGENTS.md) (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/547\"\u003e#547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/8d3545afb3eae1589606d937c4809ff4df769aa6\"\u003e\u003ccode\u003e8d3545a\u003c/code\u003e\u003c/a\u003e fix: transmit in single frame when compression enabled (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/8bf6dd28ef54e75c9e6e0ea90547f6d4e5e75795\"\u003e\u003ccode\u003e8bf6dd2\u003c/code\u003e\u003c/a\u003e chore: fix typo in Accept function (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coder/websocket/compare/v1.8.14...v1.8.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/minio/minio-go/v7` from 7.2.0 to 7.2.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/7e34713241bbd80c4cae66ad141d232c0623387b\"\u003e\u003ccode\u003e7e34713\u003c/code\u003e\u003c/a\u003e feat: support in mc inventory for custom run schedule (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2244\"\u003e#2244\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/016d0fd563bf63aa67056ca86014dd53c9d37205\"\u003e\u003ccode\u003e016d0fd\u003c/code\u003e\u003c/a\u003e feat: stream GetObjectAnnotation payload via io.ReadCloser (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2243\"\u003e#2243\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/6c516377ef72db8e98b3f2d7e54dc56d79a53881\"\u003e\u003ccode\u003e6c51637\u003c/code\u003e\u003c/a\u003e feat: stream PutObjectAnnotation payload via io.ReadSeeker (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2242\"\u003e#2242\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/07c682a0628fffe0b00995ec1c382389d21e4722\"\u003e\u003ccode\u003e07c682a\u003c/code\u003e\u003c/a\u003e feat: add object annotation client APIs (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2241\"\u003e#2241\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/53b504aa08f607dd575e283bd0769c054104eabc\"\u003e\u003ccode\u003e53b504a\u003c/code\u003e\u003c/a\u003e fix: caching defer bug (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2237\"\u003e#2237\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/291e83f05a251745f03d3065ed091188ba953525\"\u003e\u003ccode\u003e291e83f\u003c/code\u003e\u003c/a\u003e add new aws region ap-southeast-6 (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2234\"\u003e#2234\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/minio/minio-go/compare/v7.2.0...v7.2.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/pressly/goose/v3` from 3.27.1 to 3.27.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pressly/goose/releases\"\u003egithub.com/pressly/goose/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.2\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003egolang.org/x/crypto\u003c/code\u003e and \u003ccode\u003egolang.org/x/net\u003c/code\u003e to address security advisories (CVE fixes)\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pressly/goose/blob/main/CHANGELOG.md\"\u003egithub.com/pressly/goose/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[v3.27.2] - 2026-06-30\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003egolang.org/x/crypto\u003c/code\u003e and \u003ccode\u003egolang.org/x/net\u003c/code\u003e to address security advisories (CVE fixes)\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/b0f7076bc5e6fef42c7500e200a37ab0e8127772\"\u003e\u003ccode\u003eb0f7076\u003c/code\u003e\u003c/a\u003e release: v3.27.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/6669df28f344ef1cbd2a8f6ff6feb30eced488d6\"\u003e\u003ccode\u003e6669df2\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/opencontainers/runc from 1.3.3 to 1.3.6 in /inte...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/f61f5b9d81bde851c574671413085362ec53b55c\"\u003e\u003ccode\u003ef61f5b9\u003c/code\u003e\u003c/a\u003e build(deps): bump the gomod group across 1 directory with 4 updates (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1086\"\u003e#1086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/90d5b3ac55db5942cc1dc9015a2d6e49c5da71ea\"\u003e\u003ccode\u003e90d5b3a\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/checkout from 6 to 7 (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1081\"\u003e#1081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/cef6bb7d23058223d8274c9ed53b3935bdfecc60\"\u003e\u003ccode\u003ecef6bb7\u003c/code\u003e\u003c/a\u003e build(deps): bump golang crypto and net to FIX CVEs (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1083\"\u003e#1083\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/f2c327a7b28d129e8fdbabd58a4071cf554e95b1\"\u003e\u003ccode\u003ef2c327a\u003c/code\u003e\u003c/a\u003e build(deps): bump the gomod group across 1 directory with 7 updates (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1079\"\u003e#1079\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/d0bee40e1f7e5160a01401f7f5c7a6bf9132f73e\"\u003e\u003ccode\u003ed0bee40\u003c/code\u003e\u003c/a\u003e Docs: mention MariaDB support (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1071\"\u003e#1071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/pressly/goose/compare/v3.27.1...v3.27.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.20.0 to 9.21.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e9.21.0\u003c/h2\u003e\n\u003cp\u003eThis is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eZero-copy \u003ccode\u003eGetToBuffer\u003c/code\u003e / \u003ccode\u003eSetFromBuffer\u003c/code\u003e\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ccode\u003eStringCmdable\u003c/code\u003e methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that \u003ccode\u003eGet\u003c/code\u003e/\u003ccode\u003eSet\u003c/code\u003e incur:\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eGetToBuffer(ctx, key, buf) *ZeroCopyStringCmd   // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) }\r\nSetFromBuffer(ctx, key, buf) *StatusCmd\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003ccode\u003eGetToBuffer\u003c/code\u003e decodes the bulk reply straight into the caller-owned \u003ccode\u003ebuf\u003c/code\u003e (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. \u003ccode\u003eSetFromBuffer\u003c/code\u003e is provided for API symmetry — it dispatches to the same \u003ccode\u003e[]byte\u003c/code\u003e writer path as \u003ccode\u003eSet(ctx, key, buf, 0)\u003c/code\u003e and produces byte-identical output on the wire. Available on \u003ccode\u003e*Client\u003c/code\u003e, \u003ccode\u003e*ClusterClient\u003c/code\u003e, \u003ccode\u003e*Ring\u003c/code\u003e, \u003ccode\u003e*Conn\u003c/code\u003e and \u003ccode\u003ePipeliner\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3834\"\u003e#3834\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eExplicit \u003ccode\u003eLIMIT 0\u003c/code\u003e for stream trimming\u003c/h3\u003e\n\u003cp\u003eRedis treats \u003ccode\u003eXTRIM\u003c/code\u003e/\u003ccode\u003eXADD\u003c/code\u003e approximate-trim (\u003ccode\u003e~\u003c/code\u003e) \u003ccode\u003eLIMIT 0\u003c/code\u003e as \u0026quot;disable the trimming effort cap entirely\u0026quot;, which differs from omitting \u003ccode\u003eLIMIT\u003c/code\u003e (the implicit \u003ccode\u003e100 * stream-node-max-entries\u003c/code\u003e default). The command builders previously only emitted \u003ccode\u003eLIMIT\u003c/code\u003e when \u003ccode\u003elimit \u0026gt; 0\u003c/code\u003e, so callers could never send an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e. Following the \u003ccode\u003eKeepTTL = -1\u003c/code\u003e precedent, the new \u003ccode\u003eXTrimLimitDisabled = -1\u003c/code\u003e sentinel now emits an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e; \u003ccode\u003elimit == 0\u003c/code\u003e keeps the historical no-\u003ccode\u003eLIMIT\u003c/code\u003e behavior, so existing callers produce byte-identical commands.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3848\"\u003e#3848\u003c/a\u003e) by \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e✨ New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eZero-copy buffer string commands\u003c/strong\u003e: new \u003ccode\u003eGetToBuffer\u003c/code\u003e / \u003ccode\u003eSetFromBuffer\u003c/code\u003e on \u003ccode\u003eStringCmdable\u003c/code\u003e and the \u003ccode\u003eZeroCopyStringCmd\u003c/code\u003e result type, reading/writing string values into caller-owned buffers without per-call payload allocation (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3834\"\u003e#3834\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXTrimLimitDisabled\u003c/code\u003e sentinel\u003c/strong\u003e: \u003ccode\u003eXTRIM\u003c/code\u003e/\u003ccode\u003eXADD\u003c/code\u003e approximate trimming can now send an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e to disable the trim effort cap, via the new \u003ccode\u003eXTrimLimitDisabled = -1\u003c/code\u003e sentinel (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3848\"\u003e#3848\u003c/a\u003e) by \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub health-check timeouts\u003c/strong\u003e: \u003ccode\u003echannel.initHealthCheck\u003c/code\u003e now bounds the \u003ccode\u003ePing\u003c/code\u003e it issues with a fresh per-check timeout context (the exported \u003ccode\u003epingTimeout\u003c/code\u003e / \u003ccode\u003ereconnectTimeout\u003c/code\u003e) instead of \u003ccode\u003econtext.TODO()\u003c/code\u003e, so a stuck health-check Ping can no longer block indefinitely (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3819\"\u003e#3819\u003c/a\u003e) by \u003ca href=\"https://github.com/abdellani\"\u003e\u003ccode\u003e@​abdellani\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSkip redundant \u003ccode\u003eUNWATCH\u003c/code\u003e in \u003ccode\u003eTx.Close\u003c/code\u003e\u003c/strong\u003e: a transaction now tracks whether a \u003ccode\u003eWATCH\u003c/code\u003e is still active (\u003ccode\u003ewatchArmed\u003c/code\u003e) and only issues \u003ccode\u003eUNWATCH\u003c/code\u003e on \u003ccode\u003eClose\u003c/code\u003e when it is, removing an extra round trip on the common \u003ccode\u003eWATCH\u003c/code\u003e/.../\u003ccode\u003eEXEC\u003c/code\u003e and no-key \u003ccode\u003eWatch\u003c/code\u003e paths while never returning a connection to the pool with an active watch (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3854\"\u003e#3854\u003c/a\u003e) by \u003ca href=\"https://github.com/fcostaoliveira\"\u003e\u003ccode\u003e@​fcostaoliveira\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003emaintnotifications\u003c/code\u003e \u003ccode\u003eModeAuto\u003c/code\u003e fail-open\u003c/strong\u003e: \u003ccode\u003eModeAuto\u003c/code\u003e now stays fail-open when the server does not support maintenance notifications — connections are retired and tracking is guarded during downgrade so the client keeps working instead of erroring (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3853\"\u003e#3853\u003c/a\u003e) by \u003ca href=\"https://github.com/terrorobe\"\u003e\u003ccode\u003e@​terrorobe\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/abdellani\"\u003e\u003ccode\u003e@​abdellani\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/fcostaoliveira\"\u003e\u003ccode\u003e@​fcostaoliveira\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/terrorobe\"\u003e\u003ccode\u003e@​terrorobe\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.20.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md\"\u003egithub.com/redis/go-redis/v9's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.21.0 (2026-06-18)\u003c/h1\u003e\n\u003cp\u003eThis is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eZero-copy \u003ccode\u003eGetToBuffer\u003c/code\u003e / \u003ccode\u003eSetFromBuffer\u003c/code\u003e\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ccode\u003eStringCmdable\u003c/code\u003e methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that \u003ccode\u003eGet\u003c/code\u003e/\u003ccode\u003eSet\u003c/code\u003e incur:\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eGetToBuffer(ctx, key, buf) *ZeroCopyStringCmd   // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) }\nSetFromBuffer(ctx, key, buf) *StatusCmd\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003ccode\u003eGetToBuffer\u003c/code\u003e decodes the bulk reply straight into the caller-owned \u003ccode\u003ebuf\u003c/code\u003e (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. \u003ccode\u003eSetFromBuffer\u003c/code\u003e is provided for API symmetry — it dispatches to the same \u003ccode\u003e[]byte\u003c/code\u003e writer path as \u003ccode\u003eSet(ctx, key, buf, 0)\u003c/code\u003e and produces byte-identical output on the wire. Available on \u003ccode\u003e*Client\u003c/code\u003e, \u003ccode\u003e*ClusterClient\u003c/code\u003e, \u003ccode\u003e*Ring\u003c/code\u003e, \u003ccode\u003e*Conn\u003c/code\u003e and \u003ccode\u003ePipeliner\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3834\"\u003e#3834\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eExplicit \u003ccode\u003eLIMIT 0\u003c/code\u003e for stream trimming\u003c/h3\u003e\n\u003cp\u003eRedis treats \u003ccode\u003eXTRIM\u003c/code\u003e/\u003ccode\u003eXADD\u003c/code\u003e approximate-trim (\u003ccode\u003e~\u003c/code\u003e) \u003ccode\u003eLIMIT 0\u003c/code\u003e as \u0026quot;disable the trimming effort cap entirely\u0026quot;, which differs from omitting \u003ccode\u003eLIMIT\u003c/code\u003e (the implicit \u003ccode\u003e100 * stream-node-max-entries\u003c/code\u003e default). The command builders previously only emitted \u003ccode\u003eLIMIT\u003c/code\u003e when \u003ccode\u003elimit \u0026gt; 0\u003c/code\u003e, so callers could never send an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e. Following the \u003ccode\u003eKeepTTL = -1\u003c/code\u003e precedent, the new \u003ccode\u003eXTrimLimitDisabled = -1\u003c/code\u003e sentinel now emits an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e; \u003ccode\u003elimit == 0\u003c/code\u003e keeps the historical no-\u003ccode\u003eLIMIT\u003c/code\u003e behavior, so existing callers produce byte-identical commands.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3848\"\u003e#3848\u003c/a\u003e) by \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e✨ New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eZero-copy buffer string commands\u003c/strong\u003e: new \u003ccode\u003eGetToBuffer\u003c/code\u003e / \u003ccode\u003eSetFromBuffer\u003c/code\u003e on \u003ccode\u003eStringCmdable\u003c/code\u003e and the \u003ccode\u003eZeroCopyStringCmd\u003c/code\u003e result type, reading/writing string values into caller-owned buffers without per-call payload allocation (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3834\"\u003e#3834\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXTrimLimitDisabled\u003c/code\u003e sentinel\u003c/strong\u003e: \u003ccode\u003eXTRIM\u003c/code\u003e/\u003ccode\u003eXADD\u003c/code\u003e approximate trimming can now send an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e to disable the trim effort cap, via the new \u003ccode\u003eXTrimLimitDisabled = -1\u003c/code\u003e sentinel (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3848\"\u003e#3848\u003c/a\u003e) by \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub health-check timeouts\u003c/strong\u003e: \u003ccode\u003echannel.initHealthCheck\u003c/code\u003e now bounds the \u003ccode\u003ePing\u003c/code\u003e it issues with a fresh per-check timeout context (the exported \u003ccode\u003epingTimeout\u003c/code\u003e / \u003ccode\u003ereconnectTimeout\u003c/code\u003e) instead of \u003ccode\u003econtext.TODO()\u003c/code\u003e, so a stuck health-check Ping can no longer block indefinitely (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3819\"\u003e#3819\u003c/a\u003e) by \u003ca href=\"https://github.com/abdellani\"\u003e\u003ccode\u003e@​abdellani\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSkip redundant \u003ccode\u003eUNWATCH\u003c/code\u003e in \u003ccode\u003eTx.Close\u003c/code\u003e\u003c/strong\u003e: a transaction now tracks whether a \u003ccode\u003eWATCH\u003c/code\u003e is still active (\u003ccode\u003ewatchArmed\u003c/code\u003e) and only issues \u003ccode\u003eUNWATCH\u003c/code\u003e on \u003ccode\u003eClose\u003c/code\u003e when it is, removing an extra round trip on the common \u003ccode\u003eWATCH\u003c/code\u003e/.../\u003ccode\u003eEXEC\u003c/code\u003e and no-key \u003ccode\u003eWatch\u003c/code\u003e paths while never returning a connection to the pool with an active watch (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3854\"\u003e#3854\u003c/a\u003e) by \u003ca href=\"https://github.com/fcostaoliveira\"\u003e\u003ccode\u003e@​fcostaoliveira\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003emaintnotifications\u003c/code\u003e \u003ccode\u003eModeAuto\u003c/code\u003e fail-open\u003c/strong\u003e: \u003ccode\u003eModeAuto\u003c/code\u003e now stays fail-open when the server does not support maintenance notifications — connections are retired and tracking is guarded during downgrade so the client keeps working instead of erroring (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3853\"\u003e#3853\u003c/a\u003e) by \u003ca href=\"https://github.com/terrorobe\"\u003e\u003ccode\u003e@​terrorobe\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/abdellani\"\u003e\u003ccode\u003e@​abdellani\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/fcostaoliveira\"\u003e\u003ccode\u003e@​fcostaoliveira\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/terrorobe\"\u003e\u003ccode\u003e@​terrorobe\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.1...v9.21.0\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.1...v9.21.0\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003e9.20.1 (2026-06-11)\u003c/h1\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/1551837b70beda914156d1a922d2e663c21bb0e6\"\u003e\u003ccode\u003e1551837\u003c/code\u003e\u003c/a\u003e chore(release): 9.21.0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3857\"\u003e#3857\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/1cfa927b89e62b89919671f45ed552e85d1cd7bd\"\u003e\u003ccode\u003e1cfa927\u003c/code\u003e\u003c/a\u003e fix(maintnotifications): keep ModeAuto fail-open (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3853\"\u003e#3853\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/1f0ea0e7edce610e0c32a136ded59f2c2a1f085e\"\u003e\u003ccode\u003e1f0ea0e\u003c/code\u003e\u003c/a\u003e feat(pubsub): introduce timeouts for Ping on channel.initHealthCheck (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3819\"\u003e#3819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/5484b0b86ce0e25e874c0a1169e318ee28753e13\"\u003e\u003ccode\u003e5484b0b\u003c/code\u003e\u003c/a\u003e feat(tx): skip redundant UNWATCH in Tx.Close when no WATCH is active (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3854\"\u003e#3854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/bf57a51fdb5cc83cf4a0ca780adee5abe6300ec4\"\u003e\u003ccode\u003ebf57a51\u003c/code\u003e\u003c/a\u003e chore(deps): bump rojopolis/spellcheck-github-actions (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3852\"\u003e#3852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/641294c30ad017d565e31c3999c86af2e83dad50\"\u003e\u003ccode\u003e641294c\u003c/code\u003e\u003c/a\u003e feat(streams): support explicit LIMIT 0 in XTRIM/XADD trimming via XTrimLimit...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/74d9bb03f843cb2db92e8df7118177514122cd19\"\u003e\u003ccode\u003e74d9bb0\u003c/code\u003e\u003c/a\u003e feat(command): add zero-copy GetToBuffer and SetFromBuffer (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3834\"\u003e#3834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a13416bf1c0556075b843dd0a9cb6db3b3cf2789\"\u003e\u003ccode\u003ea13416b\u003c/code\u003e\u003c/a\u003e chore(release): 9.20.1 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3847\"\u003e#3847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/10dc44f424d58b9c2b4df29e529ca92a2f8fa986\"\u003e\u003ccode\u003e10dc44f\u003c/code\u003e\u003c/a\u003e fix(push): fix peeking when push name is truncated (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3842\"\u003e#3842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/e1a2d68b27e70ca8f3ff5eec61d0dd2b74554670\"\u003e\u003ccode\u003ee1a2d68\u003c/code\u003e\u003c/a\u003e fix(ft.hybrid): Always generate vector param names if they are not provided b...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go/modules/postgres` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go/modules/postgres's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.52.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/45460e079737ecb64f30d79d3d6fc2914494fa66\"\u003e\u003ccode\u003e45460e0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/d37c95e27de65576f42440cdfbc261d810506841\"\u003e\u003ccode\u003ed37c95e\u003c/code\u003e\u003c/a\u003e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e2ffffe738fb46531cd8924bab497bdc77d9ecc8\"\u003e\u003ccode\u003ee2ffffe\u003c/code\u003e\u003c/a\u003e ssh: reject incomplete gssapi-with-mic configurations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/60e158ad30c226555794539d96f0f104f43395f7\"\u003e\u003ccode\u003e60e158a\u003c/code\u003e\u003c/a\u003e ssh/test: isolate CLI tests from user SSH config and agent\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/1b77d23dc8afb26a494e331a3c637b6de88398d2\"\u003e\u003ccode\u003e1b77d23\u003c/code\u003e\u003c/a\u003e ssh/knownhosts: reject lines with multiple or unknown markers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/3872a2bc69f464352dea49c2856955ef7c5d5851\"\u003e\u003ccode\u003e3872a2b\u003c/code\u003e\u003c/a\u003e ssh/knownhosts: verify declared key type matches decoded key\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9f72eccdf6fa09a7c68448a7fdc333dd2deb7d9d\"\u003e\u003ccode\u003e9f72ecc\u003c/code\u003e\u003c/a\u003e ssh/knownhosts: treat only ASCII space and tab as whitespace\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/8f405a4109d7ce87a44f89185bdc385914ce5c13\"\u003e\u003ccode\u003e8f405a4\u003c/code\u003e\u003c/a\u003e ssh: validate ECDSA curve matches expected algorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bb41b3dbe630c21c78e3aeb0ebdd8d06a3a34fcf\"\u003e\u003ccode\u003ebb41b3d\u003c/code\u003e\u003c/a\u003e ssh: improve DH GEX group selection using PreferredBits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e04e7219970912a40f80c4b13029416fdf960eeb\"\u003e\u003ccode\u003ee04e721\u003c/code\u003e\u003c/a\u003e ssh/agent: validate ed25519 private key length in Add\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.52.0...v0.53.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/time` from 0.11.0 to 0.15.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/time/commit/812b343c8714c317b0dad633efa6d103e554c006\"\u003e\u003ccode\u003e812b343\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/time/commit/2b4e43900c03fd6b77109b7b2b6d77583f48bc1c\"\u003e\u003ccode\u003e2b4e439\u003c/code\u003e\u003c/a\u003e rate: use time.Time.Equal instead of ==\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/time/commit/c0b0320d156bbe60202a475fa80cc0b9d0f05e20\"\u003e\u003ccode\u003ec0b0320\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.24.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/time/commit/1616a7fa5fe23b54fee0cc3dd6d0bd48abc19914\"\u003e\u003ccode\u003e1616a7f\u003c/code\u003e\u003c/a\u003e rate: skip time.Now call in Sometimes.Do unless necessary\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/time/compare/v0.11.0...v0.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/GameOfAI/IronStock/pull/64","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GameOfAI%2FIronStock/issues/64","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/64/packages"},{"uuid":"4806610146","node_id":"PR_kwDORU7NdM7tvlUh","number":9,"state":"open","title":"chore(deps): bump the go_modules group across 2 directories with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-03T22:20:42.000Z","updated_at":"2026-07-03T22:23:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/go-acme/lego/v4","old_version":"4.33.0","new_version":"4.34.0","repository_url":"https://github.com/go-acme/lego"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"golang.org/x/net","old_version":"0.51.0","new_version":"0.53.0","repository_url":"https://github.com/golang/net"},{"name":"github.com/containerd/containerd/v2","old_version":"2.2.1","new_version":"2.2.5","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/in-toto/in-toto-golang"},{"name":"go.mongodb.org/mongo-driver","old_version":"1.17.6","new_version":"1.17.9"},{"name":"go.opentelemetry.io/otel","old_version":"1.40.0","new_version":"1.43.0"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.40.0","new_version":"1.42.0"},{"name":"golang.org/x/net","old_version":"0.50.0","new_version":"0.55.0","repository_url":"https://github.com/golang/net"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 4 updates in the /agent directory: [github.com/go-acme/lego/v4](https://github.com/go-acme/lego), [github.com/jackc/pgx/v5](https://github.com/jackc/pgx), [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) and [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang).\nBumps the go_modules group with 1 update in the /core directory: [golang.org/x/net](https://github.com/golang/net).\n\nUpdates `github.com/go-acme/lego/v4` from 4.33.0 to 4.34.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-acme/lego/releases\"\u003egithub.com/go-acme/lego/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.34.0\u003c/h2\u003e\n\u003cp\u003elego is an independent, free, and open-source project, if you value it, consider \u003ca href=\"https://donate.ldez.dev\"\u003esupporting it\u003c/a\u003e! ❤️\u003c/p\u003e\n\u003cp\u003eEverybody thinks that the others will donate, but in the end, nobody does.\u003c/p\u003e\n\u003cp\u003eSo if you think that lego is worth it, please consider \u003ca href=\"https://donate.ldez.dev\"\u003edonating\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eFor key updates, see the \u003ca href=\"https://github.com/go-acme/lego/blob/HEAD/CHANGELOG.md#v4340\"\u003echangelog\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eb682f8494cca7fd9859adc8814b253e6855b7faa Add DNS provider for 1cloud.ru (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2921\"\u003e#2921\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e79b83fe1e38e6b93443077014fb51d3ba3bfed7b Add DNS provider for Netnod (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2919\"\u003e#2919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eca178943d0a6394ae44d94ed37306d66b14ee2c2 Add DNS provider for UCloud (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2972\"\u003e#2972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e61bd6bf0b9bc49c740528316dc8054871127d706 Add DNS provider for online.net (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2964\"\u003e#2964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4f6a481bc4298383b1d2514f3dab0dbd0120b544 bluecatv2: fix documentation\u003c/li\u003e\n\u003cli\u003eaa6fcebccb73828e933c33363dccc0a93a101988 fix: check base64url token\u003c/li\u003e\n\u003cli\u003e1274ec8741d7ac0b4232775e358bc95db44d961c oraclecloud: support profile session token (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2965\"\u003e#2965\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecff2cd750413febbec64cb5fb3eedfc5a2e31a49 rfc2136: add RFC3645 (TSIG-GSS) support (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2946\"\u003e#2946\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e33754b3b216169b18d580bddf1837e713bff7c30 rfc2136: add dnsupdate as alias (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2957\"\u003e#2957\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e79796e155e4460967458c0df8fe58ea390cfe08f yandex360: update API docs links (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2922\"\u003e#2922\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-acme/lego/blob/main/CHANGELOG.md\"\u003egithub.com/go-acme/lego/v4's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.34.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRelease date: 2026-04-15\u003c/li\u003e\n\u003cli\u003eTag: \u003ca href=\"https://github.com/go-acme/lego/releases/tag/v4.34.0\"\u003ev4.34.0\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e Add DNS provider for UCloud\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e Add DNS provider for online.net\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e Add DNS provider for 1cloud.ru\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e Add DNS provider for Netnod\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e oraclecloud: support profile session token\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e rfc2136: add RFC3645 (TSIG-GSS) support\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e rfc2136: add dnsupdate as alias\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[httpprovider]\u003c/strong\u003e Check base64url token\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/f3c686a890e6fa36b92614112e8717832894faa7\"\u003e\u003ccode\u003ef3c686a\u003c/code\u003e\u003c/a\u003e Prepare release v4.34.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/aa6fcebccb73828e933c33363dccc0a93a101988\"\u003e\u003ccode\u003eaa6fceb\u003c/code\u003e\u003c/a\u003e fix: check base64url token\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/2c87024ed7b4cfe6799659f47a782824a371aa75\"\u003e\u003ccode\u003e2c87024\u003c/code\u003e\u003c/a\u003e chore: update dependencies (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2978\"\u003e#2978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/152e45441bc0c38fac322a0c434c1c53499c4a4d\"\u003e\u003ccode\u003e152e454\u003c/code\u003e\u003c/a\u003e chore: update github.com/modern-go/reflect2 (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2977\"\u003e#2977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/29fd2d928ebe253ef872175223d1ce90584a4fb0\"\u003e\u003ccode\u003e29fd2d9\u003c/code\u003e\u003c/a\u003e chore: improve issue templates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/ca178943d0a6394ae44d94ed37306d66b14ee2c2\"\u003e\u003ccode\u003eca17894\u003c/code\u003e\u003c/a\u003e Add DNS provider for UCloud (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2972\"\u003e#2972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/c4ab05772b6a6b0c3e946e05366fcac28bf5a913\"\u003e\u003ccode\u003ec4ab057\u003c/code\u003e\u003c/a\u003e chore: improve issue templates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/61bd6bf0b9bc49c740528316dc8054871127d706\"\u003e\u003ccode\u003e61bd6bf\u003c/code\u003e\u003c/a\u003e Add DNS provider for online.net (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2964\"\u003e#2964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/1274ec8741d7ac0b4232775e358bc95db44d961c\"\u003e\u003ccode\u003e1274ec8\u003c/code\u003e\u003c/a\u003e oraclecloud: support profile session token (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2965\"\u003e#2965\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/4f6a481bc4298383b1d2514f3dab0dbd0120b544\"\u003e\u003ccode\u003e4f6a481\u003c/code\u003e\u003c/a\u003e bluecatv2: fix documentation\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-acme/lego/compare/v4.33.0...v4.34.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.51.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"\u003e\u003ccode\u003e7770ec4\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4ece7b612ad44ad6c4d5e0d5d4df9c18cc211905\"\u003e\u003ccode\u003e4ece7b6\u003c/code\u003e\u003c/a\u003e html: escape greater-than symbol in doctype identifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/08be507abce89191d78cd49da60f4501fc910472\"\u003e\u003ccode\u003e08be507\u003c/code\u003e\u003c/a\u003e html: improve Noah's Ark clause performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd\"\u003e\u003ccode\u003ea8fb2fe\u003c/code\u003e\u003c/a\u003e html: properly render fostered elements in foreign content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/0dc5b7a5f81d7155ade6d5e9db35992998679932\"\u003e\u003ccode\u003e0dc5b7a\u003c/code\u003e\u003c/a\u003e html: properly check namespace in \u0026quot;in body\u0026quot; any other end tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a452f3cc17168a60bc3f439a3ae0fcffc32eca0e\"\u003e\u003ccode\u003ea452f3c\u003c/code\u003e\u003c/a\u003e html: ignore duplicate attributes during tokenization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f8651996b24ba47d89dd9eb97fd47758e6d1886f\"\u003e\u003ccode\u003ef865199\u003c/code\u003e\u003c/a\u003e quic: fix appendMaxDataFrame erroneously accumulating sentLimit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/210ed3cb901cb549818aefa04b71dadaf149d05d\"\u003e\u003ccode\u003e210ed3c\u003c/code\u003e\u003c/a\u003e quic: establish a \u0026quot;happened-before\u0026quot; relationship between stream write and read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ad8140e0aa2ec41b37ea478b4525a423bcc21af9\"\u003e\u003ccode\u003ead8140e\u003c/code\u003e\u003c/a\u003e quic: fix buffer slicing when handling overlapping stream data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/23ee2efe81a3ff183b4eca46c42f749af7efca45\"\u003e\u003ccode\u003e23ee2ef\u003c/code\u003e\u003c/a\u003e http2: avoid API changes when built with go1.27\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.50.0...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd/v2` from 2.2.1 to 2.2.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 2.2.5\u003c/h2\u003e\n\u003cp\u003eWelcome to the v2.2.5 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe fifth patch release for containerd 2.2 contains various fixes\nand updates including security patches.\u003c/p\u003e\n\u003ch3\u003eSecurity Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003econtainerd\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574\"\u003e\u003cstrong\u003eCVE-2026-50195\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp\"\u003e\u003cstrong\u003eCVE-2026-53488\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc\"\u003e\u003cstrong\u003eCVE-2026-53492\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388\"\u003e\u003cstrong\u003eCVE-2026-53489\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq\"\u003e\u003cstrong\u003eCVE-2026-47262\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSamuel Karp\u003c/li\u003e\n\u003cli\u003eChris Henzie\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003eAkhil Mohan\u003c/li\u003e\n\u003cli\u003eBen Cressey\u003c/li\u003e\n\u003cli\u003eBrian Goff\u003c/li\u003e\n\u003cli\u003eDavanum Srinivas\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare release notes for v2.2.5 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13628\"\u003e#13628\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/269031099e51bd875bc8097b79a41fd00af08a28\"\u003e\u003ccode\u003e269031099\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ad59aa5647ac505a97965f521e21fcd4f9403631\"\u003e\u003ccode\u003ead59aa564\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0b4d23690ead6f34fb990155e1cc19d27f906370\"\u003e\u003ccode\u003e0b4d23690\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/be8460656b84c4a1a4b244a03801e9fff1e914d3\"\u003e\u003ccode\u003ebe8460656\u003c/code\u003e\u003c/a\u003e cri: filter CDI annotations on checkpoint restore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/347240f72479246a801ea4ec4304e180ac45b85e\"\u003e\u003ccode\u003e347240f72\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/cff57884176a1e6ba0857a417753d799958e0f46\"\u003e\u003ccode\u003ecff578841\u003c/code\u003e\u003c/a\u003e cri: do not re-tag restored checkpoints\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/668cf2c2fd0d9c6394f2aa95c44c4735c353d380\"\u003e\u003ccode\u003e668cf2c2f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/357652293053d0cd3ed565f718b0050aa662ae1a\"\u003e\u003ccode\u003e357652293\u003c/code\u003e\u003c/a\u003e cri: make checkpoint restore robust to unexpected archive content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/d43da05af9b515b89740889a84a91c8ed27a73f0\"\u003e\u003ccode\u003ed43da05af\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/30708e8d1142287e9c6bb839f1b3f84c71ca4485\"\u003e\u003ccode\u003e30708e8d1\u003c/code\u003e\u003c/a\u003e Bound user-database file reads in openUserFile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/028647ea2597eb3f7add39c6171b62768e0be74c\"\u003e\u003ccode\u003e028647ea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/b6072a49f8d3f6efc5ac9895efbb1852b16a2602\"\u003e\u003ccode\u003eb6072a49f\u003c/code\u003e\u003c/a\u003e Do not propagate reserved labels from image configs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003evendor: golang.org/x/crypto v0.53.0 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13607\"\u003e#13607\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/cfea2c1413a55243e5d8db9def5ed5e3e595894e\"\u003e\u003ccode\u003ecfea2c141\u003c/code\u003e\u003c/a\u003e [release/2.2] vendor: golang.org/x/crypto v0.53.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e53c7c1516c3b2bff98eb76f1f4117477e6f4e66\"\u003e\u003ccode\u003ee53c7c1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13628\"\u003e#13628\u003c/a\u003e from samuelkarp/prepare-2.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/269031099e51bd875bc8097b79a41fd00af08a28\"\u003e\u003ccode\u003e2690310\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ad59aa5647ac505a97965f521e21fcd4f9403631\"\u003e\u003ccode\u003ead59aa5\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/8bea48a3997876dd5936c8586c9610d623dda63c\"\u003e\u003ccode\u003e8bea48a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13607\"\u003e#13607\u003c/a\u003e from thaJeztah/2.2_bump_crypto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/699c4fb4560805ae4497e2bb488aaea52d61dd4d\"\u003e\u003ccode\u003e699c4fb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13606\"\u003e#13606\u003c/a\u003e from AkihiroSuda/runc-1.3.6-containerd-2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/cfea2c1413a55243e5d8db9def5ed5e3e595894e\"\u003e\u003ccode\u003ecfea2c1\u003c/code\u003e\u003c/a\u003e [release/2.2] vendor: golang.org/x/crypto v0.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/fc96ea6b3fbcd8fb467914a3fe5f977a5705efff\"\u003e\u003ccode\u003efc96ea6\u003c/code\u003e\u003c/a\u003e update runc binary to v1.3.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0b4d23690ead6f34fb990155e1cc19d27f906370\"\u003e\u003ccode\u003e0b4d236\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/347240f72479246a801ea4ec4304e180ac45b85e\"\u003e\u003ccode\u003e347240f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/668cf2c2fd0d9c6394f2aa95c44c4735c353d380\"\u003e\u003ccode\u003e668cf2c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v2.2.1...v2.2.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump the all group with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/453\"\u003ein-toto/in-toto-golang#453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the all group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/452\"\u003ein-toto/in-toto-golang#452\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/457\"\u003ein-toto/in-toto-golang#457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/459\"\u003ein-toto/in-toto-golang#459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ematch: Replace ^ with ! for negation in character classes by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/462\"\u003ein-toto/in-toto-golang#462\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/36d782ffb2ca3adbffcdce1fd971c23319dd4469\"\u003e\u003ccode\u003e36d782f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/462\"\u003e#462\u003c/a\u003e from in-toto/fix-negation-character\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/4a09e3bbc44bc687577b6532e57e8a4abfa5ddf4\"\u003e\u003ccode\u003e4a09e3b\u003c/code\u003e\u003c/a\u003e match: Replace ^ with ! for negation in character classes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c3302e8bc36e46119f7ae17c07eb879ff3507caa\"\u003e\u003ccode\u003ec3302e8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/459\"\u003e#459\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/go-jose...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/016e87efbb55c6dd8772ce227002eeb1b6e3f593\"\u003e\u003ccode\u003e016e87e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/5b9df76e685eaa0a950ea9ba3f4a5561e87e13ad\"\u003e\u003ccode\u003e5b9df76\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/457\"\u003e#457\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/595b3fe0a13f481eb0ef898ccaff5e345e492a2f\"\u003e\u003ccode\u003e595b3fe\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e396d248c9cf19f9e144f4e90c476af88742bf35\"\u003e\u003ccode\u003ee396d24\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/452\"\u003e#452\u003c/a\u003e from in-toto/dependabot/github_actions/all-502588e1ca\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/142b779059713332fe5c7856e98f1c564c6d6a09\"\u003e\u003ccode\u003e142b779\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/453\"\u003e#453\u003c/a\u003e from in-toto/dependabot/go_modules/all-d8ef5820aa\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/f741bcc43330554606b813fa0f8fe0c284fcdaea\"\u003e\u003ccode\u003ef741bcc\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c374dc9808137651fe8754eed363ec816cd59d2a\"\u003e\u003ccode\u003ec374dc9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group across 1 directory with 2 updates\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver` from 1.17.6 to 1.17.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.9\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.9 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release fixes a bug caused by variable shadowing.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3793 Fix variable shadowing in rtt monitor by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2317\"\u003emongodb/mongo-go-driver#2317\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.8...v1.17.9\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.8...v1.17.9\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.9\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.8\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.8 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release adds a deprecation notice to \u003ccode\u003ego.mongodb.org/mongo-driver\u003c/code\u003e, indicating users should migrate to \u003ccode\u003ego.mongodb.org/mongo-driver/v2\u003c/code\u003e. See the \u003ca href=\"https://github.com/mongodb/mongo-go-driver/blob/master/docs/migration-2.0.md\"\u003eV2 migration guide\u003c/a\u003e for more information.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e✨ New Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3773 Deprecate v1 by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2312\"\u003emongodb/mongo-go-driver#2312\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.7...v1.17.8\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.7...v1.17.8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.8\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.7\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3b10ae6d48140a7a672e64bace1e6132d61586f0\"\u003e\u003ccode\u003e3b10ae6\u003c/code\u003e\u003c/a\u003e BUMP v1.17.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f49080298dbb2a0b5f913115b27ccb7ab081b193\"\u003e\u003ccode\u003ef490802\u003c/code\u003e\u003c/a\u003e GODRIVER-3793 Fix variable shadowing in rtt monitor (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2317\"\u003e#2317\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/5ac5a1e731384cefcfa6dfa9f36949c43fae07a1\"\u003e\u003ccode\u003e5ac5a1e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f378649ba870ec0790f7f9de49dc3fb680b49a77\"\u003e\u003ccode\u003ef378649\u003c/code\u003e\u003c/a\u003e Revert dry-run release bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/08c2b98edd3d2071266568620d23075198823a2f\"\u003e\u003ccode\u003e08c2b98\u003c/code\u003e\u003c/a\u003e BUMP v1.17.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/fafe527c9a857575434c1e584741ce04b69483b9\"\u003e\u003ccode\u003efafe527\u003c/code\u003e\u003c/a\u003e GODRIVER-3773 Deprecate v1 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/eb01e7e2531e4bbbccfcff31a4be7a576e60349b\"\u003e\u003ccode\u003eeb01e7e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3c550934b65aa2a13a3f1c790b2e0e88c9c6a33e\"\u003e\u003ccode\u003e3c55093\u003c/code\u003e\u003c/a\u003e GODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2294\"\u003e#2294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f6163bf474d2711c88bca5b5715c959cc7244e0f\"\u003e\u003ccode\u003ef6163bf\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Remove libasan from gssapi tests in CI (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6798963ce0a8faa40c6c612772ac8fa0de58a206\"\u003e\u003ccode\u003e6798963\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.40.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.42.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErr\u003c/code\u003e and \u003ccode\u003eSetErr\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e to attach an error and set record exception attributes in \u003ccode\u003ego.opentelemetry.io/otel/log/sdk\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924\"\u003e#7924\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eTracerProvider.ForceFlush\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856\"\u003e#7856\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931\"\u003e#7931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964\"\u003e#7964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834\"\u003e#7834\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for [Go 1.24]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984\"\u003e#7984\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/a3941ff595235e952774f0a581c7655bec93b0ab\"\u003e\u003ccode\u003ea3941ff\u003c/code\u003e\u003c/a\u003e Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006\"\u003e#8006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6059c47bc64a1329618d8c06d31098cd1eee7750\"\u003e\u003ccode\u003e6059c47\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to e526e8a (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010\"\u003e#8010\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/44c7edf896e0672b8b522700dcb9d56011349897\"\u003e\u003ccode\u003e44c7edf\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mgechev/revive to v1.15.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009\"\u003e#8009\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/de5fb3ad101bc8de082bcaae93d4129ce467ad8c\"\u003e\u003ccode\u003ede5fb3a\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.79.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007\"\u003e#8007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0b82ded815a410d3bc0fc8b30802fd3a41059db3\"\u003e\u003ccode\u003e0b82ded\u003c/code\u003e\u003c/a\u003e chore(deps): update codspeedhq/action action to v4.11.1 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001\"\u003e#8001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/aa3660f77e65ad0873ae7f06084bfc9ddc62948b\"\u003e\u003ccode\u003eaa3660f\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.6 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004\"\u003e#8004\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9be8c92a131a085c8b33b32bf19b3e16c413e2ae\"\u003e\u003ccode\u003e9be8c92\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency codespell to v2.4.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003\"\u003e#8003\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c9d20155fcfa8d7dad13d1358fcdf63989113693\"\u003e\u003ccode\u003ec9d2015\u003c/code\u003e\u003c/a\u003e log: add error field to Record and make SDK to emit exception attributes (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924\"\u003e#7924\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/fdd1320c39ebc4b8e976f58e0af55965f25411c7\"\u003e\u003ccode\u003efdd1320\u003c/code\u003e\u003c/a\u003e TracerProvider ForceFlush() Error Fix (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856\"\u003e#7856\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/78f99042e2b038c4c86c5fa1ffd0609ec498c1db\"\u003e\u003ccode\u003e78f9904\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 18da590 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000\"\u003e#8000\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.50.0 to 0.55.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"\u003e\u003ccode\u003e7770ec4\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4ece7b612ad44ad6c4d5e0d5d4df9c18cc211905\"\u003e\u003ccode\u003e4ece7b6\u003c/code\u003e\u003c/a\u003e html: escape greater-than symbol in doctype identifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/08be507abce89191d78cd49da60f4501fc910472\"\u003e\u003ccode\u003e08be507\u003c/code\u003e\u003c/a\u003e html: improve Noah's Ark clause performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd\"\u003e\u003ccode\u003ea8fb2fe\u003c/code\u003e\u003c/a\u003e html: properly render fostered elements in foreign content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/0dc5b7a5f81d7155ade6d5e9db35992998679932\"\u003e\u003ccode\u003e0dc5b7a\u003c/code\u003e\u003c/a\u003e html: properly check namespace in \u0026quot;in body\u0026quot; any other end tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a452f3cc17168a60bc3f439a3ae0fcffc32eca0e\"\u003e\u003ccode\u003ea452f3c\u003c/code\u003e\u003c/a\u003e html: ignore duplicate attributes during tokenization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f8651996b24ba47d89dd9eb97fd47758e6d1886f\"\u003e\u003ccode\u003ef865199\u003c/code\u003e\u003c/a\u003e quic: fix appendMaxDataFrame erroneously accumulating sentLimit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/210ed3cb901cb549818aefa04b71dadaf149d05d\"\u003e\u003ccode\u003e210ed3c\u003c/code\u003e\u003c/a\u003e quic: establish a \u0026quot;happened-before\u0026quot; relationship between stream write and read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ad8140e0aa2ec41b37ea478b4525a423bcc21af9\"\u003e\u003ccode\u003ead8140e\u003c/code\u003e\u003c/a\u003e quic: fix buffer slicing when handling overlapping stream data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/23ee2efe81a3ff183b4eca46c42f749af7efca45\"\u003e\u003ccode\u003e23ee2ef\u003c/code\u003e\u003c/a\u003e http2: avoid API changes when built with go1.27\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.50.0...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/nexusct/1Panel/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/nexusct/1Panel/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/nexusct%2F1Panel/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"},{"uuid":"4805626919","node_id":"PR_kwDOIUNke87tscJi","number":664,"state":"closed","title":"chore(deps): bump the go_modules group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-07-05T06:11:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-03T18:34:36.000Z","updated_at":"2026-07-05T06:11:59.000Z","time_to_close":128241,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/cert-manager/cert-manager","old_version":"1.19.1","new_version":"1.19.3","repository_url":"https://github.com/cert-manager/cert-manager"},{"name":"github.com/go-jose/go-jose/v3","old_version":"3.0.4","new_version":"3.0.5","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.0","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/moby/spdystream","old_version":"0.5.0","new_version":"0.5.1","repository_url":"https://github.com/moby/spdystream"},{"name":"go.opentelemetry.io/otel","old_version":"1.38.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.38.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the /chart/test directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.19.1` | `1.19.3` |\n| [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.4` | `3.0.5` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.0` | `5.9.2` |\n| [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.43.0` |\n\n\nUpdates `github.com/cert-manager/cert-manager` from 1.19.1 to 1.19.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cert-manager/cert-manager/releases\"\u003egithub.com/cert-manager/cert-manager's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.19.3\u003c/h2\u003e\n\u003cp\u003ecert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\u003c/p\u003e\n\u003cp\u003eThis release contains three bug fixes, including a fix for the MODERATE severity DoS issue in GHSA-gx3x-vq4p-mhhv. All users should upgrade to the latest release.\u003c/p\u003e\n\u003ch2\u003eChanges by Kind\u003c/h2\u003e\n\u003ch3\u003eBug or Regression\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8415\"\u003e#8415\u003c/a\u003e, \u003ca href=\"https://github.com/cert-manager-bot\"\u003e\u003ccode\u003e@​cert-manager-bot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed an issue where HTTP-01 challenges failed when the Host header contained an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8436\"\u003e#8436\u003c/a\u003e, \u003ca href=\"https://github.com/cert-manager-bot\"\u003e\u003ccode\u003e@​cert-manager-bot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSecurity (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8468\"\u003e#8468\u003c/a\u003e, \u003ca href=\"https://github.com/SgtCoDFish\"\u003e\u003ccode\u003e@​SgtCoDFish\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther (Cleanup or Flake)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump go to 1.25.6 (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8459\"\u003e#8459\u003c/a\u003e, \u003ca href=\"https://github.com/SgtCoDFish\"\u003e\u003ccode\u003e@​SgtCoDFish\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.19.2\u003c/h2\u003e\n\u003cp\u003ecert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\u003c/p\u003e\n\u003cp\u003eWe updated Go to fix some vulnerabilities in the standard library.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e📖 Read the \u003ca href=\"https://cert-manager.io/docs/releases/release-notes/release-notes-1.19\"\u003efull 1.19 release notes\u003c/a\u003e on the cert-manager.io website before upgrading.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eChanges since \u003ccode\u003ev1.19.1\u003c/code\u003e\u003c/h2\u003e\n\u003ch3\u003eBug or Regression\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAddress false positive vulnerabilities \u003ccode\u003eCVE-2025-47914\u003c/code\u003e and \u003ccode\u003eCVE-2025-58181\u003c/code\u003e which were reported by Trivy. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8283\"\u003e#8283\u003c/a\u003e, \u003ca href=\"https://github.com/SgtCoDFish\"\u003e\u003ccode\u003e@​SgtCoDFish\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate Go to \u003ccode\u003ev1.25.5\u003c/code\u003e to fix \u003ccode\u003eCVE-2025-61727\u003c/code\u003e and \u003ccode\u003eCVE-2025-61729\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8294\"\u003e#8294\u003c/a\u003e, \u003ca href=\"https://github.com/wallrj-cyberark\"\u003e\u003ccode\u003e@​wallrj-cyberark\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003eglobal.nodeSelector\u003c/code\u003e to helm chart to perform a \u003ccode\u003emerge\u003c/code\u003e and allow for a single \u003ccode\u003enodeSelector\u003c/code\u003e to be set across all services. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8233\"\u003e#8233\u003c/a\u003e, \u003ca href=\"https://github.com/cert-manager-bot\"\u003e\u003ccode\u003e@​cert-manager-bot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther (Cleanup or Flake)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate cert-manager's ACME client, forked from \u003ccode\u003egolang/x/crypto\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8270\"\u003e#8270\u003c/a\u003e, \u003ca href=\"https://github.com/SgtCoDFish\"\u003e\u003ccode\u003e@​SgtCoDFish\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated Debian 12 distroless base images (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8326\"\u003e#8326\u003c/a\u003e, \u003ca href=\"https://github.com/wallrj-cyberark\"\u003e\u003ccode\u003e@​wallrj-cyberark\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2\"\u003e\u003ccode\u003ed4faed2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8468\"\u003e#8468\u003c/a\u003e from SgtCoDFish/release-1.19-fqdn-patch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/8b62c22e368794f847b27d739a1b6af0805c7dee\"\u003e\u003ccode\u003e8b62c22\u003c/code\u003e\u003c/a\u003e [release-1.19] security: address GHSA-gx3x-vq4p-mhhv\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/866f95501c59afef2d69598406b27328d54fdfd9\"\u003e\u003ccode\u003e866f955\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8459\"\u003e#8459\u003c/a\u003e from SgtCoDFish/release-1.19-bumpgo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/0c044336ff61fa1cf7ef0be6c5a70aa853b9c10e\"\u003e\u003ccode\u003e0c04433\u003c/code\u003e\u003c/a\u003e [release-1.19] Bump base images with hack/latest-base-images.sh\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/e4556ab92cf61be12552da1c71e16e903081b618\"\u003e\u003ccode\u003ee4556ab\u003c/code\u003e\u003c/a\u003e [release-1.19] bump go to 1.25.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/845a6454b7b9e83fdedc8c0007b06007dd504ac7\"\u003e\u003ccode\u003e845a645\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8436\"\u003e#8436\u003c/a\u003e from cert-manager-bot/cherry-pick-8424-to-release-1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/acd3120227a6f9d9274c9539798394580db0249b\"\u003e\u003ccode\u003eacd3120\u003c/code\u003e\u003c/a\u003e fix(HTTP-01): handling of IPv6 address literals\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/d6787634f97fb23ef61ced4e398ad7e4ca6027e5\"\u003e\u003ccode\u003ed678763\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8421\"\u003e#8421\u003c/a\u003e from SgtCoDFish/release-1.19-bumpkind\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/3caf3087e0e5c3abd0df3dee727fe4d130a5cbcf\"\u003e\u003ccode\u003e3caf308\u003c/code\u003e\u003c/a\u003e [release-1.19] bump kind and bump kind images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/b2ccdb84000aca505b966ac610c58e4c5418afdd\"\u003e\u003ccode\u003eb2ccdb8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8415\"\u003e#8415\u003c/a\u003e from cert-manager-bot/cherry-pick-8403-to-release-1.19\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cert-manager/cert-manager/compare/v1.19.1...v1.19.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v3` from 3.0.4 to 3.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe recommend migrating from v3 to v4, and we will stop support v3 in the near future.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v3.0.4...v3.0.5\"\u003ehttps://github.com/go-jose/go-jose/compare/v3.0.4...v3.0.5\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/be2f6548701d4ba561cd61c7d4a2f1289b66c273\"\u003e\u003ccode\u003ebe2f654\u003c/code\u003e\u003c/a\u003e ci: update Go versions for GHA workflows (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/221\"\u003e#221\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/02464163e1e891db85257cb8860978a1c0226016\"\u003e\u003ccode\u003e0246416\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v3.0.4...v3.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.0 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.0...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/spdystream` from 0.5.0 to 0.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/spdystream/releases\"\u003egithub.com/moby/spdystream's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003eFix memory amplification in SPDY frame parsing leads to denial of service (\u003ca href=\"https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2\"\u003eCVE-2026-35469\u003c/a\u003e / \u003ca href=\"https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2\"\u003eGHSA-pc3f-x583-g7j2\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003espdy: fix duplicate license headers, add LICENSE, PATENTS, and update NOTICE \u003ca href=\"https://redirect.github.com/moby/spdystream/pull/106\"\u003emoby/spdystream#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: update actions and test against latest Go versions \u003ca href=\"https://redirect.github.com/moby/spdystream/pull/107\"\u003emoby/spdystream#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003euse ioutil.Discard for go1.13 compatibility \u003ca href=\"https://redirect.github.com/moby/spdystream/pull/109\"\u003emoby/spdystream#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1\"\u003ehttps://github.com/moby/spdystream/compare/v0.5.0...v0.5.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/c59e5d73daa301bde452ea77545bdf51e32554a2\"\u003e\u003ccode\u003ec59e5d7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/spdystream/issues/109\"\u003e#109\u003c/a\u003e from thaJeztah/use_ioutil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/2fd0155e904f1f9b834b8460e8fdb8522bb59f84\"\u003e\u003ccode\u003e2fd0155\u003c/code\u003e\u003c/a\u003e use ioutil.Discard for go1.13 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/ef6121f62c730110bf5ae604a865a8613bfb787f\"\u003e\u003ccode\u003eef6121f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/241cec95b8f02919845dc4758f1f5310fc886739\"\u003e\u003ccode\u003e241cec9\u003c/code\u003e\u003c/a\u003e compare with signed Int for 32-bit Arm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/21c38640c8c8f43173b17e5bc6690a5fa25d6935\"\u003e\u003ccode\u003e21c3864\u003c/code\u003e\u003c/a\u003e Add options to customize limits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/acf9b456d06816c5cf23bf3892e13441f947d5fd\"\u003e\u003ccode\u003eacf9b45\u003c/code\u003e\u003c/a\u003e spdy: update godoc for MaxDataLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/eb6360582bf1343f485ca87b76efc9e72b49d690\"\u003e\u003ccode\u003eeb63605\u003c/code\u003e\u003c/a\u003e spdy: limit header-size and header-count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/2f21da42eaab90f03a82fb03d0de8e91eb1d0fc6\"\u003e\u003ccode\u003e2f21da4\u003c/code\u003e\u003c/a\u003e spdy: fix header block byte accounting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/5976b6612f07a27f2e9a4de875485defb43b5d50\"\u003e\u003ccode\u003e5976b66\u003c/code\u003e\u003c/a\u003e spdy: enforce 24-bit frame length limits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/cf0ec5d0fe4dbb2f3525f733946e0d0ddbfd5b13\"\u003e\u003ccode\u003ecf0ec5d\u003c/code\u003e\u003c/a\u003e Guard against oversized SPDY frames\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.38.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.38.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.38.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.76.0 to 1.80.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.80.0\u003c/h2\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/5288\"\u003e#5288\u003c/a\u003e for details. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8837\"\u003e#8837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: update resource error handling and re-resolution logic (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8907\"\u003e#8907\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eRe-resolve all \u003ccode\u003eLOGICAL_DNS\u003c/code\u003e clusters simultaneously when re-resolution is requested.\u003c/li\u003e\n\u003cli\u003eFail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds: support the LB policy configured in \u003ccode\u003eLOGICAL_DNS\u003c/code\u003e cluster resources instead of defaulting to \u003ccode\u003epick_first\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8733\"\u003e#8733\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecredentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8831\"\u003e#8831\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8875\"\u003e#8875\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: validate that the sum of endpoint weights in a locality does not exceed the maximum \u003ccode\u003euint32\u003c/code\u003e value. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8899\"\u003e#8899\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/RAVEYUS\"\u003e\u003ccode\u003e@​RAVEYUS\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: fix incorrect proto field access in the weighted round robin (WRR) configuration where \u003ccode\u003eblackout_period\u003c/code\u003e was used instead of \u003ccode\u003eweight_expiration_period\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8915\"\u003e#8915\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/gregbarasch\"\u003e\u003ccode\u003e@​gregbarasch\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/rbac: handle addresses with ports in IP matchers. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8990\"\u003e#8990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8922\"\u003e#8922\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: pool write buffers to reduce memory allocations and usage. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8919\"\u003e#8919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003egrpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the \u003ca href=\"https://pkg.go.dev/google.golang.org/grpc#WithSharedWriteBuffer\"\u003eWithSharedWriteBuffer\u003c/a\u003e dial option or the \u003ca href=\"https://pkg.go.dev/google.golang.org/grpc#SharedWriteBuffer\"\u003eSharedWriteBuffer\u003c/a\u003e server option to disable this feature. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8957\"\u003e#8957\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8997\"\u003e#8997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: add a faster tiered buffer pool; use the experimental \u003ca href=\"https://pkg.go.dev/google.golang.org/grpc/mem@master#NewBinaryTieredBufferPool\"\u003emem.NewBinaryTieredBufferPool\u003c/a\u003e function to create such pools. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8775\"\u003e#8775\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/397e45edaa68f8763773bbaaf539cf7894169cd2\"\u003e\u003ccode\u003e397e45e\u003c/code\u003e\u003c/a\u003e Change version to 1.80.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8948\"\u003e#8948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/64ebf0a600005838970e6ba1eb0a9e46e528ed73\"\u003e\u003ccode\u003e64ebf0a\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8997\"\u003e#8997\u003c/a\u003e to v1.80.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9027\"\u003e#9027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/e45ed241865981b6973cdd0dd69571456d570282\"\u003e\u003ccode\u003ee45ed24\u003c/code\u003e\u003c/a\u003e xds/rbac: add additional handling for addresses with ports (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8990\"\u003e#8990\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9022\"\u003e#9022\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c78d26e03e129f5cb357b757037fcded2333b74e\"\u003e\u003ccode\u003ec78d26e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8957\"\u003e#8957\u003c/a\u003e to v1.80.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9007\"\u003e#9007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/bd7cd3c1abbd27fb751275a58886444d52103482\"\u003e\u003ccode\u003ebd7cd3c\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8987\"\u003e#8987\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b6597b3d328c1ed6b003f9a23b942af7148352ca\"\u003e\u003ccode\u003eb6597b3\u003c/code\u003e\u003c/a\u003e xds/clusterimpl: use xdsConfig for updates and remove redundant fields from L...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/1d4fa8a7b772553e82137b059ad4a8f632a1c522\"\u003e\u003ccode\u003e1d4fa8a\u003c/code\u003e\u003c/a\u003e xds: change cdsbalancer to use update from dependency manager (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8907\"\u003e#8907\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8f47d364511c8eb0517b47e1a39f13a1370c6a10\"\u003e\u003ccode\u003e8f47d36\u003c/code\u003e\u003c/a\u003e attributes: Replace internal map with linked list (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8933\"\u003e#8933\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/22e1ee8085952b4bdadf2928c187d665f6daff99\"\u003e\u003ccode\u003e22e1ee8\u003c/code\u003e\u003c/a\u003e xds: add panic recovery in xdsclient resource unmarshalling. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8895\"\u003e#8895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/7136e99ee323c26984174eb3cec85c201fef9946\"\u003e\u003ccode\u003e7136e99\u003c/code\u003e\u003c/a\u003e credentials/alts: Pool write buffers (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8919\"\u003e#8919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.76.0...v1.80.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/flanksource/mission-control-chart/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/flanksource/mission-control-chart/pull/664","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/flanksource%2Fmission-control-chart/issues/664","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/664/packages"},{"uuid":"4800058981","node_id":"PR_kwDOPmeGcs7taP5P","number":9,"state":"open","title":"Bump the go_modules group across 14 directories with 16 updates","user":"dependabot[bot]","labels":["size/XL","dependencies","go"],"assignees":[],"locked":false,"comments_count":11,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-03T03:25:41.000Z","updated_at":"2026-07-05T05:01:00.795Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":16,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.0","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/openfga/openfga","old_version":"1.8.13","new_version":"1.18.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/Azure/go-ntlmssp","old_version":"0.0.0-20220621081337-cb9428e4ac1e","new_version":"0.1.1","repository_url":"https://github.com/Azure/go-ntlmssp"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.mongodb.org/mongo-driver","old_version":"1.17.3","new_version":"1.17.7","repository_url":"https://github.com/mongodb/mongo-go-driver"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.37.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 1 update in the /.citools/src/air directory: [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo).\nBumps the go_modules group with 2 updates in the /.citools/src/cog directory: [golang.org/x/net](https://github.com/golang/net) and [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 1 update in the /.citools/src/cue directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 2 updates in the /.citools/src/swagger directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver).\nBumps the go_modules group with 8 updates in the /apps/iam directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.0` | `4.1.4` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.9.2` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.8.13` | `1.18.0` |\n| [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) | `0.0.0-20220621081337-cb9428e4ac1e` | `0.1.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.7` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 5 updates in the /apps/shorturl directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.55.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 4 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apimachinery directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/apiserver directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 5 updates in the /pkg/build directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.55.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 2 updates in the /pkg/codegen directory: [golang.org/x/net](https://github.com/golang/net) and [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 2 updates in the /pkg/plugins/codegen directory: [golang.org/x/net](https://github.com/golang/net) and [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 6 updates in the /pkg/promlib directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.55.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.7` |\n\nBumps the go_modules group with 1 update in the /pkg/semconv directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/gohugoio/hugo` from 0.147.6 to 0.163.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gohugoio/hugo/releases\"\u003egithub.com/gohugoio/hugo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.163.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003emarkup/highlight: Escape lang in default code block rendering ce1a7e0b \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e thanks to \u003ca href=\"https://github.com/k0ngj1\"\u003e\u003ccode\u003e@​k0ngj1\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/li\u003e\n\u003cli\u003eparser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider 70a9068a \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eresources: Support babel/postcss config variants 9d66d513 \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15039\"\u003e#15039\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15040\"\u003e#15040\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15043\"\u003e#15043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehugolib: Fix page/section name collision regression f0133466 \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15046\"\u003e#15046\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eContinue resolving on ERR_ACCESS_DENIED in Node's resolver 134674f0 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15041\"\u003e#15041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emarkup: Standardize behavior when external converters are missing 147f605f \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14222\"\u003e#14222\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.1\u003c/h2\u003e\n\u003cp\u003eThe majority of the fixes in this release are security related (including the upstream fix in 93c8c7d3 (golang.org/x/image)). Thanks to \u003ca href=\"https://github.com/vnth4nhnt\"\u003e\u003ccode\u003e@​vnth4nhnt\u003c/code\u003e\u003c/a\u003e for finding the issues fixed in a00b5c72 and cf9c8f93 (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive \u003ca href=\"https://gohugo.io/about/security/\"\u003esecurity model\u003c/a\u003e as their baseline. Just take a look at Go's recent \u003ca href=\"https://github.com/golang/go/issues?q=is%3Aissue%20label%3ASecurity\"\u003esecurity issue list\u003c/a\u003e to see a demonstration of this.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/image from 0.41.0 to 0.42.0 93c8c7d3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\u003c/li\u003e\n\u003cli\u003eFix multi --renderSegments merge behavior 95e5e9f4 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15024\"\u003e#15024\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esecurity: Normalize integer IPv4 host encodings in http.urls check a00b5c72 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop symlinks in os.ReadDir, os.ReadFile, os.Stat and os.FileExists cf9c8f93 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15019\"\u003e#15019\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecommands: Fix convert command 2602796c \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15012\"\u003e#15012\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.0\u003c/h2\u003e\n\u003cp\u003eThe main topic in this release is improvements to the AVIF image handling that we introduced in \u003ccode\u003ev0.162.0\u003c/code\u003e. See \u003ca href=\"https://gohugo.io/configuration/imaging/#avif\"\u003ethe docs\u003c/a\u003e for details, but:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWe have turned down the default \u003ccode\u003equality\u003c/code\u003e for AVIF to 60. Turns out, JPEG/WebP with quality 75 is comparable to AVIF with quality 60. You can now also set quality per image format in your project config (and also per image processed if needed).\u003c/li\u003e\n\u003cli\u003eWe have added a \u003ccode\u003ehint\u003c/code\u003e to the AVIF with the same values as for \u003ccode\u003eWEBP\u003c/code\u003e. For \u003ccode\u003elossy\u003c/code\u003e compression, the photo/picture hints (and the default) encodes with YUV420 chroma subsampling instead of YUV444, keeping 444 for text/icon/drawing. This greatly reduces the memory needed to encode these images.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eImprovements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eresources/jsconfig: Remove deprecated baseUrl setting ff2903a9 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14991\"\u003e#14991\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14996\"\u003e#14996\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eall: Adjust tests for deprecated link and image render hook settings ca68936d \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eall: Run go fix ./... 781fabf4 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epagesfromdata: Use relative path for content adapter template metrics 1d018ef8 \u003ca href=\"https://github.com/anupamojha-eng\"\u003e\u003ccode\u003e@​anupamojha-eng\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14999\"\u003e#14999\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Re-add macos-latest to the test matrix 121bc6ce \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Deprecate Imaging.Compression and move it down to webp and avif configs cf18b827 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14998\"\u003e#14998\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly support the latest Go version 98ad9b3c \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14997\"\u003e#14997\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epage: Add IsBranch and deprecate IsNode b89e7fe6 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/11574\"\u003e#11574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Force cache invalidation for AVIF target e8fefc83 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14990\"\u003e#14990\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Add a per-format AVIF hint setting a043d3ec \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14992\"\u003e#14992\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Make AVIF chroma subsampling content-aware via the hint 341f575d \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14987\"\u003e#14987\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/4d22555aebf458d5d150500c9ac4bee5b24cf0d3\"\u003e\u003ccode\u003e4d22555\u003c/code\u003e\u003c/a\u003e releaser: Bump versions for release of 0.163.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/ce1a7e0bce3713af40496ded3c2c0ceeed49231d\"\u003e\u003ccode\u003ece1a7e0\u003c/code\u003e\u003c/a\u003e markup/highlight: Escape lang in default code block rendering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/e8988c31412249897a2e6805b61c37ed5c82a10c\"\u003e\u003ccode\u003ee8988c3\u003c/code\u003e\u003c/a\u003e Merge commit 'c86d9f4aa8a58931f52df6516f10b67c807505fb'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/c86d9f4aa8a58931f52df6516f10b67c807505fb\"\u003e\u003ccode\u003ec86d9f4\u003c/code\u003e\u003c/a\u003e Squashed 'docs/' changes from 1f8ddb8a52..e17426e2b6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/70a9068aa67c67a9eb2ab5fe062faf5a99e6b650\"\u003e\u003ccode\u003e70a9068\u003c/code\u003e\u003c/a\u003e parser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/9d66d513cee02e77c96c78059d5c3ae6b1c5dde9\"\u003e\u003ccode\u003e9d66d51\u003c/code\u003e\u003c/a\u003e resources: Support babel/postcss config variants\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/f01334666790f328e222f67c278396ee77003021\"\u003e\u003ccode\u003ef013346\u003c/code\u003e\u003c/a\u003e hugolib: Fix page/section name collision regression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/96e06e1ab8484327dcbb521b8445a52d0c022cf3\"\u003e\u003ccode\u003e96e06e1\u003c/code\u003e\u003c/a\u003e releaser: Prepare repository for 0.164.0-DEV\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/19a5cec0b9618163bb519487382e861d29edf383\"\u003e\u003ccode\u003e19a5cec\u003c/code\u003e\u003c/a\u003e releaser: Bump versions for release of 0.163.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/134674f00df2c2c0db24f0674de2263298d33eb7\"\u003e\u003ccode\u003e134674f\u003c/code\u003e\u003c/a\u003e Continue resolving on ERR_ACCESS_DENIED in Node's resolver\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gohugoio/hugo/compare/v0.147.6...v0.163.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.40.0 to 0.55.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"\u003e\u003ccode\u003e7770ec4\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4ece7b612ad44ad6c4d5e0d5d4df9c18cc211905\"\u003e\u003ccode\u003e4ece7b6\u003c/code\u003e\u003c/a\u003e html: escape greater-than symbol in doctype identifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/08be507abce89191d78cd49da60f4501fc910472\"\u003e\u003ccode\u003e08be507\u003c/code\u003e\u003c/a\u003e html: improve Noah's Ark clause performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd\"\u003e\u003ccode\u003ea8fb2fe\u003c/code\u003e\u003c/a\u003e html: properly render fostered elements in foreign content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/0dc5b7a5f81d7155ade6d5e9db35992998679932\"\u003e\u003ccode\u003e0dc5b7a\u003c/code\u003e\u003c/a\u003e html: properly check namespace in \u0026quot;in body\u0026quot; any other end tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a452f3cc17168a60bc3f439a3ae0fcffc32eca0e\"\u003e\u003ccode\u003ea452f3c\u003c/code\u003e\u003c/a\u003e html: ignore duplicate attributes during tokenization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f8651996b24ba47d89dd9eb97fd47758e6d1886f\"\u003e\u003ccode\u003ef865199\u003c/code\u003e\u003c/a\u003e quic: fix appendMaxDataFrame erroneously accumulating sentLimit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/210ed3cb901cb549818aefa04b71dadaf149d05d\"\u003e\u003ccode\u003e210ed3c\u003c/code\u003e\u003c/a\u003e quic: establish a \u0026quot;happened-before\u0026quot; relationship between stream write and read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ad8140e0aa2ec41b37ea478b4525a423bcc21af9\"\u003e\u003ccode\u003ead8140e\u003c/code\u003e\u003c/a\u003e quic: fix buffer slicing when handling overlapping stream data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/23ee2efe81a3ff183b4eca46c42f749af7efca45\"\u003e\u003ccode\u003e23ee2ef\u003c/code\u003e\u003c/a\u003e http2: avoid API changes when built with go1.27\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.40.0...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/expr-lang/expr` from 1.17.0 to 1.17.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expr-lang/expr/releases\"\u003egithub.com/expr-lang/expr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.7\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eExpr\u003c/strong\u003e is a Go-centric expression language designed to deliver dynamic configurations with unparalleled accuracy,\nsafety, and speed.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eprogram, err := expr.Compile(`let foo = bar(); baz(foo, foo)`)\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis release brings new language features, \u003cstrong\u003eperformance improvements\u003c/strong\u003e across runtime and compiler, better error\nhandling, and many important bug fixes.\u003c/p\u003e\n\u003ch2\u003eNew Features\u003c/h2\u003e\n\u003ch3\u003e\u003cstrong\u003eSupport for \u003ccode\u003eelse if\u003c/code\u003e expressions\u003c/strong\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eYou can now chain conditional branches using \u003ccode\u003eelse if\u003c/code\u003e! (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/879\"\u003e#879\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003cstrong\u003eUnicode escapes in the \u003ccode\u003e\\u{XXXXXX}\u003c/code\u003e format\u003c/strong\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eString literals now support Unicode code point escapes such as \u003ccode\u003e\\u{1F600}\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/882\"\u003e#882\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003cstrong\u003eByte slice support in the \u003ccode\u003ematches\u003c/code\u003e operator\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eThe \u003ccode\u003ematches\u003c/code\u003e operator now works with \u003ccode\u003e[]byte\u003c/code\u003e, improving interoperability with binary data. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/876\"\u003e#876\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003e\u003cstrong\u003eShort-circuit control options\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eNew options allow enabling or disabling short-circuiting behavior in the compiler and VM. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/847\"\u003e#847\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003e\u003cstrong\u003eOption to disable \u003ccode\u003eif\u003c/code\u003e operator\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eA separate \u003ccode\u003eDisableIfOperator\u003c/code\u003e option is now available. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/881\"\u003e#881\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ePerformance Improvements\u003c/h2\u003e\n\u003ch3\u003e\u003cstrong\u003eRuntime structure fetch improvements\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eAccessing struct fields at runtime is now faster. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/833\"\u003e#833\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003e\u003cstrong\u003eVM function call optimizations\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eFunction calls inside the VM execute more efficiently. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/832\"\u003e#832\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003e\u003cstrong\u003eType system performance boost\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eLarge or complex type operations now run significantly faster. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/824\"\u003e#824\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eGuard negative forward jump offsets (\u003cem\u003e\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/861\"\u003e#861\u003c/a\u003e\u003c/em\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/d4722867d2df8480c650afa169b350a03d0b668a\"\u003e\u003ccode\u003ed472286\u003c/code\u003e\u003c/a\u003e Improve gen.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/713a26a272ae656fa73685994b875bda8322a5af\"\u003e\u003ccode\u003e713a26a\u003c/code\u003e\u003c/a\u003e Add support for Unicode escape sequences in the \u003ccode\u003e\\u{XXXXXX}\u003c/code\u003e format (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/882\"\u003e#882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/6ed72a21491b5d18b419d2115c404f400431248b\"\u003e\u003ccode\u003e6ed72a2\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eDisableIfOperator\u003c/code\u003e option (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/881\"\u003e#881\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/4d38449b9f7f0238c6ac534e414cd4b4f25704e8\"\u003e\u003ccode\u003e4d38449\u003c/code\u003e\u003c/a\u003e chore: test and build on Go 1.25 (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/880\"\u003e#880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/087698e2554c3928e19f6fbb7f55f6aba7c2186f\"\u003e\u003ccode\u003e087698e\u003c/code\u003e\u003c/a\u003e Add error handling for invalid \u003ccode\u003eif\u003c/code\u003e condition and test for crash with null byte\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/738da0b342aa8a57e4a88ddd8c74c810bc8886c6\"\u003e\u003ccode\u003e738da0b\u003c/code\u003e\u003c/a\u003e Remove \u003ccode\u003eExampleDisableShortCircuit\u003c/code\u003e test function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/eb73788eb823513b73e3f62dada27de4f4c73cd2\"\u003e\u003ccode\u003eeb73788\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eelse if\u003c/code\u003e support (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/879\"\u003e#879\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/cf53913bd4fb966a7bd4250def200bfe8b085c64\"\u003e\u003ccode\u003ecf53913\u003c/code\u003e\u003c/a\u003e Improve the performance of runtime.Fetch for structures (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/833\"\u003e#833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/e5ee6c245bbf664c6a48d2eb1241320336aa98ed\"\u003e\u003ccode\u003ee5ee6c2\u003c/code\u003e\u003c/a\u003e Rename \u003ccode\u003eDisableSC\u003c/code\u003e to \u003ccode\u003eShortCircuit\u003c/code\u003e for better clarity and consistency\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/1973835b26fd4efc0990df48fb283d5a78808d9a\"\u003e\u003ccode\u003e1973835\u003c/code\u003e\u003c/a\u003e feat: add disable short-circuiting option to compiler (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/847\"\u003e#847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expr-lang/expr/compare/v1.17.0...v1.17.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.40.0 to 0.55.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"\u003e\u003ccode\u003e7770ec4\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4ece7b612ad44ad6c4d5e0d5d4df9c18cc211905\"\u003e\u003ccode\u003e4ece7b6\u003c/code\u003e\u003c/a\u003e html: escape greater-than symbol in doctype identifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/08be507abce89191d78cd49da60f4501fc910472\"\u003e\u003ccode\u003e08be507\u003c/code\u003e\u003c/a\u003e html: improve Noah's Ark clause performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd\"\u003e\u003ccode\u003ea8fb2fe\u003c/code\u003e\u003c/a\u003e html: properly render fostered elements in foreign content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/0dc5b7a5f81d7155ade6d5e9db35992998679932\"\u003e\u003ccode\u003e0dc5b7a\u003c/code\u003e\u003c/a\u003e html: properly check namespace in \u0026quot;in body\u0026quot; any other end tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a452f3cc17168a60bc3f439a3ae0fcffc32eca0e\"\u003e\u003ccode\u003ea452f3c\u003c/code\u003e\u003c/a\u003e html: ignore duplicate attributes during tokenization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f8651996b24ba47d89dd9eb97fd47758e6d1886f\"\u003e\u003ccode\u003ef865199\u003c/code\u003e\u003c/a\u003e quic: fix appendMaxDataFrame erroneously accumulating sentLimit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/210ed3cb901cb549818aefa04b71dadaf149d05d\"\u003e\u003ccode\u003e210ed3c\u003c/code\u003e\u003c/a\u003e quic: establish a \u0026quot;happened-before\u0026quot; relationship between stream write and read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ad8140e0aa2ec41b37ea478b4525a423bcc21af9\"\u003e\u003ccode\u003ead8140e\u003c/code\u003e\u003c/a\u003e quic: fix buffer slicing when handling overlapping stream data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/23ee2efe81a3ff183b4eca46c42f749af7efca45\"\u003e\u003ccode\u003e23ee2ef\u003c/code\u003e\u003c/a\u003e http2: avoid API changes when built with go1.27\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.40.0...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.38.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.38.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver` from 1.16.1 to 1.17.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.7\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3770 Fix buffer handling in GSSAPI error description and username functions by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2291\"\u003emongodb/mongo-go-driver#2291\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more visible deprecation banner to the 1.17 readme by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2233\"\u003emongodb/mongo-go-driver#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3770 Remove libasan from gssapi tests in CI by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2293\"\u003emongodb/mongo-go-driver#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e by \u003ca href=\"https://github.com/tadjik1\"\u003e\u003ccode\u003e@​tadjik1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2294\"\u003emongodb/mongo-go-driver#2294\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.7\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.6\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nDue to a bug in the Go Driver release automation, there is no 1.17.5 release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release makes various maintainability improvements to the Go Driver development and release automation.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3560 Use lambda-specific arn for FaaS by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2093\"\u003emongodb/mongo-go-driver#2093\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse a pinned Go version for golangci-lint. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2151\"\u003emongodb/mongo-go-driver#2151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDisable merge-up from release/1.17 by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2202\"\u003emongodb/mongo-go-driver#2202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.6\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. For issues with, questions about, or feedback for the Go Driver, please look into our \u003ca href=\"https://www.mongodb.com/docs/manual/support/\"\u003esupport channels\u003c/a\u003e, including \u003ca href=\"https://stackoverflow.com/questions/tagged/mongodb%20go?sort=Newest\"\u003eStackOverflow\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/eb01e7e2531e4bbbccfcff31a4be7a576e60349b\"\u003e\u003ccode\u003eeb01e7e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3c550934b65aa2a13a3f1c790b2e0e88c9c6a33e\"\u003e\u003ccode\u003e3c55093\u003c/code\u003e\u003c/a\u003e GODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2294\"\u003e#2294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f6163bf474d2711c88bca5b5715c959cc7244e0f\"\u003e\u003ccode\u003ef6163bf\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Remove libasan from gssapi tests in CI (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6798963ce0a8faa40c6c612772ac8fa0de58a206\"\u003e\u003ccode\u003e6798963\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/c1e9575a5530081a1e6e7d6566db3185b9f9b62a\"\u003e\u003ccode\u003ec1e9575\u003c/code\u003e\u003c/a\u003e Add more visible deprecation banner to the 1.17 readme (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2233\"\u003e#2233\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/d2fa0ab6f3ba0579b7bca7912d30e23907ffec9a\"\u003e\u003ccode\u003ed2fa0ab\u003c/code\u003e\u003c/a\u003e BUMP v1.17.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f1d540b2c4e606b6b0aa5d482fad848139664ef4\"\u003e\u003ccode\u003ef1d540b\u003c/code\u003e\u003c/a\u003e BUMP v1.17.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/b8790284926105a1ad35cf8c7be5fb642b78d8ac\"\u003e\u003ccode\u003eb879028\u003c/code\u003e\u003c/a\u003e GODRIVER-3654 Don't test v1 branches against latest server. (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/21f47d4287f28410b3d1852128ed299ba7b2609e\"\u003e\u003ccode\u003e21f47d4\u003c/code\u003e\u003c/a\u003e Allow ignore-for-release label to satisfy label checker (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2203\"\u003e#2203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/8708ca8b6964eb525418c86432ab3b366dbf177d\"\u003e\u003ccode\u003e8708ca8\u003c/code\u003e\u003c/a\u003e Disable merge-up from release/1.17 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2202\"\u003e#2202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.16.1...v1.17.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.0 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.0...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.8.13 to 1.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.0\u003c/h2\u003e\n\u003ch3\u003e🚨 Operational warning for MySQL users 🚨\u003c/h3\u003e\n\u003cp\u003eThis release contains a migration for MySQL which acquires a shared lock on the tuple and changelog tables. This is a potentially-lengthy migration, during which you will not be able to perform \u003ccode\u003eWrite\u003c/code\u003e operations.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eWhat you should do:\u003c/strong\u003e Do not execute auto-migrations on startup for production instances with large datasets. Please refer to \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003ethis migration guide\u003c/a\u003e before applying this migration.\u003c/p\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003ecrypto/subtle.ConstantTimeCompare\u003c/code\u003e for preshared key authentication to close a timing side-channel where the prior map lookup could reveal information about valid key bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3168\"\u003e#3168\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/geo-chen\"\u003e\u003ccode\u003e@​geo-chen\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed identifier comparison on the MySQL backend to be case-sensitive, matching Postgres and SQLite. Ships schema migrations 008, which require a maintenance window — see the \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003eoperator runbook\u003c/a\u003e before upgrading. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6\"\u003eCVE-2026-55170\u003c/a\u003e. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-hcxc-wf8j-23hv\"\u003eCVE-2026-55689\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/sahajamoth\"\u003e\u003ccode\u003e@​sahajamoth\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003cli\u003eEnforce that \u003ccode\u003eauthn.oidc.issuer\u003c/code\u003e and \u003ccode\u003eauthn.oidc.audience\u003c/code\u003e are both set when \u003ccode\u003eauthn.method\u003c/code\u003e is \u003ccode\u003eoidc\u003c/code\u003e. Previously, omitting \u003ccode\u003e--authn-oidc-audience\u003c/code\u003e caused the JWT \u003ccode\u003eaud\u003c/code\u003e claim to be silently skipped during token validation, allowing any validly-signed token from the trusted issuer to be accepted regardless of its intended audience. OpenFGA will now refuse to start if either value is missing. Thank you \u003ca href=\"https://github.com/0xVijay\"\u003e\u003ccode\u003e@​0xVijay\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.17.1...v1.18.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.17.1...v1.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PR workflow benchmark comparison to be less flakey. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3153\"\u003e#3153\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. \u003ccode\u003eErrTransactionThrottled\u003c/code\u003e, \u003ccode\u003echeck.ErrValidation\u003c/code\u003e, \u003ccode\u003echeck.ErrInvalidUser\u003c/code\u003e, and \u003ccode\u003e*tuple.InvalidTupleError\u003c/code\u003e (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3150\"\u003e#3150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3155\"\u003e#3155\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eReadChanges\u003c/code\u003e pagination erroring past the first page when an object type name contains \u003ccode\u003e|\u003c/code\u003e, and tightened \u003ccode\u003eDeserialize\u003c/code\u003e to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3152\"\u003e#3152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3159\"\u003e#3159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.52\u003c/code\u003e, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003e#3164\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003eopenfga/openfga#3164\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.17.0...v1.17.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.17.0...v1.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded a configurable trace sampler via \u003ccode\u003etrace.sampler\u003c/code\u003e (\u003ccode\u003eOPENFGA_TRACE_SAMPLER\u003c/code\u003e / \u003ccode\u003eOTEL_TRACES_SAMPLER\u003c/code\u003e), supporting the standard OpenTelemetry strategies \u003ccode\u003ealways_on\u003c/code\u003e, \u003ccode\u003ealways_off\u003c/code\u003e, \u003ccode\u003etraceidratio\u003c/code\u003e, \u003ccode\u003eparentbased_always_on\u003c/code\u003e, \u003ccode\u003eparentbased_always_off\u003c/code\u003e, and \u003ccode\u003eparentbased_traceidratio\u003c/code\u003e. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to \u003ccode\u003etraceidratio\u003c/code\u003e to preserve existing behavior. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003e#3072\u003c/a\u003e Thanks \u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRedesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3148\"\u003e#3148\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003eopenfga/openfga#3072\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.16.1...v1.17.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.16.1...v1.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.16.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.18.0] - 2026-06-16\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003ecrypto/subtle.ConstantTimeCompare\u003c/code\u003e for preshared key authentication to close a timing side-channel where the prior map lookup could reveal information about valid key bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3168\"\u003e#3168\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/geo-chen\"\u003e\u003ccode\u003e@​geo-chen\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed identifier comparison on the MySQL backend to be case-sensitive, matching Postgres and SQLite. Ships schema migrations 008, which require a maintenance window — see the \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003eoperator runbook\u003c/a\u003e before upgrading. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6\"\u003eCVE-2026-55170\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/sahajamoth\"\u003e\u003ccode\u003e@​sahajamoth\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003cli\u003eEnforce that \u003ccode\u003eauthn.oidc.issuer\u003c/code\u003e and \u003ccode\u003eauthn.oidc.audience\u003c/code\u003e are both set when \u003ccode\u003eauthn.method\u003c/code\u003e is \u003ccode\u003eoidc\u003c/code\u003e. Previously, omitting \u003ccode\u003e--authn-oidc-audience\u003c/code\u003e caused the JWT \u003ccode\u003eaud\u003c/code\u003e claim to be silently skipped during token validation, allowing any validly-signed token from the trusted issuer to be accepted regardless of its intended audience. OpenFGA will now refuse to start if either value is missing. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-hcxc-wf8j-23hv\"\u003eCVE-2026-55689\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/0xVijay\"\u003e\u003ccode\u003e@​0xVijay\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.17.1] - 2026-06-05\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PR workflow benchmark comparison to be less flakey. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3153\"\u003e#3153\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. \u003ccode\u003eErrTransactionThrottled\u003c/code\u003e, \u003ccode\u003echeck.ErrValidation\u003c/code\u003e, \u003ccode\u003echeck.ErrInvalidUser\u003c/code\u003e, and \u003ccode\u003e*tuple.InvalidTupleError\u003c/code\u003e (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3150\"\u003e#3150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3155\"\u003e#3155\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eReadChanges\u003c/code\u003e pagination erroring past the first page when an object type name contains \u003ccode\u003e|\u003c/code\u003e, and tightened \u003ccode\u003eDeserialize\u003c/code\u003e to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3152\"\u003e#3152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3159\"\u003e#3159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.52\u003c/code\u003e, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003e#3164\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.17.0] - 2026-06-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded a configurable trace sampler via \u003ccode\u003etrace.sampler\u003c/code\u003e (\u003ccode\u003eOPENFGA_TRACE_SAMPLER\u003c/code\u003e / \u003ccode\u003eOTEL_TRACES_SAMPLER\u003c/code\u003e), supporting the standard OpenTelemetry strategies \u003ccode\u003ealways_on\u003c/code\u003e, \u003ccode\u003ealways_off\u003c/code\u003e, \u003ccode\u003etraceidratio\u003c/code\u003e, \u003ccode\u003eparentbased_always_on\u003c/code\u003e, \u003ccode\u003eparentbased_always_off\u003c/code\u003e, and \u003ccode\u003eparentbased_traceidratio\u003c/code\u003e. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to \u003ccode\u003etraceidratio\u003c/code\u003e to preserve existing behavior. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003e#3072\u003c/a\u003e Thanks \u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRedesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3148\"\u003e#3148\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.1] - 2026-05-28\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded workflow-level \u003ccode\u003econcurrency.group\u003c/code\u003e and \u003ccode\u003ecancel-in-progress\u003c/code\u003e for PR-related workflow runs to reduce wasted effort. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3140\"\u003e#3140\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e incorrectly falling back to the standard algorithm on deadline/cancellation/throttle-timeout errors; these are now returned directly. Also fixed \u003ccode\u003eweighted_graph_check\u003c/code\u003e emitting metrics under the wrong method label when used as the primary algorithm. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3141\"\u003e#3141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where the \u003ccode\u003eweight2\u003c/code\u003e strategy could return false denies when contextual tuples were present, because their concatenation with datastore results violated the sort assumption of the pruning optimization. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3145\"\u003e#3145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.50\u003c/code\u003e to address multiple CVEs in the go std lib. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3146\"\u003e#3146\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.0] - 2026-05-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/81089a31698505b4d5f01311c04e83b9adfcf383\"\u003e\u003ccode\u003e81089a3\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.18.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3174\"\u003e#3174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/44596773b2e62738720ef215bf7fa04352954271\"\u003e\u003ccode\u003e4459677\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/a2e0dbefc3e01a95c785f81a3563bc6571b08b11\"\u003e\u003ccode\u003ea2e0dbe\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/0c759472cb1918632b67170cf6ecdb3a409a1029\"\u003e\u003ccode\u003e0c75947\u003c/code\u003e\u003c/a\u003e fix: use constant-time comparison for preshared key authentication (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3168\"\u003e#3168\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/7a356c9f5d57f08dabe0cfaf17a82c830840ea13\"\u003e\u003ccode\u003e7a356c9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3166\"\u003e#3166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/9ac791ff458dd04ba05b6c9a97200830369101f2\"\u003e\u003ccode\u003e9ac791f\u003c/code\u003e\u003c/a\u003e chore(deps): bump the dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3167\"\u003e#3167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/393db3f903b923a0414c96145012e527af700685\"\u003e\u003ccode\u003e393db3f\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.17.1\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3165\"\u003e#3165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/ec685d0d02d992c292feaa3ba7d7fcedc705db71\"\u003e\u003ccode\u003eec685d0\u003c/code\u003e\u003c/a\u003e chore: bump grpc-health-probe to v0.4.52 (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3164\"\u003e#3164\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c4523743b28f69d4dd62382614d32aada3485095\"\u003e\u003ccode\u003ec452374\u003c/code\u003e\u003c/a\u003e docs: update caching docs (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3163\"\u003e#3163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/4f00251a719bb2451cefedf4e31fc3afc728b32f\"\u003e\u003ccode\u003e4f00251\u003c/code\u003e\u003c/a\u003e fix: continuation token deserializer - handle \u003ccode\u003e|\u003c/code\u003e in type names (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3152\"\u003e#3152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.8.13...v1.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/...\n\n_Description has been truncated_","html_url":"https://github.com/OneFineStarstuff/grafana/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OneFineStarstuff%2Fgrafana/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"},{"uuid":"4782828604","node_id":"PR_kwDOBwolXM7siCmv","number":1408,"state":"open","title":"Bump the go_modules group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-01T05:51:16.000Z","updated_at":"2026-07-04T23:11:31.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":6,"packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.7.6","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"go.mongodb.org/mongo-driver","old_version":"1.7.5","new_version":"1.17.7","repository_url":"https://github.com/mongodb/mongo-go-driver"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.3","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"go.opentelemetry.io/otel","old_version":"1.40.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.40.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"github.com/apache/thrift","old_version":"0.16.0","new_version":"0.23.0","repository_url":"https://github.com/apache/thrift"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.6` | `5.9.2` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.7.5` | `1.17.7` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.3` | `4.1.4` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.43.0` |\n| [github.com/apache/thrift](https://github.com/apache/thrift) | `0.16.0` | `0.23.0` |\n\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.6 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.6...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver` from 1.7.5 to 1.17.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.7\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3770 Fix buffer handling in GSSAPI error description and username functions by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2291\"\u003emongodb/mongo-go-driver#2291\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more visible deprecation banner to the 1.17 readme by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2233\"\u003emongodb/mongo-go-driver#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3770 Remove libasan from gssapi tests in CI by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2293\"\u003emongodb/mongo-go-driver#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e by \u003ca href=\"https://github.com/tadjik1\"\u003e\u003ccode\u003e@​tadjik1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2294\"\u003emongodb/mongo-go-driver#2294\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.7\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.6\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nDue to a bug in the Go Driver release automation, there is no 1.17.5 release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release makes various maintainability improvements to the Go Driver development and release automation.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3560 Use lambda-specific arn for FaaS by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2093\"\u003emongodb/mongo-go-driver#2093\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse a pinned Go version for golangci-lint. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2151\"\u003emongodb/mongo-go-driver#2151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDisable merge-up from release/1.17 by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2202\"\u003emongodb/mongo-go-driver#2202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.6\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. For issues with, questions about, or feedback for the Go Driver, please look into our \u003ca href=\"https://www.mongodb.com/docs/manual/support/\"\u003esupport channels\u003c/a\u003e, including \u003ca href=\"https://stackoverflow.com/questions/tagged/mongodb%20go?sort=Newest\"\u003eStackOverflow\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/eb01e7e2531e4bbbccfcff31a4be7a576e60349b\"\u003e\u003ccode\u003eeb01e7e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3c550934b65aa2a13a3f1c790b2e0e88c9c6a33e\"\u003e\u003ccode\u003e3c55093\u003c/code\u003e\u003c/a\u003e GODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2294\"\u003e#2294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f6163bf474d2711c88bca5b5715c959cc7244e0f\"\u003e\u003ccode\u003ef6163bf\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Remove libasan from gssapi tests in CI (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6798963ce0a8faa40c6c612772ac8fa0de58a206\"\u003e\u003ccode\u003e6798963\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/c1e9575a5530081a1e6e7d6566db3185b9f9b62a\"\u003e\u003ccode\u003ec1e9575\u003c/code\u003e\u003c/a\u003e Add more visible deprecation banner to the 1.17 readme (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2233\"\u003e#2233\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/d2fa0ab6f3ba0579b7bca7912d30e23907ffec9a\"\u003e\u003ccode\u003ed2fa0ab\u003c/code\u003e\u003c/a\u003e BUMP v1.17.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f1d540b2c4e606b6b0aa5d482fad848139664ef4\"\u003e\u003ccode\u003ef1d540b\u003c/code\u003e\u003c/a\u003e BUMP v1.17.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/b8790284926105a1ad35cf8c7be5fb642b78d8ac\"\u003e\u003ccode\u003eb879028\u003c/code\u003e\u003c/a\u003e GODRIVER-3654 Don't test v1 branches against latest server. (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/21f47d4287f28410b3d1852128ed299ba7b2609e\"\u003e\u003ccode\u003e21f47d4\u003c/code\u003e\u003c/a\u003e Allow ignore-for-release label to satisfy label checker (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2203\"\u003e#2203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/8708ca8b6964eb525418c86432ab3b366dbf177d\"\u003e\u003ccode\u003e8708ca8\u003c/code\u003e\u003c/a\u003e Disable merge-up from release/1.17 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2202\"\u003e#2202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.7.5...v1.17.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/apache/thrift` from 0.16.0 to 0.23.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/thrift/releases\"\u003egithub.com/apache/thrift's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 0.23.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.22.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.21.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.20.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.19.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.18.1\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.18.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the \u003cstrong\u003eofficial release download source\u003c/strong\u003e:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.17.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the \u003cstrong\u003eofficial release download source\u003c/strong\u003e:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/thrift/blob/master/CHANGES.md\"\u003egithub.com/apache/thrift's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.23.0\u003c/h2\u003e\n\u003ch3\u003eBuild Process\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5877\"\u003eTHRIFT-5877\u003c/a\u003e - Add cpp cross tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5866\"\u003eTHRIFT-5866\u003c/a\u003e - Dockerfile to support Ubuntu 24.04 LTS (Noble Numbat)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5909\"\u003eTHRIFT-5909\u003c/a\u003e - add Ruby in GitHub workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5649\"\u003eTHRIFT-5649\u003c/a\u003e - add go in GitHub workflow / action\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eC glib\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5931\"\u003eTHRIFT-5931\u003c/a\u003e - thrift_ssl_socket_get_ssl_error() can underflow its remaining-buffer counter and write past the stack buffer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5871\"\u003eTHRIFT-5871\u003c/a\u003e - Improve MAX_MESSAGE_SIZE check and friends\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eC++\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5911\"\u003eTHRIFT-5911\u003c/a\u003e - Inconsistent UUID compilation for aliased types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5912\"\u003eTHRIFT-5912\u003c/a\u003e - Assertion failed: \u003ccode\u003edelta \u0026gt; 0\u003c/code\u003e, file ThreadManagerTests.h, line 162\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5880\"\u003eTHRIFT-5880\u003c/a\u003e - C++ TSocket on an IPv6-only system fails if you use a hostname of 127.0.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-3268\"\u003eTHRIFT-3268\u003c/a\u003e - warning: token pasting of ',' and \u003ccode\u003e__VA_ARGS__\u003c/code\u003e is a GNU extension\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5887\"\u003eTHRIFT-5887\u003c/a\u003e - build/cmake/ should be prepended (not appended) to CMAKE_MODULE_PATH\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5878\"\u003eTHRIFT-5878\u003c/a\u003e - Add UUID support for THeaderProtocol and TProtocolTap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5898\"\u003eTHRIFT-5898\u003c/a\u003e - Unable to build Thrift as a shared library on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5920\"\u003eTHRIFT-5920\u003c/a\u003e - Remove threadsafe warnings in thrift-maven-plugin\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDelphi\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5939\"\u003eTHRIFT-5939\u003c/a\u003e - Replace GUID generation with stable UUID algorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5876\"\u003eTHRIFT-5876\u003c/a\u003e - Add Delphi WinHTTP client TLS1.3 support\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGo\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5896\"\u003eTHRIFT-5896\u003c/a\u003e - Race condition in TServerSocket.Addr() method\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5925\"\u003eTHRIFT-5925\u003c/a\u003e - UUID implementation in JAVA is not according to the Thrift Specification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5869\"\u003eTHRIFT-5869\u003c/a\u003e - Close the transport after TServerEventHandler deleteContext\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5863\"\u003eTHRIFT-5863\u003c/a\u003e - Make TServerTransport able to customize the max message size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5774\"\u003eTHRIFT-5774\u003c/a\u003e - Add remote client's IP address to ServerContext in TServerEventHandler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-4280\"\u003eTHRIFT-4280\u003c/a\u003e - Add async nonblocking ssl support in java client\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5879\"\u003eTHRIFT-5879\u003c/a\u003e - java and kotlin cross tests fail in the GitHub action\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003enetstd\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5902\"\u003eTHRIFT-5902\u003c/a\u003e - Add net10 support\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/e4b684f5ff4f9c3a42cd7ec0a667c3d9bd7f6ac1\"\u003e\u003ccode\u003ee4b684f\u003c/code\u003e\u003c/a\u003e Updated CHANGES.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/c4cbe43fd12ab5d043af5dd08d1f59e2ba07b2e4\"\u003e\u003ccode\u003ec4cbe43\u003c/code\u003e\u003c/a\u003e Address vulnerabilities in Rack\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/68ac8e935ef440c3e22d0e1a30e7211b9bf1d441\"\u003e\u003ccode\u003e68ac8e9\u003c/code\u003e\u003c/a\u003e Enable TLS hostname verification in TNonblockingSSLSocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/5e4f01d737e4d3845d07dde6da43981feee0cb9a\"\u003e\u003ccode\u003e5e4f01d\u003c/code\u003e\u003c/a\u003e Harden Node.js WebSocket server handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/e242889231df48f8791372598052862c28f5be83\"\u003e\u003ccode\u003ee242889\u003c/code\u003e\u003c/a\u003e Add input validation to Swift protocol layer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/4af8c7c8768cb687b182c1839a39d4beb4f35a5d\"\u003e\u003ccode\u003e4af8c7c\u003c/code\u003e\u003c/a\u003e Add recursion depth limit to Node.js protocol skip()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/a30c552bd0808b7e19f35ad30212ba7a9aee8c66\"\u003e\u003ccode\u003ea30c552\u003c/code\u003e\u003c/a\u003e Enable TLS hostname verification in TSSLTransportFactory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/0f8ec9c1014ed21acc324aaa421017fb164e9608\"\u003e\u003ccode\u003e0f8ec9c\u003c/code\u003e\u003c/a\u003e Fix parent class resolution in c_glib generated dispatch_call\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/276ec883910cd936b4f9413bf607c808a7423185\"\u003e\u003ccode\u003e276ec88\u003c/code\u003e\u003c/a\u003e THRIFT-5929: Fix build failure on PHP 8.5 due to removed zend_exception_get_d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/17f2c13ec2b27503dd0de2720401b96787632364\"\u003e\u003ccode\u003e17f2c13\u003c/code\u003e\u003c/a\u003e Added missing 0.23.0 JIRA tickets to CHANGES.md\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/apache/thrift/compare/v0.16.0...v0.23.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/golang-migrate/migrate/pull/1408","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/golang-migrate%2Fmigrate/issues/1408","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1408/packages"},{"uuid":"4780567208","node_id":"PR_kwDORF_DAM7saugt","number":33,"state":"open","title":"chore(deps): bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-30T21:33:24.000Z","updated_at":"2026-06-30T21:33:34.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.9.2 to 5.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.9.2\u0026new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/pixel365/zoner/pull/33","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/pixel365%2Fzoner/issues/33","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/33/packages"},{"uuid":"4776535074","node_id":"PR_kwDOPmeGcs7sNbj_","number":8,"state":"open","title":"Bump the go_modules group across 14 directories with 15 updates","user":"dependabot[bot]","labels":["☑️ auto-merge","🤖 bot","📦 dependencies","size/XL","dependencies","go","go-mod"],"assignees":["OneFineStarstuff"],"locked":false,"comments_count":11,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-30T11:58:17.000Z","updated_at":"2026-07-05T03:23:54.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":15,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.0","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/openfga/openfga","old_version":"1.8.13","new_version":"1.18.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/Azure/go-ntlmssp","old_version":"0.0.0-20220621081337-cb9428e4ac1e","new_version":"0.1.1","repository_url":"https://github.com/Azure/go-ntlmssp"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.mongodb.org/mongo-driver","old_version":"1.17.3","new_version":"1.17.7","repository_url":"https://github.com/mongodb/mongo-go-driver"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.37.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 1 update in the /.citools/src/air directory: [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo).\nBumps the go_modules group with 2 updates in the /.citools/src/swagger directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver).\nBumps the go_modules group with 8 updates in the /apps/iam directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.0` | `4.1.4` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.9.2` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.8.13` | `1.18.0` |\n| [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) | `0.0.0-20220621081337-cb9428e4ac1e` | `0.1.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.7` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 4 updates in the /apps/provisioning directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 2 updates in the /apps/secret directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/shorturl directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apimachinery directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/apiserver directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/build directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 1 update in the /pkg/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 1 update in the /pkg/plugins/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 5 updates in the /pkg/promlib directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.7` |\n\nBumps the go_modules group with 1 update in the /pkg/semconv directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/gohugoio/hugo` from 0.147.6 to 0.163.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gohugoio/hugo/releases\"\u003egithub.com/gohugoio/hugo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.163.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003emarkup/highlight: Escape lang in default code block rendering ce1a7e0b \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e thanks to \u003ca href=\"https://github.com/k0ngj1\"\u003e\u003ccode\u003e@​k0ngj1\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/li\u003e\n\u003cli\u003eparser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider 70a9068a \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eresources: Support babel/postcss config variants 9d66d513 \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15039\"\u003e#15039\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15040\"\u003e#15040\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15043\"\u003e#15043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehugolib: Fix page/section name collision regression f0133466 \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15046\"\u003e#15046\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eContinue resolving on ERR_ACCESS_DENIED in Node's resolver 134674f0 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15041\"\u003e#15041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emarkup: Standardize behavior when external converters are missing 147f605f \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14222\"\u003e#14222\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.1\u003c/h2\u003e\n\u003cp\u003eThe majority of the fixes in this release are security related (including the upstream fix in 93c8c7d3 (golang.org/x/image)). Thanks to \u003ca href=\"https://github.com/vnth4nhnt\"\u003e\u003ccode\u003e@​vnth4nhnt\u003c/code\u003e\u003c/a\u003e for finding the issues fixed in a00b5c72 and cf9c8f93 (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive \u003ca href=\"https://gohugo.io/about/security/\"\u003esecurity model\u003c/a\u003e as their baseline. Just take a look at Go's recent \u003ca href=\"https://github.com/golang/go/issues?q=is%3Aissue%20label%3ASecurity\"\u003esecurity issue list\u003c/a\u003e to see a demonstration of this.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/image from 0.41.0 to 0.42.0 93c8c7d3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\u003c/li\u003e\n\u003cli\u003eFix multi --renderSegments merge behavior 95e5e9f4 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15024\"\u003e#15024\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esecurity: Normalize integer IPv4 host encodings in http.urls check a00b5c72 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop symlinks in os.ReadDir, os.ReadFile, os.Stat and os.FileExists cf9c8f93 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15019\"\u003e#15019\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecommands: Fix convert command 2602796c \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15012\"\u003e#15012\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.0\u003c/h2\u003e\n\u003cp\u003eThe main topic in this release is improvements to the AVIF image handling that we introduced in \u003ccode\u003ev0.162.0\u003c/code\u003e. See \u003ca href=\"https://gohugo.io/configuration/imaging/#avif\"\u003ethe docs\u003c/a\u003e for details, but:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWe have turned down the default \u003ccode\u003equality\u003c/code\u003e for AVIF to 60. Turns out, JPEG/WebP with quality 75 is comparable to AVIF with quality 60. You can now also set quality per image format in your project config (and also per image processed if needed).\u003c/li\u003e\n\u003cli\u003eWe have added a \u003ccode\u003ehint\u003c/code\u003e to the AVIF with the same values as for \u003ccode\u003eWEBP\u003c/code\u003e. For \u003ccode\u003elossy\u003c/code\u003e compression, the photo/picture hints (and the default) encodes with YUV420 chroma subsampling instead of YUV444, keeping 444 for text/icon/drawing. This greatly reduces the memory needed to encode these images.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eImprovements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eresources/jsconfig: Remove deprecated baseUrl setting ff2903a9 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14991\"\u003e#14991\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14996\"\u003e#14996\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eall: Adjust tests for deprecated link and image render hook settings ca68936d \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eall: Run go fix ./... 781fabf4 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epagesfromdata: Use relative path for content adapter template metrics 1d018ef8 \u003ca href=\"https://github.com/anupamojha-eng\"\u003e\u003ccode\u003e@​anupamojha-eng\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14999\"\u003e#14999\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Re-add macos-latest to the test matrix 121bc6ce \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Deprecate Imaging.Compression and move it down to webp and avif configs cf18b827 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14998\"\u003e#14998\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly support the latest Go version 98ad9b3c \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14997\"\u003e#14997\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epage: Add IsBranch and deprecate IsNode b89e7fe6 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/11574\"\u003e#11574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Force cache invalidation for AVIF target e8fefc83 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14990\"\u003e#14990\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Add a per-format AVIF hint setting a043d3ec \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14992\"\u003e#14992\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Make AVIF chroma subsampling content-aware via the hint 341f575d \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14987\"\u003e#14987\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/4d22555aebf458d5d150500c9ac4bee5b24cf0d3\"\u003e\u003ccode\u003e4d22555\u003c/code\u003e\u003c/a\u003e releaser: Bump versions for release of 0.163.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/ce1a7e0bce3713af40496ded3c2c0ceeed49231d\"\u003e\u003ccode\u003ece1a7e0\u003c/code\u003e\u003c/a\u003e markup/highlight: Escape lang in default code block rendering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/e8988c31412249897a2e6805b61c37ed5c82a10c\"\u003e\u003ccode\u003ee8988c3\u003c/code\u003e\u003c/a\u003e Merge commit 'c86d9f4aa8a58931f52df6516f10b67c807505fb'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/c86d9f4aa8a58931f52df6516f10b67c807505fb\"\u003e\u003ccode\u003ec86d9f4\u003c/code\u003e\u003c/a\u003e Squashed 'docs/' changes from 1f8ddb8a52..e17426e2b6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/70a9068aa67c67a9eb2ab5fe062faf5a99e6b650\"\u003e\u003ccode\u003e70a9068\u003c/code\u003e\u003c/a\u003e parser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/9d66d513cee02e77c96c78059d5c3ae6b1c5dde9\"\u003e\u003ccode\u003e9d66d51\u003c/code\u003e\u003c/a\u003e resources: Support babel/postcss config variants\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/f01334666790f328e222f67c278396ee77003021\"\u003e\u003ccode\u003ef013346\u003c/code\u003e\u003c/a\u003e hugolib: Fix page/section name collision regression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/96e06e1ab8484327dcbb521b8445a52d0c022cf3\"\u003e\u003ccode\u003e96e06e1\u003c/code\u003e\u003c/a\u003e releaser: Prepare repository for 0.164.0-DEV\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/19a5cec0b9618163bb519487382e861d29edf383\"\u003e\u003ccode\u003e19a5cec\u003c/code\u003e\u003c/a\u003e releaser: Bump versions for release of 0.163.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/134674f00df2c2c0db24f0674de2263298d33eb7\"\u003e\u003ccode\u003e134674f\u003c/code\u003e\u003c/a\u003e Continue resolving on ERR_ACCESS_DENIED in Node's resolver\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gohugoio/hugo/compare/v0.147.6...v0.163.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.38.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.38.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver` from 1.16.1 to 1.17.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.7\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3770 Fix buffer handling in GSSAPI error description and username functions by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2291\"\u003emongodb/mongo-go-driver#2291\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more visible deprecation banner to the 1.17 readme by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2233\"\u003emongodb/mongo-go-driver#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3770 Remove libasan from gssapi tests in CI by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2293\"\u003emongodb/mongo-go-driver#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e by \u003ca href=\"https://github.com/tadjik1\"\u003e\u003ccode\u003e@​tadjik1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2294\"\u003emongodb/mongo-go-driver#2294\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.7\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.6\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nDue to a bug in the Go Driver release automation, there is no 1.17.5 release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release makes various maintainability improvements to the Go Driver development and release automation.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3560 Use lambda-specific arn for FaaS by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2093\"\u003emongodb/mongo-go-driver#2093\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse a pinned Go version for golangci-lint. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2151\"\u003emongodb/mongo-go-driver#2151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDisable merge-up from release/1.17 by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2202\"\u003emongodb/mongo-go-driver#2202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.6\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. For issues with, questions about, or feedback for the Go Driver, please look into our \u003ca href=\"https://www.mongodb.com/docs/manual/support/\"\u003esupport channels\u003c/a\u003e, including \u003ca href=\"https://stackoverflow.com/questions/tagged/mongodb%20go?sort=Newest\"\u003eStackOverflow\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/eb01e7e2531e4bbbccfcff31a4be7a576e60349b\"\u003e\u003ccode\u003eeb01e7e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3c550934b65aa2a13a3f1c790b2e0e88c9c6a33e\"\u003e\u003ccode\u003e3c55093\u003c/code\u003e\u003c/a\u003e GODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2294\"\u003e#2294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f6163bf474d2711c88bca5b5715c959cc7244e0f\"\u003e\u003ccode\u003ef6163bf\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Remove libasan from gssapi tests in CI (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6798963ce0a8faa40c6c612772ac8fa0de58a206\"\u003e\u003ccode\u003e6798963\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/c1e9575a5530081a1e6e7d6566db3185b9f9b62a\"\u003e\u003ccode\u003ec1e9575\u003c/code\u003e\u003c/a\u003e Add more visible deprecation banner to the 1.17 readme (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2233\"\u003e#2233\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/d2fa0ab6f3ba0579b7bca7912d30e23907ffec9a\"\u003e\u003ccode\u003ed2fa0ab\u003c/code\u003e\u003c/a\u003e BUMP v1.17.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f1d540b2c4e606b6b0aa5d482fad848139664ef4\"\u003e\u003ccode\u003ef1d540b\u003c/code\u003e\u003c/a\u003e BUMP v1.17.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/b8790284926105a1ad35cf8c7be5fb642b78d8ac\"\u003e\u003ccode\u003eb879028\u003c/code\u003e\u003c/a\u003e GODRIVER-3654 Don't test v1 branches against latest server. (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/21f47d4287f28410b3d1852128ed299ba7b2609e\"\u003e\u003ccode\u003e21f47d4\u003c/code\u003e\u003c/a\u003e Allow ignore-for-release label to satisfy label checker (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2203\"\u003e#2203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/8708ca8b6964eb525418c86432ab3b366dbf177d\"\u003e\u003ccode\u003e8708ca8\u003c/code\u003e\u003c/a\u003e Disable merge-up from release/1.17 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2202\"\u003e#2202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.16.1...v1.17.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.0 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.0...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.8.13 to 1.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.0\u003c/h2\u003e\n\u003ch3\u003e🚨 Operational warning for MySQL users 🚨\u003c/h3\u003e\n\u003cp\u003eThis release contains a migration for MySQL which acquires a shared lock on the tuple and changelog tables. This is a potentially-lengthy migration, during which you will not be able to perform \u003ccode\u003eWrite\u003c/code\u003e operations.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eWhat you should do:\u003c/strong\u003e Do not execute auto-migrations on startup for production instances with large datasets. Please refer to \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003ethis migration guide\u003c/a\u003e before applying this migration.\u003c/p\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003ecrypto/subtle.ConstantTimeCompare\u003c/code\u003e for preshared key authentication to close a timing side-channel where the prior map lookup could reveal information about valid key bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3168\"\u003e#3168\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/geo-chen\"\u003e\u003ccode\u003e@​geo-chen\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed identifier comparison on the MySQL backend to be case-sensitive, matching Postgres and SQLite. Ships schema migrations 008, which require a maintenance window — see the \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003eoperator runbook\u003c/a\u003e before upgrading. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6\"\u003eCVE-2026-55170\u003c/a\u003e. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-hcxc-wf8j-23hv\"\u003eCVE-2026-55689\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/sahajamoth\"\u003e\u003ccode\u003e@​sahajamoth\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003cli\u003eEnforce that \u003ccode\u003eauthn.oidc.issuer\u003c/code\u003e and \u003ccode\u003eauthn.oidc.audience\u003c/code\u003e are both set when \u003ccode\u003eauthn.method\u003c/code\u003e is \u003ccode\u003eoidc\u003c/code\u003e. Previously, omitting \u003ccode\u003e--authn-oidc-audience\u003c/code\u003e caused the JWT \u003ccode\u003eaud\u003c/code\u003e claim to be silently skipped during token validation, allowing any validly-signed token from the trusted issuer to be accepted regardless of its intended audience. OpenFGA will now refuse to start if either value is missing. Thank you \u003ca href=\"https://github.com/0xVijay\"\u003e\u003ccode\u003e@​0xVijay\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.17.1...v1.18.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.17.1...v1.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PR workflow benchmark comparison to be less flakey. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3153\"\u003e#3153\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. \u003ccode\u003eErrTransactionThrottled\u003c/code\u003e, \u003ccode\u003echeck.ErrValidation\u003c/code\u003e, \u003ccode\u003echeck.ErrInvalidUser\u003c/code\u003e, and \u003ccode\u003e*tuple.InvalidTupleError\u003c/code\u003e (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3150\"\u003e#3150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3155\"\u003e#3155\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eReadChanges\u003c/code\u003e pagination erroring past the first page when an object type name contains \u003ccode\u003e|\u003c/code\u003e, and tightened \u003ccode\u003eDeserialize\u003c/code\u003e to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3152\"\u003e#3152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3159\"\u003e#3159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.52\u003c/code\u003e, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003e#3164\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003eopenfga/openfga#3164\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.17.0...v1.17.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.17.0...v1.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded a configurable trace sampler via \u003ccode\u003etrace.sampler\u003c/code\u003e (\u003ccode\u003eOPENFGA_TRACE_SAMPLER\u003c/code\u003e / \u003ccode\u003eOTEL_TRACES_SAMPLER\u003c/code\u003e), supporting the standard OpenTelemetry strategies \u003ccode\u003ealways_on\u003c/code\u003e, \u003ccode\u003ealways_off\u003c/code\u003e, \u003ccode\u003etraceidratio\u003c/code\u003e, \u003ccode\u003eparentbased_always_on\u003c/code\u003e, \u003ccode\u003eparentbased_always_off\u003c/code\u003e, and \u003ccode\u003eparentbased_traceidratio\u003c/code\u003e. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to \u003ccode\u003etraceidratio\u003c/code\u003e to preserve existing behavior. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003e#3072\u003c/a\u003e Thanks \u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRedesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3148\"\u003e#3148\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003eopenfga/openfga#3072\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.16.1...v1.17.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.16.1...v1.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.16.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.18.0] - 2026-06-16\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003ecrypto/subtle.ConstantTimeCompare\u003c/code\u003e for preshared key authentication to close a timing side-channel where the prior map lookup could reveal information about valid key bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3168\"\u003e#3168\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/geo-chen\"\u003e\u003ccode\u003e@​geo-chen\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed identifier comparison on the MySQL backend to be case-sensitive, matching Postgres and SQLite. Ships schema migrations 008, which require a maintenance window — see the \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003eoperator runbook\u003c/a\u003e before upgrading. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6\"\u003eCVE-2026-55170\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/sahajamoth\"\u003e\u003ccode\u003e@​sahajamoth\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003cli\u003eEnforce that \u003ccode\u003eauthn.oidc.issuer\u003c/code\u003e and \u003ccode\u003eauthn.oidc.audience\u003c/code\u003e are both set when \u003ccode\u003eauthn.method\u003c/code\u003e is \u003ccode\u003eoidc\u003c/code\u003e. Previously, omitting \u003ccode\u003e--authn-oidc-audience\u003c/code\u003e caused the JWT \u003ccode\u003eaud\u003c/code\u003e claim to be silently skipped during token validation, allowing any validly-signed token from the trusted issuer to be accepted regardless of its intended audience. OpenFGA will now refuse to start if either value is missing. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-hcxc-wf8j-23hv\"\u003eCVE-2026-55689\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/0xVijay\"\u003e\u003ccode\u003e@​0xVijay\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.17.1] - 2026-06-05\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PR workflow benchmark comparison to be less flakey. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3153\"\u003e#3153\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. \u003ccode\u003eErrTransactionThrottled\u003c/code\u003e, \u003ccode\u003echeck.ErrValidation\u003c/code\u003e, \u003ccode\u003echeck.ErrInvalidUser\u003c/code\u003e, and \u003ccode\u003e*tuple.InvalidTupleError\u003c/code\u003e (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3150\"\u003e#3150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3155\"\u003e#3155\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eReadChanges\u003c/code\u003e pagination erroring past the first page when an object type name contains \u003ccode\u003e|\u003c/code\u003e, and tightened \u003ccode\u003eDeserialize\u003c/code\u003e to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3152\"\u003e#3152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3159\"\u003e#3159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.52\u003c/code\u003e, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003e#3164\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.17.0] - 2026-06-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded a configurable trace sampler via \u003ccode\u003etrace.sampler\u003c/code\u003e (\u003ccode\u003eOPENFGA_TRACE_SAMPLER\u003c/code\u003e / \u003ccode\u003eOTEL_TRACES_SAMPLER\u003c/code\u003e), supporting the standard OpenTelemetry strategies \u003ccode\u003ealways_on\u003c/code\u003e, \u003ccode\u003ealways_off\u003c/code\u003e, \u003ccode\u003etraceidratio\u003c/code\u003e, \u003ccode\u003eparentbased_always_on\u003c/code\u003e, \u003ccode\u003eparentbased_always_off\u003c/code\u003e, and \u003ccode\u003eparentbased_traceidratio\u003c/code\u003e. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to \u003ccode\u003etraceidratio\u003c/code\u003e to preserve existing behavior. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003e#3072\u003c/a\u003e Thanks \u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRedesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3148\"\u003e#3148\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.1] - 2026-05-28\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded workflow-level \u003ccode\u003econcurrency.group\u003c/code\u003e and \u003ccode\u003ecancel-in-progress\u003c/code\u003e for PR-related workflow runs to reduce wasted effort. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3140\"\u003e#3140\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e incorrectly falling back to the standard algorithm on deadline/cancellation/throttle-timeout errors; these are now returned directly. Also fixed \u003ccode\u003eweighted_graph_check\u003c/code\u003e emitting metrics under the wrong method label when used as the primary algorithm. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3141\"\u003e#3141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where the \u003ccode\u003eweight2\u003c/code\u003e strategy could return false denies when contextual tuples were present, because their concatenation with datastore results violated the sort assumption of the pruning optimization. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3145\"\u003e#3145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.50\u003c/code\u003e to address multiple CVEs in the go std lib. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3146\"\u003e#3146\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.0] - 2026-05-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/81089a31698505b4d5f01311c04e83b9adfcf383\"\u003e\u003ccode\u003e81089a3\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.18.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3174\"\u003e#3174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/44596773b2e62738720ef215bf7fa04352954271\"\u003e\u003ccode\u003e4459677\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/a2e0dbefc3e01a95c785f81a3563bc6571b08b11\"\u003e\u003ccode\u003ea2e0dbe\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/0c759472cb1918632b67170cf6ecdb3a409a1029\"\u003e\u003ccode\u003e0c75947\u003c/code\u003e\u003c/a\u003e fix: use constant-time comparison for preshared key authentication (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3168\"\u003e#3168\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/7a356c9f5d57f08dabe0cfaf17a82c830840ea13\"\u003e\u003ccode\u003e7a356c9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3166\"\u003e#3166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/9ac791ff458dd04ba05b6c9a97200830369101f2\"\u003e\u003ccode\u003e9ac791f\u003c/code\u003e\u003c/a\u003e chore(deps): bump the dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3167\"\u003e#3167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/393db3f903b923a0414c96145012e527af700685\"\u003e\u003ccode\u003e393db3f\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.17.1\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3165\"\u003e#3165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/ec685d0d02d992c292feaa3ba7d7fcedc705db71\"\u003e\u003ccode\u003eec685d0\u003c/code\u003e\u003c/a\u003e chore: bump grpc-health-probe to v0.4.52 (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3164\"\u003e#3164\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c4523743b28f69d4dd62382614d32aada3485095\"\u003e\u003ccode\u003ec452374\u003c/code\u003e\u003c/a\u003e docs: update caching docs (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3163\"\u003e#3163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/4f00251a719bb2451cefedf4e31fc3afc728b32f\"\u003e\u003ccode\u003e4f00251\u003c/code\u003e\u003c/a\u003e fix: continuation token deserializer - handle \u003ccode\u003e|\u003c/code\u003e in type names (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3152\"\u003e#3152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.8.13...v1.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to...\n\n_Description has been truncated_","html_url":"https://github.com/OneFineStarstuff/grafana/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OneFineStarstuff%2Fgrafana/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"},{"uuid":"4772692149","node_id":"PR_kwDOSIBbIM7sA4uQ","number":18,"state":"open","title":"chore(deps): bump the go-dependencies group across 1 directory with 16 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-30T00:48:45.000Z","updated_at":"2026-06-30T00:48:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-dependencies","update_count":16,"packages":[{"name":"github.com/dgraph-io/badger/v4","old_version":"4.9.1","new_version":"4.9.2","repository_url":"https://github.com/dgraph-io/badger"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/nats-io/nats-server/v2","old_version":"2.12.8","new_version":"2.14.2","repository_url":"https://github.com/nats-io/nats-server"},{"name":"github.com/nats-io/nats.go","old_version":"1.51.0","new_version":"1.52.0","repository_url":"https://github.com/nats-io/nats.go"},{"name":"go.mongodb.org/mongo-driver/v2","old_version":"2.5.0","new_version":"2.7.0","repository_url":"https://github.com/mongodb/mongo-go-driver"},{"name":"google.golang.org/grpc","old_version":"1.80.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"modernc.org/sqlite","old_version":"1.46.1","new_version":"1.53.0"},{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.7","new_version":"1.42.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.17","new_version":"1.32.25","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/sqs","old_version":"1.42.27","new_version":"1.44.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/rabbitmq/amqp091-go","old_version":"1.11.0","new_version":"1.12.0","repository_url":"https://github.com/rabbitmq/amqp091-go"},{"name":"github.com/spf13/pflag","old_version":"1.0.9","new_version":"1.0.10","repository_url":"https://github.com/spf13/pflag"},{"name":"github.com/twmb/franz-go","old_version":"1.21.1","new_version":"1.21.3","repository_url":"https://github.com/twmb/franz-go"},{"name":"golang.org/x/sync","old_version":"0.20.0","new_version":"0.21.0","repository_url":"https://github.com/golang/sync"},{"name":"google.golang.org/api","old_version":"0.274.0","new_version":"0.286.0","repository_url":"https://github.com/googleapis/google-api-go-client"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-dependencies group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger) | `4.9.1` | `4.9.2` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.12.8` | `2.14.2` |\n| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.51.0` | `1.52.0` |\n| [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver) | `2.5.0` | `2.7.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.1` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.46.1` | `1.53.0` |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.42.0` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.25` |\n| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.42.27` | `1.44.0` |\n| [github.com/rabbitmq/amqp091-go](https://github.com/rabbitmq/amqp091-go) | `1.11.0` | `1.12.0` |\n| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.9` | `1.0.10` |\n| [github.com/twmb/franz-go](https://github.com/twmb/franz-go) | `1.21.1` | `1.21.3` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.274.0` | `0.286.0` |\n\n\nUpdates `github.com/dgraph-io/badger/v4` from 4.9.1 to 4.9.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dgraph-io/badger/releases\"\u003egithub.com/dgraph-io/badger/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.9.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(core): remove unused event log by \u003ca href=\"https://github.com/xqqp\"\u003e\u003ccode\u003e@​xqqp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2257\"\u003edgraph-io/badger#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cd): upload build artifacts to GitHub Release by \u003ca href=\"https://github.com/matthewmcneely\"\u003e\u003ccode\u003e@​matthewmcneely\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2273\"\u003edgraph-io/badger#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Prevent NPE on sync with inmemory DB by \u003ca href=\"https://github.com/alpe\"\u003e\u003ccode\u003e@​alpe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2264\"\u003edgraph-io/badger#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip lsm lookup for expired entries during value log rewrite by \u003ca href=\"https://github.com/lamb007\"\u003e\u003ccode\u003e@​lamb007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2269\"\u003edgraph-io/badger#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update jemalloc to 5.3.1 by \u003ca href=\"https://github.com/solracsf\"\u003e\u003ccode\u003e@​solracsf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2275\"\u003edgraph-io/badger#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix : read only user should be able to open db on ReadOnly mode  by \u003ca href=\"https://github.com/Naelpuissant\"\u003e\u003ccode\u003e@​Naelpuissant\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2268\"\u003edgraph-io/badger#2268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compaction): clamp baseLevel to \u0026gt;=1 to prevent L0-\u0026gt;L0 panic on la… by \u003ca href=\"https://github.com/shiva-istari\"\u003e\u003ccode\u003e@​shiva-istari\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2296\"\u003edgraph-io/badger#2296\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xqqp\"\u003e\u003ccode\u003e@​xqqp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2257\"\u003edgraph-io/badger#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alpe\"\u003e\u003ccode\u003e@​alpe\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2264\"\u003edgraph-io/badger#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lamb007\"\u003e\u003ccode\u003e@​lamb007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2269\"\u003edgraph-io/badger#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Naelpuissant\"\u003e\u003ccode\u003e@​Naelpuissant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2268\"\u003edgraph-io/badger#2268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/shiva-istari\"\u003e\u003ccode\u003e@​shiva-istari\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2296\"\u003edgraph-io/badger#2296\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/dgraph-io/badger/compare/v4.9.1...v4.9.2\"\u003ehttps://github.com/dgraph-io/badger/compare/v4.9.1...v4.9.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dgraph-io/badger/blob/main/CHANGELOG.md\"\u003egithub.com/dgraph-io/badger/v4's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cp\u003eAll notable changes to this project will be documented in this file.\u003c/p\u003e\n\u003cp\u003eThe format is based on \u003ca href=\"http://keepachangelog.com/en/1.0.0/\"\u003eKeep a Changelog\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/284cea00ccee8618d23f5e60246c4a40fd5e4bb1\"\u003e\u003ccode\u003e284cea0\u003c/code\u003e\u003c/a\u003e fix(compaction): clamp baseLevel to \u0026gt;=1 to prevent L0-\u0026gt;L0 panic on la… (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2296\"\u003e#2296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/897f12fdb4631a9bf2aea347bde0a93d930d3001\"\u003e\u003ccode\u003e897f12f\u003c/code\u003e\u003c/a\u003e fix : read only user should be able to open db on ReadOnly mode  (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2268\"\u003e#2268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/ca9e10bb8f10ca60cb047a946bf381a7039ce53d\"\u003e\u003ccode\u003eca9e10b\u003c/code\u003e\u003c/a\u003e enh: compile with jemalloc 5.3.1 (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2275\"\u003e#2275\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/7427d56925199bf23827e6f08d1c1ad119b1b4fc\"\u003e\u003ccode\u003e7427d56\u003c/code\u003e\u003c/a\u003e perf: skip lsm lookup for expired entries during value log rewrite (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2269\"\u003e#2269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/773a8356d9074cd0d56f5f80d773236c88aca494\"\u003e\u003ccode\u003e773a835\u003c/code\u003e\u003c/a\u003e fix: Prevent NPE on sync with inmemory DB (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2264\"\u003e#2264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/abbb9a574e03c36e13f5f0fa62c74504c5e9ee05\"\u003e\u003ccode\u003eabbb9a5\u003c/code\u003e\u003c/a\u003e fix(cd): upload build artifacts to GitHub Release (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2273\"\u003e#2273\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/796cb85f662c06cb4660f0143af176ca7cf1a857\"\u003e\u003ccode\u003e796cb85\u003c/code\u003e\u003c/a\u003e chore(core): remove unused event log (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2257\"\u003e#2257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/dgraph-io/badger/compare/v4.9.1...v4.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/nats-io/nats-server/v2` from 2.12.8 to 2.14.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nats-io/nats-server/releases\"\u003egithub.com/nats-io/nats-server/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v2.14.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cp\u003eRefer to the \u003ca href=\"https://docs.nats.io/release-notes/whats_new/whats_new_214\"\u003e2.14 Upgrade Guide\u003c/a\u003e for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.\u003c/p\u003e\n\u003ch3\u003eGo Version\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1.26.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egolang.org/x/crypto v0.52.0\u003c/li\u003e\n\u003cli\u003egolang.org/x/sys v0.45.0\u003c/li\u003e\n\u003cli\u003egithub.com/nats-io/jwt/v2 v2.8.2\u003c/li\u003e\n\u003cli\u003egithub.com/nats-io/nkeys v0.4.16\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImproved\u003c/h3\u003e\n\u003cp\u003eGeneral\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe client ID is now available through the embedded \u003ccode\u003eClientAuthentication\u003c/code\u003e API (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cp\u003eGeneral\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eA race condition when handling subscription interest over routes has been fixed (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8235\"\u003e#8235\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePotential protocol-level corruption from rewriting \u003ccode\u003e$JS.ACK\u003c/code\u003e subjects has been fixed (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8242\"\u003e#8242\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePotential protocol-level corruption from buffer misuse in compressed WebSocket clients has been fixed (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8244\"\u003e#8244\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003e/accstatz\u003c/code\u003e monitoring endpoint no longer omits accounts with only leaf connections (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8252\"\u003e#8252\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eJetStream\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a case where Raft peers were not correctly tracked after an inactivity stall during catchup (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8226\"\u003e#8226\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eQuorum needed is now calculated correctly when bootstrapping the metalayer when gateway URLs resolve to multiple IP addresses (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8238\"\u003e#8238\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe filestore no longer performs a block skip check on streams with extremely high subject counts, as it could result in runaway CPU usage (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8227\"\u003e#8227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed a case where the filestore would not release a lock after handling a write error (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8232\"\u003e#8232\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePurge operations on both file and memory stores are now more consistent with each other (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8241\"\u003e#8241\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed a case where the consumer lock would not release a lock after handling a start sequence error (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8230\"\u003e#8230\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCounter streams and message schedules now have configuration constraints applied to prevent incorrect usage patterns (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8240\"\u003e#8240\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImproved stream and consumer scale down behaviour consistency (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8253\"\u003e#8253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed an issue where the per-subject state last block was not stored correctly with a max messages per subject limit of 1 (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8254\"\u003e#8254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed a drift that could occur in the peer sets after a peer remove of an online node (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8258\"\u003e#8258\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eComplete Changes\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nats-io/nats-server/compare/v2.14.1...v2.14.2\"\u003ehttps://github.com/nats-io/nats-server/compare/v2.14.1...v2.14.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v2.14.2-RC.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/1d065926bb99ed14ebe9cf6a21529d28310fc8d3\"\u003e\u003ccode\u003e1d06592\u003c/code\u003e\u003c/a\u003e Release v2.14.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/4e1aefa11412f699f6e31549ea215389824d4c07\"\u003e\u003ccode\u003e4e1aefa\u003c/code\u003e\u003c/a\u003e Cherry-picks for v2.14.2 (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8256\"\u003e#8256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/ac092ff7c60aa4a0fa3f466198aa89d58bd15f47\"\u003e\u003ccode\u003eac092ff\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/01e589d49a512276adfa9f60699560c5be63bfd5\"\u003e\u003ccode\u003e01e589d\u003c/code\u003e\u003c/a\u003e [FIXED] Peer set desync/re-add after stream peer-remove\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/3d122e82432917c2e4395523a33e929cc71ec5ca\"\u003e\u003ccode\u003e3d122e8\u003c/code\u003e\u003c/a\u003e De-flake TestJetStreamConsumerPrioritized\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/3836d96692a7b9d1405ea404161e6a7f48ba3115\"\u003e\u003ccode\u003e3836d96\u003c/code\u003e\u003c/a\u003e [FIXED] Initial MaxMsgsPerSubject update not enforced\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/92cf2e314fe7ef38f3ac6223f874efa0f58819e0\"\u003e\u003ccode\u003e92cf2e3\u003c/code\u003e\u003c/a\u003e [FIXED] Filestore only stores last block when MaxMsgsPerSubject 1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/3288b4fe279b6f689dc985758add443acb9095db\"\u003e\u003ccode\u003e3288b4f\u003c/code\u003e\u003c/a\u003e (2.14) [IMPROVED] Remove redundant error check in filestore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/6ea46d54029a662ae3545da70b01c32976f6cdbc\"\u003e\u003ccode\u003e6ea46d5\u003c/code\u003e\u003c/a\u003e [FIXED] Stream and consumer scale down consistency\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/5edd91c01a32945e1a4837a104c59114972c9bfb\"\u003e\u003ccode\u003e5edd91c\u003c/code\u003e\u003c/a\u003e [FIXED] AccountStatz omits accounts with only leaf connections\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nats-io/nats-server/compare/v2.12.8...v2.14.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/nats-io/nats.go` from 1.51.0 to 1.52.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nats-io/nats.go/releases\"\u003egithub.com/nats-io/nats.go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.52.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cp\u003eThis release focuses on 2.14 nats-server features support.\u003c/p\u003e\n\u003ch3\u003eADDED\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJetStream:\n\u003cul\u003e\n\u003cli\u003eAdded fast batch stream config field (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2052\"\u003e#2052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded message scheduling headers and publish opts (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2051\"\u003e#2051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003eStreamConfig\u003c/code\u003e with \u003ccode\u003eConsumer\u003c/code\u003e field and added \u003ccode\u003eAckFlowControlPolicy\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2070\"\u003e#2070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded reset consumer API (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2069\"\u003e#2069\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFIXED\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCore NATS:\n\u003cul\u003e\n\u003cli\u003eFix Subscription.StatusChanged channel closure on Closed Subscription. Thanks \u003ca href=\"https://github.com/nithimani38-prog\"\u003e\u003ccode\u003e@​nithimani38-prog\u003c/code\u003e\u003c/a\u003e for the contribution (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2034\"\u003e#2034\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eIMPROVED\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Flaky JS cluster tests (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2062\"\u003e#2062\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eComplete Changes\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nats-io/nats.go/compare/v1.51.0...v1.52.0\"\u003ehttps://github.com/nats-io/nats.go/compare/v1.51.0...v1.52.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/e9f2a36e31b1065f69b252ea090c01e8869eab0b\"\u003e\u003ccode\u003ee9f2a36\u003c/code\u003e\u003c/a\u003e Release v1.52.0 (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2074\"\u003e#2074\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/609274f8c57b65c9d11b01b008b0e40fadfc9d5b\"\u003e\u003ccode\u003e609274f\u003c/code\u003e\u003c/a\u003e [FIXED] Subscription.StatusChanged channel closure on Closed Subscription (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/f7cde748abc86c2981cb1391ca828fceea02af66\"\u003e\u003ccode\u003ef7cde74\u003c/code\u003e\u003c/a\u003e [IMPROVED] Use latest release build for badge in README (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2064\"\u003e#2064\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/c7476ea556818d561945e78863adab422f00de03\"\u003e\u003ccode\u003ec7476ea\u003c/code\u003e\u003c/a\u003e [IMPROVED] Reject empty consumer info in CONSUMER.RESET response (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2072\"\u003e#2072\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/8fde36fd10a34224e22f4f8a8ad1f61ecaedd18f\"\u003e\u003ccode\u003e8fde36f\u003c/code\u003e\u003c/a\u003e [ADDED] ResetConsumer JetStream API (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2069\"\u003e#2069\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/dcfd0fcc6f63c4a2e4436e5aa3ecd4e1dcc598df\"\u003e\u003ccode\u003edcfd0fc\u003c/code\u003e\u003c/a\u003e [ADDED] StreamSource.Consumer config field and AckFlowControlPolicy (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2070\"\u003e#2070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/7a28503b5d5d633d2caaa2639571e5f19c8eebec\"\u003e\u003ccode\u003e7a28503\u003c/code\u003e\u003c/a\u003e [ADDED] Publish options and consts for message scheduling (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2051\"\u003e#2051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/6c91a518e305e56c6481cf63ba52416300b7f5d3\"\u003e\u003ccode\u003e6c91a51\u003c/code\u003e\u003c/a\u003e [ADDED] AllowBatchPublish stream config field (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2052\"\u003e#2052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/a614d0be24c7e9a22a406572bee44d897cff27c3\"\u003e\u003ccode\u003ea614d0b\u003c/code\u003e\u003c/a\u003e [FIXED] Flaky JS cluster tests due to race in setupJSClusterWithSize (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2062\"\u003e#2062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nats-io/nats.go/compare/v1.51.0...v1.52.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver/v2` from 2.5.0 to 2.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 2.7.0\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 2.7.0 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release adds support for sending afterClusterTime on writes in causally consistent sessions, improving alignment between read and write behavior in session-based workflows. It also continues cleanup of session-related and internal-only APIs by deprecating the experimental session API, helping clarify which surfaces are intended for long-term public use. Alongside that, the release includes a handful of targeted quality improvements across BSON validation, change streams, and error reporting to make the driver more predictable and easier to debug.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e✨ New Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3921 retro backpressure cleanup by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2394\"\u003emongodb/mongo-go-driver#2394\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3912 Add prose test for database.ListCollection routing by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2390\"\u003emongodb/mongo-go-driver#2390\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3874 Send afterClusterTime on writes in causally-consistent sessions by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2412\"\u003emongodb/mongo-go-driver#2412\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3957 Fix long lines in bson/decoder_example_test.go and expand check-fmt to cover both *_example_test.go and *_examples_test.go files by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2428\"\u003emongodb/mongo-go-driver#2428\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3962 fix: change stream set batch size nil cursor by \u003ca href=\"https://github.com/zigzagdev\"\u003e\u003ccode\u003e@​zigzagdev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2424\"\u003emongodb/mongo-go-driver#2424\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3965 fix: misleading error message type info in rewrap function by \u003ca href=\"https://github.com/zigzagdev\"\u003e\u003ccode\u003e@​zigzagdev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2430\"\u003emongodb/mongo-go-driver#2430\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3862: Collection.Clone propegates BSONOptions by \u003ca href=\"https://github.com/softprops\"\u003e\u003ccode\u003e@​softprops\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2364\"\u003emongodb/mongo-go-driver#2364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3858 Split write batches by wire-message size, not document payload (Merge up from release/2.6). by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2397\"\u003emongodb/mongo-go-driver#2397\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3931 Fix bson.Raw.Validate panic on zero-length BSON document by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2418\"\u003emongodb/mongo-go-driver#2418\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3832: Fix mongo.ErrorCodes() with ClientBulkWriteException by \u003ca href=\"https://github.com/FGasper\"\u003e\u003ccode\u003e@​FGasper\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2420\"\u003emongodb/mongo-go-driver#2420\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3960 fix: format Arguments swapping by \u003ca href=\"https://github.com/zigzagdev\"\u003e\u003ccode\u003e@​zigzagdev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2423\"\u003emongodb/mongo-go-driver#2423\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3838 Update comments on SetLimit(). by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2372\"\u003emongodb/mongo-go-driver#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3871 Make files in \u0026quot;examples\u0026quot; runnable. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2381\"\u003emongodb/mongo-go-driver#2381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3880 Skip QE \u0026quot;prefixPreview\u0026quot; and \u0026quot;suffixPreview\u0026quot; tests on server 9.0.0+. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2378\"\u003emongodb/mongo-go-driver#2378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3917 Replace curl | sh with go install in etc/golangci-lint.sh by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2391\"\u003emongodb/mongo-go-driver#2391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3829 Cleanup skip list. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2392\"\u003emongodb/mongo-go-driver#2392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3884 Use gpg verification for libmongocrypt windows build variant by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2404\"\u003emongodb/mongo-go-driver#2404\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3868 Update extended bson cases. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2400\"\u003emongodb/mongo-go-driver#2400\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3623 Deprecate AggregateOptions Custom functionality as internal-only. by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2411\"\u003emongodb/mongo-go-driver#2411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove the 2125 skips to standalone container by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2421\"\u003emongodb/mongo-go-driver#2421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3904 Add QE string prefix/suffix/substring case and diacritic insensitive prose tests by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2415\"\u003emongodb/mongo-go-driver#2415\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3937 Deprecate x/mongo/driver/session package. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2416\"\u003emongodb/mongo-go-driver#2416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3936 Migrate check_fmt.sh to a Go script under internal/cmd/check-fmt by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2414\"\u003emongodb/mongo-go-driver#2414\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3726 Use unmarshaling for AutoEncryptOpts in the unified spec test by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2413\"\u003emongodb/mongo-go-driver#2413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake capitalization of MongoDB Go Driver consistent in the README. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2422\"\u003emongodb/mongo-go-driver#2422\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3113 Skip flaky test in commit.json. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2435\"\u003emongodb/mongo-go-driver#2435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3559 Skip Docker Runner Tests by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2432\"\u003emongodb/mongo-go-driver#2432\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/softprops\"\u003e\u003ccode\u003e@​softprops\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2364\"\u003emongodb/mongo-go-driver#2364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2411\"\u003emongodb/mongo-go-driver#2411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zigzagdev\"\u003e\u003ccode\u003e@​zigzagdev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2423\"\u003emongodb/mongo-go-driver#2423\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v2.6.2...v2.7.0\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v2.6.2...v2.7.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D2.7.0\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/7d61ab3563603dd35ba3e0eab2ee0ce544a83dd7\"\u003e\u003ccode\u003e7d61ab3\u003c/code\u003e\u003c/a\u003e BUMP v2.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/d9593db35f17bfb724d5b74436434afcb50f391c\"\u003e\u003ccode\u003ed9593db\u003c/code\u003e\u003c/a\u003e GODRIVER-3559 Skip Docker Runner Tests (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2432\"\u003e#2432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6d0f68db630c49d96d09501f9cfa76a64c820241\"\u003e\u003ccode\u003e6d0f68d\u003c/code\u003e\u003c/a\u003e Merge release/2.6 into master (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2437\"\u003e#2437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/0ff564fdfe1da0829b19a6bc8b1661f63475e814\"\u003e\u003ccode\u003e0ff564f\u003c/code\u003e\u003c/a\u003e Merge branch 'release/2.6'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/867c9b5127c2135ea8b6d8fb7db1814d7ccd8e1e\"\u003e\u003ccode\u003e867c9b5\u003c/code\u003e\u003c/a\u003e BUMP v2.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/5b9065941002a19d89557901373c6c9b7db7c95a\"\u003e\u003ccode\u003e5b90659\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into merge-release/2.6-into-master-1781722303033\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/797c020f0833e2213a9b996c87181c19a52c0283\"\u003e\u003ccode\u003e797c020\u003c/code\u003e\u003c/a\u003e GODRIVER-3964: Skip CSE prose tests requiring contention (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2431\"\u003e#2431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/283aa8ba8ed67be5bfb2c8d6723f06db9e7f604c\"\u003e\u003ccode\u003e283aa8b\u003c/code\u003e\u003c/a\u003e GODRIVER-3113 Skip flaky test in commit.json. (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2435\"\u003e#2435\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/1803b12a7304f1944d84c70531b13e9b348c9627\"\u003e\u003ccode\u003e1803b12\u003c/code\u003e\u003c/a\u003e GODRIVER-3965 fix: misleading error message type info in rewrap function (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2430\"\u003e#2430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/2995aaf600491c1c11df54263239517b9dc22724\"\u003e\u003ccode\u003e2995aaf\u003c/code\u003e\u003c/a\u003e GODRIVER-3906 Exclude tls.RecordHeaderError from backpressure labels  (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2417\"\u003e#2417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v2.5.0...v2.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.80.0 to 1.81.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.81.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per \u003ca href=\"https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md\"\u003egRFC A41\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/al4an444\"\u003e\u003ccode\u003e@​al4an444\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eotel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.81.0\u003c/h2\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8808\"\u003e#8808\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eDependencies\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eMinimum supported Go version is now 1.25. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8969\"\u003e#8969\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8956\"\u003e#8956\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Send a \u003ccode\u003eRST_STREAM\u003c/code\u003e when receiving an \u003ccode\u003eEND_STREAM\u003c/code\u003e when the stream is not already half-closed. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8832\"\u003e#8832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Fix ADS resource name validation to prevent a panic. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8970\"\u003e#8970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc/stats: Add support for custom labels in per-call metrics (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A108-otel-custom-per-call-label.md\"\u003egRFC A108\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9008\"\u003e#9008\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support for Server Name Indication (SNI) and SAN validation (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A101-SNI-setting-and-SNI-SAN-validation.md\"\u003egRFC A101\u003c/a\u003e). Disabled by default. To enable, set \u003ccode\u003eGRPC_EXPERIMENTAL_XDS_SNI=true\u003c/code\u003e environment variable. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9016\"\u003e#9016\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A85-lrs-custom-metrics-changes.md\"\u003egRFC A85\u003c/a\u003e). Disabled by default. To enable, set \u003ccode\u003eGRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9005\"\u003e#9005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add metrics to track xDS client connectivity and cached resource state (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md\"\u003egRFC A78\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8807\"\u003e#8807\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estats/otel: Enhance \u003ccode\u003egrpc.subchannel.disconnections\u003c/code\u003e metric by adding disconnection reason to the \u003ccode\u003egrpc.disconnect_error\u003c/code\u003e label (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A94-subchannel-otel-metrics.md\"\u003egRFC A94\u003c/a\u003e). This provides granular insights into why subchannels are closing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8973\"\u003e#8973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Add \u003ccode\u003emem.Buffer.Slice()\u003c/code\u003e API to slice the buffer like a slice. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8977\"\u003e#8977\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/ash2k\"\u003e\u003ccode\u003e@​ash2k\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ealts: Pool read buffers to lower memory utilization when sockets are unreadable. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8964\"\u003e#8964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set \u003ccode\u003eGRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false\u003c/code\u003e and report any issues. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9032\"\u003e#9032\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8\"\u003e\u003ccode\u003ecaf0772\u003c/code\u003e\u003c/a\u003e Change version from 1.81.1-dev to 1.81.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9122\"\u003e#9122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215\"\u003e\u003ccode\u003e6ccbeeb\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9121\"\u003e#9121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29\"\u003e\u003ccode\u003eb33c29e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9102\"\u003e#9102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834\"\u003e\u003ccode\u003ec45fae6\u003c/code\u003e\u003c/a\u003e Change version to 1.81.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9063\"\u003e#9063\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/cb18228317ff523e63d931b4058b0329585b7dcd\"\u003e\u003ccode\u003ecb18228\u003c/code\u003e\u003c/a\u003e Change version to 1.81.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9062\"\u003e#9062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/96748f973e20bbfcafa19a8bdffc85ad5da138d1\"\u003e\u003ccode\u003e96748f9\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9105\"\u003e#9105\u003c/a\u003e to 1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9106\"\u003e#9106\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/91832222f0144f76527b630ca55cfea6e1aa015a\"\u003e\u003ccode\u003e9183222\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9055\"\u003e#9055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9032\"\u003e#9032\u003c/a\u003e to v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9095\"\u003e#9095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/5cba6da4211f3b130238c792937f5921741b616a\"\u003e\u003ccode\u003e5cba6da\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;deps: update dependencies for all modules (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9065\"\u003e#9065\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9067\"\u003e#9067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/af8a9364aa7523ab24d214e9ef13e6ad64d5c5f9\"\u003e\u003ccode\u003eaf8a936\u003c/code\u003e\u003c/a\u003e deps: update dependencies for all modules (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9065\"\u003e#9065\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/cdc60dfaaadde45e16aa3c28237c0e655a722c1a\"\u003e\u003ccode\u003ecdc60df\u003c/code\u003e\u003c/a\u003e transport: optimize heap allocations in ready reader and update syscall conne...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `modernc.org/sqlite` from 1.46.1 to 1.53.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-25 v1.54.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUnder the opt-in \u003ccode\u003e_texttotime\u003c/code\u003e DSN parameter, best-effort parse date-shaped TEXT values from columns SQLite reports with an empty declared type — aggregates and expressions over a date column (\u003ccode\u003eMAX(d)\u003c/code\u003e, \u003ccode\u003eCOALESCE(d, ...)\u003c/code\u003e, \u003ccode\u003eupper(d)\u003c/code\u003e, \u003ccode\u003ed || ''\u003c/code\u003e), subqueries, and typeless real columns (\u003ccode\u003eCREATE TABLE t(x)\u003c/code\u003e) — into \u003ccode\u003etime.Time\u003c/code\u003e, instead of delivering them as a raw string that \u003ccode\u003eScan\u003c/code\u003e cannot store into a \u003ccode\u003e*time.Time\u003c/code\u003e. The existing declared \u003ccode\u003eDATE\u003c/code\u003e/\u003ccode\u003eDATETIME\u003c/code\u003e/\u003ccode\u003eTIME\u003c/code\u003e/\u003ccode\u003eTIMESTAMP\u003c/code\u003e path is unchanged; this only adds the empty-decltype case. The conversion is strictly best-effort: a value that does not parse as a time falls through to the original string, so no \u003ccode\u003eScan\u003c/code\u003e that worked before can newly fail. \u003ccode\u003eColumnTypeScanType\u003c/code\u003e continues to report \u003ccode\u003estring\u003c/code\u003e for empty-decltype columns, since the declared type cannot prove the column is temporal. Without \u003ccode\u003e_texttotime\u003c/code\u003e the behavior is byte-for-byte unchanged. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/248\"\u003e#248\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/248\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/248\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/133\"\u003e#133\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/133\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/133\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-21 v1.53.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003enetbsd/amd64\u003c/code\u003e support, resolving the long-standing build break in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/246\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/246\u003c/a\u003e). This target is intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: the port had been broken for years and is only now revived, and there is as yet no real-world experience running it under production workloads. Green CI is not the same as battle-tested — so while the full test suite (including the \u003ccode\u003epcache\u003c/code\u003e and \u003ccode\u003evec\u003c/code\u003e packages and the \u003ccode\u003e-race\u003c/code\u003e concurrency test) passes on NetBSD 10.1 / Go 1.26.3, and the entire upstream toolchain (\u003ccode\u003elibc\u003c/code\u003e, \u003ccode\u003ecc\u003c/code\u003e, \u003ccode\u003eccgo\u003c/code\u003e, \u003ccode\u003elibz\u003c/code\u003e, \u003ccode\u003elibtcl8.6\u003c/code\u003e, \u003ccode\u003elibsqlite3\u003c/code\u003e, \u003ccode\u003elibsqlite_vec\u003c/code\u003e) is green on the NetBSD CI builder, the target is offered for evaluation only. If you run NetBSD, please exercise it with your own workloads and report back via \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e; the intent is to promote it to a fully supported platform after a period of broader real-world testing (on the order of a month) elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: the previously shipped \u003ccode\u003elib/sqlite_netbsd_amd64.go\u003c/code\u003e was a stale old-generator transpile that no longer compiled (the \u003ccode\u003emu.enter\u003c/code\u003e/\u003ccode\u003emu.leave\u003c/code\u003e break in \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e); it is replaced by a fresh new-generator transpile consistent with every other platform, and \u003ccode\u003emodernc.org/sqlite/vec\u003c/code\u003e (sqlite-vec) is vendored and auto-registers on netbsd. Correct operation requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e, which carries two NetBSD-specific fixes found during this work: the \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003ePAD\u003c/code\u003e-argument ABI (without it, concurrent WAL access faults with SIGBUS in the WAL-index shared memory) and a working \u003ccode\u003eabort(3)\u003c/code\u003e (the prior stub left SQLite's crash-recovery \u003ccode\u003ewritecrash\u003c/code\u003e test unable to terminate by signal). As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/82\"\u003e#82\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/82\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/82\u003c/a\u003e), thanks Leonardo Taccari (\u003ca href=\"https://github.com/iamleot\"\u003e\u003ccode\u003e@​iamleot\u003c/code\u003e\u003c/a\u003e) and Thomas Klausner (@\u003cem\u003ewiz\u003c/em\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003efreebsd/386\u003c/code\u003e and \u003ccode\u003efreebsd/arm\u003c/code\u003e support. As with the \u003ccode\u003enetbsd/amd64\u003c/code\u003e target above, these two 32-bit FreeBSD ports are intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: \u003ccode\u003efreebsd/386\u003c/code\u003e previously shipped a stale, effectively untested SQLite 3.41 transpile, and \u003ccode\u003efreebsd/arm\u003c/code\u003e is entirely new, so neither has real-world production mileage yet. Both are now freshly transpiled at SQLite 3.53.2 consistent with every other platform, build cleanly, and pass the full test suite (core, WAL/concurrency, and the \u003ccode\u003evec\u003c/code\u003e package) on the FreeBSD CI builders; they are offered for evaluation only. If you run 32-bit FreeBSD, please exercise these targets with your own workloads and report back — the intent is to promote \u003ccode\u003efreebsd/386\u003c/code\u003e, \u003ccode\u003efreebsd/arm\u003c/code\u003e, and \u003ccode\u003enetbsd/amd64\u003c/code\u003e to fully supported platforms in a future release cycle, once a period of broader real-world testing elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: correct operation on \u003ccode\u003efreebsd/arm\u003c/code\u003e requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e (v1.73.4), which fixes the per-arch \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003eoff_t\u003c/code\u003e encoding for 32-bit FreeBSD; without it the WAL shared-memory mapping faults with SIGBUS under concurrent access, the same class of bug found on the netbsd port. As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/119\"\u003e#119\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/119\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/119\u003c/a\u003e), thanks Olivier Cochard-Labbé (\u003ca href=\"https://github.com/ocochard\"\u003e\u003ccode\u003e@​ocochard\u003c/code\u003e\u003c/a\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd a Go-facing wrapper for \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e. \u003ccode\u003ePageCache\u003c/code\u003e is the factory and \u003ccode\u003eCache\u003c/code\u003e the per-database instance, both idiomatic Go interfaces; \u003ccode\u003ePage\u003c/code\u003e exposes the raw \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e pointers that SQLite reads through the C pcache contract. \u003ccode\u003eRegisterPageCache\u003c/code\u003e and \u003ccode\u003eMustRegisterPageCache\u003c/code\u003e install the module process-globally before the first \u003ccode\u003esql.Open\u003c/code\u003e; subsequent Open calls are gated through a one-shot \u003ccode\u003eXsqlite3_config(SQLITE_CONFIG_PCACHE2)\u003c/code\u003e so a too-late Register returns \u003ccode\u003eErrPageCacheTooLate\u003c/code\u003e rather than silently falling through to the built-in pcache1. The binding owns the \u003ccode\u003esqlite3_pcache_page\u003c/code\u003e stub and re-consults the implementation on every Fetch, reusing the stub only when the returned \u003ccode\u003ePage\u003c/code\u003e value is unchanged, which keeps a bounded/evicting purgeable cache safe by construction.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/126\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/126\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e, the reference page-cache implementation that accompanies the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e wrapper. \u003ccode\u003epcache.New\u003c/code\u003e returns a \u003ccode\u003e*Pool\u003c/code\u003e satisfying the \u003ccode\u003ePageCache\u003c/code\u003e interface; register it once with \u003ccode\u003esqlite.MustRegisterPageCache(pcache.New())\u003c/code\u003e and every connection opened afterwards draws its pages from it. Each \u003ccode\u003ePool.Create\u003c/code\u003e mints a fresh per-database \u003ccode\u003eCache\u003c/code\u003e: a bounded, LRU-evicting page store that honours the \u003ccode\u003ePRAGMA cache_size\u003c/code\u003e soft cap and releases the least-recently-unpinned page when it must make room. Page memory — the \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e buffers SQLite reads through — is allocated with \u003ccode\u003elibc.Xmalloc\u003c/code\u003e/\u003ccode\u003elibc.Xcalloc\u003c/code\u003e and therefore lives off the Go heap, which keeps SQLite's interior pointer arithmetic on the page extras from tripping the race detector's checkptr enforcement. \u003ccode\u003ePool.Stats\u003c/code\u003e reports aggregate lifetime counters (hits, misses, allocs, evictions, rekeys, truncates, caches) across every cache a Pool has created, so hit/miss/eviction behaviour is observable without instrumenting individual caches. Cross-connection page sharing is out of scope for now; each \u003ccode\u003eCreate\u003c/code\u003e returns an independent per-database cache.\u003c/li\u003e\n\u003cli\u003eValidated end-to-end against the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e stress workload (\u003ccode\u003ecache_size=16\u003c/code\u003e, 4000 BLOB rows with DELETE and \u003ccode\u003eincremental_vacuum\u003c/code\u003e, \u003ccode\u003eintegrity_check\u003c/code\u003e clean under \u003ccode\u003e-race\u003c/code\u003e) and benchmarked for the memory-utilization goal tracked in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/204\"\u003e#204\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/204\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/204\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/127\"\u003e#127\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/127\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/127\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eTighten the \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e reference implementation per cznic's !127 review follow-ups. Adds \u003ccode\u003eStats.EasyRefusals\u003c/code\u003e, a per-Pool counter for the cases where \u003ccode\u003eFetchCreateEasy\u003c/code\u003e returns nil at cap; SQLite reacts to a refusal by spilling dirty pages and retrying with \u003ccode\u003eFetchCreateForce\u003c/code\u003e, so the new field is a direct proxy for the I/O pressure the strict Easy contract imposes vs pcache1's recycle-without-spill behavior. \u003ccode\u003eBenchmarkPoolEvictionChurn\u003c/code\u003e was reworked to drive a rotating-residue DELETE (\u003ccode\u003ek % 3 = i % 3\u003c/code\u003e) and re-insert a matching batch each cycle so the spill pressure recurs and \u003ccode\u003eeasy-refusals/op\u003c/code\u003e scales with \u003ccode\u003eb.N\u003c/code\u003e instead of capping at the seed's one-time first-cycle cost; both existing benchmarks now report \u003ccode\u003eeasy-refusals/op\u003c/code\u003e alongside the page-allocs/evictions metrics. \u003ccode\u003eStats.Evictions\u003c/code\u003e documentation was tightened to match the actual behavior (counts LRU eviction, \u003ccode\u003eUnpin(discard=true)\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e releases, and \u003ccode\u003eUnpin(discard=false)\u003c/code\u003e trimming back to target after a \u003ccode\u003eFetchCreateForce\u003c/code\u003e overcommit; bulk frees from \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e collisions, and \u003ccode\u003eDestroy\u003c/code\u003e are not counted). The \u003ccode\u003eTestPoolRoundTripIntegrity\u003c/code\u003e comment claiming the workload exercises \u003ccode\u003exRekey\u003c/code\u003e ~15 times has been corrected; the SQL surface does not reliably emit xRekey here, and that codepath is covered by the unit tests instead.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/130\"\u003e#130\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/130\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/130\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e \u003ccode\u003e-race\u003c/code\u003e-clean under SQLite's \u003ccode\u003ecache=shared\u003c/code\u003e mode. The pool already runs correctly under shared-cache because every callback into a given \u003ccode\u003eCache\u003c/code\u003e is serialised internally by SQLite's \u003ccode\u003esqlite3BtreeEnter\u003c/code\u003e on the \u003ccode\u003eBtShared\u003c/code\u003e mutex; verified empirically with a lock-free in-flight probe (max-in-flight = 1 on the canonical two-connection workload, 4 on a positive control with goroutines hitting the cache directly). However the Go race detector does not recognise SQLite's libc mutex as a happens-before edge and reports false-positive races on \u003ccode\u003eFetch\u003c/code\u003e vs \u003ccode\u003eUnpin\u003c/code\u003e reads/writes of the per-cache state, which surfaces as \u003ccode\u003eDATA RACE\u003c/code\u003e failures for any user who registers the pool and runs their suite under \u003ccode\u003e-race\u003c/code\u003e. A \u003ccode\u003esync.Mutex\u003c/code\u003e on the \u003ccode\u003ecache\u003c/code\u003e type is now taken on every public method (\u003ccode\u003eSetSize\u003c/code\u003e, \u003ccode\u003ePageCount\u003c/code\u003e, \u003ccode\u003eFetch\u003c/code\u003e, \u003ccode\u003eUnpin\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e, \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eDestroy\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e), always. On the common non-shared-cache path the lock is uncontended (one atomic CAS per Lock/Unlock pair, negligible next to the SQLite work it bookends); on the shared-cache path it just rubber-stamps the order SQLite's \u003ccode\u003eBtShared\u003c/code\u003e mutex already established. A new \u003ccode\u003ee2e_test.go\u003c/code\u003e \u003ccode\u003eTestSharedCacheTwoConns_Integrity\u003c/code\u003e drives two \u003ccode\u003esql.Conn\u003c/code\u003e against the same \u003ccode\u003ecache=shared\u003c/code\u003e URI with concurrent writers and asserts \u003ccode\u003ePRAGMA integrity_check = ok\u003c/code\u003e under \u003ccode\u003e-race\u003c/code\u003e; passes cleanly with the lock, would surface the false-positive without it. Design notes live in \u003ccode\u003epcache/sharing.go\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/131\"\u003e#131\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/131\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/131\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd a Go wrapper for \u003ccode\u003esqlite3_db_status\u003c/code\u003e, the per-connection runtime counters (cache hit/miss/write/spill rates, schema and prepared-statement memory, lookaside usage, deferred foreign keys). \u003ccode\u003eDBStatus\u003c/code\u003e is an interface implemented by the driver connection and reached through the \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, mirroring the existing \u003ccode\u003eFileControl\u003c/code\u003e surface; \u003ccode\u003eDBStatusOp\u003c/code\u003e is a distinct typed enum of the \u003ccode\u003eSQLITE_DBSTATUS_*\u003c/code\u003e verbs so a counter from a different op family will not compile in its place. \u003ccode\u003eStatus(op, reset)\u003c/code\u003e returns the \u003ccode\u003e(current, high)\u003c/code\u003e pair and optionally resets the counter. This also lets \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e measure real I/O instead of the \u003ccode\u003eEasyRefusals\u003c/code\u003e proxy: the new \u003ccode\u003eBenchmarkPoolSpillIO\u003c/code\u003e reads the pager-level \u003ccode\u003eSQLITE_DBSTATUS_CACHE_SPILL\u003c/code\u003e/\u003ccode\u003e_CACHE_WRITE\u003c/code\u003e counters, which the pager maintains identically for pcache1 and the pool, making the pcache1-vs-pool comparison cznic raised on the !127 review a genuine apples-to-apples measurement. On the rotating-residue eviction-churn workload at \u003ccode\u003ecache_size=16\u003c/code\u003e the pool spills ~3.5x more than pcache1 (cache-spill/op 31.96 vs 8.96) for ~3% more page writes (cache-write/op 450 vs 436) at identical hit/miss, quantifying the I/O cost of the strict Easy contract that \u003ccode\u003eEasyRefusals\u003c/code\u003e only proxied.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/132\"\u003e#132\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/132\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/132\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_dqs\u003c/code\u003e DSN query parameter that disables SQLite's double-quoted string literal compatibility quirk on a per-connection basis. When \u003ccode\u003e_dqs=0\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e false value) is supplied, the driver calls \u003ccode\u003esqlite3_db_config\u003c/code\u003e with \u003ccode\u003eSQLITE_DBCONFIG_DQS_DDL\u003c/code\u003e and \u003ccode\u003eSQLITE_DBCONFIG_DQS_DML\u003c/code\u003e set to off before any statement is prepared, so a double-quoted identifier that fails to resolve raises a parse error instead of silently falling back to a string literal. Absence of the parameter, or \u003ccode\u003e_dqs=1\u003c/code\u003e, leaves SQLite's default behavior unchanged; existing DSNs continue to work byte-for-byte. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/61\"\u003e#61\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/61\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/61\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/128\"\u003e#128\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/128\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/128\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_error_rc\u003c/code\u003e DSN query parameter for clearer error reporting on open-time failures. When \u003ccode\u003e_error_rc=1\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e true value) is supplied, error strings synthesised from a \u003ccode\u003e(rc, db)\u003c/code\u003e pair only append \u003ccode\u003esqlite3_errmsg(db)\u003c/code\u003e when \u003ccode\u003esqlite3_extended_errcode(db)\u003c/code\u003e is consistent with the operation rc (full match first, primary code \u003ccode\u003e\u0026amp;0xff\u003c/code\u003e as fallback). On mismatch the canonical \u003ccode\u003esqlite3_errstr(rc)\u003c/code\u003e is used alone, so an open-time \u003ccode\u003eSQLITE_CANTOPEN\u003c/code\u003e no longer carries the temporary handle's stale \u0026quot;out of memory\u0026quot; errmsg. Absence of the parameter, or \u003ccode\u003e_error_rc=0\u003c/code\u003e, preserves the legacy \u0026quot;errstr: errmsg\u0026quot; form byte-for-byte; existing callers that parse error strings are unaffected. The driver's \u003ccode\u003e*Error.Code()\u003c/code\u003e returns the same SQLite result code in both modes. Parsed before \u003ccode\u003esqlite3_open_v2\u003c/code\u003e so open-time errors are covered. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/230\"\u003e#230\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/230\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/230\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/129\"\u003e#129\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/129\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/129\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-06 v1.52.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_2.html\"\u003eSQLite 3.53.2\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eBackup.Remaining\u003c/code\u003e and \u003ccode\u003eBackup.PageCount\u003c/code\u003e, thin wrappers around the existing \u003ccode\u003esqlite3_backup_remaining\u003c/code\u003e and \u003ccode\u003esqlite3_backup_pagecount\u003c/code\u003e C symbols. Together they expose the per-\u003ccode\u003eStep\u003c/code\u003e progress counters that the underlying backup object already maintains, enabling progress reporting during online backups without dropping to \u003ccode\u003emodernc.org/sqlite/lib\u003c/code\u003e directly.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/122\"\u003e#122\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/122\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/122\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eDrop the redundant second copy in \u003ccode\u003e(*conn).columnText\u003c/code\u003e, the path that backs every \u003ccode\u003eRows.Scan\u003c/code\u003e into a Go \u003ccode\u003estring\u003c/code\u003e for a TEXT column. The value's bytes are still copied once out of SQLite-owned memory into a fresh Go buffer; that buffer is then reinterpreted as the result string with \u003ccode\u003eunsafe.String\u003c/code\u003e rather than copied a second time by the implicit \u003ccode\u003estring([]byte)\u003c/code\u003e conversion. This removes one allocation per TEXT value per row and roughly halves the bytes allocated on that path; on the new \u003ccode\u003eBenchmarkColumnTextScan\u003c/code\u003e cases it is ~13–20% faster for payloads of 256 B and larger, with no measurable change for very short strings. Purely internal: no API or behavioral change, and the returned string never aliases SQLite's buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/123\"\u003e#123\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/123\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/123\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache each result column's declared type once per result set in \u003ccode\u003enewRows\u003c/code\u003e instead of recomputing it on every row. The TEXT branch of \u003ccode\u003eRows.Next\u003c/code\u003e calls \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e for every TEXT column on every row (independent of any DSN flag), which previously did a \u003ccode\u003elibc.GoString\u003c/code\u003e + \u003ccode\u003estrings.ToUpper\u003c/code\u003e each time; that lookup is now a single index into a cached, pre-uppercased \u003ccode\u003e[]string\u003c/code\u003e, and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e reads the same cache and drops its per-call \u003ccode\u003estrings.ToLower\u003c/code\u003e. The declared type is fixed for the lifetime of a prepared statement, so the C round-trip is paid once per column rather than once per column per row, removing exactly 1 alloc + 8 B per TEXT column per row from the \u003ccode\u003eNext\u003c/code\u003e hot path. The new \u003ccode\u003eBenchmarkTextToTimeScan\u003c/code\u003e cases show ~7% faster on a 1000-row DATETIME SELECT under \u003ccode\u003e_texttotime=1\u003c/code\u003e. Purely internal: \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e return identical values, no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/124\"\u003e#124\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/124\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/124\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache, per result column, the \u003ccode\u003eparseTimeFormats\u003c/code\u003e index that first parsed a TEXT-stored DATE/DATETIME/TIMESTAMP value, and try that format first on later rows instead of re-walking the list from the top. \u003ccode\u003e(*conn).parseTime\u003c/code\u003e previously ran \u003ccode\u003etime.Parse\u003c/code\u003e down the format list on every such row; for the canonical SQLite TEXT datetime format every row paid two failed \u003ccode\u003etime.Parse\u003c/code\u003e attempts — each allocating a \u003ccode\u003e*time.ParseError\u003c/code\u003e — before the match. On a 1000-row DATETIME TEXT SELECT this cuts ~50% of allocs/op and ~57% of B/op and is ~37% faster. The fall-through chain is preserved exactly: the seven formats are mutually exclusive, so the cached hint can never select a different match than the in-order scan, and the parsed \u003ccode\u003edriver.Value\u003c/code\u003e is identical to before. Purely internal: no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/125\"\u003e#125\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/125\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/125\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-28 v1.51.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePool the \u003ccode\u003e[]driver.Value\u003c/code\u003e slice passed to scalar/aggregate UDF callbacks and to vtab \u003ccode\u003eFilter\u003c/code\u003e/\u003ccode\u003eInsert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e callbacks, eliminating the dominant per-row allocation on UDF-heavy queries. Benchmarks on a 1000-row, 3-arg noop scalar UDF show ~40% fewer bytes/op and ~15% fewer allocs/op.\u003c/li\u003e\n\u003cli\u003eDocument the matching \u0026quot;arguments are not valid past return\u0026quot; contract on \u003ccode\u003evtab.Cursor.Filter\u003c/code\u003e and \u003ccode\u003evtab.Updater.Insert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e, consistent with the existing rule for \u003ccode\u003eFunctionImpl.Scalar\u003c/code\u003e / \u003ccode\u003eAggregateFunction.Step\u003c/code\u003e / \u003ccode\u003eWindowInverse\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/226\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/226\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/114\"\u003e#114\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/114\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/114\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eFileControl.FileControlDataVersion\u003c/code\u003e, a wrapper around \u003ccode\u003eSQLITE_FCNTL_DATA_VERSION\u003c/code\u003e for observing pager-cache data-version changes, including those made on the same connection. Useful a...\n\n_Description has been truncated_","html_url":"https://github.com/olucasandrade/kaptanto/pull/18","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/olucasandrade%2Fkaptanto/issues/18","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/18/packages"},{"uuid":"4720060518","node_id":"PR_kwDOR8M3rM7pWLrz","number":183,"state":"closed","title":"deps: bump the go-minor-patch group across 1 directory with 11 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-29T19:45:07.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-22T19:49:35.000Z","updated_at":"2026-06-29T19:45:09.000Z","time_to_close":604532,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps: bump","group_name":"go-minor-patch","update_count":11,"packages":[{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.7","new_version":"1.42.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/credentials","old_version":"1.19.16","new_version":"1.19.24","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/s3","old_version":"1.101.0","new_version":"1.104.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/go-playground/validator/v10","old_version":"10.30.2","new_version":"10.30.3","repository_url":"https://github.com/go-playground/validator"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/samber/oops","old_version":"1.21.0","new_version":"1.22.0","repository_url":"https://github.com/samber/oops"},{"name":"github.com/testcontainers/testcontainers-go","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"github.com/testcontainers/testcontainers-go/modules/nats","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"github.com/testcontainers/testcontainers-go/modules/postgres","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"github.com/zitadel/zitadel-go/v3","old_version":"3.29.0","new_version":"3.29.1","repository_url":"https://github.com/zitadel/zitadel-go"},{"name":"golang.org/x/sync","old_version":"0.20.0","new_version":"0.21.0","repository_url":"https://github.com/golang/sync"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 11 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.42.0` |\n| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.16` | `1.19.24` |\n| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.101.0` | `1.104.0` |\n| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.30.2` | `10.30.3` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/samber/oops](https://github.com/samber/oops) | `1.21.0` | `1.22.0` |\n| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [github.com/testcontainers/testcontainers-go/modules/nats](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [github.com/testcontainers/testcontainers-go/modules/postgres](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [github.com/zitadel/zitadel-go/v3](https://github.com/zitadel/zitadel-go) | `3.29.0` | `3.29.1` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.42.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9a3190f79c9e3f7dce5d602be375c07ecd8973cc\"\u003e\u003ccode\u003e9a3190f\u003c/code\u003e\u003c/a\u003e Release 2026-06-08\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b20dd5bb52bbb193b036c3e81525e7a06f3f819b\"\u003e\u003ccode\u003eb20dd5b\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/75a45eaa192d32d7e1247a666f9572a61443b48a\"\u003e\u003ccode\u003e75a45ea\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e736f55ba6d11d83f9b8d858bbd9ab6c1a883ee2\"\u003e\u003ccode\u003ee736f55\u003c/code\u003e\u003c/a\u003e Add preview of changes for standard retry mode behind flag (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3400\"\u003e#3400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ba08dc9776ad30b7e5299dd98f3f0360d39656d4\"\u003e\u003ccode\u003eba08dc9\u003c/code\u003e\u003c/a\u003e Release 2026-06-05.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9a67e21ffef3d8b3c9c84e9ce7d90314b646f395\"\u003e\u003ccode\u003e9a67e21\u003c/code\u003e\u003c/a\u003e Revert schema serde (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3442\"\u003e#3442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/51692f80a1919052106b080468a7d231649d10a4\"\u003e\u003ccode\u003e51692f8\u003c/code\u003e\u003c/a\u003e s3/transfermanager: avoid double-closing concurrentReader channel after read ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f696d5bbafd406a16429239844c6e70627aee935\"\u003e\u003ccode\u003ef696d5b\u003c/code\u003e\u003c/a\u003e Release 2026-06-05\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7efb8fd6bd7b33d2242586a63a32eca93f774f89\"\u003e\u003ccode\u003e7efb8fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1a420c53c9599f9267285650a61009933de8c9bb\"\u003e\u003ccode\u003e1a420c5\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.7...v1.42.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.16 to 1.19.24\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/0016334f314179e3bb1d63ac7a5dbcb2ee7b3ee1\"\u003e\u003ccode\u003e0016334\u003c/code\u003e\u003c/a\u003e Release 2026-06-10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/396a18287497ccfa2cff73a10ae0dd946a167352\"\u003e\u003ccode\u003e396a182\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/3eb85338c6dfc5721c5933253b2d66e5f8e96830\"\u003e\u003ccode\u003e3eb8533\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7bbea79fac21abb6cc7b037466074575e2138f34\"\u003e\u003ccode\u003e7bbea79\u003c/code\u003e\u003c/a\u003e Release 2026-06-09\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1fefa6c28b6345014a2da360a6e47fc5bd5b7e72\"\u003e\u003ccode\u003e1fefa6c\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a2cf49ff138b824c9a5963c0f8f34429c86a199a\"\u003e\u003ccode\u003ea2cf49f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/d87be6894e8451a757cc33d65bca734f51e256a9\"\u003e\u003ccode\u003ed87be68\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9a3190f79c9e3f7dce5d602be375c07ecd8973cc\"\u003e\u003ccode\u003e9a3190f\u003c/code\u003e\u003c/a\u003e Release 2026-06-08\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b20dd5bb52bbb193b036c3e81525e7a06f3f819b\"\u003e\u003ccode\u003eb20dd5b\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/75a45eaa192d32d7e1247a666f9572a61443b48a\"\u003e\u003ccode\u003e75a45ea\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.16...credentials/v1.19.24\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.101.0 to 1.104.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/99943aa792387847a5ee723320a98af18e5c3271\"\u003e\u003ccode\u003e99943aa\u003c/code\u003e\u003c/a\u003e Release 2026-06-16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/85941352ba17c55c1b715211b60bc39c8b3f94b6\"\u003e\u003ccode\u003e8594135\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/14151e5a04b45402df5df389db1490197e305ae9\"\u003e\u003ccode\u003e14151e5\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f43e77cd1b3bb74336f67e0e273dcf3fe183ff5c\"\u003e\u003ccode\u003ef43e77c\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9fcc53abdf577092eb228458d78d0d2af8329c17\"\u003e\u003ccode\u003e9fcc53a\u003c/code\u003e\u003c/a\u003e Release 2026-06-15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/65154c157b52b67a6029315c162f36d70ed9a99f\"\u003e\u003ccode\u003e65154c1\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b86c7b982b4d6caec7b6a466468d2112f4fad1fd\"\u003e\u003ccode\u003eb86c7b9\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/750e42a6493c92739684c3b99b99dba175bf6260\"\u003e\u003ccode\u003e750e42a\u003c/code\u003e\u003c/a\u003e Release 2026-06-12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f64ce2ceba5c9b7811df5f08f6a0ec0c5d23edaf\"\u003e\u003ccode\u003ef64ce2c\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/04e975554b5f9d665bb76157ec00bf7002763a09\"\u003e\u003ccode\u003e04e9755\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.101.0...service/s3/v1.104.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-playground/validator/v10` from 10.30.2 to 10.30.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-playground/validator/releases\"\u003egithub.com/go-playground/validator/v10's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.30.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix/issue 1550 UUID case insensitive by \u003ca href=\"https://github.com/leo-jp-edwards\"\u003e\u003ccode\u003e@​leo-jp-edwards\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1551\"\u003ego-playground/validator#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeat: Add NoneOf Validation by \u003ca href=\"https://github.com/Carmen-Shannon\"\u003e\u003ccode\u003e@​Carmen-Shannon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1554\"\u003ego-playground/validator#1554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd bcp47_strict_language_tag validator by \u003ca href=\"https://github.com/bfabio\"\u003e\u003ccode\u003e@​bfabio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1489\"\u003ego-playground/validator#1489\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1558\"\u003ego-playground/validator#1558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1559\"\u003ego-playground/validator#1559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd CLAUDE.md with repo guidance for Claude Code by \u003ca href=\"https://github.com/deankarn\"\u003e\u003ccode\u003e@​deankarn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1564\"\u003ego-playground/validator#1564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce build size with dead code elimination by \u003ca href=\"https://github.com/zemzale\"\u003e\u003ccode\u003e@​zemzale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1542\"\u003ego-playground/validator#1542\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactored out detectFileMIMEType, matchesMIMEType logic for reuse. Added standalone isMIMEType validator for flexibility by \u003ca href=\"https://github.com/dapzthelegend\"\u003e\u003ccode\u003e@​dapzthelegend\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1544\"\u003ego-playground/validator#1544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(translations): add timezone support for en and ja locales by \u003ca href=\"https://github.com/dedyf5\"\u003e\u003ccode\u003e@​dedyf5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1566\"\u003ego-playground/validator#1566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use errors.As in README and translations example by \u003ca href=\"https://github.com/eyupcanakman\"\u003e\u003ccode\u003e@​eyupcanakman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1563\"\u003ego-playground/validator#1563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typos by \u003ca href=\"https://github.com/rymiyamoto\"\u003e\u003ccode\u003e@​rymiyamoto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1568\"\u003ego-playground/validator#1568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add origin validator for web origin URLs by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1565\"\u003ego-playground/validator#1565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject hostnames with trailing hyphen in RFC 952 validator by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1569\"\u003ego-playground/validator#1569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lint): correctly disable govet inline analyzer \u0026amp; deprecated gomodguard by \u003ca href=\"https://github.com/nodivbyzero\"\u003e\u003ccode\u003e@​nodivbyzero\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1574\"\u003ego-playground/validator#1574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1572\"\u003ego-playground/validator#1572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1571\"\u003ego-playground/validator#1571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cron): anchor regex and accept full cron syntax by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1577\"\u003ego-playground/validator#1577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1580\"\u003ego-playground/validator#1580\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: omit blank tag names from namespace by \u003ca href=\"https://github.com/abemedia\"\u003e\u003ccode\u003e@​abemedia\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1567\"\u003ego-playground/validator#1567\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(docs): correct ripemd160 tag name in README validation table by \u003ca href=\"https://github.com/napoleonbot\"\u003e\u003ccode\u003e@​napoleonbot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1582\"\u003ego-playground/validator#1582\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leo-jp-edwards\"\u003e\u003ccode\u003e@​leo-jp-edwards\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1551\"\u003ego-playground/validator#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Carmen-Shannon\"\u003e\u003ccode\u003e@​Carmen-Shannon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1554\"\u003ego-playground/validator#1554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dapzthelegend\"\u003e\u003ccode\u003e@​dapzthelegend\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1544\"\u003ego-playground/validator#1544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dedyf5\"\u003e\u003ccode\u003e@​dedyf5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1566\"\u003ego-playground/validator#1566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eyupcanakman\"\u003e\u003ccode\u003e@​eyupcanakman\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1563\"\u003ego-playground/validator#1563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rymiyamoto\"\u003e\u003ccode\u003e@​rymiyamoto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1568\"\u003ego-playground/validator#1568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abemedia\"\u003e\u003ccode\u003e@​abemedia\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1567\"\u003ego-playground/validator#1567\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/napoleonbot\"\u003e\u003ccode\u003e@​napoleonbot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1582\"\u003ego-playground/validator#1582\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\"\u003ehttps://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/ac4c1bab0d4aa957466faa1948af28130767e43a\"\u003e\u003ccode\u003eac4c1ba\u003c/code\u003e\u003c/a\u003e fix(docs): correct ripemd160 tag name in README validation table (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1582\"\u003e#1582\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/feacb34d4fa5bd263392bcd03d5348a94ca28870\"\u003e\u003ccode\u003efeacb34\u003c/code\u003e\u003c/a\u003e feat: omit blank tag names from namespace (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1567\"\u003e#1567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/5ed0a7ea9ac87c2409326e1d88f34678658b84e0\"\u003e\u003ccode\u003e5ed0a7e\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1580\"\u003e#1580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/0364541fa467027703223b3d0cace07a667c8302\"\u003e\u003ccode\u003e0364541\u003c/code\u003e\u003c/a\u003e fix(cron): anchor regex and accept full cron syntax (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1577\"\u003e#1577\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/8eb2659789a33bda9262ce62eed2d714539dc8c5\"\u003e\u003ccode\u003e8eb2659\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1571\"\u003e#1571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/f7e1721521360af7958fe59e9c34ba0813f25bf8\"\u003e\u003ccode\u003ef7e1721\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1572\"\u003e#1572\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/cf37fce7a1a5dee2810a085ae39aec5c78e7cd8a\"\u003e\u003ccode\u003ecf37fce\u003c/code\u003e\u003c/a\u003e fix(lint): correctly disable govet inline analyzer \u0026amp; deprecated gomodguard (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/7c334e52092ad1224f0a2eed6bc77408374048b7\"\u003e\u003ccode\u003e7c334e5\u003c/code\u003e\u003c/a\u003e fix: reject hostnames with trailing hyphen in RFC 952 validator (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1569\"\u003e#1569\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/6bcb7bcaf6a99f8d6cf16cc8d062ad8c47950901\"\u003e\u003ccode\u003e6bcb7bc\u003c/code\u003e\u003c/a\u003e feat: add origin validator for web origin URLs (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1565\"\u003e#1565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/6fd2fa82069c9aede1882d703c0e7ee2660bc4d9\"\u003e\u003ccode\u003e6fd2fa8\u003c/code\u003e\u003c/a\u003e docs: fix typos (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1568\"\u003e#1568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/samber/oops` from 1.21.0 to 1.22.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/samber/oops/releases\"\u003egithub.com/samber/oops's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.22.0\u003c/h2\u003e\n\u003ch2\u003eSummary\u003c/h2\u003e\n\u003cp\u003eHuge performance gain, thanks to a refactoring of the error builder (\u003ca href=\"https://redirect.github.com/samber/oops/issues/121\"\u003e#121\u003c/a\u003e):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUse of lazy loading in error builder\u003c/li\u003e\n\u003cli\u003e-90% error build time and no more alloc when wrapping nil error (general case)\u003c/li\u003e\n\u003cli\u003e-30% to -90% error build time and memory allocation for effective errors\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf/multiple perf improvements by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/108\"\u003esamber/oops#108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeature/caller skip by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/109\"\u003esamber/oops#109\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: change User and Tenant param type to ...any by \u003ca href=\"https://github.com/cley44\"\u003e\u003ccode\u003e@​cley44\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/36\"\u003esamber/oops#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add AsError[T] generic helper and document AsOops in README by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/103\"\u003esamber/oops#103\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: OopsError.Is() now compares by identity, not by type by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/105\"\u003esamber/oops#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(trace): explicit Trace() always beats auto-generated trace by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/106\"\u003esamber/oops#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: deep review improvements — bug fixes, docs, and test coverage by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/107\"\u003esamber/oops#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(tests): migrate to table-driven test pattern by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/120\"\u003esamber/oops#120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(builder): migrate to functional options pattern (linked-list optionFunc) by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/121\"\u003esamber/oops#121\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add OopsError.Layers() to inspect individual error chain layers by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/110\"\u003esamber/oops#110\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: add table-driven unit tests for recursive functions by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/111\"\u003esamber/oops#111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eCI\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(ci): adding codeql by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/98\"\u003esamber/oops#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: disable govulncheck, pin go-version-file and add trivyignore in security workflow by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/119\"\u003esamber/oops#119\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: security scan CI failures by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/112\"\u003esamber/oops#112\u003c/a\u003e\n\u003ca href=\"https://redirect.github.com/samber/oops/pull/115\"\u003esamber/oops#115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDependencies\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump github.com/samber/lo from 1.52.0 to 1.53.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/samber/oops/pull/102\"\u003esamber/oops#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump codecov/codecov-action from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/samber/oops/pull/100\"\u003esamber/oops#100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump softprops/action-gh-release from 2 to 3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/samber/oops/pull/117\"\u003esamber/oops#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in\u003c/li\u003e\n\u003cli\u003eci: add dependabot automerge workflow by \u003ca href=\"https://github.com/headless-samber\"\u003e\u003ccode\u003e@​headless-samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/118\"\u003esamber/oops#118\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edoc: clarify why Wrapf uses fmt.Errorf instead of fmt.Sprintf by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/104\"\u003esamber/oops#104\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cley44\"\u003e\u003ccode\u003e@​cley44\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/samber/oops/pull/36\"\u003esamber/oops#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/headless-samber\"\u003e\u003ccode\u003e@​headless-samber\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/samber/oops/pull/118\"\u003esamber/oops#118\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/samber/oops/compare/v1.21.0...v1.22.0\"\u003ehttps://github.com/samber/oops/compare/v1.21.0...v1.22.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/682da16508ede6f5620671521ac235049b45dbd6\"\u003e\u003ccode\u003e682da16\u003c/code\u003e\u003c/a\u003e bump v1.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/50ff369e9af74aa5bb0761e1a8ccccf33f79cd90\"\u003e\u003ccode\u003e50ff369\u003c/code\u003e\u003c/a\u003e ci(release): add contents:write permission to release job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/da8c6ce0d88f5523ce9f3a4b1dda7ea44b19dd5e\"\u003e\u003ccode\u003eda8c6ce\u003c/code\u003e\u003c/a\u003e refactor(builder): migrate to functional options pattern (linked-list optionF...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/9c5c4af9b2d26a7dc6e22f88cba6fd3681e53c51\"\u003e\u003ccode\u003e9c5c4af\u003c/code\u003e\u003c/a\u003e ci: disable govulncheck, pin go-version-file and add trivyignore in security ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/b9e478c8459180bd2c4bf7abcf5fe99f52b03d1c\"\u003e\u003ccode\u003eb9e478c\u003c/code\u003e\u003c/a\u003e refactor(tests): migrate to table-driven test pattern (\u003ca href=\"https://redirect.github.com/samber/oops/issues/120\"\u003e#120\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/5d0edf21ce3a02fcab04c1e1308139476b5b35ae\"\u003e\u003ccode\u003e5d0edf2\u003c/code\u003e\u003c/a\u003e ci: add dependabot automerge workflow (\u003ca href=\"https://redirect.github.com/samber/oops/issues/118\"\u003e#118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/457cdc1d7809ac8e8eef6425f1f208f4008f9f12\"\u003e\u003ccode\u003e457cdc1\u003c/code\u003e\u003c/a\u003e chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 (\u003ca href=\"https://redirect.github.com/samber/oops/issues/115\"\u003e#115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/c18d0e974f26ff71638e858ed2519d9acd4a6b63\"\u003e\u003ccode\u003ec18d0e9\u003c/code\u003e\u003c/a\u003e chore(deps): bump softprops/action-gh-release from 2 to 3 (\u003ca href=\"https://redirect.github.com/samber/oops/issues/117\"\u003e#117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/1460827f264ff1476f405bb5d0b506609f144317\"\u003e\u003ccode\u003e1460827\u003c/code\u003e\u003c/a\u003e fix: security scan CI failures (\u003ca href=\"https://redirect.github.com/samber/oops/issues/112\"\u003e#112\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/0372e7b9d26f74b8013a5a7c14e8b16ebc2e95d0\"\u003e\u003ccode\u003e0372e7b\u003c/code\u003e\u003c/a\u003e feat: add OopsError.Layers() to inspect individual error chain layers (\u003ca href=\"https://redirect.github.com/samber/oops/issues/110\"\u003e#110\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/samber/oops/compare/v1.21.0...v1.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go/modules/nats` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go/modules/nats's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go/modules/postgres` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go/modules/postgres's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/zitadel/zitadel-go/v3` from 3.29.0 to 3.29.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/zitadel/zitadel-go/releases\"\u003egithub.com/zitadel/zitadel-go/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.29.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/compare/v3.29.0...v3.29.1\"\u003e3.29.1\u003c/a\u003e (2026-06-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate zitadel api to v4.15.2 (\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/c14ca7cb29ed4116fc5b6b3adfa4d369b72e5146\"\u003ec14ca7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate ZITADEL API to v4.15.2 (\u003ca href=\"https://redirect.github.com/zitadel/zitadel-go/issues/598\"\u003e#598\u003c/a\u003e) (\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/90df7f52519fbbea35319fcae7b5269808d905e4\"\u003e90df7f5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/90df7f52519fbbea35319fcae7b5269808d905e4\"\u003e\u003ccode\u003e90df7f5\u003c/code\u003e\u003c/a\u003e fix: Update ZITADEL API to v4.15.2 (\u003ca href=\"https://redirect.github.com/zitadel/zitadel-go/issues/598\"\u003e#598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/c14ca7cb29ed4116fc5b6b3adfa4d369b72e5146\"\u003e\u003ccode\u003ec14ca7c\u003c/code\u003e\u003c/a\u003e fix: update zitadel api to v4.15.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/3fc69fd4a76028918594a569d29901c136d7a7ee\"\u003e\u003ccode\u003e3fc69fd\u003c/code\u003e\u003c/a\u003e chore(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in the gomod...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/86763fc2c26f6299f282348b0af39b4d496a80c3\"\u003e\u003ccode\u003e86763fc\u003c/code\u003e\u003c/a\u003e chore(deps): bump go.opentelemetry.io/otel\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/zitadel/zitadel-go/compare/v3.29.0...v3.29.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/sync` from 0.20.0 to 0.21.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sync/commit/5071ed6a9f1617117556b66384f765c934de3698\"\u003e\u003ccode\u003e5071ed6\u003c/code\u003e\u003c/a\u003e all: fix some comments to improve readability\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/sync/compare/v0.20.0...v0.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/medincident/medincident-backend/pull/183","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/medincident%2Fmedincident-backend/issues/183","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/183/packages"},{"uuid":"4712741577","node_id":"PR_kwDOR4PSMM7o96uN","number":53,"state":"closed","title":"build(deps): bump the go-minor-patch group with 6 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-22T03:01:26.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-22T01:51:12.000Z","updated_at":"2026-06-22T03:01:28.000Z","time_to_close":4214,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go-minor-patch","update_count":6,"packages":[{"name":"github.com/coreos/go-oidc/v3","old_version":"3.18.0","new_version":"3.19.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"k8s.io/api","old_version":"0.36.1","new_version":"0.36.2","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/apimachinery","old_version":"0.36.1","new_version":"0.36.2","repository_url":"https://github.com/kubernetes/apimachinery"},{"name":"k8s.io/client-go","old_version":"0.36.1","new_version":"0.36.2","repository_url":"https://github.com/kubernetes/client-go"},{"name":"modernc.org/sqlite","old_version":"1.50.1","new_version":"1.53.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.18.0` | `3.19.0` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.1` | `0.36.2` |\n| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.1` | `0.36.2` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.1` | `0.36.2` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.50.1` | `1.53.0` |\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.18.0 to 3.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Key refresh should set \u003ccode\u003eno-cache\u003c/code\u003e to get most up to date keys by \u003ca href=\"https://github.com/Yanni8\"\u003e\u003ccode\u003e@​Yanni8\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/485\"\u003ecoreos/go-oidc#485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eoidc: add support for validating back-channel logout tokens by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/486\"\u003ecoreos/go-oidc#486\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Yanni8\"\u003e\u003ccode\u003e@​Yanni8\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/485\"\u003ecoreos/go-oidc#485\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/4204f0b2b0f903070de5f51a459fe5e23faca113\"\u003e\u003ccode\u003e4204f0b\u003c/code\u003e\u003c/a\u003e oidc: add support for validating back-channel logout tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/f77e01c50994c6ad4f4c3a6ed3e2380bab1f1ff2\"\u003e\u003ccode\u003ef77e01c\u003c/code\u003e\u003c/a\u003e fix: Key refresh should set no-cache to get most up to date keys\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/api` from 0.36.1 to 0.36.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/2f4cefdbec4e3c3cd76d15844e90c679419f4dc7\"\u003e\u003ccode\u003e2f4cefd\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.2 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/api/compare/v0.36.1...v0.36.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.36.1 to 0.36.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/ae3f98eb01e4bebb7d90db742081949c5c4b1ef7\"\u003e\u003ccode\u003eae3f98e\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.2 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/2ec982dc45d3085c6ec641be237b1fc39a7494ac\"\u003e\u003ccode\u003e2ec982d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/139508\"\u003e#139508\u003c/a\u003e\u003ccode\u003elalitc375/automated-cherry-pick-of-#139480\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/6a881027b107fb0f87aa3a5760610cac17b4d3a0\"\u003e\u003ccode\u003e6a88102\u003c/code\u003e\u003c/a\u003e Fix wrong marking of errors\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/client-go` from 0.36.1 to 0.36.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/877f5359348b5df85619f2aa379abc5bd74bca2d\"\u003e\u003ccode\u003e877f535\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.2 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `modernc.org/sqlite` from 1.50.1 to 1.53.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-21 v1.53.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003enetbsd/amd64\u003c/code\u003e support, resolving the long-standing build break in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/246\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/246\u003c/a\u003e). This target is intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: the port had been broken for years and is only now revived, and there is as yet no real-world experience running it under production workloads. Green CI is not the same as battle-tested — so while the full test suite (including the \u003ccode\u003epcache\u003c/code\u003e and \u003ccode\u003evec\u003c/code\u003e packages and the \u003ccode\u003e-race\u003c/code\u003e concurrency test) passes on NetBSD 10.1 / Go 1.26.3, and the entire upstream toolchain (\u003ccode\u003elibc\u003c/code\u003e, \u003ccode\u003ecc\u003c/code\u003e, \u003ccode\u003eccgo\u003c/code\u003e, \u003ccode\u003elibz\u003c/code\u003e, \u003ccode\u003elibtcl8.6\u003c/code\u003e, \u003ccode\u003elibsqlite3\u003c/code\u003e, \u003ccode\u003elibsqlite_vec\u003c/code\u003e) is green on the NetBSD CI builder, the target is offered for evaluation only. If you run NetBSD, please exercise it with your own workloads and report back via \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e; the intent is to promote it to a fully supported platform after a period of broader real-world testing (on the order of a month) elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: the previously shipped \u003ccode\u003elib/sqlite_netbsd_amd64.go\u003c/code\u003e was a stale old-generator transpile that no longer compiled (the \u003ccode\u003emu.enter\u003c/code\u003e/\u003ccode\u003emu.leave\u003c/code\u003e break in \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e); it is replaced by a fresh new-generator transpile consistent with every other platform, and \u003ccode\u003emodernc.org/sqlite/vec\u003c/code\u003e (sqlite-vec) is vendored and auto-registers on netbsd. Correct operation requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e, which carries two NetBSD-specific fixes found during this work: the \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003ePAD\u003c/code\u003e-argument ABI (without it, concurrent WAL access faults with SIGBUS in the WAL-index shared memory) and a working \u003ccode\u003eabort(3)\u003c/code\u003e (the prior stub left SQLite's crash-recovery \u003ccode\u003ewritecrash\u003c/code\u003e test unable to terminate by signal). As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/82\"\u003e#82\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/82\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/82\u003c/a\u003e), thanks Leonardo Taccari (\u003ca href=\"https://github.com/iamleot\"\u003e\u003ccode\u003e@​iamleot\u003c/code\u003e\u003c/a\u003e) and Thomas Klausner (@\u003cem\u003ewiz\u003c/em\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003efreebsd/386\u003c/code\u003e and \u003ccode\u003efreebsd/arm\u003c/code\u003e support. As with the \u003ccode\u003enetbsd/amd64\u003c/code\u003e target above, these two 32-bit FreeBSD ports are intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: \u003ccode\u003efreebsd/386\u003c/code\u003e previously shipped a stale, effectively untested SQLite 3.41 transpile, and \u003ccode\u003efreebsd/arm\u003c/code\u003e is entirely new, so neither has real-world production mileage yet. Both are now freshly transpiled at SQLite 3.53.2 consistent with every other platform, build cleanly, and pass the full test suite (core, WAL/concurrency, and the \u003ccode\u003evec\u003c/code\u003e package) on the FreeBSD CI builders; they are offered for evaluation only. If you run 32-bit FreeBSD, please exercise these targets with your own workloads and report back — the intent is to promote \u003ccode\u003efreebsd/386\u003c/code\u003e, \u003ccode\u003efreebsd/arm\u003c/code\u003e, and \u003ccode\u003enetbsd/amd64\u003c/code\u003e to fully supported platforms in a future release cycle, once a period of broader real-world testing elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: correct operation on \u003ccode\u003efreebsd/arm\u003c/code\u003e requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e (v1.73.4), which fixes the per-arch \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003eoff_t\u003c/code\u003e encoding for 32-bit FreeBSD; without it the WAL shared-memory mapping faults with SIGBUS under concurrent access, the same class of bug found on the netbsd port. As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/119\"\u003e#119\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/119\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/119\u003c/a\u003e), thanks Olivier Cochard-Labbé (\u003ca href=\"https://github.com/ocochard\"\u003e\u003ccode\u003e@​ocochard\u003c/code\u003e\u003c/a\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd a Go-facing wrapper for \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e. \u003ccode\u003ePageCache\u003c/code\u003e is the factory and \u003ccode\u003eCache\u003c/code\u003e the per-database instance, both idiomatic Go interfaces; \u003ccode\u003ePage\u003c/code\u003e exposes the raw \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e pointers that SQLite reads through the C pcache contract. \u003ccode\u003eRegisterPageCache\u003c/code\u003e and \u003ccode\u003eMustRegisterPageCache\u003c/code\u003e install the module process-globally before the first \u003ccode\u003esql.Open\u003c/code\u003e; subsequent Open calls are gated through a one-shot \u003ccode\u003eXsqlite3_config(SQLITE_CONFIG_PCACHE2)\u003c/code\u003e so a too-late Register returns \u003ccode\u003eErrPageCacheTooLate\u003c/code\u003e rather than silently falling through to the built-in pcache1. The binding owns the \u003ccode\u003esqlite3_pcache_page\u003c/code\u003e stub and re-consults the implementation on every Fetch, reusing the stub only when the returned \u003ccode\u003ePage\u003c/code\u003e value is unchanged, which keeps a bounded/evicting purgeable cache safe by construction.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/126\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/126\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e, the reference page-cache implementation that accompanies the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e wrapper. \u003ccode\u003epcache.New\u003c/code\u003e returns a \u003ccode\u003e*Pool\u003c/code\u003e satisfying the \u003ccode\u003ePageCache\u003c/code\u003e interface; register it once with \u003ccode\u003esqlite.MustRegisterPageCache(pcache.New())\u003c/code\u003e and every connection opened afterwards draws its pages from it. Each \u003ccode\u003ePool.Create\u003c/code\u003e mints a fresh per-database \u003ccode\u003eCache\u003c/code\u003e: a bounded, LRU-evicting page store that honours the \u003ccode\u003ePRAGMA cache_size\u003c/code\u003e soft cap and releases the least-recently-unpinned page when it must make room. Page memory — the \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e buffers SQLite reads through — is allocated with \u003ccode\u003elibc.Xmalloc\u003c/code\u003e/\u003ccode\u003elibc.Xcalloc\u003c/code\u003e and therefore lives off the Go heap, which keeps SQLite's interior pointer arithmetic on the page extras from tripping the race detector's checkptr enforcement. \u003ccode\u003ePool.Stats\u003c/code\u003e reports aggregate lifetime counters (hits, misses, allocs, evictions, rekeys, truncates, caches) across every cache a Pool has created, so hit/miss/eviction behaviour is observable without instrumenting individual caches. Cross-connection page sharing is out of scope for now; each \u003ccode\u003eCreate\u003c/code\u003e returns an independent per-database cache.\u003c/li\u003e\n\u003cli\u003eValidated end-to-end against the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e stress workload (\u003ccode\u003ecache_size=16\u003c/code\u003e, 4000 BLOB rows with DELETE and \u003ccode\u003eincremental_vacuum\u003c/code\u003e, \u003ccode\u003eintegrity_check\u003c/code\u003e clean under \u003ccode\u003e-race\u003c/code\u003e) and benchmarked for the memory-utilization goal tracked in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/204\"\u003e#204\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/204\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/204\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/127\"\u003e#127\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/127\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/127\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eTighten the \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e reference implementation per cznic's !127 review follow-ups. Adds \u003ccode\u003eStats.EasyRefusals\u003c/code\u003e, a per-Pool counter for the cases where \u003ccode\u003eFetchCreateEasy\u003c/code\u003e returns nil at cap; SQLite reacts to a refusal by spilling dirty pages and retrying with \u003ccode\u003eFetchCreateForce\u003c/code\u003e, so the new field is a direct proxy for the I/O pressure the strict Easy contract imposes vs pcache1's recycle-without-spill behavior. \u003ccode\u003eBenchmarkPoolEvictionChurn\u003c/code\u003e was reworked to drive a rotating-residue DELETE (\u003ccode\u003ek % 3 = i % 3\u003c/code\u003e) and re-insert a matching batch each cycle so the spill pressure recurs and \u003ccode\u003eeasy-refusals/op\u003c/code\u003e scales with \u003ccode\u003eb.N\u003c/code\u003e instead of capping at the seed's one-time first-cycle cost; both existing benchmarks now report \u003ccode\u003eeasy-refusals/op\u003c/code\u003e alongside the page-allocs/evictions metrics. \u003ccode\u003eStats.Evictions\u003c/code\u003e documentation was tightened to match the actual behavior (counts LRU eviction, \u003ccode\u003eUnpin(discard=true)\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e releases, and \u003ccode\u003eUnpin(discard=false)\u003c/code\u003e trimming back to target after a \u003ccode\u003eFetchCreateForce\u003c/code\u003e overcommit; bulk frees from \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e collisions, and \u003ccode\u003eDestroy\u003c/code\u003e are not counted). The \u003ccode\u003eTestPoolRoundTripIntegrity\u003c/code\u003e comment claiming the workload exercises \u003ccode\u003exRekey\u003c/code\u003e ~15 times has been corrected; the SQL surface does not reliably emit xRekey here, and that codepath is covered by the unit tests instead.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/130\"\u003e#130\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/130\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/130\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e \u003ccode\u003e-race\u003c/code\u003e-clean under SQLite's \u003ccode\u003ecache=shared\u003c/code\u003e mode. The pool already runs correctly under shared-cache because every callback into a given \u003ccode\u003eCache\u003c/code\u003e is serialised internally by SQLite's \u003ccode\u003esqlite3BtreeEnter\u003c/code\u003e on the \u003ccode\u003eBtShared\u003c/code\u003e mutex; verified empirically with a lock-free in-flight probe (max-in-flight = 1 on the canonical two-connection workload, 4 on a positive control with goroutines hitting the cache directly). However the Go race detector does not recognise SQLite's libc mutex as a happens-before edge and reports false-positive races on \u003ccode\u003eFetch\u003c/code\u003e vs \u003ccode\u003eUnpin\u003c/code\u003e reads/writes of the per-cache state, which surfaces as \u003ccode\u003eDATA RACE\u003c/code\u003e failures for any user who registers the pool and runs their suite under \u003ccode\u003e-race\u003c/code\u003e. A \u003ccode\u003esync.Mutex\u003c/code\u003e on the \u003ccode\u003ecache\u003c/code\u003e type is now taken on every public method (\u003ccode\u003eSetSize\u003c/code\u003e, \u003ccode\u003ePageCount\u003c/code\u003e, \u003ccode\u003eFetch\u003c/code\u003e, \u003ccode\u003eUnpin\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e, \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eDestroy\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e), always. On the common non-shared-cache path the lock is uncontended (one atomic CAS per Lock/Unlock pair, negligible next to the SQLite work it bookends); on the shared-cache path it just rubber-stamps the order SQLite's \u003ccode\u003eBtShared\u003c/code\u003e mutex already established. A new \u003ccode\u003ee2e_test.go\u003c/code\u003e \u003ccode\u003eTestSharedCacheTwoConns_Integrity\u003c/code\u003e drives two \u003ccode\u003esql.Conn\u003c/code\u003e against the same \u003ccode\u003ecache=shared\u003c/code\u003e URI with concurrent writers and asserts \u003ccode\u003ePRAGMA integrity_check = ok\u003c/code\u003e under \u003ccode\u003e-race\u003c/code\u003e; passes cleanly with the lock, would surface the false-positive without it. Design notes live in \u003ccode\u003epcache/sharing.go\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/131\"\u003e#131\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/131\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/131\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd a Go wrapper for \u003ccode\u003esqlite3_db_status\u003c/code\u003e, the per-connection runtime counters (cache hit/miss/write/spill rates, schema and prepared-statement memory, lookaside usage, deferred foreign keys). \u003ccode\u003eDBStatus\u003c/code\u003e is an interface implemented by the driver connection and reached through the \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, mirroring the existing \u003ccode\u003eFileControl\u003c/code\u003e surface; \u003ccode\u003eDBStatusOp\u003c/code\u003e is a distinct typed enum of the \u003ccode\u003eSQLITE_DBSTATUS_*\u003c/code\u003e verbs so a counter from a different op family will not compile in its place. \u003ccode\u003eStatus(op, reset)\u003c/code\u003e returns the \u003ccode\u003e(current, high)\u003c/code\u003e pair and optionally resets the counter. This also lets \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e measure real I/O instead of the \u003ccode\u003eEasyRefusals\u003c/code\u003e proxy: the new \u003ccode\u003eBenchmarkPoolSpillIO\u003c/code\u003e reads the pager-level \u003ccode\u003eSQLITE_DBSTATUS_CACHE_SPILL\u003c/code\u003e/\u003ccode\u003e_CACHE_WRITE\u003c/code\u003e counters, which the pager maintains identically for pcache1 and the pool, making the pcache1-vs-pool comparison cznic raised on the !127 review a genuine apples-to-apples measurement. On the rotating-residue eviction-churn workload at \u003ccode\u003ecache_size=16\u003c/code\u003e the pool spills ~3.5x more than pcache1 (cache-spill/op 31.96 vs 8.96) for ~3% more page writes (cache-write/op 450 vs 436) at identical hit/miss, quantifying the I/O cost of the strict Easy contract that \u003ccode\u003eEasyRefusals\u003c/code\u003e only proxied.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/132\"\u003e#132\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/132\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/132\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_dqs\u003c/code\u003e DSN query parameter that disables SQLite's double-quoted string literal compatibility quirk on a per-connection basis. When \u003ccode\u003e_dqs=0\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e false value) is supplied, the driver calls \u003ccode\u003esqlite3_db_config\u003c/code\u003e with \u003ccode\u003eSQLITE_DBCONFIG_DQS_DDL\u003c/code\u003e and \u003ccode\u003eSQLITE_DBCONFIG_DQS_DML\u003c/code\u003e set to off before any statement is prepared, so a double-quoted identifier that fails to resolve raises a parse error instead of silently falling back to a string literal. Absence of the parameter, or \u003ccode\u003e_dqs=1\u003c/code\u003e, leaves SQLite's default behavior unchanged; existing DSNs continue to work byte-for-byte. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/61\"\u003e#61\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/61\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/61\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/128\"\u003e#128\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/128\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/128\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_error_rc\u003c/code\u003e DSN query parameter for clearer error reporting on open-time failures. When \u003ccode\u003e_error_rc=1\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e true value) is supplied, error strings synthesised from a \u003ccode\u003e(rc, db)\u003c/code\u003e pair only append \u003ccode\u003esqlite3_errmsg(db)\u003c/code\u003e when \u003ccode\u003esqlite3_extended_errcode(db)\u003c/code\u003e is consistent with the operation rc (full match first, primary code \u003ccode\u003e\u0026amp;0xff\u003c/code\u003e as fallback). On mismatch the canonical \u003ccode\u003esqlite3_errstr(rc)\u003c/code\u003e is used alone, so an open-time \u003ccode\u003eSQLITE_CANTOPEN\u003c/code\u003e no longer carries the temporary handle's stale \u0026quot;out of memory\u0026quot; errmsg. Absence of the parameter, or \u003ccode\u003e_error_rc=0\u003c/code\u003e, preserves the legacy \u0026quot;errstr: errmsg\u0026quot; form byte-for-byte; existing callers that parse error strings are unaffected. The driver's \u003ccode\u003e*Error.Code()\u003c/code\u003e returns the same SQLite result code in both modes. Parsed before \u003ccode\u003esqlite3_open_v2\u003c/code\u003e so open-time errors are covered. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/230\"\u003e#230\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/230\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/230\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/129\"\u003e#129\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/129\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/129\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-06 v1.52.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_2.html\"\u003eSQLite 3.53.2\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eBackup.Remaining\u003c/code\u003e and \u003ccode\u003eBackup.PageCount\u003c/code\u003e, thin wrappers around the existing \u003ccode\u003esqlite3_backup_remaining\u003c/code\u003e and \u003ccode\u003esqlite3_backup_pagecount\u003c/code\u003e C symbols. Together they expose the per-\u003ccode\u003eStep\u003c/code\u003e progress counters that the underlying backup object already maintains, enabling progress reporting during online backups without dropping to \u003ccode\u003emodernc.org/sqlite/lib\u003c/code\u003e directly.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/122\"\u003e#122\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/122\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/122\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eDrop the redundant second copy in \u003ccode\u003e(*conn).columnText\u003c/code\u003e, the path that backs every \u003ccode\u003eRows.Scan\u003c/code\u003e into a Go \u003ccode\u003estring\u003c/code\u003e for a TEXT column. The value's bytes are still copied once out of SQLite-owned memory into a fresh Go buffer; that buffer is then reinterpreted as the result string with \u003ccode\u003eunsafe.String\u003c/code\u003e rather than copied a second time by the implicit \u003ccode\u003estring([]byte)\u003c/code\u003e conversion. This removes one allocation per TEXT value per row and roughly halves the bytes allocated on that path; on the new \u003ccode\u003eBenchmarkColumnTextScan\u003c/code\u003e cases it is ~13–20% faster for payloads of 256 B and larger, with no measurable change for very short strings. Purely internal: no API or behavioral change, and the returned string never aliases SQLite's buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/123\"\u003e#123\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/123\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/123\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache each result column's declared type once per result set in \u003ccode\u003enewRows\u003c/code\u003e instead of recomputing it on every row. The TEXT branch of \u003ccode\u003eRows.Next\u003c/code\u003e calls \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e for every TEXT column on every row (independent of any DSN flag), which previously did a \u003ccode\u003elibc.GoString\u003c/code\u003e + \u003ccode\u003estrings.ToUpper\u003c/code\u003e each time; that lookup is now a single index into a cached, pre-uppercased \u003ccode\u003e[]string\u003c/code\u003e, and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e reads the same cache and drops its per-call \u003ccode\u003estrings.ToLower\u003c/code\u003e. The declared type is fixed for the lifetime of a prepared statement, so the C round-trip is paid once per column rather than once per column per row, removing exactly 1 alloc + 8 B per TEXT column per row from the \u003ccode\u003eNext\u003c/code\u003e hot path. The new \u003ccode\u003eBenchmarkTextToTimeScan\u003c/code\u003e cases show ~7% faster on a 1000-row DATETIME SELECT under \u003ccode\u003e_texttotime=1\u003c/code\u003e. Purely internal: \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e return identical values, no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/124\"\u003e#124\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/124\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/124\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache, per result column, the \u003ccode\u003eparseTimeFormats\u003c/code\u003e index that first parsed a TEXT-stored DATE/DATETIME/TIMESTAMP value, and try that format first on later rows instead of re-walking the list from the top. \u003ccode\u003e(*conn).parseTime\u003c/code\u003e previously ran \u003ccode\u003etime.Parse\u003c/code\u003e down the format list on every such row; for the canonical SQLite TEXT datetime format every row paid two failed \u003ccode\u003etime.Parse\u003c/code\u003e attempts — each allocating a \u003ccode\u003e*time.ParseError\u003c/code\u003e — before the match. On a 1000-row DATETIME TEXT SELECT this cuts ~50% of allocs/op and ~57% of B/op and is ~37% faster. The fall-through chain is preserved exactly: the seven formats are mutually exclusive, so the cached hint can never select a different match than the in-order scan, and the parsed \u003ccode\u003edriver.Value\u003c/code\u003e is identical to before. Purely internal: no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/125\"\u003e#125\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/125\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/125\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-28 v1.51.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePool the \u003ccode\u003e[]driver.Value\u003c/code\u003e slice passed to scalar/aggregate UDF callbacks and to vtab \u003ccode\u003eFilter\u003c/code\u003e/\u003ccode\u003eInsert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e callbacks, eliminating the dominant per-row allocation on UDF-heavy queries. Benchmarks on a 1000-row, 3-arg noop scalar UDF show ~40% fewer bytes/op and ~15% fewer allocs/op.\u003c/li\u003e\n\u003cli\u003eDocument the matching \u0026quot;arguments are not valid past return\u0026quot; contract on \u003ccode\u003evtab.Cursor.Filter\u003c/code\u003e and \u003ccode\u003evtab.Updater.Insert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e, consistent with the existing rule for \u003ccode\u003eFunctionImpl.Scalar\u003c/code\u003e / \u003ccode\u003eAggregateFunction.Step\u003c/code\u003e / \u003ccode\u003eWindowInverse\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/226\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/226\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/114\"\u003e#114\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/114\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/114\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eFileControl.FileControlDataVersion\u003c/code\u003e, a wrapper around \u003ccode\u003eSQLITE_FCNTL_DATA_VERSION\u003c/code\u003e for observing pager-cache data-version changes, including those made on the same connection. Useful as a primitive for application-level cache invalidation.\u003c/li\u003e\n\u003cli\u003eExposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, consistent with the existing \u003ccode\u003eFileControlPersistWAL\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/115\"\u003e#115\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/115\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/115\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eFix a regression where in-memory connections (\u003ccode\u003e:memory:\u003c/code\u003e, \u003ccode\u003efile::memory:\u003c/code\u003e, shared-cache memory URIs) were discarded by \u003ccode\u003edatabase/sql\u003c/code\u003e after a context-cancelled query, taking the entire in-memory store with them. The fix for \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/198\"\u003e#198\u003c/a\u003e had added an \u003ccode\u003esqlite3_is_interrupted\u003c/code\u003e check to the connection validator that mistakenly applied to in-memory connections too, re-introducing the bug originally fixed by !74. File-backed connections keep the existing behaviour and are still discarded after an interrupt.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/196\"\u003e#196\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/196\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/196\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/116\"\u003e#116\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/116\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/116\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003eFunctionImpl.VolatileArgs\u003c/code\u003e flag that hands TEXT and BLOB arguments to scalar and aggregate UDF callbacks as zero-copy views (\u003ccode\u003eunsafe.String\u003c/code\u003e/\u003ccode\u003eunsafe.Slice\u003c/code\u003e) over SQLite's own value buffers, eliminating the per-argument \u003ccode\u003elibc.GoString\u003c/code\u003e/\u003ccode\u003emake([]byte)\u003c/code\u003e copy that the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e slice-pooling left as the remaining per-row allocation. On the same 1000-row, 3-arg (INTEGER/TEXT/BLOB) noop scalar UDF this removes a further ~35% of allocs/op and ~11% of bytes/op on top of \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eThe views are valid only for the duration of the callback and must not be retained past return or across rows; a callback that needs to keep a value must copy it. With \u003ccode\u003eVolatileArgs\u003c/code\u003e unset (the default) arguments keep the existing copied, caller-owned semantics, so the flag is fully backward compatible; it has no effect on integer, float, time, or NULL arguments.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/120\"\u003e#120\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/120\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/120\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eExtend the opt-in \u003ccode\u003eVolatileArgs\u003c/code\u003e zero-copy TEXT/BLOB argument access from \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/120\"\u003e#120\u003c/a\u003e to the virtual-table \u003ccode\u003eCursor.Filter\u003c/code\u003e (\u003ccode\u003exFilter\u003c/code\u003e) and \u003ccode\u003eUpdater.Insert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e (\u003ccode\u003exUpdate\u003c/code\u003e) callbacks. A \u003ccode\u003evtab.Module\u003c/code\u003e opts in by implementing the new optional \u003ccode\u003evtab.VolatileArgsOpter\u003c/code\u003e interface (\u003ccode\u003eVolatileArgs() bool\u003c/code\u003e); the flag is read once at module registration and shared by every table created from it. On a vtab call carrying one TEXT and one BLOB argument this removes 2 allocs/op (one \u003ccode\u003elibc.GoString\u003c/code\u003e, one \u003ccode\u003emake([]byte)\u003c/code\u003e) on each of the Filter and Update paths.\u003c/li\u003e\n\u003cli\u003eThe same safety contract as \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/120\"\u003e#120\u003c/a\u003e applies: the views are valid only for the duration of the callback and must not be retained past return or across rows; a callback that needs to keep a value must copy it. Modules that do not implement \u003ccode\u003eVolatileArgsOpter\u003c/code\u003e (the default for all existing modules) are byte-for-byte unchanged, and the flag has no effect on integer, float, time, or NULL arguments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/6b32d1ee965dfe59bf2e50baeb6f451b67d6a71e\"\u003e\u003ccode\u003e6b32d1e\u003c/code\u003e\u003c/a\u003e CHANGELOG.md: document experimental freebsd/386 + freebsd/arm (\u003ca href=\"https://gitlab.com/cznic/sqlite/issues/119\"\u003e#119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/697300ffaa56b03b79e490dc960f218794cb2a75\"\u003e\u003ccode\u003e697300f\u003c/code\u003e\u003c/a\u003e Merge branch 'dbstatus-binding' into 'master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/759639fa15658feabd8218bc766768fc383b3c12\"\u003e\u003ccode\u003e759639f\u003c/code\u003e\u003c/a\u003e sqlite: review fixes for !132 — restore \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/131\"\u003e#131\u003c/a\u003e CHANGELOG link, correct DBStatus...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/40ff0274c43e4f7771456e5c2a06ed669605b797\"\u003e\u003ccode\u003e40ff027\u003c/code\u003e\u003c/a\u003e sqlite: add DBStatus wrapper for sqlite3_db_status + pcache spill-I/O benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/6a28fe7d28a1c7de553ae4d9dc797f59c45f3563\"\u003e\u003ccode\u003e6a28fe7\u003c/code\u003e\u003c/a\u003e HACKING.md: document CHANGELOG versioning + MR integration flow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/adff4b17551c6663f85f2b13400a44887c91a440\"\u003e\u003ccode\u003eadff4b1\u003c/code\u003e\u003c/a\u003e Merge branch 'pcache-shared-cache-draft' into 'master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/14e5790eee01be325551a5ffa20d3c9788bc6135\"\u003e\u003ccode\u003e14e5790\u003c/code\u003e\u003c/a\u003e vendor: regenerate freebsd/arm vec at SQLite 3.53.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/8725c22279f2bbcac7a9c661787bd3f69d66ea6d\"\u003e\u003ccode\u003e8725c22\u003c/code\u003e\u003c/a\u003e Add freebsd/386 + freebsd/arm targets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/73050dce0e8a597fea764c9b1d98689d3387f15a\"\u003e\u003ccode\u003e73050dc\u003c/code\u003e\u003c/a\u003e Merge branch 'pcache-pool-polish' into 'master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/1897fdd636a034eeb5dde210365c0018ebfae09c\"\u003e\u003ccode\u003e1897fdd\u003c/code\u003e\u003c/a\u003e CHANGELOG.md: consolidate untagged v1.53.0/v1.54.0 into one v1.53.0 section\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://gitlab.com/cznic/sqlite/compare/v1.50.1...v1.53.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/skaphos/berth/pull/53","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/skaphos%2Fberth/issues/53","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/53/packages"},{"uuid":"4705475517","node_id":"PR_kwDOPfH5sc7onYG7","number":9,"state":"open","title":"Bump the go_modules group across 4 directories with 4 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-20T06:49:05.000Z","updated_at":"2026-06-20T06:50:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":4,"packages":[{"name":"go.opentelemetry.io/otel","old_version":"1.39.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.4","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/ydb-platform/ydb-go-sdk/v3","old_version":"3.104.7","new_version":"3.134.2","repository_url":"https://github.com/ydb-platform/ydb-go-sdk"},{"name":"go.opentelemetry.io/otel","old_version":"1.39.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"github.com/go-chi/chi/v5","old_version":"5.2.2","new_version":"5.2.4","repository_url":"https://github.com/go-chi/chi"},{"name":"go.opentelemetry.io/otel","old_version":"1.39.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 3 updates in the /packages/db directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) and [github.com/ydb-platform/ydb-go-sdk/v3](https://github.com/ydb-platform/ydb-go-sdk).\nBumps the go_modules group with 1 update in the /packages/docker-reverse-proxy directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 1 update in the /packages/envd directory: [github.com/go-chi/chi/v5](https://github.com/go-chi/chi).\nBumps the go_modules group with 1 update in the /tests/integration directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.4 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.4...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ydb-platform/ydb-go-sdk/v3` from 3.104.7 to 3.134.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/releases\"\u003egithub.com/ydb-platform/ydb-go-sdk/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.134.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003etable.Session.Execute\u003c/code\u003e ignoring \u003ccode\u003eoptions.WithCommit()\u003c/code\u003e so transactions were not committed when the option was passed\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.134.1...v3.134.2\"\u003ev3.134.1...v3.134.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.134.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChanged multi-partition topic writer (\u003ccode\u003etopicoptions.WithWriteToManyPartitions\u003c/code\u003e) so \u003ccode\u003eWrite\u003c/code\u003e and \u003ccode\u003eFlush\u003c/code\u003e block until internal initialization completes, consistent with single-partition writers\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.134.0...v3.134.1\"\u003ev3.134.0...v3.134.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.134.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003esugar.RemoveRecursive()\u003c/code\u003e for directories containing external data sources or external tables\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003etable.DescribeExternalDataSource()\u003c/code\u003e and \u003ccode\u003etable.DescribeExternalTable()\u003c/code\u003e methods for describing external data sources and external tables\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.133.1...v3.134.0\"\u003ev3.133.1...v3.134.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.133.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eTopicListener.ReadSessionID()\u003c/code\u003e getter\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.133.0...v3.133.1\"\u003ev3.133.0...v3.133.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.133.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eydb.WithIssuesHandler\u003c/code\u003e context option for surfacing YDB \u003ccode\u003eQueryService\u003c/code\u003e issues to \u003ccode\u003edatabase/sql\u003c/code\u003e callers\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.132.0...v3.133.0\"\u003ev3.132.0...v3.133.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.132.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003etopic.Client.CommitOffset()\u003c/code\u003e method for committing a consumer offset without an active read session\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003etopicreader.Reader.ReadSessionID()\u003c/code\u003e method for obtaining the current read session identifier\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.131.0...v3.132.0\"\u003ev3.131.0...v3.132.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.131.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eydb.WithStatsModeBasic\u003c/code\u003e, \u003ccode\u003eydb.WithStatsModeFull\u003c/code\u003e, \u003ccode\u003eydb.WithStatsModeProfile\u003c/code\u003e context options for collecting query statistics via \u003ccode\u003edatabase/sql\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.130.0...v3.131.0\"\u003ev3.130.0...v3.131.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.130.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChanged default for \u003ccode\u003edatabase/sql\u003c/code\u003e driver from \u003ccode\u003eTABLE\u003c/code\u003e service to \u003ccode\u003eQUERY\u003c/code\u003e service\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003e__ydb_partition_key\u003c/code\u003e metadata key to messages for topic writer to store the key used to choose the partition\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.129.0...v3.130.0\"\u003ev3.129.0...v3.130.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.129.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003econfig.WithBuildInfo\u003c/code\u003e option to append child frameworks to \u003ccode\u003ex-ydb-sdk-build-info\u003c/code\u003e header for all API requests\u003c/li\u003e\n\u003cli\u003eAutomatically added (if used) \u003ccode\u003edatabase/sql\u003c/code\u003e framework to \u003ccode\u003ex-ydb-sdk-build-info\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.128.4...v3.129.0\"\u003ev3.128.4...v3.129.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.128.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/blob/master/CHANGELOG.md\"\u003egithub.com/ydb-platform/ydb-go-sdk/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.134.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003etable.Session.Execute\u003c/code\u003e ignoring \u003ccode\u003eoptions.WithCommit()\u003c/code\u003e so transactions were not committed when the option was passed\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.134.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChanged multi-partition topic writer (\u003ccode\u003etopicoptions.WithWriteToManyPartitions\u003c/code\u003e) so \u003ccode\u003eWrite\u003c/code\u003e and \u003ccode\u003eFlush\u003c/code\u003e block until internal initialization completes, consistent with single-partition writers\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.134.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003esugar.RemoveRecursive()\u003c/code\u003e for directories containing external data sources or external tables\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003etable.DescribeExternalDataSource()\u003c/code\u003e and \u003ccode\u003etable.DescribeExternalTable()\u003c/code\u003e methods for describing external data sources and external tables\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.133.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eTopicListener.ReadSessionID()\u003c/code\u003e getter\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.133.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eydb.WithIssuesHandler\u003c/code\u003e context option for surfacing YDB \u003ccode\u003eQueryService\u003c/code\u003e issues to \u003ccode\u003edatabase/sql\u003c/code\u003e callers\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.132.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003etopic.Client.CommitOffset()\u003c/code\u003e method for committing a consumer offset without an active read session\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003etopicreader.Reader.ReadSessionID()\u003c/code\u003e method for obtaining the current read session identifier\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.131.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eydb.WithStatsModeBasic\u003c/code\u003e, \u003ccode\u003eydb.WithStatsModeFull\u003c/code\u003e, \u003ccode\u003eydb.WithStatsModeProfile\u003c/code\u003e context options for collecting query statistics via \u003ccode\u003edatabase/sql\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.130.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChanged default for \u003ccode\u003edatabase/sql\u003c/code\u003e driver from \u003ccode\u003eTABLE\u003c/code\u003e service to \u003ccode\u003eQUERY\u003c/code\u003e service\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003e__ydb_partition_key\u003c/code\u003e metadata key to messages for topic writer to store the key used to choose the partition\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.129.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003econfig.WithBuildInfo\u003c/code\u003e option to append child frameworks to \u003ccode\u003ex-ydb-sdk-build-info\u003c/code\u003e header for all API requests\u003c/li\u003e\n\u003cli\u003eAutomatically added (if used) \u003ccode\u003edatabase/sql\u003c/code\u003e framework to \u003ccode\u003ex-ydb-sdk-build-info\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed panic when topic writer is closed unexpectedly\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed panic and \u003ccode\u003eunsupported type\u003c/code\u003e error when passing a nil pointer to a \u003ccode\u003ejson.Marshaler\u003c/code\u003e-implementing type as a \u003ccode\u003edatabase/sql\u003c/code\u003e query parameter (\u003ccode\u003etoType\u003c/code\u003e now handles \u003ccode\u003ejson.Marshaler\u003c/code\u003e and returns \u003ccode\u003etypes.JSON\u003c/code\u003e, matching the existing \u003ccode\u003etoValue\u003c/code\u003e behaviour)\u003c/li\u003e\n\u003cli\u003eSupported pool of decoders, which implement ResettableReader interface\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDowngraded direct dependency \u003ccode\u003egoogle.golang.org/grpc\u003c/code\u003e to v1.78.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ego_query_mode\u003c/code\u003e / \u003ccode\u003equery_mode\u003c/code\u003e DSN parameters for table-backed modes (\u003ccode\u003edata\u003c/code\u003e, \u003ccode\u003escan\u003c/code\u003e, \u003ccode\u003escheme\u003c/code\u003e, \u003ccode\u003escripting\u003c/code\u003e) to select the TABLE processor so the default query mode applies\u003c/li\u003e\n\u003cli\u003eFixed a bug where the topic writer was not able to resend messages when the partition was split\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew options for topicwriter:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eWithProducerIDPrefix\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithPartitioningKeyHasher\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithPartitionChooserStrategy\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/6f1e6e33415ae1eb510998c3822cb729e66edf60\"\u003e\u003ccode\u003e6f1e6e3\u003c/code\u003e\u003c/a\u003e Release v3.134.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/25dcff4c41153f1f9413512ba12999b40bf7154d\"\u003e\u003ccode\u003e25dcff4\u003c/code\u003e\u003c/a\u003e Fix table.Session.Execute ignoring options.WithCommit() (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2091\"\u003e#2091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/66fc52ecf59f2468d428a9e5005d9fb926dad043\"\u003e\u003ccode\u003e66fc52e\u003c/code\u003e\u003c/a\u003e Release v3.134.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/042c9243cd61cecd8a53b092c1da0983bd7ec9e3\"\u003e\u003ccode\u003e042c924\u003c/code\u003e\u003c/a\u003e LOGBROKER-10368 Add wait init to multiwriter (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2088\"\u003e#2088\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/c1ddb52f3fc7808eb95614dcaf8a460b5d0e8ec1\"\u003e\u003ccode\u003ec1ddb52\u003c/code\u003e\u003c/a\u003e Remove unused code in database/sql connector (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2085\"\u003e#2085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/d9d2943eb28cde8ac0e038045870bf08e2c20de8\"\u003e\u003ccode\u003ed9d2943\u003c/code\u003e\u003c/a\u003e LOGBROKER-10206 Add tests (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2075\"\u003e#2075\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/f3aeeb14d9aa27769be738a396b89407368e4256\"\u003e\u003ccode\u003ef3aeeb1\u003c/code\u003e\u003c/a\u003e Modernize Go codebase: adopt modern idioms and upgrade CI tooling (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2082\"\u003e#2082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/f2452c1545d78452231445f03264e89c18e9ea9f\"\u003e\u003ccode\u003ef2452c1\u003c/code\u003e\u003c/a\u003e Release v3.134.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/de3907a808e40ccdf1c94e50d28e11c45da6e94b\"\u003e\u003ccode\u003ede3907a\u003c/code\u003e\u003c/a\u003e Describe external data source / external table (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2079\"\u003e#2079\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/589dacfe18eee68b6ca650b48d6e84d7460f9d49\"\u003e\u003ccode\u003e589dacf\u003c/code\u003e\u003c/a\u003e Release v3.133.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.104.7...v3.134.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-chi/chi/v5` from 5.2.2 to 5.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-chi/chi/releases\"\u003egithub.com/go-chi/chi/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd pathvalue example to README and implement PathValue handler. by \u003ca href=\"https://github.com/catatsuy\"\u003e\u003ccode\u003e@​catatsuy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/985\"\u003ego-chi/chi#985\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow multiple whitespace between method \u0026amp; pattern by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1013\"\u003ego-chi/chi#1013\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential nil dereference by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1008\"\u003ego-chi/chi#1008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(mux): support http.Request.Pattern in Go 1.23 by \u003ca href=\"https://github.com/Gusted\"\u003e\u003ccode\u003e@​Gusted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/986\"\u003ego-chi/chi#986\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix/608 - Fix flaky Throttle middleware test by synchronizing token usage by \u003ca href=\"https://github.com/OtavioBernardes\"\u003e\u003ccode\u003e@​OtavioBernardes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1016\"\u003ego-chi/chi#1016\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOptimize throttle middleware by avoiding unnecessary timer creation by \u003ca href=\"https://github.com/vasayxtx\"\u003e\u003ccode\u003e@​vasayxtx\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1011\"\u003ego-chi/chi#1011\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSimplify wildcard replacement in route patterns by \u003ca href=\"https://github.com/srpvpn\"\u003e\u003ccode\u003e@​srpvpn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1012\"\u003ego-chi/chi#1012\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace methodTypString func with reverseMethodMap by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1018\"\u003ego-chi/chi#1018\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1008\"\u003ego-chi/chi#1008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Gusted\"\u003e\u003ccode\u003e@​Gusted\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/986\"\u003ego-chi/chi#986\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/OtavioBernardes\"\u003e\u003ccode\u003e@​OtavioBernardes\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1016\"\u003ego-chi/chi#1016\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/srpvpn\"\u003e\u003ccode\u003e@​srpvpn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1012\"\u003ego-chi/chi#1012\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-chi/chi/compare/v5.2.2...v5.2.3\"\u003ehttps://github.com/go-chi/chi/compare/v5.2.2...v5.2.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/6eb35881c0e438ffb663ddbad3a61babaa5e5d8a\"\u003e\u003ccode\u003e6eb3588\u003c/code\u003e\u003c/a\u003e middleware: harden RedirectSlashes handler (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1044\"\u003e#1044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/de0d16e6d23092aeef0b6e78f146799369160651\"\u003e\u003ccode\u003ede0d16e\u003c/code\u003e\u003c/a\u003e Update comment about min Go version (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1023\"\u003e#1023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/9fb4a15daa6d4ccd5e7286c1227d58872f89f4cb\"\u003e\u003ccode\u003e9fb4a15\u003c/code\u003e\u003c/a\u003e update reverseMethodMap in RegisterMethod (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1022\"\u003e#1022\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/51c977c2da872d16d05531d5bc49ccd027599ce2\"\u003e\u003ccode\u003e51c977c\u003c/code\u003e\u003c/a\u003e Refactor to use atomic type (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1019\"\u003e#1019\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/563ab118626b47810852303c3a60c2106a6bc23c\"\u003e\u003ccode\u003e563ab11\u003c/code\u003e\u003c/a\u003e Refactor graceful shutdown example (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/994\"\u003e#994\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/a52c582b532cd261dbedc4c811d809d6e024c1ff\"\u003e\u003ccode\u003ea52c582\u003c/code\u003e\u003c/a\u003e Bump minimum Go and use new features (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1017\"\u003e#1017\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/9b9fb55def404397748a9fc7e044efe9db1d618e\"\u003e\u003ccode\u003e9b9fb55\u003c/code\u003e\u003c/a\u003e Replace methodTypString func with reverseMethodMap (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1018\"\u003e#1018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/0265fcd786c95e79fe50423a35fa2770ef36683a\"\u003e\u003ccode\u003e0265fcd\u003c/code\u003e\u003c/a\u003e refactor: iterative wildcard collapsing and add test for consecutive wildcard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/cf537d4016bf258bd9bdbe0dccbfdeeac364423f\"\u003e\u003ccode\u003ecf537d4\u003c/code\u003e\u003c/a\u003e Optimize throttle middleware by avoiding unnecessary timer creation (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1011\"\u003e#1011\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/9040e95a07b47df59d96f3cb0e4bac107a931d46\"\u003e\u003ccode\u003e9040e95\u003c/code\u003e\u003c/a\u003e fix/608 - Fix flaky Throttle middleware test by synchronizing token usage (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-chi/chi/compare/v5.2.2...v5.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/GlacierEQ/infra/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nUpdate core Go deps across db, reverse-proxy, envd, and integration packages, and bump the module Go version to 1.25 for compatibility and security. Highlights: `pgx` security fix, OpenTelemetry 1.43, `ydb-go-sdk` bug fixes, and `chi` router updates.\n\n- **Dependencies**\n  - `go.opentelemetry.io/otel` → 1.43.0 across packages (perf improvements; stricter OTLP HTTP TLS checks).\n  - `github.com/jackc/pgx/v5` → 5.9.2 (fixes SQL injection in simple protocol with dollar-quoted strings; protocol/auth updates).\n  - `github.com/ydb-platform/ydb-go-sdk/v3` → 3.134.2 (fixes `options.WithCommit()` not committing; new topic/read session APIs).\n  - `github.com/go-chi/chi/v5` → 5.2.4 (adds `http.Request.Pattern` support; middleware hardening).\n  - `google.golang.org/grpc` → 1.81.1 and `google.golang.org/protobuf` → 1.36.11; assorted `golang.org/x/*` bumps.\n\n- **Migration**\n  - Build with Go 1.25+ (`go` directive updated in multiple modules).\n  - For OTLP HTTP exporters, do not combine an insecure endpoint with TLS settings; it now returns an error.\n\n\u003csup\u003eWritten for commit 6fa526aeeed2d4068f3eea72f1389894e296c6d0. Summary will update on new commits.\u003c/sup\u003e\n\n\u003ca href=\"https://cubic.dev/pr/GlacierEQ/infra/pull/9?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"Review in cubic\" src=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/GlacierEQ/infra/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Finfra/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"},{"uuid":"4689820989","node_id":"PR_kwDOS99KT87nzr_G","number":9,"state":"open","title":"Bump github.com/jackc/pgx/v5 from 5.7.4 to 5.9.2 in /vcp-core","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-18T06:33:23.000Z","updated_at":"2026-06-30T05:32:29.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.7.4","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"}],"path":"/vcp-core","ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.7.4 to 5.9.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.4...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.7.4\u0026new-version=5.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/CSC-Security-sandbox/vcp-fresh-breakability/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/CSC-Security-sandbox/vcp-fresh-breakability/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CSC-Security-sandbox%2Fvcp-fresh-breakability/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"},{"uuid":"4683351082","node_id":"PR_kwDOR1S7DM7nehch","number":50,"state":"closed","title":"chore(deps): bump the go-minor-and-patch group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-24T12:44:13.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-17T12:45:51.000Z","updated_at":"2026-06-24T12:44:15.000Z","time_to_close":604702,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-and-patch","update_count":15,"packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/mark3labs/mcp-go","old_version":"0.54.1","new_version":"0.55.0","repository_url":"https://github.com/mark3labs/mcp-go"},{"name":"github.com/minio/minio-go/v7","old_version":"7.1.0","new_version":"7.2.0","repository_url":"https://github.com/minio/minio-go"},{"name":"github.com/nwaples/rardecode/v2","old_version":"2.2.3","new_version":"2.2.5","repository_url":"https://github.com/nwaples/rardecode"},{"name":"github.com/redis/go-redis/v9","old_version":"9.19.0","new_version":"9.20.1","repository_url":"https://github.com/redis/go-redis"},{"name":"go.opentelemetry.io/otel","old_version":"1.43.0","new_version":"1.44.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","old_version":"1.43.0","new_version":"1.44.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"golang.org/x/crypto","old_version":"0.52.0","new_version":"0.53.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/image","old_version":"0.41.0","new_version":"0.42.0","repository_url":"https://github.com/golang/image"},{"name":"golang.org/x/net","old_version":"0.55.0","new_version":"0.56.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/time","old_version":"0.11.0","new_version":"0.15.0","repository_url":"https://github.com/golang/time"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-and-patch group with 11 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.54.1` | `0.55.0` |\n| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.1.0` | `7.2.0` |\n| [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode) | `2.2.3` | `2.2.5` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.19.0` | `9.20.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |\n| [golang.org/x/image](https://github.com/golang/image) | `0.41.0` | `0.42.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.55.0` | `0.56.0` |\n| [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.15.0` |\n\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mark3labs/mcp-go` from 0.54.1 to 0.55.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/43c2ca0fedc74f7f21e400558faf757aee25b956\"\u003e\u003ccode\u003e43c2ca0\u003c/code\u003e\u003c/a\u003e oauth: return error instead of (nil, nil) from getServerMetadata (\u003ca href=\"https://redirect.github.com/mark3labs/mcp-go/issues/903\"\u003e#903\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mark3labs/mcp-go/issues/904\"\u003e#904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/3b66aa7b754000017158de364078e792fb900edc\"\u003e\u003ccode\u003e3b66aa7\u003c/code\u003e\u003c/a\u003e mcptest: add SetSamplingHandler and SetElicitationHandler (\u003ca href=\"https://redirect.github.com/mark3labs/mcp-go/issues/902\"\u003e#902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/42bc0b214d0039d6a4e6b3abd37d8e6dd0bf2cd1\"\u003e\u003ccode\u003e42bc0b2\u003c/code\u003e\u003c/a\u003e feat(otel): WithServerLogging — OTEL slog bridge for server structured logs (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/d972f3fe17a0526e751a8bb1146b40480938ad6d\"\u003e\u003ccode\u003ed972f3f\u003c/code\u003e\u003c/a\u003e docs(prompts): add review-pr kit prompt for Go PRs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/d5c0727c06ac2f12295aa9baf44b31ad477af20b\"\u003e\u003ccode\u003ed5c0727\u003c/code\u003e\u003c/a\u003e feat(server): WithLogger consolidates structured logging onto *slog.Logger (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/3f1c760f6d6ad6019d3e8c8257a4110e1115de0f\"\u003e\u003ccode\u003e3f1c760\u003c/code\u003e\u003c/a\u003e feat(tracing): add MetaPropagator for W3C trace context via MCP _meta (SEP-41...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/2cacbe77980807b89e315f0fb246c71f51c643ee\"\u003e\u003ccode\u003e2cacbe7\u003c/code\u003e\u003c/a\u003e fix: enforce tool/prompt filters at call time, not just list time (\u003ca href=\"https://redirect.github.com/mark3labs/mcp-go/issues/898\"\u003e#898\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mark3labs/mcp-go/compare/v0.54.1...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/minio/minio-go/v7` from 7.1.0 to 7.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/minio/minio-go/releases\"\u003egithub.com/minio/minio-go/v7's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse go tool for ci-lint check by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/minio/minio-go/pull/2229\"\u003eminio/minio-go#2229\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename github.com/go-ini/ini to gopkg.in/ini.v1 by \u003ca href=\"https://github.com/ramondeklein\"\u003e\u003ccode\u003e@​ramondeklein\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/minio/minio-go/pull/2232\"\u003eminio/minio-go#2232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd RDMA / NVIDIA GPU Direct Storage support by \u003ca href=\"https://github.com/harshavardhana\"\u003e\u003ccode\u003e@​harshavardhana\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/minio/minio-go/pull/2233\"\u003eminio/minio-go#2233\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/minio/minio-go/compare/v7.1.0...v7.2.0\"\u003ehttps://github.com/minio/minio-go/compare/v7.1.0...v7.2.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/33792ec24ba19828dc0191f2a7ed5ebc3197d407\"\u003e\u003ccode\u003e33792ec\u003c/code\u003e\u003c/a\u003e Add RDMA / NVIDIA GPU Direct Storage support (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2233\"\u003e#2233\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/6bb13f7c70cd7415f45bfb389b565781040eed2e\"\u003e\u003ccode\u003e6bb13f7\u003c/code\u003e\u003c/a\u003e Rename github.com/go-ini/ini to gopkg.in/ini.v1 (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2232\"\u003e#2232\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/d6341dcaf5f8647e6ec8898b35f5e1cd679ec0ad\"\u003e\u003ccode\u003ed6341dc\u003c/code\u003e\u003c/a\u003e Use go tool for ci-lint check (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2229\"\u003e#2229\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/minio/minio-go/compare/v7.1.0...v7.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/nwaples/rardecode/v2` from 2.2.3 to 2.2.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/58597b773a5386bb482066a34baf76b41fe56d76\"\u003e\u003ccode\u003e58597b7\u003c/code\u003e\u003c/a\u003e Update pkg.go.dev badge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/b4f6ff7f4bcfefbc10fbfb05c67774e77b887845\"\u003e\u003ccode\u003eb4f6ff7\u003c/code\u003e\u003c/a\u003e fix write error being ignored\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/e4be54a74da92b44b1847957a5c179612f5215c7\"\u003e\u003ccode\u003ee4be54a\u003c/code\u003e\u003c/a\u003e use rar5 file header constants\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/97a50138ff098ddcc29fde1aebd1d359cca93823\"\u003e\u003ccode\u003e97a5013\u003c/code\u003e\u003c/a\u003e use switch statements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/19f7d8d90c5db89d9fac661bcef46380dd313423\"\u003e\u003ccode\u003e19f7d8d\u003c/code\u003e\u003c/a\u003e use binary library functions for readbuf\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/e7fc7443c98d85c67bd0e72f0519ba2added8a1a\"\u003e\u003ccode\u003ee7fc744\u003c/code\u003e\u003c/a\u003e run gofix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/db67bb3c4d1c2b797059cb59846607ea0aa9744d\"\u003e\u003ccode\u003edb67bb3\u003c/code\u003e\u003c/a\u003e simplify copyBytes()\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nwaples/rardecode/compare/v2.2.3...v2.2.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.19.0 to 9.20.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e9.20.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 push peeking\u003c/strong\u003e: \u003ccode\u003ePeekPushNotificationName\u003c/code\u003e no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector params\u003c/strong\u003e: Vector data is now always sent via \u003ccode\u003ePARAMS\u003c/code\u003e with auto-generated param names (\u003ccode\u003e__vector_param_N\u003c/code\u003e, with collision avoidance) when \u003ccode\u003eVectorParamName\u003c/code\u003e is omitted, since Redis no longer accepts inline vector blobs; the \u003ccode\u003eFTHybridOptions.Params\u003c/code\u003e map is no longer mutated, so the same options struct can be reused across calls (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3844\"\u003e#3844\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e forward compatibility\u003c/strong\u003e: Unknown shard- and node-level attributes in the \u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e reply are now skipped via \u003ccode\u003eDiscardNext()\u003c/code\u003e instead of erroring, so clients keep working when the server introduces new fields (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3843\"\u003e#3843\u003c/a\u003e) by \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub double reconnect\u003c/strong\u003e: \u003ccode\u003ePubSub.releaseConn\u003c/code\u003e no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3833\"\u003e#3833\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.20.0\u003c/h2\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md\"\u003egithub.com/redis/go-redis/v9's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.20.1 (2026-06-11)\u003c/h1\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 push peeking\u003c/strong\u003e: \u003ccode\u003ePeekPushNotificationName\u003c/code\u003e no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector params\u003c/strong\u003e: Vector data is now always sent via \u003ccode\u003ePARAMS\u003c/code\u003e with auto-generated param names (\u003ccode\u003e__vector_param_N\u003c/code\u003e, with collision avoidance) when \u003ccode\u003eVectorParamName\u003c/code\u003e is omitted, since Redis no longer accepts inline vector blobs; the \u003ccode\u003eFTHybridOptions.Params\u003c/code\u003e map is no longer mutated, so the same options struct can be reused across calls (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3844\"\u003e#3844\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e forward compatibility\u003c/strong\u003e: Unknown shard- and node-level attributes in the \u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e reply are now skipped via \u003ccode\u003eDiscardNext()\u003c/code\u003e instead of erroring, so clients keep working when the server introduces new fields (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3843\"\u003e#3843\u003c/a\u003e) by \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub double reconnect\u003c/strong\u003e: \u003ccode\u003ePubSub.releaseConn\u003c/code\u003e no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3833\"\u003e#3833\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003e9.20.0 (2026-05-28)\u003c/h1\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8-rc1\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a13416bf1c0556075b843dd0a9cb6db3b3cf2789\"\u003e\u003ccode\u003ea13416b\u003c/code\u003e\u003c/a\u003e chore(release): 9.20.1 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3847\"\u003e#3847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/10dc44f424d58b9c2b4df29e529ca92a2f8fa986\"\u003e\u003ccode\u003e10dc44f\u003c/code\u003e\u003c/a\u003e fix(push): fix peeking when push name is truncated (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3842\"\u003e#3842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/e1a2d68b27e70ca8f3ff5eec61d0dd2b74554670\"\u003e\u003ccode\u003ee1a2d68\u003c/code\u003e\u003c/a\u003e fix(ft.hybrid): Always generate vector param names if they are not provided b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a4b234f4a4f2551d1179181bbc136db132bf5912\"\u003e\u003ccode\u003ea4b234f\u003c/code\u003e\u003c/a\u003e chore(deps): bump codecov/codecov-action from 6 to 7 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3845\"\u003e#3845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/974e717dbf3008497e54aec34636e34452e6872b\"\u003e\u003ccode\u003e974e717\u003c/code\u003e\u003c/a\u003e fix(command): ignore unknown fields in CLUSTER SHARDS response (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3843\"\u003e#3843\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/65d6abde0d812234d26763930b5e84ff05963c96\"\u003e\u003ccode\u003e65d6abd\u003c/code\u003e\u003c/a\u003e fix(pubsub): prevent double reconnect in releaseConn (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3833\"\u003e#3833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/7d05dd3b7ce12a7b8c7923f73da0fede3bfa7c03\"\u003e\u003ccode\u003e7d05dd3\u003c/code\u003e\u003c/a\u003e chore(release): v9.20.0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3832\"\u003e#3832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/97568827124c58f1338d78b9535edc0eb9435453\"\u003e\u003ccode\u003e9756882\u003c/code\u003e\u003c/a\u003e fix(test): make waitForSentinelClusterStable robust to disconnected r… (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3830\"\u003e#3830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/875ce21e4862a7913edb5308b16869141ce5e833\"\u003e\u003ccode\u003e875ce21\u003c/code\u003e\u003c/a\u003e fix(sentinel): do not close sentinel when replica list is empty (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3795\"\u003e#3795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/8a027f21ba2686511e1a6a159f0c6888f11d48e7\"\u003e\u003ccode\u003e8a027f2\u003c/code\u003e\u003c/a\u003e chore(ci): add govulncheck workflow (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3779\"\u003e#3779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.19.0...v9.20.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/trace's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.o...\n\n_Description has been truncated_","html_url":"https://github.com/CollinJAycock/OnScreen/pull/50","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CollinJAycock%2FOnScreen/issues/50","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/50/packages"},{"uuid":"4663260625","node_id":"PR_kwDON0P-vs7mcLza","number":258,"state":"closed","title":"chore(deps): bump github.com/jackc/pgx/v5 from 5.7.2 to 5.10.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-28T03:46:08.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-15T08:15:23.000Z","updated_at":"2026-06-28T03:46:10.000Z","time_to_close":1107045,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.7.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.7.2 to 5.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.7.2\u0026new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/VersusControl/versus-incident/pull/258","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/VersusControl%2Fversus-incident/issues/258","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/258/packages"},{"uuid":"4662514998","node_id":"PR_kwDOR7gtkc7mZvcI","number":37,"state":"closed","title":"chore(deps)(deps): bump the go-minor-patch group across 1 directory with 12 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-18T18:31:01.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-15T06:11:28.000Z","updated_at":"2026-06-18T18:31:03.000Z","time_to_close":303573,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)(deps): bump","group_name":"go-minor-patch","update_count":12,"packages":[{"name":"github.com/caarlos0/env/v11","old_version":"11.2.2","new_version":"11.4.1","repository_url":"https://github.com/caarlos0/env"},{"name":"github.com/coreos/go-oidc/v3","old_version":"3.11.0","new_version":"3.18.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/go-chi/chi/v5","old_version":"5.1.0","new_version":"5.3.0","repository_url":"https://github.com/go-chi/chi"},{"name":"github.com/go-chi/cors","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/go-chi/cors"},{"name":"github.com/golang-jwt/jwt/v5","old_version":"5.2.2","new_version":"5.3.1","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.0","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/pressly/goose/v3","old_version":"3.22.1","new_version":"3.27.1","repository_url":"https://github.com/pressly/goose"},{"name":"github.com/prometheus/client_golang","old_version":"1.20.5","new_version":"1.23.2","repository_url":"https://github.com/prometheus/client_golang"},{"name":"github.com/rs/zerolog","old_version":"1.33.0","new_version":"1.35.1","repository_url":"https://github.com/rs/zerolog"},{"name":"golang.org/x/crypto","old_version":"0.52.0","new_version":"0.53.0","repository_url":"https://github.com/golang/crypto"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 10 updates in the /backend directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/caarlos0/env/v11](https://github.com/caarlos0/env) | `11.2.2` | `11.4.1` |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.11.0` | `3.18.0` |\n| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.1.0` | `5.3.0` |\n| [github.com/go-chi/cors](https://github.com/go-chi/cors) | `1.2.1` | `1.2.2` |\n| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.2` | `5.3.1` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.0` | `5.10.0` |\n| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.22.1` | `3.27.1` |\n| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.23.2` |\n| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.33.0` | `1.35.1` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |\n\n\nUpdates `github.com/caarlos0/env/v11` from 11.2.2 to 11.4.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/caarlos0/env/releases\"\u003egithub.com/caarlos0/env/v11's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev11.4.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e6daeb06ac7e3c9532a7eaa5768d45917393b7480: fix: use Key instead of OwnKey in rawEnvVars to properly reference existing defaults in complex structs (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/412\"\u003e#412\u003c/a\u003e) (\u003ca href=\"https://github.com/AndrewChubatiuk\"\u003e\u003ccode\u003e@​AndrewChubatiuk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1ff55e6c9733833ce75d62b345916a407dbe4158: docs: adaptive starchart (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/416\"\u003e#416\u003c/a\u003e) (\u003ca href=\"https://github.com/alexandear\"\u003e\u003ccode\u003e@​alexandear\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther work\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecf4a9682420b025e44b4773fd7ee0be48bb68b2f: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/411\"\u003e#411\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e33faf6f333c2c3dacef2991825f8e03960a2c0cb: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/417\"\u003e#417\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e0cb635b62488f4d310809a82a8832cedc9aa94eb: ci(deps): bump the actions group with 6 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/415\"\u003e#415\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ea72d89a8930fc800372a6a338a1acf33e5cc3a56: ci: update release config (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cem\u003eReleased with \u003ca href=\"https://goreleaser.com/pro\"\u003eGoReleaser Pro\u003c/a\u003e!\u003c/em\u003e\u003c/p\u003e\n\u003ch2\u003ev11.4.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eNew Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e2be9960e75cc5f053dcb89c64e43de19765fd154: feat: option to set defaults for zero values only (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/325\"\u003e#325\u003c/a\u003e) (\u003ca href=\"https://github.com/dnovikoff\"\u003e\u003ccode\u003e@​dnovikoff\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ed3505f14213c309f8ca3b0b1e468284749456dde: fix: all new lint issues, update golangci-lint (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eaaa45113e5eb50e2a243959041452bbab40ae3cc: fix: lint issues (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8917d78b4247be8a3f555ccee03305c7763471e4: docs: clarify example a bit (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther work\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e7b10cf56e20fe41042b7a7148555990b64b85f95: ci(deps): bump github/codeql-action in the actions group (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/400\"\u003e#400\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ec98ad844e1e479526ef6b4069e0b0f1ced5c953d: ci(deps): bump github/codeql-action in the actions group (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/410\"\u003e#410\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e2ca9b08cafe0bc271636c15fa34d156733631123: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/393\"\u003e#393\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ecd5c220dbceb1d1353263a5d6fe3f6816aa1217f: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/396\"\u003e#396\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e4d25a4659f428119ce5eaf3ea579176b9161c6e0: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/402\"\u003e#402\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ec660cc91db76b02de72e8ab7e9ad348edef3f891: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/403\"\u003e#403\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e3a3ea05453bd16685c807ba089b20a82033a02f1: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/405\"\u003e#405\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ed28373e3a047e93ad21676ea9878e5dd1ca157f7: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/408\"\u003e#408\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e7b5005693b54a0014e4d3a2ee6192c7bce336af7: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/397\"\u003e#397\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e6b2db30d1977183eb8a9732c01ff4e6788565a6e: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/399\"\u003e#399\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ef33230e8e7e0377c9cdb65d43940db1666061766: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/404\"\u003e#404\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e2dc7aec137983c972c29779e951011ddb496fc8b: ci(sec): add codeql, govulncheck, grype (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e82412ce6900082095e9e4b66f5024c0e67ff3fb8: ci: build perms (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e02495c42107d77c9365aef6a031b7089f734af3b: ci: build perms (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee5b3c2c879e43e458e060e2a61fb525e161b7715: ci: lint workflow perms (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e6690dfb3d314535320f3a30365c52f6fb40c8992: ci: pin github actions versions (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e548a7a66c9d5504d8f9c0488ee47a05ae453c7e2: ci: update dependabot (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/a72d89a8930fc800372a6a338a1acf33e5cc3a56\"\u003e\u003ccode\u003ea72d89a\u003c/code\u003e\u003c/a\u003e ci: update release config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/6daeb06ac7e3c9532a7eaa5768d45917393b7480\"\u003e\u003ccode\u003e6daeb06\u003c/code\u003e\u003c/a\u003e fix: use Key instead of OwnKey in rawEnvVars to properly reference existing d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/33faf6f333c2c3dacef2991825f8e03960a2c0cb\"\u003e\u003ccode\u003e33faf6f\u003c/code\u003e\u003c/a\u003e ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/417\"\u003e#417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/1ff55e6c9733833ce75d62b345916a407dbe4158\"\u003e\u003ccode\u003e1ff55e6\u003c/code\u003e\u003c/a\u003e docs: adaptive starchart (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/416\"\u003e#416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/0cb635b62488f4d310809a82a8832cedc9aa94eb\"\u003e\u003ccode\u003e0cb635b\u003c/code\u003e\u003c/a\u003e ci(deps): bump the actions group with 6 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/415\"\u003e#415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/cf4a9682420b025e44b4773fd7ee0be48bb68b2f\"\u003e\u003ccode\u003ecf4a968\u003c/code\u003e\u003c/a\u003e ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/411\"\u003e#411\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/aaa45113e5eb50e2a243959041452bbab40ae3cc\"\u003e\u003ccode\u003eaaa4511\u003c/code\u003e\u003c/a\u003e fix: lint issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/4fe3f702002c48f73b892f12d128c215aa7731ee\"\u003e\u003ccode\u003e4fe3f70\u003c/code\u003e\u003c/a\u003e chore: dependabot update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/c98ad844e1e479526ef6b4069e0b0f1ced5c953d\"\u003e\u003ccode\u003ec98ad84\u003c/code\u003e\u003c/a\u003e ci(deps): bump github/codeql-action in the actions group (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/410\"\u003e#410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/d28373e3a047e93ad21676ea9878e5dd1ca157f7\"\u003e\u003ccode\u003ed28373e\u003c/code\u003e\u003c/a\u003e ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/408\"\u003e#408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/caarlos0/env/compare/v11.2.2...v11.4.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.11.0 to 3.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e.github: configure dependabot by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/477\"\u003ecoreos/go-oidc#477\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e.github: update go versions in CI by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/480\"\u003ecoreos/go-oidc#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/478\"\u003ecoreos/go-oidc#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/479\"\u003ecoreos/go-oidc#479\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidc: improve error message for mismatched issuer URLs by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/469\"\u003ecoreos/go-oidc#469\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.16.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: Remove unused time injection from RemoteKeySet by \u003ca href=\"https://github.com/ponimas\"\u003e\u003ccode\u003e@​ponimas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/466\"\u003ecoreos/go-oidc#466\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net dependency by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/467\"\u003ecoreos/go-oidc#467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/467\"\u003ecoreos/go-oidc#467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.15.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidc: verify the ID Token's signature before processing claims by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/464\"\u003ecoreos/go-oidc#464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.14.1...v3.15.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.14.1...v3.15.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.14.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidctest: fix import by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/457\"\u003ecoreos/go-oidc#457\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.14.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidc/oidctest: add new package by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/400\"\u003ecoreos/go-oidc#400\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/da6b3bfca8af72414ee0e6e8746585ff5d206003\"\u003e\u003ccode\u003eda6b3bf\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7f80694215d5eb5b28f851f35845439b1e1e9e5d\"\u003e\u003ccode\u003e7f80694\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7271de57587bb756318f9819796ba846b1ba875a\"\u003e\u003ccode\u003e7271de5\u003c/code\u003e\u003c/a\u003e .github: update go versions in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/3ccf20fdc4afab7c64881a108d6f4c17a4ecc24d\"\u003e\u003ccode\u003e3ccf20f\u003c/code\u003e\u003c/a\u003e .github: configure dependabot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/35b8e031bcac7fed73b96b09d42e6e233a6e6562\"\u003e\u003ccode\u003e35b8e03\u003c/code\u003e\u003c/a\u003e oidc: improve error message for mismatched issuer URLs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/e9584733f8bb6c4683d1e98b4fb22eee121f7dff\"\u003e\u003ccode\u003ee958473\u003c/code\u003e\u003c/a\u003e bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/69b167061fdb7270ef965f150ea6aabe11678728\"\u003e\u003ccode\u003e69b1670\u003c/code\u003e\u003c/a\u003e refactor: Remove unused time injection from RemoteKeySet\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/8d1e57e7e7fb4db0bac61cc200d43846ba071977\"\u003e\u003ccode\u003e8d1e57e\u003c/code\u003e\u003c/a\u003e oidc: verify the ID Token's signature before processing claims\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/a7c457eacb849c163a496b29274242474a8f44ab\"\u003e\u003ccode\u003ea7c457e\u003c/code\u003e\u003c/a\u003e oidctest: fix import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/aba1ce200a9dd76b14bbb455d4e5aea55e97cbb3\"\u003e\u003ccode\u003eaba1ce2\u003c/code\u003e\u003c/a\u003e oidc/oidctest: add new package\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.11.0...v3.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-chi/chi/v5` from 5.1.0 to 5.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-chi/chi/releases\"\u003egithub.com/go-chi/chi/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse strings.ReplaceAll where applicable by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1046\"\u003ego-chi/chi#1046\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePropagate inline middlewares across mounted subrouters by \u003ca href=\"https://github.com/LukasJenicek\"\u003e\u003ccode\u003e@​LukasJenicek\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1049\"\u003ego-chi/chi#1049\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd go 1.26 to ci by \u003ca href=\"https://github.com/pkieltyka\"\u003e\u003ccode\u003e@​pkieltyka\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1052\"\u003ego-chi/chi#1052\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove last uses of io/ioutil by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1054\"\u003ego-chi/chi#1054\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSimplify chi.walk with slices.Concat by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1053\"\u003ego-chi/chi#1053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eApply the stringscutprefix modernizer by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1051\"\u003ego-chi/chi#1051\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump minimum Go to 1.23, always use request.Pattern by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1048\"\u003ego-chi/chi#1048\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emiddleware: fix httpFancyWriter.ReadFrom double-counting bytes with Tee by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1085\"\u003ego-chi/chi#1085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix typo in Route doc comment by \u003ca href=\"https://github.com/gouwazi\"\u003e\u003ccode\u003e@​gouwazi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1073\"\u003ego-chi/chi#1073\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: set Request.Pattern from RoutePattern() by \u003ca href=\"https://github.com/leno23\"\u003e\u003ccode\u003e@​leno23\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1097\"\u003ego-chi/chi#1097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: middleware.ClientIP, a replacement for middleware.RealIP by \u003ca href=\"https://github.com/VojtechVitek\"\u003e\u003ccode\u003e@​VojtechVitek\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/967\"\u003ego-chi/chi#967\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/LukasJenicek\"\u003e\u003ccode\u003e@​LukasJenicek\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1049\"\u003ego-chi/chi#1049\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1085\"\u003ego-chi/chi#1085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gouwazi\"\u003e\u003ccode\u003e@​gouwazi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1073\"\u003ego-chi/chi#1073\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leno23\"\u003e\u003ccode\u003e@​leno23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1097\"\u003ego-chi/chi#1097\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSECURITY: middleware.ClientIP, a replacement for middleware.RealIP\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/VojtechVitek\"\u003e\u003ccode\u003e@​VojtechVitek\u003c/code\u003e\u003c/a\u003e submitted PR \u003ca href=\"https://redirect.github.com/go-chi/chi/issues/967\"\u003e#967\u003c/a\u003e, which introduces middleware.ClientIP — a replacement for middleware.RealIP that closes the three open spoofing advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/security/advisories/GHSA-9g5q-2w5x-hmxf\"\u003eGHSA-9g5q-2w5x-hmxf\u003c/a\u003e — IP spoofing via XFF in \u003ccode\u003eRemoteAddr\u003c/code\u003e resolution (convto)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp\"\u003eGHSA-rjr7-jggh-pgcp\u003c/a\u003e — RealIP allows IP spoofing via unvalidated XFF (rezmoss)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/security/advisories/GHSA-3fxj-6jh8-hvhx\"\u003eGHSA-3fxj-6jh8-hvhx\u003c/a\u003e — IP spoofing in \u003ccode\u003emiddleware.RealIP\u003c/code\u003e (Saku0512, Critical / 9.3)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIt also addresses issues outlined at:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/708\"\u003ego-chi/chi#708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://adam-p.ca/blog/2022/03/x-forwarded-for/\"\u003ehttps://adam-p.ca/blog/2022/03/x-forwarded-for/\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/711\"\u003ego-chi/chi#711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/453\"\u003ego-chi/chi#453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/go-chi/chi/pull/908\"\u003ego-chi/chi#908\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ccode\u003emiddleware.RealIP\u003c/code\u003e is deprecated in this PR with pointers to the new API.\u003c/p\u003e\n\u003cp\u003eThe deprecation only adds a \u003ccode\u003e// Deprecated:\u003c/code\u003e doc comment; the function keeps working for backward compatibility.\u003c/p\u003e\n\u003ch3\u003eWhy a new middleware (not \u0026quot;fix RealIP in place\u0026quot;)\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003eRealIP\u003c/code\u003e has two unfixable design choices: it mutates \u003ccode\u003er.RemoteAddr\u003c/code\u003e, and it tries to be a one-size-fits-all default by walking a hard-coded list of headers any client can supply. Per \u003ca href=\"https://adam-p.ca/blog/2022/03/x-forwarded-for/\"\u003eadam-p's \u0026quot;The perils of the 'real' client IP\u0026quot;\u003c/a\u003e (which calls chi out by name on this), there is no safe default — the user must pick their trust source explicitly.\u003c/p\u003e\n\u003ch3\u003eThe new API\u003c/h3\u003e\n\u003cp\u003eFour middlewares, two accessors. Pick exactly one middleware based on your\ninfrastructure, read the result with one of the two accessors:\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003e// One of the four. There is no safe default — pick exactly one.\r\nfunc ClientIPFromHeader(trustedHeader string) func(http.Handler) http.Handler\r\nfunc ClientIPFromXFF(trustedIPPrefixes ...string) func(http.Handler) http.Handler\r\nfunc ClientIPFromXFFTrustedProxies(numTrustedProxies int) func(http.Handler) http.Handler\r\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt; \n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/3b171578ca44dfd75ca3c5cbddc7b44c600a7b49\"\u003e\u003ccode\u003e3b17157\u003c/code\u003e\u003c/a\u003e feat: middleware.ClientIP, a replacement for middleware.RealIP (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/967\"\u003e#967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/818fdcfc4786168651768377ba647cf9dd5b3953\"\u003e\u003ccode\u003e818fdcf\u003c/code\u003e\u003c/a\u003e fix: set Request.Pattern from RoutePattern() (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1097\"\u003e#1097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/f975af0cb10cbefaccf0422385420fe62722d648\"\u003e\u003ccode\u003ef975af0\u003c/code\u003e\u003c/a\u003e Fix typo in Route doc comment (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1073\"\u003e#1073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/4ef87eaf2cfb27d3126d48194e1a84806acc1aed\"\u003e\u003ccode\u003e4ef87ea\u003c/code\u003e\u003c/a\u003e middleware: fix httpFancyWriter.ReadFrom double-counting bytes with Tee (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1085\"\u003e#1085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/a54874f0e2f12647a19e82ee70dfa8185014100c\"\u003e\u003ccode\u003ea54874f\u003c/code\u003e\u003c/a\u003e Bump minimum Go to 1.23, always use request.Pattern (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1048\"\u003e#1048\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/3328d4d3ab8a08547fa419ed657017355e6d3c4d\"\u003e\u003ccode\u003e3328d4d\u003c/code\u003e\u003c/a\u003e Apply the stringscutprefix modernizer (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1051\"\u003e#1051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/be60b2ec5755a9072cdf27af3ba3034e84781d12\"\u003e\u003ccode\u003ebe60b2e\u003c/code\u003e\u003c/a\u003e Simplify chi.walk with slices.Concat (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1053\"\u003e#1053\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/a36a925a6a195943ec104100d7d18757543e745f\"\u003e\u003ccode\u003ea36a925\u003c/code\u003e\u003c/a\u003e Remove last uses of io/ioutil (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1054\"\u003e#1054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/7d93ee3e86b4d477c20d809c9b1ce9a281dfd706\"\u003e\u003ccode\u003e7d93ee3\u003c/code\u003e\u003c/a\u003e add go 1.26 to ci (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1052\"\u003e#1052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/903cff2596eac0f72538ac46d696058351f1c3fb\"\u003e\u003ccode\u003e903cff2\u003c/code\u003e\u003c/a\u003e Propagate inline middlewares across mounted subrouters (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1049\"\u003e#1049\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-chi/chi/compare/v5.1.0...v5.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-chi/cors` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-chi/cors/releases\"\u003egithub.com/go-chi/cors's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate README with install by \u003ca href=\"https://github.com/Uyutaka\"\u003e\u003ccode\u003e@​Uyutaka\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/22\"\u003ego-chi/cors#22\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix broken credits link by \u003ca href=\"https://github.com/lordidiot\"\u003e\u003ccode\u003e@​lordidiot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/25\"\u003ego-chi/cors#25\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix test_default error message \u003ca href=\"https://redirect.github.com/go-chi/cors/issues/28\"\u003e#28\u003c/a\u003e by \u003ca href=\"https://github.com/ablankz\"\u003e\u003ccode\u003e@​ablankz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/29\"\u003ego-chi/cors#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate Go version in CI by \u003ca href=\"https://github.com/VojtechVitek\"\u003e\u003ccode\u003e@​VojtechVitek\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/32\"\u003ego-chi/cors#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Origin header check by \u003ca href=\"https://github.com/c2h5oh\"\u003e\u003ccode\u003e@​c2h5oh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/38\"\u003ego-chi/cors#38\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Uyutaka\"\u003e\u003ccode\u003e@​Uyutaka\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/22\"\u003ego-chi/cors#22\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lordidiot\"\u003e\u003ccode\u003e@​lordidiot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/25\"\u003ego-chi/cors#25\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ablankz\"\u003e\u003ccode\u003e@​ablankz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/29\"\u003ego-chi/cors#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/VojtechVitek\"\u003e\u003ccode\u003e@​VojtechVitek\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/32\"\u003ego-chi/cors#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/c2h5oh\"\u003e\u003ccode\u003e@​c2h5oh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/38\"\u003ego-chi/cors#38\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-chi/cors/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/go-chi/cors/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/3a5381283113550282a3dcfba669a48ba4691d84\"\u003e\u003ccode\u003e3a53812\u003c/code\u003e\u003c/a\u003e Fix Origin header check (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/f8fbaeea0479cfa8a56d3e4e208d9664097a79a8\"\u003e\u003ccode\u003ef8fbaee\u003c/code\u003e\u003c/a\u003e Update Go version in CI (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/32\"\u003e#32\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/b41f76786054f5698f1fee349753c8e1bb7042f5\"\u003e\u003ccode\u003eb41f767\u003c/code\u003e\u003c/a\u003e fix test_default error message \u003ca href=\"https://redirect.github.com/go-chi/cors/issues/28\"\u003e#28\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/29\"\u003e#29\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/76ca79794e02cd16a20fc57320d4930cacf591a2\"\u003e\u003ccode\u003e76ca797\u003c/code\u003e\u003c/a\u003e Fix broken link (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/25\"\u003e#25\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/9aca6170f98f10a194574513b925dfa26664d520\"\u003e\u003ccode\u003e9aca617\u003c/code\u003e\u003c/a\u003e Update README with install (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/22\"\u003e#22\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-chi/cors/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.3.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🔐 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd spellcheck Github action to catch common spelling mistakes by \u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/458\"\u003egolang-jwt/jwt#458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithNotBeforeRequired\u003c/code\u003e parser option and add test coverage by \u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/456\"\u003egolang-jwt/jwt#456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate godoc example func to properly refer to \u003ccode\u003eNewWithClaims()\u003c/code\u003e by \u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/459\"\u003egolang-jwt/jwt#459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate github workflows by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/462\"\u003egolang-jwt/jwt#462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional test for CustomClaims that validates unmarshalling behaviour by \u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/457\"\u003egolang-jwt/jwt#457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix early file close in jwt cli by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/472\"\u003egolang-jwt/jwt#472\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd TPM signature reference by \u003ca href=\"https://github.com/salrashid123\"\u003e\u003ccode\u003e@​salrashid123\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/473\"\u003egolang-jwt/jwt#473\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove misleading ParserOptions documentation in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/484\"\u003egolang-jwt/jwt#484\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSave signature to Token struct after successful signing by \u003ca href=\"https://github.com/EgorSheff\"\u003e\u003ccode\u003e@​EgorSheff\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/417\"\u003egolang-jwt/jwt#417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet token.Signature in \u003ccode\u003eParseUnverified\u003c/code\u003e by \u003ca href=\"https://github.com/slickwilli\"\u003e\u003ccode\u003e@​slickwilli\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/414\"\u003egolang-jwt/jwt#414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e👒 Dependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump crate-ci/typos from 1.34.0 to 1.35.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/461\"\u003egolang-jwt/jwt#461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.35.4 to 1.36.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/470\"\u003egolang-jwt/jwt#470\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github/codeql-action from 3 to 4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/478\"\u003egolang-jwt/jwt#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.36.2 to 1.39.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/480\"\u003egolang-jwt/jwt#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 8 to 9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/481\"\u003egolang-jwt/jwt#481\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/setup-go from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/469\"\u003egolang-jwt/jwt#469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.39.0 to 1.40.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/488\"\u003egolang-jwt/jwt#488\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/487\"\u003egolang-jwt/jwt#487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.40.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/490\"\u003egolang-jwt/jwt#490\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.41.0 to 1.42.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/492\"\u003egolang-jwt/jwt#492\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/458\"\u003egolang-jwt/jwt#458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/salrashid123\"\u003e\u003ccode\u003e@​salrashid123\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/473\"\u003egolang-jwt/jwt#473\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/EgorSheff\"\u003e\u003ccode\u003e@​EgorSheff\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/417\"\u003egolang-jwt/jwt#417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slickwilli\"\u003e\u003ccode\u003e@​slickwilli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/414\"\u003egolang-jwt/jwt#414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.3.0\u003c/h2\u003e\n\u003cp\u003eThis release is almost identical to to \u003ccode\u003ev5.2.3\u003c/code\u003e but now correctly indicates Go 1.21 as minimum requirement.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCreate CODEOWNERS by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/449\"\u003egolang-jwt/jwt#449\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump Go version to indicate correct minimum requirement by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/452\"\u003egolang-jwt/jwt#452\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.3...v5.3.0\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.2.3...v5.3.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump GitHub workflows and Go versions by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/438\"\u003egolang-jwt/jwt#438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImplementing validation of multiple audiences by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/433\"\u003egolang-jwt/jwt#433\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 7 to 8 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/440\"\u003egolang-jwt/jwt#440\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7ceae619e739dc8a7bf577214aa8ebf26668e9db\"\u003e\u003ccode\u003e7ceae61\u003c/code\u003e\u003c/a\u003e Add release.yml for changelog configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/dce8e4dddcc9dc812cdc0b9d2037512d0e4b3eb5\"\u003e\u003ccode\u003edce8e4d\u003c/code\u003e\u003c/a\u003e Set token.Signature in \u003ccode\u003eParseUnverified\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/414\"\u003e#414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/8889e208aa5c3736e5f7a856107ee70c046b803e\"\u003e\u003ccode\u003e8889e20\u003c/code\u003e\u003c/a\u003e Save signature to Token struct after successful signing (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/417\"\u003e#417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/d237f8204b397bc008b5b07c4e081beb4ec2a7b1\"\u003e\u003ccode\u003ed237f82\u003c/code\u003e\u003c/a\u003e ci: update github-actions schedule interval to monthly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/d8dce95a406fc435aa3d11c5073f2f31a9449116\"\u003e\u003ccode\u003ed8dce95\u003c/code\u003e\u003c/a\u003e Bump crate-ci/typos from 1.41.0 to 1.42.1 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/492\"\u003e#492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/e93180329eab078116176ff7dc4352760bc5f290\"\u003e\u003ccode\u003ee931803\u003c/code\u003e\u003c/a\u003e Bump crate-ci/typos from 1.40.0 to 1.41.0 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/e6a0afa839d74787501369217245b52bfc75f30d\"\u003e\u003ccode\u003ee6a0afa\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/487\"\u003e#487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/9f85c9ec9f10fb6919d773cb8df07029639ec76e\"\u003e\u003ccode\u003e9f85c9e\u003c/code\u003e\u003c/a\u003e Bump crate-ci/typos from 1.39.0 to 1.40.0 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/488\"\u003e#488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/60a8669e0221aed55a6abfd9b5cd20472f0c6ebd\"\u003e\u003ccode\u003e60a8669\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/469\"\u003e#469\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/76f582896da76978896d59ced995d7967c33c434\"\u003e\u003ccode\u003e76f5828\u003c/code\u003e\u003c/a\u003e Remove misleading ParserOptions documentation (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/484\"\u003e#484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.2...v5.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.0 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.0...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/pressly/goose/v3` from 3.22.1 to 3.27.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pressly/goose/releases\"\u003egithub.com/pressly/goose/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pressly/goose/compare/v3.27.0...v3.27.1\"\u003ehttps://github.com/pressly/goose/compare/v3.27.0...v3.27.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePreliminary Spanner dialect support\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/966\"\u003e#966\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMinimum Go version is now 1.25\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003eSQL migration templates no longer include \u003ccode\u003eStatementBegin\u003c/code\u003e and \u003ccode\u003eStatementEnd\u003c/code\u003e annotations. These are only needed for complex statements containing semicolons (e.g., stored procedures). See \u003ca href=\"https://pressly.github.io/goose/documentation/annotations/#complex-statements\"\u003edocs\u003c/a\u003e for details.\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded formatting for YDB table names to include folder (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1007\"\u003e#1007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix tests for StarRocks 3.5 (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1024\"\u003e#1024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI improvements (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1000\"\u003e#1000\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/pressly/goose/issues/1005\"\u003e#1005\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/pressly/goose/issues/1008\"\u003e#1008\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pressly/goose/compare/v3.26.0...v3.27.0\"\u003ehttps://github.com/pressly/goose/compare/v3.26.0...v3.27.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.26.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003e*slog.Logger\u003c/code\u003e support to goose provider via option \u003ccode\u003eWithSlog\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/989\"\u003e#989\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd convenience \u003ccode\u003eWithTableName\u003c/code\u003e provider option (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/985\"\u003e#985\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMinor bug fixes and dependency upgrades\u003c/li\u003e\n\u003cli\u003eAdd general purpose \u003ccode\u003eLocker\u003c/code\u003e interface to support DB locking with a table-based Postgres\nimplementation via \u003ccode\u003elock.NewPostgresTableLocker\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/993\"\u003e#993\u003c/a\u003e for more details)\n\u003cul\u003e\n\u003cli\u003eUnlike \u003ccode\u003eSessionLocker\u003c/code\u003e, this uses the \u003ccode\u003e*sql.DB\u003c/code\u003e connection pool\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithLocker\u003c/code\u003e option to goose provider\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/emmanuel-ferdman\"\u003e\u003ccode\u003e@​emmanuel-ferdman\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pressly/goose/pull/983\"\u003epressly/goose#983\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jamesleeht\"\u003e\u003ccode\u003e@​jamesleeht\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pressly/goose/pull/982\"\u003epressly/goose#982\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pressly/goose/compare/v3.25.0...v3.26.0\"\u003ehttps://github.com/pressly/goose/compare/v3.25.0...v3.26.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.25.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade go deps (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/976\"\u003e#976\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove references/tests for vertica and add deprecation warnings (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/978\"\u003e#978\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pressly/goose/blob/main/CHANGELOG.md\"\u003egithub.com/pressly/goose/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[v3.27.1] - 2026-04-24\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum Go version to 1.25.7\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.27.0] - 2026-02-22\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreliminary Spanner dialect support (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/966\"\u003e#966\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMinimum Go version is now 1.25\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003eSQL migration templates no longer include \u003ccode\u003eStatementBegin\u003c/code\u003e and \u003ccode\u003eStatementEnd\u003c/code\u003e annotations. These\nare only needed for complex statements containing semicolons (e.g., stored procedures). See\n\u003ca href=\"https://pressly.github.io/goose/documentation/annotations/#complex-statements\"\u003edocs\u003c/a\u003e for details.\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.26.0] - 2025-10-03\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003e*slog.Logger\u003c/code\u003e support to goose provider via option \u003ccode\u003eWithSlog\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/989\"\u003e#989\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd convenience \u003ccode\u003eWithTableName\u003c/code\u003e provider option (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/985\"\u003e#985\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMinor bug fixes and dependency upgrades\u003c/li\u003e\n\u003cli\u003eAdd general purpose \u003ccode\u003eLocker\u003c/code\u003e interface to support DB locking with a table-based Postgres\nimplementation via \u003ccode\u003elock.NewPostgresTableLocker\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/993\"\u003e#993\u003c/a\u003e for more details)\n\u003cul\u003e\n\u003cli\u003eUnlike \u003ccode\u003eSessionLocker\u003c/code\u003e, this uses the \u003ccode\u003e*sql.DB\u003c/code\u003e connection pool\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithLocker\u003c/code\u003e option to goose provider\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.25.0] - 2025-08-24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade go deps (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/976\"\u003e#976\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove references/tests for vertica and add deprecation warnings (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/978\"\u003e#978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Aurora DSQL as a new database dialect to goose \u003ccode\u003eProvider\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/971\"\u003e#971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd DDL isolation support for Aurora DSQL compatibility (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/970\"\u003e#970\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate Apply to respect no versioning option (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/950\"\u003e#950\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExpose dialect \u003ccode\u003eQuerier\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/939\"\u003e#939\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.24.3]\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eGOOSE_TABLE\u003c/code\u003e environment variable -- lower priority than \u003ccode\u003e-table\u003c/code\u003e flag, but higher than the\ndefault table name. (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/932\"\u003e#932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.24.2]\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eTableExists\u003c/code\u003e table existence check for the mysql dialect (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/895\"\u003e#895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpgrade \u003cstrong\u003eminimum Go version to 1.23\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/e3235f7041e1e14453633daeef467165d09d9449\"\u003e\u003ccode\u003ee3235f7\u003c/code\u003e\u003c/a\u003e release: v3.27.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/883e2f7e0e70fe9fd5427afd4961d3752ed551c1\"\u003e\u003ccode\u003e883e2f7\u003c/code\u003e\u003c/a\u003e build(deps): bump Go and dependency versions (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1067\"\u003e#1067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/2e2fe5ce0c21ee2a4595f651f913ff6775a6ead1\"\u003e\u003ccode\u003e2e2fe5c\u003c/code\u003e\u003c/a\u003e build(deps): bump the gomod group with 3 updates (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1048\"\u003e#1048\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/21176ca42730c42fce388fde57944181bf77066d\"\u003e\u003ccode\u003e21176ca\u003c/code\u003e\u003c/a\u003e build(deps): bump modernc.org/sqlite from 1.46.1 to 1.47.0 in the gomod group...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/e7bd535b62f22be7e1f3fd6f5b7430f9ea2ae87a\"\u003e\u003ccode\u003ee7bd535\u003c/code\u003e\u003c/a\u003e build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1042\"\u003e#1042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/f9c7cb4f9e7d9d036c11cde6482a1c7a844da9f6\"\u003e\u003ccode\u003ef9c7cb4\u003c/code\u003e\u003c/a\u003e build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /internal/t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/b6220db4c1346bb6d1205d01266f4604a03fb5c3\"\u003e\u003ccode\u003eb6220db\u003c/code\u003e\u003c/a\u003e build(deps): bump the gomod group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1041\"\u003e#1041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/65e320f7b293f385ce42ef3509f89df9b9533e02\"\u003e\u003ccode\u003e65e320f\u003c/code\u003e\u003c/a\u003e docs: fix README escaping marker in ENVSUB example (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1037\"\u003e#1037\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/18f6ef715e7429c0ad9e67333c1131923353f6b7\"\u003e\u003ccode\u003e18f6ef7\u003c/code\u003e\u003c/a\u003e build(deps): bump goreleaser/goreleaser-action from 6 to 7 (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1036\"\u003e#1036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/de28e0480a2a75ea050c152fe9be7126d6f696a5\"\u003e\u003ccode\u003ede28e04\u003c/code\u003e\u003c/a\u003e docs: update v3.27.0 release notes with Go 1.25 minimum and dep upgrades\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pressly/goose/compare/v3.22.1...v3.27.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_golang/releases\"\u003egithub.com/prometheus/client_golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.23.2 - 2025-09-05\u003c/h2\u003e\n\u003cp\u003eThis release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e[release-1.23] Upgrade to prometheus/common@v0.66.1 by \u003ca href=\"https://github.com/aknuds1\"\u003e\u003ccode\u003e@​aknuds1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1869\"\u003eprometheus/client_golang#1869\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release-1.23] Cut v1.23.2 by \u003ca href=\"https://github.com/aknuds1\"\u003e\u003ccode\u003e@​aknuds1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1870\"\u003eprometheus/client_golang#1870\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2\"\u003ehttps://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.23.1 - 2025-09-04\u003c/h2\u003e\n\u003cp\u003eThis release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e[release-1.23] Upgrade to prometheus/common v0.66 by \u003ca href=\"https://github.com/aknuds1\"\u003e\u003ccode\u003e@​aknuds1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1866\"\u003eprometheus/client_golang#1866\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release-1.23] Cut v1.23.1 by \u003ca href=\"https://github.com/aknuds1\"\u003e\u003ccode\u003e@​aknuds1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1867\"\u003eprometheus/client_golang#1867\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1\"\u003ehttps://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.23.0 - 2025-07-30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1812\"\u003e#1812\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1766\"\u003e#1766\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add exemplars for native histograms \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1686\"\u003e#1686\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] exp/api: Bubble up status code from writeResponse \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1823\"\u003e#1823\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1833\"\u003e#1833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api: client prompt return on context cancellation \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1729\"\u003e#1729\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md\"\u003egithub.com/prometheus/client_golang's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.23.2 / 2025-09-05\u003c/h2\u003e\n\u003cp\u003eThis release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).\nThere are no functional changes.\u003c/p\u003e\n\u003ch2\u003e1.23.1 / 2025-09-04\u003c/h2\u003e\n\u003cp\u003eThis release is made to be compatible with a backwards incompatible API change\nin prometheus/common v0.66.0. There are no functional changes.\u003c/p\u003e\n\u003ch2\u003e1.23.0 / 2025-07-30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1812\"\u003e#1812\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1766\"\u003e#1766\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add exemplars for native histograms \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1686\"\u003e#1686\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] exp/api: Bubble up status code from writeResponse \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1823\"\u003e#1823\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1833\"\u003e#1833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api: client prompt return on context cancellation \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1729\"\u003e#1729\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.22.0 / 2025-04-07\u003c/h2\u003e\n\u003cp\u003e:warning: This release contains potential breaking change if you use experimental \u003ccode\u003ezstd\u003c/code\u003e support introduce in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1496\"\u003e#1496\u003c/a\u003e :warning:\u003c/p\u003e\n\u003cp\u003eExperimental support for \u003ccode\u003ezstd\u003c/code\u003e on scrape was added, controlled by the request \u003ccode\u003eAccept-Encoding\u003c/code\u003e header.\nIt was enabled by default since version 1.20, but now you need to add a blank import to enable it.\nThe decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon,\n\u003ca href=\"https://redirect.github.com/golang/go/issues/62513\"\u003egolang/go#62513\u003c/a\u003e however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.\u003c/p\u003e\n\u003cp\u003ee.g.:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eimport (\n  _ \u0026quot;github.com/prometheus/client_golang/prometheus/promhttp/zstd\u0026quot;\n)\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003e[FEATURE] prometheus: Add new CollectorFunc utility \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1724\"\u003e#1724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1738\"\u003e#1738\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api: \u003ccode\u003eWithLookbackDelta\u003c/code\u003e and \u003ccode\u003eWithStats\u003c/code\u003e options have been added to API client. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1743\"\u003e#1743\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] :warning: promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1765\"\u003e#1765\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.21.1 / 2025-03-04\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[BUGFIX] prometheus: Revert of \u003ccode\u003eInc\u003c/code\u003e, \u003ccode\u003eAdd\u003c/code\u003e and \u003ccode\u003eObserve\u003c/code\u003e cumulative metric CAS optimizations (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1661\"\u003e#1661\u003c/a\u003e), causing regressions on low contention cases.\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.21.0 / 2025-02-17\u003c/h2\u003e\n\u003cp\u003e:warning: This release contains potential breaking change if you upgrade \u003ccode\u003egithub.com/prometheus/common\u003c/code\u003e to 0.62+ together with client_golang. :warning:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/8179a560819f2c64ef6ade70e6ae4c73aecaca3c\"\u003e\u003ccode\u003e8179a56\u003c/code\u003e\u003c/a\u003e Cut v1.23.2 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1870\"\u003e#1870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/4142b5908bb6c8f5e412b72de5ea4b927d8c219d\"\u003e\u003ccode\u003e4142b59\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1869\"\u003e#1869\u003c/a\u003e from prometheus/arve/upgrade-common\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/4ff40f0d918efc0f59701d13622913805c2425b4\"\u003e\u003ccode\u003e4ff40f0\u003c/code\u003e\u003c/a\u003e Cut v1.23.1 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1867\"\u003e#1867\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/989b0298944e64f88a54ac9c70cd8c8121f10bc9\"\u003e\u003ccode\u003e989b029\u003c/code\u003e\u003c/a\u003e Upgrade to prometheus/common v0.66 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1866\"\u003e#1866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/e4b2208dd8cb6d1425f00250db842ec3c1e8749e\"\u003e\u003ccode\u003ee4b2208\u003c/code\u003e\u003c/a\u003e Cut v1.23.0 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1848\"\u003e#1848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/d9492afd3a6f2e9782a7fc10363281bfd5b743bb\"\u003e\u003ccode\u003ed9492af\u003c/code\u003e\u003c/a\u003e cut v1.23.0-rc.1 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1842\"\u003e#1842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/aeae8a0b4f54a8fa720d19b88638a2d048596f82\"\u003e\u003ccode\u003eaeae8a0\u003c/code\u003e\u003c/a\u003e Cut v1.23.0-rc.0 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1837\"\u003e#1837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/b157309b723f0b8588ea604bb78dbbba196803f2\"\u003e\u003ccode\u003eb157309\u003c/code\u003e\u003c/a\u003e Update common Prometheus files (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1832\"\u003e#1832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/a704e287f467b79744c30af996b7d710d4c6900d\"\u003e\u003ccode\u003ea704e28\u003c/code\u003e\u003c/a\u003e build(deps): bump the github-actions group with 3 updates (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1826\"\u003e#1826\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/c7743110ad2c599de3d8c23682d978a12f9f36d1\"\u003e\u003ccode\u003ec774311\u003c/code\u003e\u003c/a\u003e Fix errNotImplemented reference (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1835\"\u003e#1835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.20.5...v1.23.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/rs/zerolog` from 1.33.0 to 1.35.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/116c8060e034e8d46855354d22db2acbc8df9e1e\"\u003e\u003ccode\u003e116c806\u003c/code\u003e\u003c/a\u003e event: restore Err() logging when ErrorStackMarshaler returns nil (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/13966551e7cc9f174723bddde692f0f0f9a833aa\"\u003e\u003ccode\u003e1396655\u003c/code\u003e\u003c/a\u003e Bump CI Go matrix minimum from 1.21 to 1.23\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/4b65a2f6f63437b9db07d57733d34d381b8f0696\"\u003e\u003ccode\u003e4b65a2f\u003c/code\u003e\u003c/a\u003e Bump actions/cache from 4 to 5 (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/b83579670fae2aef5d260f1350975e4c0b16864c\"\u003e\u003ccode\u003eb835796\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/742\"\u003e#742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/134caf82aab8ea832731c5b4e5967d970abbc538\"\u003e\u003ccode\u003e134caf8\u003c/code\u003e\u003c/a\u003e Added sanitization of journald keys (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/751\"\u003e#751\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/e133b6a5173130c6ce2349645111829ba80d589e\"\u003e\u003ccode\u003ee133b6a\u003c/code\u003e\u003c/a\u003e Added variadic StrsV, ObjectsV, and StringersV (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/752\"\u003e#752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/82017d8fff8d7739ba4daf9b1cf096d501ba7732\"\u003e\u003ccode\u003e82017d8\u003c/code\u003e\u003c/a\u003e Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/753\"\u003e#753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/2f5b8a91be2cea93c2a6792d4ad00f5a06967dae\"\u003e\u003ccode\u003e2f5b8a9\u003c/code\u003e\u003c/a\u003e fix: UpdateContext skips Nop and zero-value loggers (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/754\"\u003e#754\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/d64c9a7138d98305e963fd437246d2ca0f0c4833\"\u003e\u003ccode\u003ed64c9a7\u003c/code\u003e\u003c/a\u003e Add slog.Handler implementation for zerolog (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/755\"\u003e#7...\n\n_Description has been truncated_","html_url":"https://github.com/artyomsv/marauder/pull/37","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/artyomsv%2Fmarauder/issues/37","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/37/packages"},{"uuid":"4655187269","node_id":"PR_kwDOSlZEDc7mDbaQ","number":12,"state":"open","title":"chore(deps): bump the go-deps group across 1 directory with 11 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-13T10:22:32.000Z","updated_at":"2026-06-13T10:22:33.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-deps","update_count":11,"packages":[{"name":"connectrpc.com/connect","old_version":"1.19.1","new_version":"1.20.0","repository_url":"https://github.com/connectrpc/connect-go"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.0","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/redis/go-redis/v9","old_version":"9.18.0","new_version":"9.20.1","repository_url":"https://github.com/redis/go-redis"},{"name":"go.opentelemetry.io/otel","old_version":"1.43.0","new_version":"1.44.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","old_version":"1.43.0","new_version":"1.44.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.uber.org/zap","old_version":"1.27.1","new_version":"1.28.0","repository_url":"https://github.com/uber-go/zap"},{"name":"golang.org/x/sync","old_version":"0.20.0","new_version":"0.21.0","repository_url":"https://github.com/golang/sync"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-deps group with 7 updates in the /backend directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.19.1` | `1.20.0` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.0` | `5.10.0` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.18.0` | `9.20.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n\n\nUpdates `connectrpc.com/connect` from 1.19.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/connectrpc/connect-go/releases\"\u003econnectrpc.com/connect's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum supported Go version to 1.25 by \u003ca href=\"https://github.com/jonbodner-buf\"\u003e\u003ccode\u003e@​jonbodner-buf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate Unary-Get query parameter order to match spec recommendation by \u003ca href=\"https://github.com/oliversun9\"\u003e\u003ccode\u003e@​oliversun9\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/926\"\u003e#926\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonbodner-buf\"\u003e\u003ccode\u003e@​jonbodner-buf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\"\u003ehttps://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.19.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eGovernance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ca href=\"https://github.com/timostamm\"\u003e\u003ccode\u003e@​timostamm\u003c/code\u003e\u003c/a\u003e as a maintainer in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/905\"\u003econnectrpc/connect-go#905\u003c/a\u003e 🎉\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBugfixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse 'deadline_exceeded' instead of 'canceled' on HTTP/2 cancelation when appropriate by \u003ca href=\"https://github.com/jhump\"\u003e\u003ccode\u003e@​jhump\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/904\"\u003econnectrpc/connect-go#904\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix nil pointer deref in duplexHTTPCall under concurrent Send + CloseAndReceive by \u003ca href=\"https://github.com/simonferquel\"\u003e\u003ccode\u003e@​simonferquel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/919\"\u003econnectrpc/connect-go#919\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRefactor memhttptest to work with Go 1.25 synctest by \u003ca href=\"https://github.com/codefromthecrypt\"\u003e\u003ccode\u003e@​codefromthecrypt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/881\"\u003econnectrpc/connect-go#881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDoc clarifications by \u003ca href=\"https://github.com/emcfarlane\"\u003e\u003ccode\u003e@​emcfarlane\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/911\"\u003e#911\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/912\"\u003e#912\u003c/a\u003e) and \u003ca href=\"https://github.com/stefanvanburen\"\u003e\u003ccode\u003e@​stefanvanburen\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/906\"\u003e#906\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/codefromthecrypt\"\u003e\u003ccode\u003e@​codefromthecrypt\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/881\"\u003econnectrpc/connect-go#881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonferquel\"\u003e\u003ccode\u003e@​simonferquel\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/919\"\u003econnectrpc/connect-go#919\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e:\n\u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.1...v1.19.2\"\u003ehttps://github.com/connectrpc/connect-go/compare/v1.19.1...v1.19.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/1291a7dcac19b00490f935dce18f44f301fc58f6\"\u003e\u003ccode\u003e1291a7d\u003c/code\u003e\u003c/a\u003e Prepare for v1.20.0 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/927\"\u003e#927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/6df682f19e5b957b96b5fa44ffb28705a2d7bc8c\"\u003e\u003ccode\u003e6df682f\u003c/code\u003e\u003c/a\u003e Update Unary-Get query parameter order to match spec recommendation (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/926\"\u003e#926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/c4aac92b87026cd709cfbccdaabe8c45abef705c\"\u003e\u003ccode\u003ec4aac92\u003c/code\u003e\u003c/a\u003e Chore update buf v1.69.0 and license year (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/a5a6c30f3776b06ae05a66ab3bdd2d60c46db6db\"\u003e\u003ccode\u003ea5a6c30\u003c/code\u003e\u003c/a\u003e Bump Go from v1.24 to v1.25 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/138e2700eb60b8004363eb344031b317bf599a1f\"\u003e\u003ccode\u003e138e270\u003c/code\u003e\u003c/a\u003e Back to development (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/921\"\u003e#921\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/1c195ae986164a681af958e675dd283eed23e365\"\u003e\u003ccode\u003e1c195ae\u003c/code\u003e\u003c/a\u003e Prepare for v1.19.2 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/920\"\u003e#920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/96abc6b87132d1c43f67f1f5c91efdcb6a59b4aa\"\u003e\u003ccode\u003e96abc6b\u003c/code\u003e\u003c/a\u003e Upgrade golangci-lint to v2 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/917\"\u003e#917\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/be72fa520cdc8b942db6839dadbe9af0b44b40df\"\u003e\u003ccode\u003ebe72fa5\u003c/code\u003e\u003c/a\u003e Clarify concurrent use semantics for streaming types (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/911\"\u003e#911\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/299d2e7cdfb5e2fa3fa0963e6cedc51a7364521d\"\u003e\u003ccode\u003e299d2e7\u003c/code\u003e\u003c/a\u003e Fix nil pointer deref in duplexHTTPCall under concurrent Send + CloseAndRecei...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/e299aa60ffcf91633e48fcb3dd594cbbb187ec7f\"\u003e\u003ccode\u003ee299aa6\u003c/code\u003e\u003c/a\u003e Bump google.golang.org/grpc from 1.76.0 to 1.79.3 in /internal/conformance (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.0 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.0...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.18.0 to 9.20.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e9.20.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 push peeking\u003c/strong\u003e: \u003ccode\u003ePeekPushNotificationName\u003c/code\u003e no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector params\u003c/strong\u003e: Vector data is now always sent via \u003ccode\u003ePARAMS\u003c/code\u003e with auto-generated param names (\u003ccode\u003e__vector_param_N\u003c/code\u003e, with collision avoidance) when \u003ccode\u003eVectorParamName\u003c/code\u003e is omitted, since Redis no longer accepts inline vector blobs; the \u003ccode\u003eFTHybridOptions.Params\u003c/code\u003e map is no longer mutated, so the same options struct can be reused across calls (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3844\"\u003e#3844\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e forward compatibility\u003c/strong\u003e: Unknown shard- and node-level attributes in the \u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e reply are now skipped via \u003ccode\u003eDiscardNext()\u003c/code\u003e instead of erroring, so clients keep working when the server introduces new fields (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3843\"\u003e#3843\u003c/a\u003e) by \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub double reconnect\u003c/strong\u003e: \u003ccode\u003ePubSub.releaseConn\u003c/code\u003e no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3833\"\u003e#3833\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.20.0\u003c/h2\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md\"\u003egithub.com/redis/go-redis/v9's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.20.1 (2026-06-11)\u003c/h1\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 push peeking\u003c/strong\u003e: \u003ccode\u003ePeekPushNotificationName\u003c/code\u003e no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector params\u003c/strong\u003e: Vector data is now always sent via \u003ccode\u003ePARAMS\u003c/code\u003e with auto-generated param names (\u003ccode\u003e__vector_param_N\u003c/code\u003e, with collision avoidance) when \u003ccode\u003eVectorParamName\u003c/code\u003e is omitted, since Redis no longer accepts inline vector blobs; the \u003ccode\u003eFTHybridOptions.Params\u003c/code\u003e map is no longer mutated, so the same options struct can be reused across calls (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3844\"\u003e#3844\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e forward compatibility\u003c/strong\u003e: Unknown shard- and node-level attributes in the \u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e reply are now skipped via \u003ccode\u003eDiscardNext()\u003c/code\u003e instead of erroring, so clients keep working when the server introduces new fields (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3843\"\u003e#3843\u003c/a\u003e) by \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub double reconnect\u003c/strong\u003e: \u003ccode\u003ePubSub.releaseConn\u003c/code\u003e no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3833\"\u003e#3833\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003e9.20.0 (2026-05-28)\u003c/h1\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8-rc1\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a13416bf1c0556075b843dd0a9cb6db3b3cf2789\"\u003e\u003ccode\u003ea13416b\u003c/code\u003e\u003c/a\u003e chore(release): 9.20.1 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3847\"\u003e#3847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/10dc44f424d58b9c2b4df29e529ca92a2f8fa986\"\u003e\u003ccode\u003e10dc44f\u003c/code\u003e\u003c/a\u003e fix(push): fix peeking when push name is truncated (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3842\"\u003e#3842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/e1a2d68b27e70ca8f3ff5eec61d0dd2b74554670\"\u003e\u003ccode\u003ee1a2d68\u003c/code\u003e\u003c/a\u003e fix(ft.hybrid): Always generate vector param names if they are not provided b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a4b234f4a4f2551d1179181bbc136db132bf5912\"\u003e\u003ccode\u003ea4b234f\u003c/code\u003e\u003c/a\u003e chore(deps): bump codecov/codecov-action from 6 to 7 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3845\"\u003e#3845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/974e717dbf3008497e54aec34636e34452e6872b\"\u003e\u003ccode\u003e974e717\u003c/code\u003e\u003c/a\u003e fix(command): ignore unknown fields in CLUSTER SHARDS response (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3843\"\u003e#3843\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/65d6abde0d812234d26763930b5e84ff05963c96\"\u003e\u003ccode\u003e65d6abd\u003c/code\u003e\u003c/a\u003e fix(pubsub): prevent double reconnect in releaseConn (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3833\"\u003e#3833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/7d05dd3b7ce12a7b8c7923f73da0fede3bfa7c03\"\u003e\u003ccode\u003e7d05dd3\u003c/code\u003e\u003c/a\u003e chore(release): v9.20.0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3832\"\u003e#3832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/97568827124c58f1338d78b9535edc0eb9435453\"\u003e\u003ccode\u003e9756882\u003c/code\u003e\u003c/a\u003e fix(test): make waitForSentinelClusterStable robust to disconnected r… (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3830\"\u003e#3830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/875ce21e4862a7913edb5308b16869141ce5e833\"\u003e\u003ccode\u003e875ce21\u003c/code\u003e\u003c/a\u003e fix(sentinel): do not close sentinel when replica list is empty (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3795\"\u003e#3795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/8a027f21ba2686511e1a6a159f0c6888f11d48e7\"\u003e\u003ccode\u003e8a027f2\u003c/code\u003e\u003c/a\u003e chore(ci): add govulncheck workflow (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3779\"\u003e#3779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.18.0...v9.20.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/trace's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e...\n\n_Description has been truncated_","html_url":"https://github.com/myfxlogs/ant/pull/12","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/myfxlogs%2Fant/issues/12","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/12/packages"},{"uuid":"4645429303","node_id":"PR_kwDOFigLlc7lkBFH","number":96,"state":"closed","title":"build(deps): bump github.com/jackc/pgx/v5 from 5.6.0 to 5.9.2 in /utils/dorm","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-12T01:48:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-12T01:25:24.000Z","updated_at":"2026-06-12T01:49:00.000Z","time_to_close":1414,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.6.0","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"}],"path":"/utils/dorm","ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.6.0 to 5.9.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.6.0...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.6.0\u0026new-version=5.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dtapps/go-library/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/dtapps/go-library/pull/96","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dtapps%2Fgo-library/issues/96","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/96/packages"},{"uuid":"4645427786","node_id":"PR_kwDORx3C_s7lkAxa","number":79,"state":"open","title":"chore(deps): bump github.com/jackc/pgx/v5 from 5.5.3 to 5.10.0","user":"dependabot[bot]","labels":["area/backend"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-12T01:24:57.000Z","updated_at":"2026-06-12T01:29:26.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.5.3","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.5.3 to 5.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.5.3...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.5.3\u0026new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/CaptDany/oscar/pull/79","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CaptDany%2Foscar/issues/79","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/79/packages"},{"uuid":"4645029829","node_id":"PR_kwDOPmeGcs7liw1w","number":4,"state":"open","title":"Bump the go_modules group across 14 directories with 13 updates","user":"dependabot[bot]","labels":["size/XL","dependencies","go"],"assignees":[],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-11T23:45:54.000Z","updated_at":"2026-06-11T23:47:54.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":13,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.0","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/openfga/openfga","old_version":"1.8.13","new_version":"1.16.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/Azure/go-ntlmssp","old_version":"0.0.0-20220621081337-cb9428e4ac1e","new_version":"0.1.1","repository_url":"https://github.com/Azure/go-ntlmssp"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.37.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 7 updates in the /apps/iam directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.0` | `4.1.4` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.9.2` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.8.13` | `1.16.0` |\n| [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) | `0.0.0-20220621081337-cb9428e4ac1e` | `0.1.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 5 updates in the /apps/plugins directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.45.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 1 update in the /apps/preferences directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /apps/provisioning directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 2 updates in the /apps/secret directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/shorturl directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apimachinery directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/apiserver directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/build directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 1 update in the /pkg/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 1 update in the /pkg/plugins/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 4 updates in the /pkg/promlib directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/buger/jsonparser](https://github.com/buger/jsonparser).\nBumps the go_modules group with 1 update in the /pkg/semconv directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.0 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.0...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.8.13 to 1.16.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown \u003ccode\u003ekid\u003c/code\u003e (rate-limited to once per minute). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003e#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.3\"\u003eGo 1.26.3 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3115\"\u003e#3115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrey-berenda\"\u003e\u003ccode\u003e@​andrey-berenda\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003eopenfga/openfga#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.15.1...v1.16.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.15.1...v1.16.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.15.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReuse a single MySQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3042\"\u003e#3042\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential panic within command error handling. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3091\"\u003e#3091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that propagated expected errors from list objects when a path short-circuits. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3096\"\u003e#3096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e for edges in unions with multiple branches (direct types, wildcards, TTU paths, or intersections). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3097\"\u003e#3097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in the bounded tuple reader that would cause semaphore token leaks under context cancelation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3106\"\u003e#3106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that could cause deadlocks in check by holding message streams open indefinitely upon error. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3111\"\u003e#3111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.15.0...v1.15.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.15.0...v1.15.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImplemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3075\"\u003e#3075\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3086\"\u003e#3086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.2 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.2\"\u003eGo 1.26.2 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.16.0] - 2026-05-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown \u003ccode\u003ekid\u003c/code\u003e (rate-limited to once per minute). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003e#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.3\"\u003eGo 1.26.3 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3115\"\u003e#3115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.15.1] - 2026-05-06\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReuse a single MySQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3042\"\u003e#3042\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential panic within command error handling. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3091\"\u003e#3091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that propagated expected errors from list objects when a path short-circuits. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3096\"\u003e#3096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e for edges in unions with multiple branches (direct types, wildcards, TTU paths, or intersections). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3097\"\u003e#3097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in the bounded tuple reader that would cause semaphore token leaks under context cancelation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3106\"\u003e#3106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that could cause deadlocks in check by holding message streams open indefinitely upon error. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3111\"\u003e#3111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.15.0] - 2026-04-27\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImplemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3075\"\u003e#3075\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3086\"\u003e#3086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.2 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.2\"\u003eGo 1.26.2 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.14.2] - 2026-04-14\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse delimiter in contextual tuple key in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e, and add validation in v2Check. Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3064\"\u003e#3064\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.14.1] - 2026-04-10\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded configuration for the server shutdown timeout. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2976\"\u003e#2976\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd jitter to internal cache TTLs to spread expirations and reduce thundering herd effects. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3033\"\u003e#3033\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMade some minor changes in ListObjects to reduce heap allocations. Results in minor latency reduction. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3043\"\u003e#3043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove cache key generation performance by removing \u003ccode\u003efmt\u003c/code\u003e usage and extend control-character sanitization to all cache key inputs (tuples, conditions, context). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3006\"\u003e#3006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse a single PostgreSQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3018\"\u003e#3018\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/165291872c4577a54200b9ddc7c966d3e89d6c2d\"\u003e\u003ccode\u003e1652918\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.16.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3139\"\u003e#3139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/d42f9f3dea688db5f284e47048b06a2dbd8eecf6\"\u003e\u003ccode\u003ed42f9f3\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/ece3b9ef965a7a790c433d889538319569639527\"\u003e\u003ccode\u003eece3b9e\u003c/code\u003e\u003c/a\u003e fix: unintentional zeroing of slice values by setting slice to nil (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3135\"\u003e#3135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/5b39f175c241f5f9691bacb8ce6721ecad8c9179\"\u003e\u003ccode\u003e5b39f17\u003c/code\u003e\u003c/a\u003e increase the check v2 trace information fidelity (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3134\"\u003e#3134\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/b6d0028e02c9d3df3f5c93633f736f5192d9b2b6\"\u003e\u003ccode\u003eb6d0028\u003c/code\u003e\u003c/a\u003e feat: add datastore ping and ping retry configurations (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3113\"\u003e#3113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/e669ac8b710f9902bbed3fb1f9784ef57e8e8a9a\"\u003e\u003ccode\u003ee669ac8\u003c/code\u003e\u003c/a\u003e fix: prevent v2Check strategies returning spurious false on context cancellat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/857e432cc7c02115b1ec7dd9e0d6b6dd5f8e3d10\"\u003e\u003ccode\u003e857e432\u003c/code\u003e\u003c/a\u003e fix(authn/oidc): refresh JWKS on unknown kid to handle key rotation (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3101\"\u003e#3101\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/8c9e0bf3547877643ff7b31cb4a95f939c10b48d\"\u003e\u003ccode\u003e8c9e0bf\u003c/code\u003e\u003c/a\u003e fix: v2Check falls back to v1 on errors (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3126\"\u003e#3126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c30681262a8cccb3e55e60d065b10cbe3e889323\"\u003e\u003ccode\u003ec306812\u003c/code\u003e\u003c/a\u003e fix: don't cache false results from cancelled-context goroutines in v2Check (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/39113898dc97af10df8c1660f01d014b2cc1d230\"\u003e\u003ccode\u003e3911389\u003c/code\u003e\u003c/a\u003e make union cache key unique by including the node input's label (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3117\"\u003e#3117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.8.13...v1.16.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.41.0 to 0.50.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.41.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.74.2 to 1.80.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.74.2...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Azure/go-ntlmssp` from 0.0.0-20220621081337-cb9428e4ac1e to 0.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/go-ntlmssp/releases\"\u003egithub.com/Azure/go-ntlmssp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.1.1\u003c/h2\u003e\n\u003cp\u003eFix CVE-2026-32952: A malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport.\u003c/p\u003e\n\u003ch2\u003ev0.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum required version to Go 1.24 by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/53\"\u003eAzure/go-ntlmssp#53\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix OOM in NTLM negotiator by avoiding buffering of seekable request bodies by \u003ca href=\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/54\"\u003eAzure/go-ntlmssp#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't modify the rountripped request by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/57\"\u003eAzure/go-ntlmssp#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a race occurring when the wrapped Rountripper closes the request body in another goroutine by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/58\"\u003eAzure/go-ntlmssp#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a race occurring when the wrapped Rountripper reads request fields in another goroutine by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/59\"\u003eAzure/go-ntlmssp#59\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly perform basic auth if requested by the server by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/60\"\u003eAzure/go-ntlmssp#60\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't pass the original body in the client handshake request by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/61\"\u003eAzure/go-ntlmssp#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRe...\n\n_Description has been truncated_","html_url":"https://github.com/OneFineStarstuff/grafana/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OneFineStarstuff%2Fgrafana/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"},{"uuid":"4613033257","node_id":"PR_kwDOEnf8cc7j6NiC","number":227,"state":"closed","title":"build(deps): bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-05T01:30:52.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-08T12:52:53.000Z","updated_at":"2026-07-05T01:30:53.000Z","time_to_close":2291879,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.9.2 to 5.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.9.2\u0026new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/askasoft/pango/pull/227","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/askasoft%2Fpango/issues/227","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/227/packages"}],"issue_packages":[{"old_version":"5.9.2","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-07-06T03:09:35.000Z","version_change":"5.9.2 → 5.10.0","issue":{"uuid":"4815632529","node_id":"PR_kwDOSOSmh87uKoh6","number":64,"state":"closed","title":"chore(deps): bump the go-minor-patch group across 1 directory with 9 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-13T03:10:27.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-06T03:09:35.000Z","updated_at":"2026-07-13T03:10:29.000Z","time_to_close":604852,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-patch","update_count":9,"packages":[{"name":"github.com/coder/websocket","old_version":"1.8.14","new_version":"1.8.15","repository_url":"https://github.com/coder/websocket"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/minio/minio-go/v7","old_version":"7.2.0","new_version":"7.2.1","repository_url":"https://github.com/minio/minio-go"},{"name":"github.com/pressly/goose/v3","old_version":"3.27.1","new_version":"3.27.2","repository_url":"https://github.com/pressly/goose"},{"name":"github.com/redis/go-redis/v9","old_version":"9.20.0","new_version":"9.21.0","repository_url":"https://github.com/redis/go-redis"},{"name":"github.com/testcontainers/testcontainers-go","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"github.com/testcontainers/testcontainers-go/modules/postgres","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"golang.org/x/crypto","old_version":"0.52.0","new_version":"0.53.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/time","old_version":"0.11.0","new_version":"0.15.0","repository_url":"https://github.com/golang/time"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 9 updates in the /server directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/coder/websocket](https://github.com/coder/websocket) | `1.8.14` | `1.8.15` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.2.0` | `7.2.1` |\n| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.27.1` | `3.27.2` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.20.0` | `9.21.0` |\n| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [github.com/testcontainers/testcontainers-go/modules/postgres](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |\n| [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.15.0` |\n\n\nUpdates `github.com/coder/websocket` from 1.8.14 to 1.8.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coder/websocket/releases\"\u003egithub.com/coder/websocket's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.15\u003c/h2\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: fix typo in Accept function by \u003ca href=\"https://github.com/IgorSilvestre\"\u003e\u003ccode\u003e@​IgorSilvestre\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/544\"\u003ecoder/websocket#544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: transmit in single frame when compression enabled by \u003ca href=\"https://github.com/DanielleMaywood\"\u003e\u003ccode\u003e@​DanielleMaywood\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/552\"\u003ecoder/websocket#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add document for AI agents (AGENTS.md) by \u003ca href=\"https://github.com/mafredri\"\u003e\u003ccode\u003e@​mafredri\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/547\"\u003ecoder/websocket#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove mention of resolved issue in README by \u003ca href=\"https://github.com/tamird\"\u003e\u003ccode\u003e@​tamird\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/556\"\u003ecoder/websocket#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix lint issue by \u003ca href=\"https://github.com/mafredri\"\u003e\u003ccode\u003e@​mafredri\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/557\"\u003ecoder/websocket#557\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix roadmap links after repo transfer by \u003ca href=\"https://github.com/GeObts\"\u003e\u003ccode\u003e@​GeObts\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/558\"\u003ecoder/websocket#558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid per-frame cleanup closures on read to remove 2 allocs per frame read by \u003ca href=\"https://github.com/mitchellh\"\u003e\u003ccode\u003e@​mitchellh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/565\"\u003ecoder/websocket#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003econn: skip timeout callbacks for background contexts by \u003ca href=\"https://github.com/mitchellh\"\u003e\u003ccode\u003e@​mitchellh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/566\"\u003ecoder/websocket#566\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/IgorSilvestre\"\u003e\u003ccode\u003e@​IgorSilvestre\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/544\"\u003ecoder/websocket#544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tamird\"\u003e\u003ccode\u003e@​tamird\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/556\"\u003ecoder/websocket#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/GeObts\"\u003e\u003ccode\u003e@​GeObts\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/558\"\u003ecoder/websocket#558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mitchellh\"\u003e\u003ccode\u003e@​mitchellh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coder/websocket/pull/565\"\u003ecoder/websocket#565\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coder/websocket/compare/v1.8.14...v1.8.15\"\u003ehttps://github.com/coder/websocket/compare/v1.8.14...v1.8.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/9c8faadccd1b679e811a79ce506f8a10237251ad\"\u003e\u003ccode\u003e9c8faad\u003c/code\u003e\u003c/a\u003e conn: skip timeout callbacks for background contexts (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/70393646f4d7f38613019f50c3dc78cead816191\"\u003e\u003ccode\u003e7039364\u003c/code\u003e\u003c/a\u003e avoid per-frame cleanup closures on read to remove 2 allocs per frame read (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/d099e1621e8d0f080c9f3b87c5a8587e0b722723\"\u003e\u003ccode\u003ed099e16\u003c/code\u003e\u003c/a\u003e docs: fix roadmap links (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/c98e9dc2d6f69af6172dd1ed212c48b35fc54f22\"\u003e\u003ccode\u003ec98e9dc\u003c/code\u003e\u003c/a\u003e docs: fix lint issue (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/557\"\u003e#557\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/39b7b07a7a6e733c564d43921fc1b7ea16370b5b\"\u003e\u003ccode\u003e39b7b07\u003c/code\u003e\u003c/a\u003e docs: remove mention of resolved issue in README (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/556\"\u003e#556\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/9f473adfa59519d1e0295cd7a988d965085b701a\"\u003e\u003ccode\u003e9f473ad\u003c/code\u003e\u003c/a\u003e docs: add document for AI agents (AGENTS.md) (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/547\"\u003e#547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/8d3545afb3eae1589606d937c4809ff4df769aa6\"\u003e\u003ccode\u003e8d3545a\u003c/code\u003e\u003c/a\u003e fix: transmit in single frame when compression enabled (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coder/websocket/commit/8bf6dd28ef54e75c9e6e0ea90547f6d4e5e75795\"\u003e\u003ccode\u003e8bf6dd2\u003c/code\u003e\u003c/a\u003e chore: fix typo in Accept function (\u003ca href=\"https://redirect.github.com/coder/websocket/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coder/websocket/compare/v1.8.14...v1.8.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/minio/minio-go/v7` from 7.2.0 to 7.2.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/7e34713241bbd80c4cae66ad141d232c0623387b\"\u003e\u003ccode\u003e7e34713\u003c/code\u003e\u003c/a\u003e feat: support in mc inventory for custom run schedule (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2244\"\u003e#2244\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/016d0fd563bf63aa67056ca86014dd53c9d37205\"\u003e\u003ccode\u003e016d0fd\u003c/code\u003e\u003c/a\u003e feat: stream GetObjectAnnotation payload via io.ReadCloser (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2243\"\u003e#2243\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/6c516377ef72db8e98b3f2d7e54dc56d79a53881\"\u003e\u003ccode\u003e6c51637\u003c/code\u003e\u003c/a\u003e feat: stream PutObjectAnnotation payload via io.ReadSeeker (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2242\"\u003e#2242\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/07c682a0628fffe0b00995ec1c382389d21e4722\"\u003e\u003ccode\u003e07c682a\u003c/code\u003e\u003c/a\u003e feat: add object annotation client APIs (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2241\"\u003e#2241\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/53b504aa08f607dd575e283bd0769c054104eabc\"\u003e\u003ccode\u003e53b504a\u003c/code\u003e\u003c/a\u003e fix: caching defer bug (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2237\"\u003e#2237\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/291e83f05a251745f03d3065ed091188ba953525\"\u003e\u003ccode\u003e291e83f\u003c/code\u003e\u003c/a\u003e add new aws region ap-southeast-6 (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2234\"\u003e#2234\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/minio/minio-go/compare/v7.2.0...v7.2.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/pressly/goose/v3` from 3.27.1 to 3.27.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pressly/goose/releases\"\u003egithub.com/pressly/goose/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.2\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003egolang.org/x/crypto\u003c/code\u003e and \u003ccode\u003egolang.org/x/net\u003c/code\u003e to address security advisories (CVE fixes)\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pressly/goose/blob/main/CHANGELOG.md\"\u003egithub.com/pressly/goose/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[v3.27.2] - 2026-06-30\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003egolang.org/x/crypto\u003c/code\u003e and \u003ccode\u003egolang.org/x/net\u003c/code\u003e to address security advisories (CVE fixes)\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/b0f7076bc5e6fef42c7500e200a37ab0e8127772\"\u003e\u003ccode\u003eb0f7076\u003c/code\u003e\u003c/a\u003e release: v3.27.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/6669df28f344ef1cbd2a8f6ff6feb30eced488d6\"\u003e\u003ccode\u003e6669df2\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/opencontainers/runc from 1.3.3 to 1.3.6 in /inte...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/f61f5b9d81bde851c574671413085362ec53b55c\"\u003e\u003ccode\u003ef61f5b9\u003c/code\u003e\u003c/a\u003e build(deps): bump the gomod group across 1 directory with 4 updates (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1086\"\u003e#1086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/90d5b3ac55db5942cc1dc9015a2d6e49c5da71ea\"\u003e\u003ccode\u003e90d5b3a\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/checkout from 6 to 7 (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1081\"\u003e#1081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/cef6bb7d23058223d8274c9ed53b3935bdfecc60\"\u003e\u003ccode\u003ecef6bb7\u003c/code\u003e\u003c/a\u003e build(deps): bump golang crypto and net to FIX CVEs (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1083\"\u003e#1083\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/f2c327a7b28d129e8fdbabd58a4071cf554e95b1\"\u003e\u003ccode\u003ef2c327a\u003c/code\u003e\u003c/a\u003e build(deps): bump the gomod group across 1 directory with 7 updates (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1079\"\u003e#1079\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/d0bee40e1f7e5160a01401f7f5c7a6bf9132f73e\"\u003e\u003ccode\u003ed0bee40\u003c/code\u003e\u003c/a\u003e Docs: mention MariaDB support (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1071\"\u003e#1071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/pressly/goose/compare/v3.27.1...v3.27.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.20.0 to 9.21.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e9.21.0\u003c/h2\u003e\n\u003cp\u003eThis is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eZero-copy \u003ccode\u003eGetToBuffer\u003c/code\u003e / \u003ccode\u003eSetFromBuffer\u003c/code\u003e\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ccode\u003eStringCmdable\u003c/code\u003e methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that \u003ccode\u003eGet\u003c/code\u003e/\u003ccode\u003eSet\u003c/code\u003e incur:\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eGetToBuffer(ctx, key, buf) *ZeroCopyStringCmd   // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) }\r\nSetFromBuffer(ctx, key, buf) *StatusCmd\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003ccode\u003eGetToBuffer\u003c/code\u003e decodes the bulk reply straight into the caller-owned \u003ccode\u003ebuf\u003c/code\u003e (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. \u003ccode\u003eSetFromBuffer\u003c/code\u003e is provided for API symmetry — it dispatches to the same \u003ccode\u003e[]byte\u003c/code\u003e writer path as \u003ccode\u003eSet(ctx, key, buf, 0)\u003c/code\u003e and produces byte-identical output on the wire. Available on \u003ccode\u003e*Client\u003c/code\u003e, \u003ccode\u003e*ClusterClient\u003c/code\u003e, \u003ccode\u003e*Ring\u003c/code\u003e, \u003ccode\u003e*Conn\u003c/code\u003e and \u003ccode\u003ePipeliner\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3834\"\u003e#3834\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eExplicit \u003ccode\u003eLIMIT 0\u003c/code\u003e for stream trimming\u003c/h3\u003e\n\u003cp\u003eRedis treats \u003ccode\u003eXTRIM\u003c/code\u003e/\u003ccode\u003eXADD\u003c/code\u003e approximate-trim (\u003ccode\u003e~\u003c/code\u003e) \u003ccode\u003eLIMIT 0\u003c/code\u003e as \u0026quot;disable the trimming effort cap entirely\u0026quot;, which differs from omitting \u003ccode\u003eLIMIT\u003c/code\u003e (the implicit \u003ccode\u003e100 * stream-node-max-entries\u003c/code\u003e default). The command builders previously only emitted \u003ccode\u003eLIMIT\u003c/code\u003e when \u003ccode\u003elimit \u0026gt; 0\u003c/code\u003e, so callers could never send an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e. Following the \u003ccode\u003eKeepTTL = -1\u003c/code\u003e precedent, the new \u003ccode\u003eXTrimLimitDisabled = -1\u003c/code\u003e sentinel now emits an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e; \u003ccode\u003elimit == 0\u003c/code\u003e keeps the historical no-\u003ccode\u003eLIMIT\u003c/code\u003e behavior, so existing callers produce byte-identical commands.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3848\"\u003e#3848\u003c/a\u003e) by \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e✨ New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eZero-copy buffer string commands\u003c/strong\u003e: new \u003ccode\u003eGetToBuffer\u003c/code\u003e / \u003ccode\u003eSetFromBuffer\u003c/code\u003e on \u003ccode\u003eStringCmdable\u003c/code\u003e and the \u003ccode\u003eZeroCopyStringCmd\u003c/code\u003e result type, reading/writing string values into caller-owned buffers without per-call payload allocation (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3834\"\u003e#3834\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXTrimLimitDisabled\u003c/code\u003e sentinel\u003c/strong\u003e: \u003ccode\u003eXTRIM\u003c/code\u003e/\u003ccode\u003eXADD\u003c/code\u003e approximate trimming can now send an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e to disable the trim effort cap, via the new \u003ccode\u003eXTrimLimitDisabled = -1\u003c/code\u003e sentinel (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3848\"\u003e#3848\u003c/a\u003e) by \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub health-check timeouts\u003c/strong\u003e: \u003ccode\u003echannel.initHealthCheck\u003c/code\u003e now bounds the \u003ccode\u003ePing\u003c/code\u003e it issues with a fresh per-check timeout context (the exported \u003ccode\u003epingTimeout\u003c/code\u003e / \u003ccode\u003ereconnectTimeout\u003c/code\u003e) instead of \u003ccode\u003econtext.TODO()\u003c/code\u003e, so a stuck health-check Ping can no longer block indefinitely (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3819\"\u003e#3819\u003c/a\u003e) by \u003ca href=\"https://github.com/abdellani\"\u003e\u003ccode\u003e@​abdellani\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSkip redundant \u003ccode\u003eUNWATCH\u003c/code\u003e in \u003ccode\u003eTx.Close\u003c/code\u003e\u003c/strong\u003e: a transaction now tracks whether a \u003ccode\u003eWATCH\u003c/code\u003e is still active (\u003ccode\u003ewatchArmed\u003c/code\u003e) and only issues \u003ccode\u003eUNWATCH\u003c/code\u003e on \u003ccode\u003eClose\u003c/code\u003e when it is, removing an extra round trip on the common \u003ccode\u003eWATCH\u003c/code\u003e/.../\u003ccode\u003eEXEC\u003c/code\u003e and no-key \u003ccode\u003eWatch\u003c/code\u003e paths while never returning a connection to the pool with an active watch (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3854\"\u003e#3854\u003c/a\u003e) by \u003ca href=\"https://github.com/fcostaoliveira\"\u003e\u003ccode\u003e@​fcostaoliveira\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003emaintnotifications\u003c/code\u003e \u003ccode\u003eModeAuto\u003c/code\u003e fail-open\u003c/strong\u003e: \u003ccode\u003eModeAuto\u003c/code\u003e now stays fail-open when the server does not support maintenance notifications — connections are retired and tracking is guarded during downgrade so the client keeps working instead of erroring (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3853\"\u003e#3853\u003c/a\u003e) by \u003ca href=\"https://github.com/terrorobe\"\u003e\u003ccode\u003e@​terrorobe\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/abdellani\"\u003e\u003ccode\u003e@​abdellani\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/fcostaoliveira\"\u003e\u003ccode\u003e@​fcostaoliveira\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/terrorobe\"\u003e\u003ccode\u003e@​terrorobe\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.20.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md\"\u003egithub.com/redis/go-redis/v9's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.21.0 (2026-06-18)\u003c/h1\u003e\n\u003cp\u003eThis is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eZero-copy \u003ccode\u003eGetToBuffer\u003c/code\u003e / \u003ccode\u003eSetFromBuffer\u003c/code\u003e\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ccode\u003eStringCmdable\u003c/code\u003e methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that \u003ccode\u003eGet\u003c/code\u003e/\u003ccode\u003eSet\u003c/code\u003e incur:\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eGetToBuffer(ctx, key, buf) *ZeroCopyStringCmd   // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) }\nSetFromBuffer(ctx, key, buf) *StatusCmd\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003ccode\u003eGetToBuffer\u003c/code\u003e decodes the bulk reply straight into the caller-owned \u003ccode\u003ebuf\u003c/code\u003e (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. \u003ccode\u003eSetFromBuffer\u003c/code\u003e is provided for API symmetry — it dispatches to the same \u003ccode\u003e[]byte\u003c/code\u003e writer path as \u003ccode\u003eSet(ctx, key, buf, 0)\u003c/code\u003e and produces byte-identical output on the wire. Available on \u003ccode\u003e*Client\u003c/code\u003e, \u003ccode\u003e*ClusterClient\u003c/code\u003e, \u003ccode\u003e*Ring\u003c/code\u003e, \u003ccode\u003e*Conn\u003c/code\u003e and \u003ccode\u003ePipeliner\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3834\"\u003e#3834\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eExplicit \u003ccode\u003eLIMIT 0\u003c/code\u003e for stream trimming\u003c/h3\u003e\n\u003cp\u003eRedis treats \u003ccode\u003eXTRIM\u003c/code\u003e/\u003ccode\u003eXADD\u003c/code\u003e approximate-trim (\u003ccode\u003e~\u003c/code\u003e) \u003ccode\u003eLIMIT 0\u003c/code\u003e as \u0026quot;disable the trimming effort cap entirely\u0026quot;, which differs from omitting \u003ccode\u003eLIMIT\u003c/code\u003e (the implicit \u003ccode\u003e100 * stream-node-max-entries\u003c/code\u003e default). The command builders previously only emitted \u003ccode\u003eLIMIT\u003c/code\u003e when \u003ccode\u003elimit \u0026gt; 0\u003c/code\u003e, so callers could never send an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e. Following the \u003ccode\u003eKeepTTL = -1\u003c/code\u003e precedent, the new \u003ccode\u003eXTrimLimitDisabled = -1\u003c/code\u003e sentinel now emits an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e; \u003ccode\u003elimit == 0\u003c/code\u003e keeps the historical no-\u003ccode\u003eLIMIT\u003c/code\u003e behavior, so existing callers produce byte-identical commands.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3848\"\u003e#3848\u003c/a\u003e) by \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e✨ New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eZero-copy buffer string commands\u003c/strong\u003e: new \u003ccode\u003eGetToBuffer\u003c/code\u003e / \u003ccode\u003eSetFromBuffer\u003c/code\u003e on \u003ccode\u003eStringCmdable\u003c/code\u003e and the \u003ccode\u003eZeroCopyStringCmd\u003c/code\u003e result type, reading/writing string values into caller-owned buffers without per-call payload allocation (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3834\"\u003e#3834\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXTrimLimitDisabled\u003c/code\u003e sentinel\u003c/strong\u003e: \u003ccode\u003eXTRIM\u003c/code\u003e/\u003ccode\u003eXADD\u003c/code\u003e approximate trimming can now send an explicit \u003ccode\u003eLIMIT 0\u003c/code\u003e to disable the trim effort cap, via the new \u003ccode\u003eXTrimLimitDisabled = -1\u003c/code\u003e sentinel (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3848\"\u003e#3848\u003c/a\u003e) by \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub health-check timeouts\u003c/strong\u003e: \u003ccode\u003echannel.initHealthCheck\u003c/code\u003e now bounds the \u003ccode\u003ePing\u003c/code\u003e it issues with a fresh per-check timeout context (the exported \u003ccode\u003epingTimeout\u003c/code\u003e / \u003ccode\u003ereconnectTimeout\u003c/code\u003e) instead of \u003ccode\u003econtext.TODO()\u003c/code\u003e, so a stuck health-check Ping can no longer block indefinitely (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3819\"\u003e#3819\u003c/a\u003e) by \u003ca href=\"https://github.com/abdellani\"\u003e\u003ccode\u003e@​abdellani\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSkip redundant \u003ccode\u003eUNWATCH\u003c/code\u003e in \u003ccode\u003eTx.Close\u003c/code\u003e\u003c/strong\u003e: a transaction now tracks whether a \u003ccode\u003eWATCH\u003c/code\u003e is still active (\u003ccode\u003ewatchArmed\u003c/code\u003e) and only issues \u003ccode\u003eUNWATCH\u003c/code\u003e on \u003ccode\u003eClose\u003c/code\u003e when it is, removing an extra round trip on the common \u003ccode\u003eWATCH\u003c/code\u003e/.../\u003ccode\u003eEXEC\u003c/code\u003e and no-key \u003ccode\u003eWatch\u003c/code\u003e paths while never returning a connection to the pool with an active watch (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3854\"\u003e#3854\u003c/a\u003e) by \u003ca href=\"https://github.com/fcostaoliveira\"\u003e\u003ccode\u003e@​fcostaoliveira\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003emaintnotifications\u003c/code\u003e \u003ccode\u003eModeAuto\u003c/code\u003e fail-open\u003c/strong\u003e: \u003ccode\u003eModeAuto\u003c/code\u003e now stays fail-open when the server does not support maintenance notifications — connections are retired and tracking is guarded during downgrade so the client keeps working instead of erroring (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3853\"\u003e#3853\u003c/a\u003e) by \u003ca href=\"https://github.com/terrorobe\"\u003e\u003ccode\u003e@​terrorobe\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/abdellani\"\u003e\u003ccode\u003e@​abdellani\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/fcostaoliveira\"\u003e\u003ccode\u003e@​fcostaoliveira\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/terrorobe\"\u003e\u003ccode\u003e@​terrorobe\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TheRealMal\"\u003e\u003ccode\u003e@​TheRealMal\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.1...v9.21.0\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.1...v9.21.0\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003e9.20.1 (2026-06-11)\u003c/h1\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/1551837b70beda914156d1a922d2e663c21bb0e6\"\u003e\u003ccode\u003e1551837\u003c/code\u003e\u003c/a\u003e chore(release): 9.21.0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3857\"\u003e#3857\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/1cfa927b89e62b89919671f45ed552e85d1cd7bd\"\u003e\u003ccode\u003e1cfa927\u003c/code\u003e\u003c/a\u003e fix(maintnotifications): keep ModeAuto fail-open (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3853\"\u003e#3853\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/1f0ea0e7edce610e0c32a136ded59f2c2a1f085e\"\u003e\u003ccode\u003e1f0ea0e\u003c/code\u003e\u003c/a\u003e feat(pubsub): introduce timeouts for Ping on channel.initHealthCheck (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3819\"\u003e#3819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/5484b0b86ce0e25e874c0a1169e318ee28753e13\"\u003e\u003ccode\u003e5484b0b\u003c/code\u003e\u003c/a\u003e feat(tx): skip redundant UNWATCH in Tx.Close when no WATCH is active (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3854\"\u003e#3854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/bf57a51fdb5cc83cf4a0ca780adee5abe6300ec4\"\u003e\u003ccode\u003ebf57a51\u003c/code\u003e\u003c/a\u003e chore(deps): bump rojopolis/spellcheck-github-actions (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3852\"\u003e#3852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/641294c30ad017d565e31c3999c86af2e83dad50\"\u003e\u003ccode\u003e641294c\u003c/code\u003e\u003c/a\u003e feat(streams): support explicit LIMIT 0 in XTRIM/XADD trimming via XTrimLimit...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/74d9bb03f843cb2db92e8df7118177514122cd19\"\u003e\u003ccode\u003e74d9bb0\u003c/code\u003e\u003c/a\u003e feat(command): add zero-copy GetToBuffer and SetFromBuffer (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3834\"\u003e#3834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a13416bf1c0556075b843dd0a9cb6db3b3cf2789\"\u003e\u003ccode\u003ea13416b\u003c/code\u003e\u003c/a\u003e chore(release): 9.20.1 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3847\"\u003e#3847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/10dc44f424d58b9c2b4df29e529ca92a2f8fa986\"\u003e\u003ccode\u003e10dc44f\u003c/code\u003e\u003c/a\u003e fix(push): fix peeking when push name is truncated (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3842\"\u003e#3842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/e1a2d68b27e70ca8f3ff5eec61d0dd2b74554670\"\u003e\u003ccode\u003ee1a2d68\u003c/code\u003e\u003c/a\u003e fix(ft.hybrid): Always generate vector param names if they are not provided b...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go/modules/postgres` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go/modules/postgres's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.52.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/45460e079737ecb64f30d79d3d6fc2914494fa66\"\u003e\u003ccode\u003e45460e0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/d37c95e27de65576f42440cdfbc261d810506841\"\u003e\u003ccode\u003ed37c95e\u003c/code\u003e\u003c/a\u003e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e2ffffe738fb46531cd8924bab497bdc77d9ecc8\"\u003e\u003ccode\u003ee2ffffe\u003c/code\u003e\u003c/a\u003e ssh: reject incomplete gssapi-with-mic configurations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/60e158ad30c226555794539d96f0f104f43395f7\"\u003e\u003ccode\u003e60e158a\u003c/code\u003e\u003c/a\u003e ssh/test: isolate CLI tests from user SSH config and agent\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/1b77d23dc8afb26a494e331a3c637b6de88398d2\"\u003e\u003ccode\u003e1b77d23\u003c/code\u003e\u003c/a\u003e ssh/knownhosts: reject lines with multiple or unknown markers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/3872a2bc69f464352dea49c2856955ef7c5d5851\"\u003e\u003ccode\u003e3872a2b\u003c/code\u003e\u003c/a\u003e ssh/knownhosts: verify declared key type matches decoded key\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9f72eccdf6fa09a7c68448a7fdc333dd2deb7d9d\"\u003e\u003ccode\u003e9f72ecc\u003c/code\u003e\u003c/a\u003e ssh/knownhosts: treat only ASCII space and tab as whitespace\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/8f405a4109d7ce87a44f89185bdc385914ce5c13\"\u003e\u003ccode\u003e8f405a4\u003c/code\u003e\u003c/a\u003e ssh: validate ECDSA curve matches expected algorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bb41b3dbe630c21c78e3aeb0ebdd8d06a3a34fcf\"\u003e\u003ccode\u003ebb41b3d\u003c/code\u003e\u003c/a\u003e ssh: improve DH GEX group selection using PreferredBits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e04e7219970912a40f80c4b13029416fdf960eeb\"\u003e\u003ccode\u003ee04e721\u003c/code\u003e\u003c/a\u003e ssh/agent: validate ed25519 private key length in Add\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.52.0...v0.53.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/time` from 0.11.0 to 0.15.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/time/commit/812b343c8714c317b0dad633efa6d103e554c006\"\u003e\u003ccode\u003e812b343\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/time/commit/2b4e43900c03fd6b77109b7b2b6d77583f48bc1c\"\u003e\u003ccode\u003e2b4e439\u003c/code\u003e\u003c/a\u003e rate: use time.Time.Equal instead of ==\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/time/commit/c0b0320d156bbe60202a475fa80cc0b9d0f05e20\"\u003e\u003ccode\u003ec0b0320\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.24.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/time/commit/1616a7fa5fe23b54fee0cc3dd6d0bd48abc19914\"\u003e\u003ccode\u003e1616a7f\u003c/code\u003e\u003c/a\u003e rate: skip time.Now call in Sometimes.Do unless necessary\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/time/compare/v0.11.0...v0.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/GameOfAI/IronStock/pull/64","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GameOfAI%2FIronStock/issues/64","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/64/packages"}},{"old_version":"5.7.5","new_version":"5.9.2","update_type":"minor","path":null,"pr_created_at":"2026-07-03T22:20:42.000Z","version_change":"5.7.5 → 5.9.2","issue":{"uuid":"4806610146","node_id":"PR_kwDORU7NdM7tvlUh","number":9,"state":"open","title":"chore(deps): bump the go_modules group across 2 directories with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-03T22:20:42.000Z","updated_at":"2026-07-03T22:23:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/go-acme/lego/v4","old_version":"4.33.0","new_version":"4.34.0","repository_url":"https://github.com/go-acme/lego"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"golang.org/x/net","old_version":"0.51.0","new_version":"0.53.0","repository_url":"https://github.com/golang/net"},{"name":"github.com/containerd/containerd/v2","old_version":"2.2.1","new_version":"2.2.5","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/in-toto/in-toto-golang"},{"name":"go.mongodb.org/mongo-driver","old_version":"1.17.6","new_version":"1.17.9"},{"name":"go.opentelemetry.io/otel","old_version":"1.40.0","new_version":"1.43.0"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.40.0","new_version":"1.42.0"},{"name":"golang.org/x/net","old_version":"0.50.0","new_version":"0.55.0","repository_url":"https://github.com/golang/net"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 4 updates in the /agent directory: [github.com/go-acme/lego/v4](https://github.com/go-acme/lego), [github.com/jackc/pgx/v5](https://github.com/jackc/pgx), [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) and [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang).\nBumps the go_modules group with 1 update in the /core directory: [golang.org/x/net](https://github.com/golang/net).\n\nUpdates `github.com/go-acme/lego/v4` from 4.33.0 to 4.34.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-acme/lego/releases\"\u003egithub.com/go-acme/lego/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.34.0\u003c/h2\u003e\n\u003cp\u003elego is an independent, free, and open-source project, if you value it, consider \u003ca href=\"https://donate.ldez.dev\"\u003esupporting it\u003c/a\u003e! ❤️\u003c/p\u003e\n\u003cp\u003eEverybody thinks that the others will donate, but in the end, nobody does.\u003c/p\u003e\n\u003cp\u003eSo if you think that lego is worth it, please consider \u003ca href=\"https://donate.ldez.dev\"\u003edonating\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eFor key updates, see the \u003ca href=\"https://github.com/go-acme/lego/blob/HEAD/CHANGELOG.md#v4340\"\u003echangelog\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eb682f8494cca7fd9859adc8814b253e6855b7faa Add DNS provider for 1cloud.ru (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2921\"\u003e#2921\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e79b83fe1e38e6b93443077014fb51d3ba3bfed7b Add DNS provider for Netnod (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2919\"\u003e#2919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eca178943d0a6394ae44d94ed37306d66b14ee2c2 Add DNS provider for UCloud (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2972\"\u003e#2972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e61bd6bf0b9bc49c740528316dc8054871127d706 Add DNS provider for online.net (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2964\"\u003e#2964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4f6a481bc4298383b1d2514f3dab0dbd0120b544 bluecatv2: fix documentation\u003c/li\u003e\n\u003cli\u003eaa6fcebccb73828e933c33363dccc0a93a101988 fix: check base64url token\u003c/li\u003e\n\u003cli\u003e1274ec8741d7ac0b4232775e358bc95db44d961c oraclecloud: support profile session token (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2965\"\u003e#2965\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecff2cd750413febbec64cb5fb3eedfc5a2e31a49 rfc2136: add RFC3645 (TSIG-GSS) support (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2946\"\u003e#2946\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e33754b3b216169b18d580bddf1837e713bff7c30 rfc2136: add dnsupdate as alias (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2957\"\u003e#2957\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e79796e155e4460967458c0df8fe58ea390cfe08f yandex360: update API docs links (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2922\"\u003e#2922\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-acme/lego/blob/main/CHANGELOG.md\"\u003egithub.com/go-acme/lego/v4's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.34.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRelease date: 2026-04-15\u003c/li\u003e\n\u003cli\u003eTag: \u003ca href=\"https://github.com/go-acme/lego/releases/tag/v4.34.0\"\u003ev4.34.0\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e Add DNS provider for UCloud\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e Add DNS provider for online.net\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e Add DNS provider for 1cloud.ru\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e Add DNS provider for Netnod\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e oraclecloud: support profile session token\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e rfc2136: add RFC3645 (TSIG-GSS) support\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[dnsprovider]\u003c/strong\u003e rfc2136: add dnsupdate as alias\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[httpprovider]\u003c/strong\u003e Check base64url token\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/f3c686a890e6fa36b92614112e8717832894faa7\"\u003e\u003ccode\u003ef3c686a\u003c/code\u003e\u003c/a\u003e Prepare release v4.34.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/aa6fcebccb73828e933c33363dccc0a93a101988\"\u003e\u003ccode\u003eaa6fceb\u003c/code\u003e\u003c/a\u003e fix: check base64url token\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/2c87024ed7b4cfe6799659f47a782824a371aa75\"\u003e\u003ccode\u003e2c87024\u003c/code\u003e\u003c/a\u003e chore: update dependencies (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2978\"\u003e#2978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/152e45441bc0c38fac322a0c434c1c53499c4a4d\"\u003e\u003ccode\u003e152e454\u003c/code\u003e\u003c/a\u003e chore: update github.com/modern-go/reflect2 (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2977\"\u003e#2977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/29fd2d928ebe253ef872175223d1ce90584a4fb0\"\u003e\u003ccode\u003e29fd2d9\u003c/code\u003e\u003c/a\u003e chore: improve issue templates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/ca178943d0a6394ae44d94ed37306d66b14ee2c2\"\u003e\u003ccode\u003eca17894\u003c/code\u003e\u003c/a\u003e Add DNS provider for UCloud (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2972\"\u003e#2972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/c4ab05772b6a6b0c3e946e05366fcac28bf5a913\"\u003e\u003ccode\u003ec4ab057\u003c/code\u003e\u003c/a\u003e chore: improve issue templates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/61bd6bf0b9bc49c740528316dc8054871127d706\"\u003e\u003ccode\u003e61bd6bf\u003c/code\u003e\u003c/a\u003e Add DNS provider for online.net (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2964\"\u003e#2964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/1274ec8741d7ac0b4232775e358bc95db44d961c\"\u003e\u003ccode\u003e1274ec8\u003c/code\u003e\u003c/a\u003e oraclecloud: support profile session token (\u003ca href=\"https://redirect.github.com/go-acme/lego/issues/2965\"\u003e#2965\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-acme/lego/commit/4f6a481bc4298383b1d2514f3dab0dbd0120b544\"\u003e\u003ccode\u003e4f6a481\u003c/code\u003e\u003c/a\u003e bluecatv2: fix documentation\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-acme/lego/compare/v4.33.0...v4.34.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.51.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"\u003e\u003ccode\u003e7770ec4\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4ece7b612ad44ad6c4d5e0d5d4df9c18cc211905\"\u003e\u003ccode\u003e4ece7b6\u003c/code\u003e\u003c/a\u003e html: escape greater-than symbol in doctype identifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/08be507abce89191d78cd49da60f4501fc910472\"\u003e\u003ccode\u003e08be507\u003c/code\u003e\u003c/a\u003e html: improve Noah's Ark clause performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd\"\u003e\u003ccode\u003ea8fb2fe\u003c/code\u003e\u003c/a\u003e html: properly render fostered elements in foreign content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/0dc5b7a5f81d7155ade6d5e9db35992998679932\"\u003e\u003ccode\u003e0dc5b7a\u003c/code\u003e\u003c/a\u003e html: properly check namespace in \u0026quot;in body\u0026quot; any other end tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a452f3cc17168a60bc3f439a3ae0fcffc32eca0e\"\u003e\u003ccode\u003ea452f3c\u003c/code\u003e\u003c/a\u003e html: ignore duplicate attributes during tokenization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f8651996b24ba47d89dd9eb97fd47758e6d1886f\"\u003e\u003ccode\u003ef865199\u003c/code\u003e\u003c/a\u003e quic: fix appendMaxDataFrame erroneously accumulating sentLimit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/210ed3cb901cb549818aefa04b71dadaf149d05d\"\u003e\u003ccode\u003e210ed3c\u003c/code\u003e\u003c/a\u003e quic: establish a \u0026quot;happened-before\u0026quot; relationship between stream write and read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ad8140e0aa2ec41b37ea478b4525a423bcc21af9\"\u003e\u003ccode\u003ead8140e\u003c/code\u003e\u003c/a\u003e quic: fix buffer slicing when handling overlapping stream data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/23ee2efe81a3ff183b4eca46c42f749af7efca45\"\u003e\u003ccode\u003e23ee2ef\u003c/code\u003e\u003c/a\u003e http2: avoid API changes when built with go1.27\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.50.0...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd/v2` from 2.2.1 to 2.2.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 2.2.5\u003c/h2\u003e\n\u003cp\u003eWelcome to the v2.2.5 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe fifth patch release for containerd 2.2 contains various fixes\nand updates including security patches.\u003c/p\u003e\n\u003ch3\u003eSecurity Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003econtainerd\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574\"\u003e\u003cstrong\u003eCVE-2026-50195\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp\"\u003e\u003cstrong\u003eCVE-2026-53488\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc\"\u003e\u003cstrong\u003eCVE-2026-53492\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388\"\u003e\u003cstrong\u003eCVE-2026-53489\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq\"\u003e\u003cstrong\u003eCVE-2026-47262\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSamuel Karp\u003c/li\u003e\n\u003cli\u003eChris Henzie\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003eAkhil Mohan\u003c/li\u003e\n\u003cli\u003eBen Cressey\u003c/li\u003e\n\u003cli\u003eBrian Goff\u003c/li\u003e\n\u003cli\u003eDavanum Srinivas\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare release notes for v2.2.5 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13628\"\u003e#13628\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/269031099e51bd875bc8097b79a41fd00af08a28\"\u003e\u003ccode\u003e269031099\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ad59aa5647ac505a97965f521e21fcd4f9403631\"\u003e\u003ccode\u003ead59aa564\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0b4d23690ead6f34fb990155e1cc19d27f906370\"\u003e\u003ccode\u003e0b4d23690\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/be8460656b84c4a1a4b244a03801e9fff1e914d3\"\u003e\u003ccode\u003ebe8460656\u003c/code\u003e\u003c/a\u003e cri: filter CDI annotations on checkpoint restore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/347240f72479246a801ea4ec4304e180ac45b85e\"\u003e\u003ccode\u003e347240f72\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/cff57884176a1e6ba0857a417753d799958e0f46\"\u003e\u003ccode\u003ecff578841\u003c/code\u003e\u003c/a\u003e cri: do not re-tag restored checkpoints\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/668cf2c2fd0d9c6394f2aa95c44c4735c353d380\"\u003e\u003ccode\u003e668cf2c2f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/357652293053d0cd3ed565f718b0050aa662ae1a\"\u003e\u003ccode\u003e357652293\u003c/code\u003e\u003c/a\u003e cri: make checkpoint restore robust to unexpected archive content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/d43da05af9b515b89740889a84a91c8ed27a73f0\"\u003e\u003ccode\u003ed43da05af\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/30708e8d1142287e9c6bb839f1b3f84c71ca4485\"\u003e\u003ccode\u003e30708e8d1\u003c/code\u003e\u003c/a\u003e Bound user-database file reads in openUserFile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/028647ea2597eb3f7add39c6171b62768e0be74c\"\u003e\u003ccode\u003e028647ea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/b6072a49f8d3f6efc5ac9895efbb1852b16a2602\"\u003e\u003ccode\u003eb6072a49f\u003c/code\u003e\u003c/a\u003e Do not propagate reserved labels from image configs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003evendor: golang.org/x/crypto v0.53.0 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13607\"\u003e#13607\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/cfea2c1413a55243e5d8db9def5ed5e3e595894e\"\u003e\u003ccode\u003ecfea2c141\u003c/code\u003e\u003c/a\u003e [release/2.2] vendor: golang.org/x/crypto v0.53.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e53c7c1516c3b2bff98eb76f1f4117477e6f4e66\"\u003e\u003ccode\u003ee53c7c1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13628\"\u003e#13628\u003c/a\u003e from samuelkarp/prepare-2.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/269031099e51bd875bc8097b79a41fd00af08a28\"\u003e\u003ccode\u003e2690310\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ad59aa5647ac505a97965f521e21fcd4f9403631\"\u003e\u003ccode\u003ead59aa5\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/8bea48a3997876dd5936c8586c9610d623dda63c\"\u003e\u003ccode\u003e8bea48a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13607\"\u003e#13607\u003c/a\u003e from thaJeztah/2.2_bump_crypto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/699c4fb4560805ae4497e2bb488aaea52d61dd4d\"\u003e\u003ccode\u003e699c4fb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13606\"\u003e#13606\u003c/a\u003e from AkihiroSuda/runc-1.3.6-containerd-2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/cfea2c1413a55243e5d8db9def5ed5e3e595894e\"\u003e\u003ccode\u003ecfea2c1\u003c/code\u003e\u003c/a\u003e [release/2.2] vendor: golang.org/x/crypto v0.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/fc96ea6b3fbcd8fb467914a3fe5f977a5705efff\"\u003e\u003ccode\u003efc96ea6\u003c/code\u003e\u003c/a\u003e update runc binary to v1.3.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0b4d23690ead6f34fb990155e1cc19d27f906370\"\u003e\u003ccode\u003e0b4d236\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/347240f72479246a801ea4ec4304e180ac45b85e\"\u003e\u003ccode\u003e347240f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/668cf2c2fd0d9c6394f2aa95c44c4735c353d380\"\u003e\u003ccode\u003e668cf2c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v2.2.1...v2.2.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump the all group with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/453\"\u003ein-toto/in-toto-golang#453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the all group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/452\"\u003ein-toto/in-toto-golang#452\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/457\"\u003ein-toto/in-toto-golang#457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/459\"\u003ein-toto/in-toto-golang#459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ematch: Replace ^ with ! for negation in character classes by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/462\"\u003ein-toto/in-toto-golang#462\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/36d782ffb2ca3adbffcdce1fd971c23319dd4469\"\u003e\u003ccode\u003e36d782f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/462\"\u003e#462\u003c/a\u003e from in-toto/fix-negation-character\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/4a09e3bbc44bc687577b6532e57e8a4abfa5ddf4\"\u003e\u003ccode\u003e4a09e3b\u003c/code\u003e\u003c/a\u003e match: Replace ^ with ! for negation in character classes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c3302e8bc36e46119f7ae17c07eb879ff3507caa\"\u003e\u003ccode\u003ec3302e8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/459\"\u003e#459\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/go-jose...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/016e87efbb55c6dd8772ce227002eeb1b6e3f593\"\u003e\u003ccode\u003e016e87e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/5b9df76e685eaa0a950ea9ba3f4a5561e87e13ad\"\u003e\u003ccode\u003e5b9df76\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/457\"\u003e#457\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/595b3fe0a13f481eb0ef898ccaff5e345e492a2f\"\u003e\u003ccode\u003e595b3fe\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e396d248c9cf19f9e144f4e90c476af88742bf35\"\u003e\u003ccode\u003ee396d24\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/452\"\u003e#452\u003c/a\u003e from in-toto/dependabot/github_actions/all-502588e1ca\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/142b779059713332fe5c7856e98f1c564c6d6a09\"\u003e\u003ccode\u003e142b779\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/453\"\u003e#453\u003c/a\u003e from in-toto/dependabot/go_modules/all-d8ef5820aa\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/f741bcc43330554606b813fa0f8fe0c284fcdaea\"\u003e\u003ccode\u003ef741bcc\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c374dc9808137651fe8754eed363ec816cd59d2a\"\u003e\u003ccode\u003ec374dc9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group across 1 directory with 2 updates\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver` from 1.17.6 to 1.17.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.9\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.9 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release fixes a bug caused by variable shadowing.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3793 Fix variable shadowing in rtt monitor by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2317\"\u003emongodb/mongo-go-driver#2317\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.8...v1.17.9\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.8...v1.17.9\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.9\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.8\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.8 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release adds a deprecation notice to \u003ccode\u003ego.mongodb.org/mongo-driver\u003c/code\u003e, indicating users should migrate to \u003ccode\u003ego.mongodb.org/mongo-driver/v2\u003c/code\u003e. See the \u003ca href=\"https://github.com/mongodb/mongo-go-driver/blob/master/docs/migration-2.0.md\"\u003eV2 migration guide\u003c/a\u003e for more information.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e✨ New Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3773 Deprecate v1 by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2312\"\u003emongodb/mongo-go-driver#2312\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.7...v1.17.8\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.7...v1.17.8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.8\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.7\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3b10ae6d48140a7a672e64bace1e6132d61586f0\"\u003e\u003ccode\u003e3b10ae6\u003c/code\u003e\u003c/a\u003e BUMP v1.17.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f49080298dbb2a0b5f913115b27ccb7ab081b193\"\u003e\u003ccode\u003ef490802\u003c/code\u003e\u003c/a\u003e GODRIVER-3793 Fix variable shadowing in rtt monitor (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2317\"\u003e#2317\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/5ac5a1e731384cefcfa6dfa9f36949c43fae07a1\"\u003e\u003ccode\u003e5ac5a1e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f378649ba870ec0790f7f9de49dc3fb680b49a77\"\u003e\u003ccode\u003ef378649\u003c/code\u003e\u003c/a\u003e Revert dry-run release bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/08c2b98edd3d2071266568620d23075198823a2f\"\u003e\u003ccode\u003e08c2b98\u003c/code\u003e\u003c/a\u003e BUMP v1.17.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/fafe527c9a857575434c1e584741ce04b69483b9\"\u003e\u003ccode\u003efafe527\u003c/code\u003e\u003c/a\u003e GODRIVER-3773 Deprecate v1 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/eb01e7e2531e4bbbccfcff31a4be7a576e60349b\"\u003e\u003ccode\u003eeb01e7e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3c550934b65aa2a13a3f1c790b2e0e88c9c6a33e\"\u003e\u003ccode\u003e3c55093\u003c/code\u003e\u003c/a\u003e GODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2294\"\u003e#2294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f6163bf474d2711c88bca5b5715c959cc7244e0f\"\u003e\u003ccode\u003ef6163bf\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Remove libasan from gssapi tests in CI (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6798963ce0a8faa40c6c612772ac8fa0de58a206\"\u003e\u003ccode\u003e6798963\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.40.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.42.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErr\u003c/code\u003e and \u003ccode\u003eSetErr\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e to attach an error and set record exception attributes in \u003ccode\u003ego.opentelemetry.io/otel/log/sdk\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924\"\u003e#7924\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eTracerProvider.ForceFlush\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856\"\u003e#7856\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931\"\u003e#7931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964\"\u003e#7964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834\"\u003e#7834\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for [Go 1.24]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984\"\u003e#7984\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/a3941ff595235e952774f0a581c7655bec93b0ab\"\u003e\u003ccode\u003ea3941ff\u003c/code\u003e\u003c/a\u003e Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006\"\u003e#8006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6059c47bc64a1329618d8c06d31098cd1eee7750\"\u003e\u003ccode\u003e6059c47\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to e526e8a (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010\"\u003e#8010\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/44c7edf896e0672b8b522700dcb9d56011349897\"\u003e\u003ccode\u003e44c7edf\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mgechev/revive to v1.15.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009\"\u003e#8009\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/de5fb3ad101bc8de082bcaae93d4129ce467ad8c\"\u003e\u003ccode\u003ede5fb3a\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.79.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007\"\u003e#8007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0b82ded815a410d3bc0fc8b30802fd3a41059db3\"\u003e\u003ccode\u003e0b82ded\u003c/code\u003e\u003c/a\u003e chore(deps): update codspeedhq/action action to v4.11.1 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001\"\u003e#8001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/aa3660f77e65ad0873ae7f06084bfc9ddc62948b\"\u003e\u003ccode\u003eaa3660f\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.6 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004\"\u003e#8004\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9be8c92a131a085c8b33b32bf19b3e16c413e2ae\"\u003e\u003ccode\u003e9be8c92\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency codespell to v2.4.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003\"\u003e#8003\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c9d20155fcfa8d7dad13d1358fcdf63989113693\"\u003e\u003ccode\u003ec9d2015\u003c/code\u003e\u003c/a\u003e log: add error field to Record and make SDK to emit exception attributes (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924\"\u003e#7924\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/fdd1320c39ebc4b8e976f58e0af55965f25411c7\"\u003e\u003ccode\u003efdd1320\u003c/code\u003e\u003c/a\u003e TracerProvider ForceFlush() Error Fix (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856\"\u003e#7856\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/78f99042e2b038c4c86c5fa1ffd0609ec498c1db\"\u003e\u003ccode\u003e78f9904\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 18da590 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000\"\u003e#8000\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.50.0 to 0.55.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"\u003e\u003ccode\u003e7770ec4\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4ece7b612ad44ad6c4d5e0d5d4df9c18cc211905\"\u003e\u003ccode\u003e4ece7b6\u003c/code\u003e\u003c/a\u003e html: escape greater-than symbol in doctype identifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/08be507abce89191d78cd49da60f4501fc910472\"\u003e\u003ccode\u003e08be507\u003c/code\u003e\u003c/a\u003e html: improve Noah's Ark clause performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd\"\u003e\u003ccode\u003ea8fb2fe\u003c/code\u003e\u003c/a\u003e html: properly render fostered elements in foreign content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/0dc5b7a5f81d7155ade6d5e9db35992998679932\"\u003e\u003ccode\u003e0dc5b7a\u003c/code\u003e\u003c/a\u003e html: properly check namespace in \u0026quot;in body\u0026quot; any other end tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a452f3cc17168a60bc3f439a3ae0fcffc32eca0e\"\u003e\u003ccode\u003ea452f3c\u003c/code\u003e\u003c/a\u003e html: ignore duplicate attributes during tokenization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f8651996b24ba47d89dd9eb97fd47758e6d1886f\"\u003e\u003ccode\u003ef865199\u003c/code\u003e\u003c/a\u003e quic: fix appendMaxDataFrame erroneously accumulating sentLimit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/210ed3cb901cb549818aefa04b71dadaf149d05d\"\u003e\u003ccode\u003e210ed3c\u003c/code\u003e\u003c/a\u003e quic: establish a \u0026quot;happened-before\u0026quot; relationship between stream write and read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ad8140e0aa2ec41b37ea478b4525a423bcc21af9\"\u003e\u003ccode\u003ead8140e\u003c/code\u003e\u003c/a\u003e quic: fix buffer slicing when handling overlapping stream data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/23ee2efe81a3ff183b4eca46c42f749af7efca45\"\u003e\u003ccode\u003e23ee2ef\u003c/code\u003e\u003c/a\u003e http2: avoid API changes when built with go1.27\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.50.0...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/nexusct/1Panel/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/nexusct/1Panel/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/nexusct%2F1Panel/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"}},{"old_version":"5.9.0","new_version":"5.9.2","update_type":"patch","path":null,"pr_created_at":"2026-07-03T18:34:36.000Z","version_change":"5.9.0 → 5.9.2","issue":{"uuid":"4805626919","node_id":"PR_kwDOIUNke87tscJi","number":664,"state":"closed","title":"chore(deps): bump the go_modules group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-07-05T06:11:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-03T18:34:36.000Z","updated_at":"2026-07-05T06:11:59.000Z","time_to_close":128241,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/cert-manager/cert-manager","old_version":"1.19.1","new_version":"1.19.3","repository_url":"https://github.com/cert-manager/cert-manager"},{"name":"github.com/go-jose/go-jose/v3","old_version":"3.0.4","new_version":"3.0.5","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.0","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/moby/spdystream","old_version":"0.5.0","new_version":"0.5.1","repository_url":"https://github.com/moby/spdystream"},{"name":"go.opentelemetry.io/otel","old_version":"1.38.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.38.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the /chart/test directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.19.1` | `1.19.3` |\n| [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.4` | `3.0.5` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.0` | `5.9.2` |\n| [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.43.0` |\n\n\nUpdates `github.com/cert-manager/cert-manager` from 1.19.1 to 1.19.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cert-manager/cert-manager/releases\"\u003egithub.com/cert-manager/cert-manager's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.19.3\u003c/h2\u003e\n\u003cp\u003ecert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\u003c/p\u003e\n\u003cp\u003eThis release contains three bug fixes, including a fix for the MODERATE severity DoS issue in GHSA-gx3x-vq4p-mhhv. All users should upgrade to the latest release.\u003c/p\u003e\n\u003ch2\u003eChanges by Kind\u003c/h2\u003e\n\u003ch3\u003eBug or Regression\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8415\"\u003e#8415\u003c/a\u003e, \u003ca href=\"https://github.com/cert-manager-bot\"\u003e\u003ccode\u003e@​cert-manager-bot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed an issue where HTTP-01 challenges failed when the Host header contained an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8436\"\u003e#8436\u003c/a\u003e, \u003ca href=\"https://github.com/cert-manager-bot\"\u003e\u003ccode\u003e@​cert-manager-bot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSecurity (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8468\"\u003e#8468\u003c/a\u003e, \u003ca href=\"https://github.com/SgtCoDFish\"\u003e\u003ccode\u003e@​SgtCoDFish\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther (Cleanup or Flake)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump go to 1.25.6 (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8459\"\u003e#8459\u003c/a\u003e, \u003ca href=\"https://github.com/SgtCoDFish\"\u003e\u003ccode\u003e@​SgtCoDFish\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.19.2\u003c/h2\u003e\n\u003cp\u003ecert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\u003c/p\u003e\n\u003cp\u003eWe updated Go to fix some vulnerabilities in the standard library.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e📖 Read the \u003ca href=\"https://cert-manager.io/docs/releases/release-notes/release-notes-1.19\"\u003efull 1.19 release notes\u003c/a\u003e on the cert-manager.io website before upgrading.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eChanges since \u003ccode\u003ev1.19.1\u003c/code\u003e\u003c/h2\u003e\n\u003ch3\u003eBug or Regression\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAddress false positive vulnerabilities \u003ccode\u003eCVE-2025-47914\u003c/code\u003e and \u003ccode\u003eCVE-2025-58181\u003c/code\u003e which were reported by Trivy. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8283\"\u003e#8283\u003c/a\u003e, \u003ca href=\"https://github.com/SgtCoDFish\"\u003e\u003ccode\u003e@​SgtCoDFish\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate Go to \u003ccode\u003ev1.25.5\u003c/code\u003e to fix \u003ccode\u003eCVE-2025-61727\u003c/code\u003e and \u003ccode\u003eCVE-2025-61729\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8294\"\u003e#8294\u003c/a\u003e, \u003ca href=\"https://github.com/wallrj-cyberark\"\u003e\u003ccode\u003e@​wallrj-cyberark\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003eglobal.nodeSelector\u003c/code\u003e to helm chart to perform a \u003ccode\u003emerge\u003c/code\u003e and allow for a single \u003ccode\u003enodeSelector\u003c/code\u003e to be set across all services. (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8233\"\u003e#8233\u003c/a\u003e, \u003ca href=\"https://github.com/cert-manager-bot\"\u003e\u003ccode\u003e@​cert-manager-bot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther (Cleanup or Flake)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate cert-manager's ACME client, forked from \u003ccode\u003egolang/x/crypto\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8270\"\u003e#8270\u003c/a\u003e, \u003ca href=\"https://github.com/SgtCoDFish\"\u003e\u003ccode\u003e@​SgtCoDFish\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated Debian 12 distroless base images (\u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8326\"\u003e#8326\u003c/a\u003e, \u003ca href=\"https://github.com/wallrj-cyberark\"\u003e\u003ccode\u003e@​wallrj-cyberark\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2\"\u003e\u003ccode\u003ed4faed2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8468\"\u003e#8468\u003c/a\u003e from SgtCoDFish/release-1.19-fqdn-patch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/8b62c22e368794f847b27d739a1b6af0805c7dee\"\u003e\u003ccode\u003e8b62c22\u003c/code\u003e\u003c/a\u003e [release-1.19] security: address GHSA-gx3x-vq4p-mhhv\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/866f95501c59afef2d69598406b27328d54fdfd9\"\u003e\u003ccode\u003e866f955\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8459\"\u003e#8459\u003c/a\u003e from SgtCoDFish/release-1.19-bumpgo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/0c044336ff61fa1cf7ef0be6c5a70aa853b9c10e\"\u003e\u003ccode\u003e0c04433\u003c/code\u003e\u003c/a\u003e [release-1.19] Bump base images with hack/latest-base-images.sh\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/e4556ab92cf61be12552da1c71e16e903081b618\"\u003e\u003ccode\u003ee4556ab\u003c/code\u003e\u003c/a\u003e [release-1.19] bump go to 1.25.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/845a6454b7b9e83fdedc8c0007b06007dd504ac7\"\u003e\u003ccode\u003e845a645\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8436\"\u003e#8436\u003c/a\u003e from cert-manager-bot/cherry-pick-8424-to-release-1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/acd3120227a6f9d9274c9539798394580db0249b\"\u003e\u003ccode\u003eacd3120\u003c/code\u003e\u003c/a\u003e fix(HTTP-01): handling of IPv6 address literals\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/d6787634f97fb23ef61ced4e398ad7e4ca6027e5\"\u003e\u003ccode\u003ed678763\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8421\"\u003e#8421\u003c/a\u003e from SgtCoDFish/release-1.19-bumpkind\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/3caf3087e0e5c3abd0df3dee727fe4d130a5cbcf\"\u003e\u003ccode\u003e3caf308\u003c/code\u003e\u003c/a\u003e [release-1.19] bump kind and bump kind images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cert-manager/cert-manager/commit/b2ccdb84000aca505b966ac610c58e4c5418afdd\"\u003e\u003ccode\u003eb2ccdb8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cert-manager/cert-manager/issues/8415\"\u003e#8415\u003c/a\u003e from cert-manager-bot/cherry-pick-8403-to-release-1.19\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cert-manager/cert-manager/compare/v1.19.1...v1.19.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v3` from 3.0.4 to 3.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe recommend migrating from v3 to v4, and we will stop support v3 in the near future.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v3.0.4...v3.0.5\"\u003ehttps://github.com/go-jose/go-jose/compare/v3.0.4...v3.0.5\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/be2f6548701d4ba561cd61c7d4a2f1289b66c273\"\u003e\u003ccode\u003ebe2f654\u003c/code\u003e\u003c/a\u003e ci: update Go versions for GHA workflows (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/221\"\u003e#221\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/02464163e1e891db85257cb8860978a1c0226016\"\u003e\u003ccode\u003e0246416\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v3.0.4...v3.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.0 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.0...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/spdystream` from 0.5.0 to 0.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/spdystream/releases\"\u003egithub.com/moby/spdystream's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003eFix memory amplification in SPDY frame parsing leads to denial of service (\u003ca href=\"https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2\"\u003eCVE-2026-35469\u003c/a\u003e / \u003ca href=\"https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2\"\u003eGHSA-pc3f-x583-g7j2\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003espdy: fix duplicate license headers, add LICENSE, PATENTS, and update NOTICE \u003ca href=\"https://redirect.github.com/moby/spdystream/pull/106\"\u003emoby/spdystream#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: update actions and test against latest Go versions \u003ca href=\"https://redirect.github.com/moby/spdystream/pull/107\"\u003emoby/spdystream#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003euse ioutil.Discard for go1.13 compatibility \u003ca href=\"https://redirect.github.com/moby/spdystream/pull/109\"\u003emoby/spdystream#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1\"\u003ehttps://github.com/moby/spdystream/compare/v0.5.0...v0.5.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/c59e5d73daa301bde452ea77545bdf51e32554a2\"\u003e\u003ccode\u003ec59e5d7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/spdystream/issues/109\"\u003e#109\u003c/a\u003e from thaJeztah/use_ioutil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/2fd0155e904f1f9b834b8460e8fdb8522bb59f84\"\u003e\u003ccode\u003e2fd0155\u003c/code\u003e\u003c/a\u003e use ioutil.Discard for go1.13 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/ef6121f62c730110bf5ae604a865a8613bfb787f\"\u003e\u003ccode\u003eef6121f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/241cec95b8f02919845dc4758f1f5310fc886739\"\u003e\u003ccode\u003e241cec9\u003c/code\u003e\u003c/a\u003e compare with signed Int for 32-bit Arm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/21c38640c8c8f43173b17e5bc6690a5fa25d6935\"\u003e\u003ccode\u003e21c3864\u003c/code\u003e\u003c/a\u003e Add options to customize limits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/acf9b456d06816c5cf23bf3892e13441f947d5fd\"\u003e\u003ccode\u003eacf9b45\u003c/code\u003e\u003c/a\u003e spdy: update godoc for MaxDataLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/eb6360582bf1343f485ca87b76efc9e72b49d690\"\u003e\u003ccode\u003eeb63605\u003c/code\u003e\u003c/a\u003e spdy: limit header-size and header-count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/2f21da42eaab90f03a82fb03d0de8e91eb1d0fc6\"\u003e\u003ccode\u003e2f21da4\u003c/code\u003e\u003c/a\u003e spdy: fix header block byte accounting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/5976b6612f07a27f2e9a4de875485defb43b5d50\"\u003e\u003ccode\u003e5976b66\u003c/code\u003e\u003c/a\u003e spdy: enforce 24-bit frame length limits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/spdystream/commit/cf0ec5d0fe4dbb2f3525f733946e0d0ddbfd5b13\"\u003e\u003ccode\u003ecf0ec5d\u003c/code\u003e\u003c/a\u003e Guard against oversized SPDY frames\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.38.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.38.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.38.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.76.0 to 1.80.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.80.0\u003c/h2\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/5288\"\u003e#5288\u003c/a\u003e for details. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8837\"\u003e#8837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: update resource error handling and re-resolution logic (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8907\"\u003e#8907\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eRe-resolve all \u003ccode\u003eLOGICAL_DNS\u003c/code\u003e clusters simultaneously when re-resolution is requested.\u003c/li\u003e\n\u003cli\u003eFail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds: support the LB policy configured in \u003ccode\u003eLOGICAL_DNS\u003c/code\u003e cluster resources instead of defaulting to \u003ccode\u003epick_first\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8733\"\u003e#8733\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecredentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8831\"\u003e#8831\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8875\"\u003e#8875\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: validate that the sum of endpoint weights in a locality does not exceed the maximum \u003ccode\u003euint32\u003c/code\u003e value. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8899\"\u003e#8899\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/RAVEYUS\"\u003e\u003ccode\u003e@​RAVEYUS\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: fix incorrect proto field access in the weighted round robin (WRR) configuration where \u003ccode\u003eblackout_period\u003c/code\u003e was used instead of \u003ccode\u003eweight_expiration_period\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8915\"\u003e#8915\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/gregbarasch\"\u003e\u003ccode\u003e@​gregbarasch\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/rbac: handle addresses with ports in IP matchers. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8990\"\u003e#8990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8922\"\u003e#8922\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: pool write buffers to reduce memory allocations and usage. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8919\"\u003e#8919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003egrpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the \u003ca href=\"https://pkg.go.dev/google.golang.org/grpc#WithSharedWriteBuffer\"\u003eWithSharedWriteBuffer\u003c/a\u003e dial option or the \u003ca href=\"https://pkg.go.dev/google.golang.org/grpc#SharedWriteBuffer\"\u003eSharedWriteBuffer\u003c/a\u003e server option to disable this feature. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8957\"\u003e#8957\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8997\"\u003e#8997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: add a faster tiered buffer pool; use the experimental \u003ca href=\"https://pkg.go.dev/google.golang.org/grpc/mem@master#NewBinaryTieredBufferPool\"\u003emem.NewBinaryTieredBufferPool\u003c/a\u003e function to create such pools. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8775\"\u003e#8775\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/397e45edaa68f8763773bbaaf539cf7894169cd2\"\u003e\u003ccode\u003e397e45e\u003c/code\u003e\u003c/a\u003e Change version to 1.80.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8948\"\u003e#8948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/64ebf0a600005838970e6ba1eb0a9e46e528ed73\"\u003e\u003ccode\u003e64ebf0a\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8997\"\u003e#8997\u003c/a\u003e to v1.80.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9027\"\u003e#9027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/e45ed241865981b6973cdd0dd69571456d570282\"\u003e\u003ccode\u003ee45ed24\u003c/code\u003e\u003c/a\u003e xds/rbac: add additional handling for addresses with ports (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8990\"\u003e#8990\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9022\"\u003e#9022\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c78d26e03e129f5cb357b757037fcded2333b74e\"\u003e\u003ccode\u003ec78d26e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8957\"\u003e#8957\u003c/a\u003e to v1.80.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9007\"\u003e#9007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/bd7cd3c1abbd27fb751275a58886444d52103482\"\u003e\u003ccode\u003ebd7cd3c\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8987\"\u003e#8987\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b6597b3d328c1ed6b003f9a23b942af7148352ca\"\u003e\u003ccode\u003eb6597b3\u003c/code\u003e\u003c/a\u003e xds/clusterimpl: use xdsConfig for updates and remove redundant fields from L...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/1d4fa8a7b772553e82137b059ad4a8f632a1c522\"\u003e\u003ccode\u003e1d4fa8a\u003c/code\u003e\u003c/a\u003e xds: change cdsbalancer to use update from dependency manager (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8907\"\u003e#8907\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8f47d364511c8eb0517b47e1a39f13a1370c6a10\"\u003e\u003ccode\u003e8f47d36\u003c/code\u003e\u003c/a\u003e attributes: Replace internal map with linked list (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8933\"\u003e#8933\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/22e1ee8085952b4bdadf2928c187d665f6daff99\"\u003e\u003ccode\u003e22e1ee8\u003c/code\u003e\u003c/a\u003e xds: add panic recovery in xdsclient resource unmarshalling. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8895\"\u003e#8895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/7136e99ee323c26984174eb3cec85c201fef9946\"\u003e\u003ccode\u003e7136e99\u003c/code\u003e\u003c/a\u003e credentials/alts: Pool write buffers (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8919\"\u003e#8919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.76.0...v1.80.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/flanksource/mission-control-chart/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/flanksource/mission-control-chart/pull/664","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/flanksource%2Fmission-control-chart/issues/664","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/664/packages"}},{"old_version":"5.7.5","new_version":"5.9.2","update_type":"minor","path":null,"pr_created_at":"2026-07-03T03:25:41.000Z","version_change":"5.7.5 → 5.9.2","issue":{"uuid":"4800058981","node_id":"PR_kwDOPmeGcs7taP5P","number":9,"state":"open","title":"Bump the go_modules group across 14 directories with 16 updates","user":"dependabot[bot]","labels":["size/XL","dependencies","go"],"assignees":[],"locked":false,"comments_count":11,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-03T03:25:41.000Z","updated_at":"2026-07-05T05:01:00.795Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":16,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.0","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/openfga/openfga","old_version":"1.8.13","new_version":"1.18.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/Azure/go-ntlmssp","old_version":"0.0.0-20220621081337-cb9428e4ac1e","new_version":"0.1.1","repository_url":"https://github.com/Azure/go-ntlmssp"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.mongodb.org/mongo-driver","old_version":"1.17.3","new_version":"1.17.7","repository_url":"https://github.com/mongodb/mongo-go-driver"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.37.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 1 update in the /.citools/src/air directory: [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo).\nBumps the go_modules group with 2 updates in the /.citools/src/cog directory: [golang.org/x/net](https://github.com/golang/net) and [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 1 update in the /.citools/src/cue directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 2 updates in the /.citools/src/swagger directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver).\nBumps the go_modules group with 8 updates in the /apps/iam directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.0` | `4.1.4` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.9.2` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.8.13` | `1.18.0` |\n| [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) | `0.0.0-20220621081337-cb9428e4ac1e` | `0.1.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.7` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 5 updates in the /apps/shorturl directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.55.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 4 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apimachinery directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/apiserver directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 5 updates in the /pkg/build directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.55.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 2 updates in the /pkg/codegen directory: [golang.org/x/net](https://github.com/golang/net) and [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 2 updates in the /pkg/plugins/codegen directory: [golang.org/x/net](https://github.com/golang/net) and [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 6 updates in the /pkg/promlib directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.55.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.7` |\n\nBumps the go_modules group with 1 update in the /pkg/semconv directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/gohugoio/hugo` from 0.147.6 to 0.163.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gohugoio/hugo/releases\"\u003egithub.com/gohugoio/hugo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.163.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003emarkup/highlight: Escape lang in default code block rendering ce1a7e0b \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e thanks to \u003ca href=\"https://github.com/k0ngj1\"\u003e\u003ccode\u003e@​k0ngj1\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/li\u003e\n\u003cli\u003eparser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider 70a9068a \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eresources: Support babel/postcss config variants 9d66d513 \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15039\"\u003e#15039\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15040\"\u003e#15040\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15043\"\u003e#15043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehugolib: Fix page/section name collision regression f0133466 \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15046\"\u003e#15046\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eContinue resolving on ERR_ACCESS_DENIED in Node's resolver 134674f0 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15041\"\u003e#15041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emarkup: Standardize behavior when external converters are missing 147f605f \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14222\"\u003e#14222\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.1\u003c/h2\u003e\n\u003cp\u003eThe majority of the fixes in this release are security related (including the upstream fix in 93c8c7d3 (golang.org/x/image)). Thanks to \u003ca href=\"https://github.com/vnth4nhnt\"\u003e\u003ccode\u003e@​vnth4nhnt\u003c/code\u003e\u003c/a\u003e for finding the issues fixed in a00b5c72 and cf9c8f93 (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive \u003ca href=\"https://gohugo.io/about/security/\"\u003esecurity model\u003c/a\u003e as their baseline. Just take a look at Go's recent \u003ca href=\"https://github.com/golang/go/issues?q=is%3Aissue%20label%3ASecurity\"\u003esecurity issue list\u003c/a\u003e to see a demonstration of this.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/image from 0.41.0 to 0.42.0 93c8c7d3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\u003c/li\u003e\n\u003cli\u003eFix multi --renderSegments merge behavior 95e5e9f4 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15024\"\u003e#15024\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esecurity: Normalize integer IPv4 host encodings in http.urls check a00b5c72 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop symlinks in os.ReadDir, os.ReadFile, os.Stat and os.FileExists cf9c8f93 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15019\"\u003e#15019\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecommands: Fix convert command 2602796c \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15012\"\u003e#15012\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.0\u003c/h2\u003e\n\u003cp\u003eThe main topic in this release is improvements to the AVIF image handling that we introduced in \u003ccode\u003ev0.162.0\u003c/code\u003e. See \u003ca href=\"https://gohugo.io/configuration/imaging/#avif\"\u003ethe docs\u003c/a\u003e for details, but:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWe have turned down the default \u003ccode\u003equality\u003c/code\u003e for AVIF to 60. Turns out, JPEG/WebP with quality 75 is comparable to AVIF with quality 60. You can now also set quality per image format in your project config (and also per image processed if needed).\u003c/li\u003e\n\u003cli\u003eWe have added a \u003ccode\u003ehint\u003c/code\u003e to the AVIF with the same values as for \u003ccode\u003eWEBP\u003c/code\u003e. For \u003ccode\u003elossy\u003c/code\u003e compression, the photo/picture hints (and the default) encodes with YUV420 chroma subsampling instead of YUV444, keeping 444 for text/icon/drawing. This greatly reduces the memory needed to encode these images.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eImprovements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eresources/jsconfig: Remove deprecated baseUrl setting ff2903a9 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14991\"\u003e#14991\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14996\"\u003e#14996\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eall: Adjust tests for deprecated link and image render hook settings ca68936d \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eall: Run go fix ./... 781fabf4 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epagesfromdata: Use relative path for content adapter template metrics 1d018ef8 \u003ca href=\"https://github.com/anupamojha-eng\"\u003e\u003ccode\u003e@​anupamojha-eng\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14999\"\u003e#14999\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Re-add macos-latest to the test matrix 121bc6ce \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Deprecate Imaging.Compression and move it down to webp and avif configs cf18b827 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14998\"\u003e#14998\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly support the latest Go version 98ad9b3c \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14997\"\u003e#14997\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epage: Add IsBranch and deprecate IsNode b89e7fe6 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/11574\"\u003e#11574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Force cache invalidation for AVIF target e8fefc83 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14990\"\u003e#14990\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Add a per-format AVIF hint setting a043d3ec \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14992\"\u003e#14992\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Make AVIF chroma subsampling content-aware via the hint 341f575d \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14987\"\u003e#14987\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/4d22555aebf458d5d150500c9ac4bee5b24cf0d3\"\u003e\u003ccode\u003e4d22555\u003c/code\u003e\u003c/a\u003e releaser: Bump versions for release of 0.163.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/ce1a7e0bce3713af40496ded3c2c0ceeed49231d\"\u003e\u003ccode\u003ece1a7e0\u003c/code\u003e\u003c/a\u003e markup/highlight: Escape lang in default code block rendering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/e8988c31412249897a2e6805b61c37ed5c82a10c\"\u003e\u003ccode\u003ee8988c3\u003c/code\u003e\u003c/a\u003e Merge commit 'c86d9f4aa8a58931f52df6516f10b67c807505fb'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/c86d9f4aa8a58931f52df6516f10b67c807505fb\"\u003e\u003ccode\u003ec86d9f4\u003c/code\u003e\u003c/a\u003e Squashed 'docs/' changes from 1f8ddb8a52..e17426e2b6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/70a9068aa67c67a9eb2ab5fe062faf5a99e6b650\"\u003e\u003ccode\u003e70a9068\u003c/code\u003e\u003c/a\u003e parser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/9d66d513cee02e77c96c78059d5c3ae6b1c5dde9\"\u003e\u003ccode\u003e9d66d51\u003c/code\u003e\u003c/a\u003e resources: Support babel/postcss config variants\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/f01334666790f328e222f67c278396ee77003021\"\u003e\u003ccode\u003ef013346\u003c/code\u003e\u003c/a\u003e hugolib: Fix page/section name collision regression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/96e06e1ab8484327dcbb521b8445a52d0c022cf3\"\u003e\u003ccode\u003e96e06e1\u003c/code\u003e\u003c/a\u003e releaser: Prepare repository for 0.164.0-DEV\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/19a5cec0b9618163bb519487382e861d29edf383\"\u003e\u003ccode\u003e19a5cec\u003c/code\u003e\u003c/a\u003e releaser: Bump versions for release of 0.163.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/134674f00df2c2c0db24f0674de2263298d33eb7\"\u003e\u003ccode\u003e134674f\u003c/code\u003e\u003c/a\u003e Continue resolving on ERR_ACCESS_DENIED in Node's resolver\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gohugoio/hugo/compare/v0.147.6...v0.163.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.40.0 to 0.55.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"\u003e\u003ccode\u003e7770ec4\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4ece7b612ad44ad6c4d5e0d5d4df9c18cc211905\"\u003e\u003ccode\u003e4ece7b6\u003c/code\u003e\u003c/a\u003e html: escape greater-than symbol in doctype identifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/08be507abce89191d78cd49da60f4501fc910472\"\u003e\u003ccode\u003e08be507\u003c/code\u003e\u003c/a\u003e html: improve Noah's Ark clause performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd\"\u003e\u003ccode\u003ea8fb2fe\u003c/code\u003e\u003c/a\u003e html: properly render fostered elements in foreign content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/0dc5b7a5f81d7155ade6d5e9db35992998679932\"\u003e\u003ccode\u003e0dc5b7a\u003c/code\u003e\u003c/a\u003e html: properly check namespace in \u0026quot;in body\u0026quot; any other end tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a452f3cc17168a60bc3f439a3ae0fcffc32eca0e\"\u003e\u003ccode\u003ea452f3c\u003c/code\u003e\u003c/a\u003e html: ignore duplicate attributes during tokenization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f8651996b24ba47d89dd9eb97fd47758e6d1886f\"\u003e\u003ccode\u003ef865199\u003c/code\u003e\u003c/a\u003e quic: fix appendMaxDataFrame erroneously accumulating sentLimit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/210ed3cb901cb549818aefa04b71dadaf149d05d\"\u003e\u003ccode\u003e210ed3c\u003c/code\u003e\u003c/a\u003e quic: establish a \u0026quot;happened-before\u0026quot; relationship between stream write and read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ad8140e0aa2ec41b37ea478b4525a423bcc21af9\"\u003e\u003ccode\u003ead8140e\u003c/code\u003e\u003c/a\u003e quic: fix buffer slicing when handling overlapping stream data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/23ee2efe81a3ff183b4eca46c42f749af7efca45\"\u003e\u003ccode\u003e23ee2ef\u003c/code\u003e\u003c/a\u003e http2: avoid API changes when built with go1.27\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.40.0...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/expr-lang/expr` from 1.17.0 to 1.17.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expr-lang/expr/releases\"\u003egithub.com/expr-lang/expr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.7\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eExpr\u003c/strong\u003e is a Go-centric expression language designed to deliver dynamic configurations with unparalleled accuracy,\nsafety, and speed.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eprogram, err := expr.Compile(`let foo = bar(); baz(foo, foo)`)\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis release brings new language features, \u003cstrong\u003eperformance improvements\u003c/strong\u003e across runtime and compiler, better error\nhandling, and many important bug fixes.\u003c/p\u003e\n\u003ch2\u003eNew Features\u003c/h2\u003e\n\u003ch3\u003e\u003cstrong\u003eSupport for \u003ccode\u003eelse if\u003c/code\u003e expressions\u003c/strong\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eYou can now chain conditional branches using \u003ccode\u003eelse if\u003c/code\u003e! (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/879\"\u003e#879\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003cstrong\u003eUnicode escapes in the \u003ccode\u003e\\u{XXXXXX}\u003c/code\u003e format\u003c/strong\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eString literals now support Unicode code point escapes such as \u003ccode\u003e\\u{1F600}\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/882\"\u003e#882\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003cstrong\u003eByte slice support in the \u003ccode\u003ematches\u003c/code\u003e operator\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eThe \u003ccode\u003ematches\u003c/code\u003e operator now works with \u003ccode\u003e[]byte\u003c/code\u003e, improving interoperability with binary data. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/876\"\u003e#876\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003e\u003cstrong\u003eShort-circuit control options\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eNew options allow enabling or disabling short-circuiting behavior in the compiler and VM. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/847\"\u003e#847\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003e\u003cstrong\u003eOption to disable \u003ccode\u003eif\u003c/code\u003e operator\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eA separate \u003ccode\u003eDisableIfOperator\u003c/code\u003e option is now available. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/881\"\u003e#881\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ePerformance Improvements\u003c/h2\u003e\n\u003ch3\u003e\u003cstrong\u003eRuntime structure fetch improvements\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eAccessing struct fields at runtime is now faster. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/833\"\u003e#833\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003e\u003cstrong\u003eVM function call optimizations\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eFunction calls inside the VM execute more efficiently. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/832\"\u003e#832\u003c/a\u003e)\u003c/p\u003e\n\u003ch3\u003e\u003cstrong\u003eType system performance boost\u003c/strong\u003e\u003c/h3\u003e\n\u003cp\u003eLarge or complex type operations now run significantly faster. (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/824\"\u003e#824\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eGuard negative forward jump offsets (\u003cem\u003e\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/861\"\u003e#861\u003c/a\u003e\u003c/em\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/d4722867d2df8480c650afa169b350a03d0b668a\"\u003e\u003ccode\u003ed472286\u003c/code\u003e\u003c/a\u003e Improve gen.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/713a26a272ae656fa73685994b875bda8322a5af\"\u003e\u003ccode\u003e713a26a\u003c/code\u003e\u003c/a\u003e Add support for Unicode escape sequences in the \u003ccode\u003e\\u{XXXXXX}\u003c/code\u003e format (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/882\"\u003e#882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/6ed72a21491b5d18b419d2115c404f400431248b\"\u003e\u003ccode\u003e6ed72a2\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eDisableIfOperator\u003c/code\u003e option (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/881\"\u003e#881\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/4d38449b9f7f0238c6ac534e414cd4b4f25704e8\"\u003e\u003ccode\u003e4d38449\u003c/code\u003e\u003c/a\u003e chore: test and build on Go 1.25 (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/880\"\u003e#880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/087698e2554c3928e19f6fbb7f55f6aba7c2186f\"\u003e\u003ccode\u003e087698e\u003c/code\u003e\u003c/a\u003e Add error handling for invalid \u003ccode\u003eif\u003c/code\u003e condition and test for crash with null byte\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/738da0b342aa8a57e4a88ddd8c74c810bc8886c6\"\u003e\u003ccode\u003e738da0b\u003c/code\u003e\u003c/a\u003e Remove \u003ccode\u003eExampleDisableShortCircuit\u003c/code\u003e test function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/eb73788eb823513b73e3f62dada27de4f4c73cd2\"\u003e\u003ccode\u003eeb73788\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eelse if\u003c/code\u003e support (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/879\"\u003e#879\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/cf53913bd4fb966a7bd4250def200bfe8b085c64\"\u003e\u003ccode\u003ecf53913\u003c/code\u003e\u003c/a\u003e Improve the performance of runtime.Fetch for structures (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/833\"\u003e#833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/e5ee6c245bbf664c6a48d2eb1241320336aa98ed\"\u003e\u003ccode\u003ee5ee6c2\u003c/code\u003e\u003c/a\u003e Rename \u003ccode\u003eDisableSC\u003c/code\u003e to \u003ccode\u003eShortCircuit\u003c/code\u003e for better clarity and consistency\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expr-lang/expr/commit/1973835b26fd4efc0990df48fb283d5a78808d9a\"\u003e\u003ccode\u003e1973835\u003c/code\u003e\u003c/a\u003e feat: add disable short-circuiting option to compiler (\u003ca href=\"https://redirect.github.com/expr-lang/expr/issues/847\"\u003e#847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expr-lang/expr/compare/v1.17.0...v1.17.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.40.0 to 0.55.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"\u003e\u003ccode\u003e7770ec4\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4ece7b612ad44ad6c4d5e0d5d4df9c18cc211905\"\u003e\u003ccode\u003e4ece7b6\u003c/code\u003e\u003c/a\u003e html: escape greater-than symbol in doctype identifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/08be507abce89191d78cd49da60f4501fc910472\"\u003e\u003ccode\u003e08be507\u003c/code\u003e\u003c/a\u003e html: improve Noah's Ark clause performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd\"\u003e\u003ccode\u003ea8fb2fe\u003c/code\u003e\u003c/a\u003e html: properly render fostered elements in foreign content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/0dc5b7a5f81d7155ade6d5e9db35992998679932\"\u003e\u003ccode\u003e0dc5b7a\u003c/code\u003e\u003c/a\u003e html: properly check namespace in \u0026quot;in body\u0026quot; any other end tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a452f3cc17168a60bc3f439a3ae0fcffc32eca0e\"\u003e\u003ccode\u003ea452f3c\u003c/code\u003e\u003c/a\u003e html: ignore duplicate attributes during tokenization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f8651996b24ba47d89dd9eb97fd47758e6d1886f\"\u003e\u003ccode\u003ef865199\u003c/code\u003e\u003c/a\u003e quic: fix appendMaxDataFrame erroneously accumulating sentLimit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/210ed3cb901cb549818aefa04b71dadaf149d05d\"\u003e\u003ccode\u003e210ed3c\u003c/code\u003e\u003c/a\u003e quic: establish a \u0026quot;happened-before\u0026quot; relationship between stream write and read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ad8140e0aa2ec41b37ea478b4525a423bcc21af9\"\u003e\u003ccode\u003ead8140e\u003c/code\u003e\u003c/a\u003e quic: fix buffer slicing when handling overlapping stream data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/23ee2efe81a3ff183b4eca46c42f749af7efca45\"\u003e\u003ccode\u003e23ee2ef\u003c/code\u003e\u003c/a\u003e http2: avoid API changes when built with go1.27\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.40.0...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.38.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.38.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver` from 1.16.1 to 1.17.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.7\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3770 Fix buffer handling in GSSAPI error description and username functions by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2291\"\u003emongodb/mongo-go-driver#2291\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more visible deprecation banner to the 1.17 readme by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2233\"\u003emongodb/mongo-go-driver#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3770 Remove libasan from gssapi tests in CI by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2293\"\u003emongodb/mongo-go-driver#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e by \u003ca href=\"https://github.com/tadjik1\"\u003e\u003ccode\u003e@​tadjik1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2294\"\u003emongodb/mongo-go-driver#2294\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.7\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.6\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nDue to a bug in the Go Driver release automation, there is no 1.17.5 release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release makes various maintainability improvements to the Go Driver development and release automation.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3560 Use lambda-specific arn for FaaS by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2093\"\u003emongodb/mongo-go-driver#2093\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse a pinned Go version for golangci-lint. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2151\"\u003emongodb/mongo-go-driver#2151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDisable merge-up from release/1.17 by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2202\"\u003emongodb/mongo-go-driver#2202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.6\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. For issues with, questions about, or feedback for the Go Driver, please look into our \u003ca href=\"https://www.mongodb.com/docs/manual/support/\"\u003esupport channels\u003c/a\u003e, including \u003ca href=\"https://stackoverflow.com/questions/tagged/mongodb%20go?sort=Newest\"\u003eStackOverflow\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/eb01e7e2531e4bbbccfcff31a4be7a576e60349b\"\u003e\u003ccode\u003eeb01e7e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3c550934b65aa2a13a3f1c790b2e0e88c9c6a33e\"\u003e\u003ccode\u003e3c55093\u003c/code\u003e\u003c/a\u003e GODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2294\"\u003e#2294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f6163bf474d2711c88bca5b5715c959cc7244e0f\"\u003e\u003ccode\u003ef6163bf\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Remove libasan from gssapi tests in CI (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6798963ce0a8faa40c6c612772ac8fa0de58a206\"\u003e\u003ccode\u003e6798963\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/c1e9575a5530081a1e6e7d6566db3185b9f9b62a\"\u003e\u003ccode\u003ec1e9575\u003c/code\u003e\u003c/a\u003e Add more visible deprecation banner to the 1.17 readme (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2233\"\u003e#2233\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/d2fa0ab6f3ba0579b7bca7912d30e23907ffec9a\"\u003e\u003ccode\u003ed2fa0ab\u003c/code\u003e\u003c/a\u003e BUMP v1.17.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f1d540b2c4e606b6b0aa5d482fad848139664ef4\"\u003e\u003ccode\u003ef1d540b\u003c/code\u003e\u003c/a\u003e BUMP v1.17.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/b8790284926105a1ad35cf8c7be5fb642b78d8ac\"\u003e\u003ccode\u003eb879028\u003c/code\u003e\u003c/a\u003e GODRIVER-3654 Don't test v1 branches against latest server. (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/21f47d4287f28410b3d1852128ed299ba7b2609e\"\u003e\u003ccode\u003e21f47d4\u003c/code\u003e\u003c/a\u003e Allow ignore-for-release label to satisfy label checker (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2203\"\u003e#2203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/8708ca8b6964eb525418c86432ab3b366dbf177d\"\u003e\u003ccode\u003e8708ca8\u003c/code\u003e\u003c/a\u003e Disable merge-up from release/1.17 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2202\"\u003e#2202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.16.1...v1.17.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.0 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.0...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.8.13 to 1.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.0\u003c/h2\u003e\n\u003ch3\u003e🚨 Operational warning for MySQL users 🚨\u003c/h3\u003e\n\u003cp\u003eThis release contains a migration for MySQL which acquires a shared lock on the tuple and changelog tables. This is a potentially-lengthy migration, during which you will not be able to perform \u003ccode\u003eWrite\u003c/code\u003e operations.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eWhat you should do:\u003c/strong\u003e Do not execute auto-migrations on startup for production instances with large datasets. Please refer to \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003ethis migration guide\u003c/a\u003e before applying this migration.\u003c/p\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003ecrypto/subtle.ConstantTimeCompare\u003c/code\u003e for preshared key authentication to close a timing side-channel where the prior map lookup could reveal information about valid key bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3168\"\u003e#3168\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/geo-chen\"\u003e\u003ccode\u003e@​geo-chen\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed identifier comparison on the MySQL backend to be case-sensitive, matching Postgres and SQLite. Ships schema migrations 008, which require a maintenance window — see the \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003eoperator runbook\u003c/a\u003e before upgrading. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6\"\u003eCVE-2026-55170\u003c/a\u003e. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-hcxc-wf8j-23hv\"\u003eCVE-2026-55689\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/sahajamoth\"\u003e\u003ccode\u003e@​sahajamoth\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003cli\u003eEnforce that \u003ccode\u003eauthn.oidc.issuer\u003c/code\u003e and \u003ccode\u003eauthn.oidc.audience\u003c/code\u003e are both set when \u003ccode\u003eauthn.method\u003c/code\u003e is \u003ccode\u003eoidc\u003c/code\u003e. Previously, omitting \u003ccode\u003e--authn-oidc-audience\u003c/code\u003e caused the JWT \u003ccode\u003eaud\u003c/code\u003e claim to be silently skipped during token validation, allowing any validly-signed token from the trusted issuer to be accepted regardless of its intended audience. OpenFGA will now refuse to start if either value is missing. Thank you \u003ca href=\"https://github.com/0xVijay\"\u003e\u003ccode\u003e@​0xVijay\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.17.1...v1.18.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.17.1...v1.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PR workflow benchmark comparison to be less flakey. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3153\"\u003e#3153\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. \u003ccode\u003eErrTransactionThrottled\u003c/code\u003e, \u003ccode\u003echeck.ErrValidation\u003c/code\u003e, \u003ccode\u003echeck.ErrInvalidUser\u003c/code\u003e, and \u003ccode\u003e*tuple.InvalidTupleError\u003c/code\u003e (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3150\"\u003e#3150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3155\"\u003e#3155\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eReadChanges\u003c/code\u003e pagination erroring past the first page when an object type name contains \u003ccode\u003e|\u003c/code\u003e, and tightened \u003ccode\u003eDeserialize\u003c/code\u003e to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3152\"\u003e#3152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3159\"\u003e#3159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.52\u003c/code\u003e, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003e#3164\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003eopenfga/openfga#3164\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.17.0...v1.17.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.17.0...v1.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded a configurable trace sampler via \u003ccode\u003etrace.sampler\u003c/code\u003e (\u003ccode\u003eOPENFGA_TRACE_SAMPLER\u003c/code\u003e / \u003ccode\u003eOTEL_TRACES_SAMPLER\u003c/code\u003e), supporting the standard OpenTelemetry strategies \u003ccode\u003ealways_on\u003c/code\u003e, \u003ccode\u003ealways_off\u003c/code\u003e, \u003ccode\u003etraceidratio\u003c/code\u003e, \u003ccode\u003eparentbased_always_on\u003c/code\u003e, \u003ccode\u003eparentbased_always_off\u003c/code\u003e, and \u003ccode\u003eparentbased_traceidratio\u003c/code\u003e. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to \u003ccode\u003etraceidratio\u003c/code\u003e to preserve existing behavior. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003e#3072\u003c/a\u003e Thanks \u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRedesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3148\"\u003e#3148\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003eopenfga/openfga#3072\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.16.1...v1.17.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.16.1...v1.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.16.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.18.0] - 2026-06-16\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003ecrypto/subtle.ConstantTimeCompare\u003c/code\u003e for preshared key authentication to close a timing side-channel where the prior map lookup could reveal information about valid key bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3168\"\u003e#3168\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/geo-chen\"\u003e\u003ccode\u003e@​geo-chen\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed identifier comparison on the MySQL backend to be case-sensitive, matching Postgres and SQLite. Ships schema migrations 008, which require a maintenance window — see the \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003eoperator runbook\u003c/a\u003e before upgrading. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6\"\u003eCVE-2026-55170\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/sahajamoth\"\u003e\u003ccode\u003e@​sahajamoth\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003cli\u003eEnforce that \u003ccode\u003eauthn.oidc.issuer\u003c/code\u003e and \u003ccode\u003eauthn.oidc.audience\u003c/code\u003e are both set when \u003ccode\u003eauthn.method\u003c/code\u003e is \u003ccode\u003eoidc\u003c/code\u003e. Previously, omitting \u003ccode\u003e--authn-oidc-audience\u003c/code\u003e caused the JWT \u003ccode\u003eaud\u003c/code\u003e claim to be silently skipped during token validation, allowing any validly-signed token from the trusted issuer to be accepted regardless of its intended audience. OpenFGA will now refuse to start if either value is missing. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-hcxc-wf8j-23hv\"\u003eCVE-2026-55689\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/0xVijay\"\u003e\u003ccode\u003e@​0xVijay\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.17.1] - 2026-06-05\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PR workflow benchmark comparison to be less flakey. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3153\"\u003e#3153\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. \u003ccode\u003eErrTransactionThrottled\u003c/code\u003e, \u003ccode\u003echeck.ErrValidation\u003c/code\u003e, \u003ccode\u003echeck.ErrInvalidUser\u003c/code\u003e, and \u003ccode\u003e*tuple.InvalidTupleError\u003c/code\u003e (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3150\"\u003e#3150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3155\"\u003e#3155\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eReadChanges\u003c/code\u003e pagination erroring past the first page when an object type name contains \u003ccode\u003e|\u003c/code\u003e, and tightened \u003ccode\u003eDeserialize\u003c/code\u003e to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3152\"\u003e#3152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3159\"\u003e#3159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.52\u003c/code\u003e, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003e#3164\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.17.0] - 2026-06-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded a configurable trace sampler via \u003ccode\u003etrace.sampler\u003c/code\u003e (\u003ccode\u003eOPENFGA_TRACE_SAMPLER\u003c/code\u003e / \u003ccode\u003eOTEL_TRACES_SAMPLER\u003c/code\u003e), supporting the standard OpenTelemetry strategies \u003ccode\u003ealways_on\u003c/code\u003e, \u003ccode\u003ealways_off\u003c/code\u003e, \u003ccode\u003etraceidratio\u003c/code\u003e, \u003ccode\u003eparentbased_always_on\u003c/code\u003e, \u003ccode\u003eparentbased_always_off\u003c/code\u003e, and \u003ccode\u003eparentbased_traceidratio\u003c/code\u003e. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to \u003ccode\u003etraceidratio\u003c/code\u003e to preserve existing behavior. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003e#3072\u003c/a\u003e Thanks \u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRedesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3148\"\u003e#3148\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.1] - 2026-05-28\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded workflow-level \u003ccode\u003econcurrency.group\u003c/code\u003e and \u003ccode\u003ecancel-in-progress\u003c/code\u003e for PR-related workflow runs to reduce wasted effort. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3140\"\u003e#3140\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e incorrectly falling back to the standard algorithm on deadline/cancellation/throttle-timeout errors; these are now returned directly. Also fixed \u003ccode\u003eweighted_graph_check\u003c/code\u003e emitting metrics under the wrong method label when used as the primary algorithm. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3141\"\u003e#3141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where the \u003ccode\u003eweight2\u003c/code\u003e strategy could return false denies when contextual tuples were present, because their concatenation with datastore results violated the sort assumption of the pruning optimization. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3145\"\u003e#3145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.50\u003c/code\u003e to address multiple CVEs in the go std lib. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3146\"\u003e#3146\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.0] - 2026-05-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/81089a31698505b4d5f01311c04e83b9adfcf383\"\u003e\u003ccode\u003e81089a3\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.18.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3174\"\u003e#3174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/44596773b2e62738720ef215bf7fa04352954271\"\u003e\u003ccode\u003e4459677\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/a2e0dbefc3e01a95c785f81a3563bc6571b08b11\"\u003e\u003ccode\u003ea2e0dbe\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/0c759472cb1918632b67170cf6ecdb3a409a1029\"\u003e\u003ccode\u003e0c75947\u003c/code\u003e\u003c/a\u003e fix: use constant-time comparison for preshared key authentication (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3168\"\u003e#3168\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/7a356c9f5d57f08dabe0cfaf17a82c830840ea13\"\u003e\u003ccode\u003e7a356c9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3166\"\u003e#3166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/9ac791ff458dd04ba05b6c9a97200830369101f2\"\u003e\u003ccode\u003e9ac791f\u003c/code\u003e\u003c/a\u003e chore(deps): bump the dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3167\"\u003e#3167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/393db3f903b923a0414c96145012e527af700685\"\u003e\u003ccode\u003e393db3f\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.17.1\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3165\"\u003e#3165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/ec685d0d02d992c292feaa3ba7d7fcedc705db71\"\u003e\u003ccode\u003eec685d0\u003c/code\u003e\u003c/a\u003e chore: bump grpc-health-probe to v0.4.52 (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3164\"\u003e#3164\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c4523743b28f69d4dd62382614d32aada3485095\"\u003e\u003ccode\u003ec452374\u003c/code\u003e\u003c/a\u003e docs: update caching docs (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3163\"\u003e#3163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/4f00251a719bb2451cefedf4e31fc3afc728b32f\"\u003e\u003ccode\u003e4f00251\u003c/code\u003e\u003c/a\u003e fix: continuation token deserializer - handle \u003ccode\u003e|\u003c/code\u003e in type names (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3152\"\u003e#3152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.8.13...v1.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/...\n\n_Description has been truncated_","html_url":"https://github.com/OneFineStarstuff/grafana/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OneFineStarstuff%2Fgrafana/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"}},{"old_version":"5.7.6","new_version":"5.9.2","update_type":"minor","path":null,"pr_created_at":"2026-07-01T05:51:16.000Z","version_change":"5.7.6 → 5.9.2","issue":{"uuid":"4782828604","node_id":"PR_kwDOBwolXM7siCmv","number":1408,"state":"open","title":"Bump the go_modules group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-01T05:51:16.000Z","updated_at":"2026-07-04T23:11:31.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":6,"packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.7.6","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"go.mongodb.org/mongo-driver","old_version":"1.7.5","new_version":"1.17.7","repository_url":"https://github.com/mongodb/mongo-go-driver"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.3","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"go.opentelemetry.io/otel","old_version":"1.40.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.40.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"github.com/apache/thrift","old_version":"0.16.0","new_version":"0.23.0","repository_url":"https://github.com/apache/thrift"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.6` | `5.9.2` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.7.5` | `1.17.7` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.3` | `4.1.4` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.43.0` |\n| [github.com/apache/thrift](https://github.com/apache/thrift) | `0.16.0` | `0.23.0` |\n\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.6 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.6...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver` from 1.7.5 to 1.17.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.7\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3770 Fix buffer handling in GSSAPI error description and username functions by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2291\"\u003emongodb/mongo-go-driver#2291\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more visible deprecation banner to the 1.17 readme by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2233\"\u003emongodb/mongo-go-driver#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3770 Remove libasan from gssapi tests in CI by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2293\"\u003emongodb/mongo-go-driver#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e by \u003ca href=\"https://github.com/tadjik1\"\u003e\u003ccode\u003e@​tadjik1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2294\"\u003emongodb/mongo-go-driver#2294\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.7\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.6\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nDue to a bug in the Go Driver release automation, there is no 1.17.5 release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release makes various maintainability improvements to the Go Driver development and release automation.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3560 Use lambda-specific arn for FaaS by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2093\"\u003emongodb/mongo-go-driver#2093\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse a pinned Go version for golangci-lint. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2151\"\u003emongodb/mongo-go-driver#2151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDisable merge-up from release/1.17 by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2202\"\u003emongodb/mongo-go-driver#2202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.6\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. For issues with, questions about, or feedback for the Go Driver, please look into our \u003ca href=\"https://www.mongodb.com/docs/manual/support/\"\u003esupport channels\u003c/a\u003e, including \u003ca href=\"https://stackoverflow.com/questions/tagged/mongodb%20go?sort=Newest\"\u003eStackOverflow\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/eb01e7e2531e4bbbccfcff31a4be7a576e60349b\"\u003e\u003ccode\u003eeb01e7e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3c550934b65aa2a13a3f1c790b2e0e88c9c6a33e\"\u003e\u003ccode\u003e3c55093\u003c/code\u003e\u003c/a\u003e GODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2294\"\u003e#2294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f6163bf474d2711c88bca5b5715c959cc7244e0f\"\u003e\u003ccode\u003ef6163bf\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Remove libasan from gssapi tests in CI (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6798963ce0a8faa40c6c612772ac8fa0de58a206\"\u003e\u003ccode\u003e6798963\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/c1e9575a5530081a1e6e7d6566db3185b9f9b62a\"\u003e\u003ccode\u003ec1e9575\u003c/code\u003e\u003c/a\u003e Add more visible deprecation banner to the 1.17 readme (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2233\"\u003e#2233\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/d2fa0ab6f3ba0579b7bca7912d30e23907ffec9a\"\u003e\u003ccode\u003ed2fa0ab\u003c/code\u003e\u003c/a\u003e BUMP v1.17.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f1d540b2c4e606b6b0aa5d482fad848139664ef4\"\u003e\u003ccode\u003ef1d540b\u003c/code\u003e\u003c/a\u003e BUMP v1.17.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/b8790284926105a1ad35cf8c7be5fb642b78d8ac\"\u003e\u003ccode\u003eb879028\u003c/code\u003e\u003c/a\u003e GODRIVER-3654 Don't test v1 branches against latest server. (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/21f47d4287f28410b3d1852128ed299ba7b2609e\"\u003e\u003ccode\u003e21f47d4\u003c/code\u003e\u003c/a\u003e Allow ignore-for-release label to satisfy label checker (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2203\"\u003e#2203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/8708ca8b6964eb525418c86432ab3b366dbf177d\"\u003e\u003ccode\u003e8708ca8\u003c/code\u003e\u003c/a\u003e Disable merge-up from release/1.17 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2202\"\u003e#2202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.7.5...v1.17.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/apache/thrift` from 0.16.0 to 0.23.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/thrift/releases\"\u003egithub.com/apache/thrift's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 0.23.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.22.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.21.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.20.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.19.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.18.1\u003c/h2\u003e\n\u003cp\u003ePlease head over to the official release download source:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.18.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the \u003cstrong\u003eofficial release download source\u003c/strong\u003e:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003ch2\u003eVersion 0.17.0\u003c/h2\u003e\n\u003cp\u003ePlease head over to the \u003cstrong\u003eofficial release download source\u003c/strong\u003e:\n\u003ca href=\"http://thrift.apache.org/download\"\u003ehttp://thrift.apache.org/download\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/thrift/blob/master/CHANGES.md\"\u003egithub.com/apache/thrift's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.23.0\u003c/h2\u003e\n\u003ch3\u003eBuild Process\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5877\"\u003eTHRIFT-5877\u003c/a\u003e - Add cpp cross tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5866\"\u003eTHRIFT-5866\u003c/a\u003e - Dockerfile to support Ubuntu 24.04 LTS (Noble Numbat)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5909\"\u003eTHRIFT-5909\u003c/a\u003e - add Ruby in GitHub workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5649\"\u003eTHRIFT-5649\u003c/a\u003e - add go in GitHub workflow / action\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eC glib\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5931\"\u003eTHRIFT-5931\u003c/a\u003e - thrift_ssl_socket_get_ssl_error() can underflow its remaining-buffer counter and write past the stack buffer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5871\"\u003eTHRIFT-5871\u003c/a\u003e - Improve MAX_MESSAGE_SIZE check and friends\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eC++\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5911\"\u003eTHRIFT-5911\u003c/a\u003e - Inconsistent UUID compilation for aliased types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5912\"\u003eTHRIFT-5912\u003c/a\u003e - Assertion failed: \u003ccode\u003edelta \u0026gt; 0\u003c/code\u003e, file ThreadManagerTests.h, line 162\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5880\"\u003eTHRIFT-5880\u003c/a\u003e - C++ TSocket on an IPv6-only system fails if you use a hostname of 127.0.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-3268\"\u003eTHRIFT-3268\u003c/a\u003e - warning: token pasting of ',' and \u003ccode\u003e__VA_ARGS__\u003c/code\u003e is a GNU extension\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5887\"\u003eTHRIFT-5887\u003c/a\u003e - build/cmake/ should be prepended (not appended) to CMAKE_MODULE_PATH\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5878\"\u003eTHRIFT-5878\u003c/a\u003e - Add UUID support for THeaderProtocol and TProtocolTap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5898\"\u003eTHRIFT-5898\u003c/a\u003e - Unable to build Thrift as a shared library on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5920\"\u003eTHRIFT-5920\u003c/a\u003e - Remove threadsafe warnings in thrift-maven-plugin\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDelphi\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5939\"\u003eTHRIFT-5939\u003c/a\u003e - Replace GUID generation with stable UUID algorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5876\"\u003eTHRIFT-5876\u003c/a\u003e - Add Delphi WinHTTP client TLS1.3 support\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGo\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5896\"\u003eTHRIFT-5896\u003c/a\u003e - Race condition in TServerSocket.Addr() method\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5925\"\u003eTHRIFT-5925\u003c/a\u003e - UUID implementation in JAVA is not according to the Thrift Specification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5869\"\u003eTHRIFT-5869\u003c/a\u003e - Close the transport after TServerEventHandler deleteContext\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5863\"\u003eTHRIFT-5863\u003c/a\u003e - Make TServerTransport able to customize the max message size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5774\"\u003eTHRIFT-5774\u003c/a\u003e - Add remote client's IP address to ServerContext in TServerEventHandler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-4280\"\u003eTHRIFT-4280\u003c/a\u003e - Add async nonblocking ssl support in java client\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5879\"\u003eTHRIFT-5879\u003c/a\u003e - java and kotlin cross tests fail in the GitHub action\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003enetstd\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://issues.apache.org/jira/browse/THRIFT-5902\"\u003eTHRIFT-5902\u003c/a\u003e - Add net10 support\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/e4b684f5ff4f9c3a42cd7ec0a667c3d9bd7f6ac1\"\u003e\u003ccode\u003ee4b684f\u003c/code\u003e\u003c/a\u003e Updated CHANGES.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/c4cbe43fd12ab5d043af5dd08d1f59e2ba07b2e4\"\u003e\u003ccode\u003ec4cbe43\u003c/code\u003e\u003c/a\u003e Address vulnerabilities in Rack\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/68ac8e935ef440c3e22d0e1a30e7211b9bf1d441\"\u003e\u003ccode\u003e68ac8e9\u003c/code\u003e\u003c/a\u003e Enable TLS hostname verification in TNonblockingSSLSocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/5e4f01d737e4d3845d07dde6da43981feee0cb9a\"\u003e\u003ccode\u003e5e4f01d\u003c/code\u003e\u003c/a\u003e Harden Node.js WebSocket server handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/e242889231df48f8791372598052862c28f5be83\"\u003e\u003ccode\u003ee242889\u003c/code\u003e\u003c/a\u003e Add input validation to Swift protocol layer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/4af8c7c8768cb687b182c1839a39d4beb4f35a5d\"\u003e\u003ccode\u003e4af8c7c\u003c/code\u003e\u003c/a\u003e Add recursion depth limit to Node.js protocol skip()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/a30c552bd0808b7e19f35ad30212ba7a9aee8c66\"\u003e\u003ccode\u003ea30c552\u003c/code\u003e\u003c/a\u003e Enable TLS hostname verification in TSSLTransportFactory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/0f8ec9c1014ed21acc324aaa421017fb164e9608\"\u003e\u003ccode\u003e0f8ec9c\u003c/code\u003e\u003c/a\u003e Fix parent class resolution in c_glib generated dispatch_call\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/276ec883910cd936b4f9413bf607c808a7423185\"\u003e\u003ccode\u003e276ec88\u003c/code\u003e\u003c/a\u003e THRIFT-5929: Fix build failure on PHP 8.5 due to removed zend_exception_get_d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/thrift/commit/17f2c13ec2b27503dd0de2720401b96787632364\"\u003e\u003ccode\u003e17f2c13\u003c/code\u003e\u003c/a\u003e Added missing 0.23.0 JIRA tickets to CHANGES.md\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/apache/thrift/compare/v0.16.0...v0.23.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/golang-migrate/migrate/pull/1408","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/golang-migrate%2Fmigrate/issues/1408","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1408/packages"}},{"old_version":"5.9.2","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-30T21:33:24.000Z","version_change":"5.9.2 → 5.10.0","issue":{"uuid":"4780567208","node_id":"PR_kwDORF_DAM7saugt","number":33,"state":"open","title":"chore(deps): bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-30T21:33:24.000Z","updated_at":"2026-06-30T21:33:34.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.9.2 to 5.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.9.2\u0026new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/pixel365/zoner/pull/33","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/pixel365%2Fzoner/issues/33","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/33/packages"}},{"old_version":"5.7.5","new_version":"5.9.2","update_type":"minor","path":null,"pr_created_at":"2026-06-30T11:58:17.000Z","version_change":"5.7.5 → 5.9.2","issue":{"uuid":"4776535074","node_id":"PR_kwDOPmeGcs7sNbj_","number":8,"state":"open","title":"Bump the go_modules group across 14 directories with 15 updates","user":"dependabot[bot]","labels":["☑️ auto-merge","🤖 bot","📦 dependencies","size/XL","dependencies","go","go-mod"],"assignees":["OneFineStarstuff"],"locked":false,"comments_count":11,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-30T11:58:17.000Z","updated_at":"2026-07-05T03:23:54.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":15,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.0","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/openfga/openfga","old_version":"1.8.13","new_version":"1.18.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/Azure/go-ntlmssp","old_version":"0.0.0-20220621081337-cb9428e4ac1e","new_version":"0.1.1","repository_url":"https://github.com/Azure/go-ntlmssp"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.mongodb.org/mongo-driver","old_version":"1.17.3","new_version":"1.17.7","repository_url":"https://github.com/mongodb/mongo-go-driver"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.37.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 1 update in the /.citools/src/air directory: [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo).\nBumps the go_modules group with 2 updates in the /.citools/src/swagger directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver).\nBumps the go_modules group with 8 updates in the /apps/iam directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.0` | `4.1.4` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.9.2` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.8.13` | `1.18.0` |\n| [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) | `0.0.0-20220621081337-cb9428e4ac1e` | `0.1.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.7` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 4 updates in the /apps/provisioning directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 2 updates in the /apps/secret directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/shorturl directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apimachinery directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/apiserver directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/build directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 1 update in the /pkg/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 1 update in the /pkg/plugins/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 5 updates in the /pkg/promlib directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.7` |\n\nBumps the go_modules group with 1 update in the /pkg/semconv directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/gohugoio/hugo` from 0.147.6 to 0.163.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gohugoio/hugo/releases\"\u003egithub.com/gohugoio/hugo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.163.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003emarkup/highlight: Escape lang in default code block rendering ce1a7e0b \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e thanks to \u003ca href=\"https://github.com/k0ngj1\"\u003e\u003ccode\u003e@​k0ngj1\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/li\u003e\n\u003cli\u003eparser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider 70a9068a \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eresources: Support babel/postcss config variants 9d66d513 \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15039\"\u003e#15039\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15040\"\u003e#15040\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15043\"\u003e#15043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehugolib: Fix page/section name collision regression f0133466 \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15046\"\u003e#15046\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eContinue resolving on ERR_ACCESS_DENIED in Node's resolver 134674f0 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15041\"\u003e#15041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emarkup: Standardize behavior when external converters are missing 147f605f \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14222\"\u003e#14222\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.1\u003c/h2\u003e\n\u003cp\u003eThe majority of the fixes in this release are security related (including the upstream fix in 93c8c7d3 (golang.org/x/image)). Thanks to \u003ca href=\"https://github.com/vnth4nhnt\"\u003e\u003ccode\u003e@​vnth4nhnt\u003c/code\u003e\u003c/a\u003e for finding the issues fixed in a00b5c72 and cf9c8f93 (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive \u003ca href=\"https://gohugo.io/about/security/\"\u003esecurity model\u003c/a\u003e as their baseline. Just take a look at Go's recent \u003ca href=\"https://github.com/golang/go/issues?q=is%3Aissue%20label%3ASecurity\"\u003esecurity issue list\u003c/a\u003e to see a demonstration of this.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/image from 0.41.0 to 0.42.0 93c8c7d3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\u003c/li\u003e\n\u003cli\u003eFix multi --renderSegments merge behavior 95e5e9f4 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15024\"\u003e#15024\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esecurity: Normalize integer IPv4 host encodings in http.urls check a00b5c72 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop symlinks in os.ReadDir, os.ReadFile, os.Stat and os.FileExists cf9c8f93 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15019\"\u003e#15019\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecommands: Fix convert command 2602796c \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/15012\"\u003e#15012\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.163.0\u003c/h2\u003e\n\u003cp\u003eThe main topic in this release is improvements to the AVIF image handling that we introduced in \u003ccode\u003ev0.162.0\u003c/code\u003e. See \u003ca href=\"https://gohugo.io/configuration/imaging/#avif\"\u003ethe docs\u003c/a\u003e for details, but:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWe have turned down the default \u003ccode\u003equality\u003c/code\u003e for AVIF to 60. Turns out, JPEG/WebP with quality 75 is comparable to AVIF with quality 60. You can now also set quality per image format in your project config (and also per image processed if needed).\u003c/li\u003e\n\u003cli\u003eWe have added a \u003ccode\u003ehint\u003c/code\u003e to the AVIF with the same values as for \u003ccode\u003eWEBP\u003c/code\u003e. For \u003ccode\u003elossy\u003c/code\u003e compression, the photo/picture hints (and the default) encodes with YUV420 chroma subsampling instead of YUV444, keeping 444 for text/icon/drawing. This greatly reduces the memory needed to encode these images.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eImprovements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eresources/jsconfig: Remove deprecated baseUrl setting ff2903a9 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14991\"\u003e#14991\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14996\"\u003e#14996\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eall: Adjust tests for deprecated link and image render hook settings ca68936d \u003ca href=\"https://github.com/jmooring\"\u003e\u003ccode\u003e@​jmooring\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eall: Run go fix ./... 781fabf4 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epagesfromdata: Use relative path for content adapter template metrics 1d018ef8 \u003ca href=\"https://github.com/anupamojha-eng\"\u003e\u003ccode\u003e@​anupamojha-eng\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14999\"\u003e#14999\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Re-add macos-latest to the test matrix 121bc6ce \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Deprecate Imaging.Compression and move it down to webp and avif configs cf18b827 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14998\"\u003e#14998\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly support the latest Go version 98ad9b3c \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14997\"\u003e#14997\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epage: Add IsBranch and deprecate IsNode b89e7fe6 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/11574\"\u003e#11574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Force cache invalidation for AVIF target e8fefc83 \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14990\"\u003e#14990\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Add a per-format AVIF hint setting a043d3ec \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14992\"\u003e#14992\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimages: Make AVIF chroma subsampling content-aware via the hint 341f575d \u003ca href=\"https://github.com/bep\"\u003e\u003ccode\u003e@​bep\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/gohugoio/hugo/issues/14987\"\u003e#14987\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/4d22555aebf458d5d150500c9ac4bee5b24cf0d3\"\u003e\u003ccode\u003e4d22555\u003c/code\u003e\u003c/a\u003e releaser: Bump versions for release of 0.163.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/ce1a7e0bce3713af40496ded3c2c0ceeed49231d\"\u003e\u003ccode\u003ece1a7e0\u003c/code\u003e\u003c/a\u003e markup/highlight: Escape lang in default code block rendering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/e8988c31412249897a2e6805b61c37ed5c82a10c\"\u003e\u003ccode\u003ee8988c3\u003c/code\u003e\u003c/a\u003e Merge commit 'c86d9f4aa8a58931f52df6516f10b67c807505fb'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/c86d9f4aa8a58931f52df6516f10b67c807505fb\"\u003e\u003ccode\u003ec86d9f4\u003c/code\u003e\u003c/a\u003e Squashed 'docs/' changes from 1f8ddb8a52..e17426e2b6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/70a9068aa67c67a9eb2ab5fe062faf5a99e6b650\"\u003e\u003ccode\u003e70a9068\u003c/code\u003e\u003c/a\u003e parser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/9d66d513cee02e77c96c78059d5c3ae6b1c5dde9\"\u003e\u003ccode\u003e9d66d51\u003c/code\u003e\u003c/a\u003e resources: Support babel/postcss config variants\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/f01334666790f328e222f67c278396ee77003021\"\u003e\u003ccode\u003ef013346\u003c/code\u003e\u003c/a\u003e hugolib: Fix page/section name collision regression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/96e06e1ab8484327dcbb521b8445a52d0c022cf3\"\u003e\u003ccode\u003e96e06e1\u003c/code\u003e\u003c/a\u003e releaser: Prepare repository for 0.164.0-DEV\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/19a5cec0b9618163bb519487382e861d29edf383\"\u003e\u003ccode\u003e19a5cec\u003c/code\u003e\u003c/a\u003e releaser: Bump versions for release of 0.163.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gohugoio/hugo/commit/134674f00df2c2c0db24f0674de2263298d33eb7\"\u003e\u003ccode\u003e134674f\u003c/code\u003e\u003c/a\u003e Continue resolving on ERR_ACCESS_DENIED in Node's resolver\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gohugoio/hugo/compare/v0.147.6...v0.163.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.38.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.38.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver` from 1.16.1 to 1.17.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.7\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3770 Fix buffer handling in GSSAPI error description and username functions by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2291\"\u003emongodb/mongo-go-driver#2291\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more visible deprecation banner to the 1.17 readme by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2233\"\u003emongodb/mongo-go-driver#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3770 Remove libasan from gssapi tests in CI by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2293\"\u003emongodb/mongo-go-driver#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e by \u003ca href=\"https://github.com/tadjik1\"\u003e\u003ccode\u003e@​tadjik1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2294\"\u003emongodb/mongo-go-driver#2294\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.6...v1.17.7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.7\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. Questions and inquiries can be asked on the \u003ca href=\"https://www.mongodb.com/community/forums/tag/golang\"\u003eMongoDB Developer Community\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.6\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nDue to a bug in the Go Driver release automation, there is no 1.17.5 release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release makes various maintainability improvements to the Go Driver development and release automation.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3560 Use lambda-specific arn for FaaS by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2093\"\u003emongodb/mongo-go-driver#2093\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse a pinned Go version for golangci-lint. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2151\"\u003emongodb/mongo-go-driver#2151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDisable merge-up from release/1.17 by \u003ca href=\"https://github.com/alcaeus\"\u003e\u003ccode\u003e@​alcaeus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2202\"\u003emongodb/mongo-go-driver#2202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D1.17.6\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eDocumentation for the Go Driver can be found on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/mongo?tab=doc\"\u003epkg.go.dev\u003c/a\u003e and the \u003ca href=\"https://docs.mongodb.com/ecosystem/drivers/go/\"\u003eMongoDB documentation site\u003c/a\u003e. BSON library documentation is also available on \u003ca href=\"https://pkg.go.dev/go.mongodb.org/mongo-driver/v2/bson?tab=doc\"\u003epkg.go.dev\u003c/a\u003e. For issues with, questions about, or feedback for the Go Driver, please look into our \u003ca href=\"https://www.mongodb.com/docs/manual/support/\"\u003esupport channels\u003c/a\u003e, including \u003ca href=\"https://stackoverflow.com/questions/tagged/mongodb%20go?sort=Newest\"\u003eStackOverflow\u003c/a\u003e. Bugs can be reported in the \u003ca href=\"https://jira.mongodb.org/secure/CreateIssue!default.jspa?pid=14289\"\u003eGo Driver project in the MongoDB JIRA\u003c/a\u003e where a list of \u003ca href=\"https://jira.mongodb.org/browse/GODRIVER\"\u003ecurrent issues\u003c/a\u003e can be found. Your feedback on the Go Driver is greatly appreciated!\u003c/p\u003e\n\u003ch2\u003eMongoDB Go Driver 1.17.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/eb01e7e2531e4bbbccfcff31a4be7a576e60349b\"\u003e\u003ccode\u003eeb01e7e\u003c/code\u003e\u003c/a\u003e BUMP v1.17.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/3c550934b65aa2a13a3f1c790b2e0e88c9c6a33e\"\u003e\u003ccode\u003e3c55093\u003c/code\u003e\u003c/a\u003e GODRIVER-3766 Remove deprecation notice for \u003ccode\u003eMergeClientOptions\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2294\"\u003e#2294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f6163bf474d2711c88bca5b5715c959cc7244e0f\"\u003e\u003ccode\u003ef6163bf\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Remove libasan from gssapi tests in CI (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6798963ce0a8faa40c6c612772ac8fa0de58a206\"\u003e\u003ccode\u003e6798963\u003c/code\u003e\u003c/a\u003e GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/c1e9575a5530081a1e6e7d6566db3185b9f9b62a\"\u003e\u003ccode\u003ec1e9575\u003c/code\u003e\u003c/a\u003e Add more visible deprecation banner to the 1.17 readme (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2233\"\u003e#2233\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/d2fa0ab6f3ba0579b7bca7912d30e23907ffec9a\"\u003e\u003ccode\u003ed2fa0ab\u003c/code\u003e\u003c/a\u003e BUMP v1.17.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/f1d540b2c4e606b6b0aa5d482fad848139664ef4\"\u003e\u003ccode\u003ef1d540b\u003c/code\u003e\u003c/a\u003e BUMP v1.17.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/b8790284926105a1ad35cf8c7be5fb642b78d8ac\"\u003e\u003ccode\u003eb879028\u003c/code\u003e\u003c/a\u003e GODRIVER-3654 Don't test v1 branches against latest server. (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/21f47d4287f28410b3d1852128ed299ba7b2609e\"\u003e\u003ccode\u003e21f47d4\u003c/code\u003e\u003c/a\u003e Allow ignore-for-release label to satisfy label checker (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2203\"\u003e#2203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/8708ca8b6964eb525418c86432ab3b366dbf177d\"\u003e\u003ccode\u003e8708ca8\u003c/code\u003e\u003c/a\u003e Disable merge-up from release/1.17 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2202\"\u003e#2202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v1.16.1...v1.17.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.0 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.0...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.8.13 to 1.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.0\u003c/h2\u003e\n\u003ch3\u003e🚨 Operational warning for MySQL users 🚨\u003c/h3\u003e\n\u003cp\u003eThis release contains a migration for MySQL which acquires a shared lock on the tuple and changelog tables. This is a potentially-lengthy migration, during which you will not be able to perform \u003ccode\u003eWrite\u003c/code\u003e operations.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eWhat you should do:\u003c/strong\u003e Do not execute auto-migrations on startup for production instances with large datasets. Please refer to \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003ethis migration guide\u003c/a\u003e before applying this migration.\u003c/p\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003ecrypto/subtle.ConstantTimeCompare\u003c/code\u003e for preshared key authentication to close a timing side-channel where the prior map lookup could reveal information about valid key bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3168\"\u003e#3168\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/geo-chen\"\u003e\u003ccode\u003e@​geo-chen\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed identifier comparison on the MySQL backend to be case-sensitive, matching Postgres and SQLite. Ships schema migrations 008, which require a maintenance window — see the \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003eoperator runbook\u003c/a\u003e before upgrading. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6\"\u003eCVE-2026-55170\u003c/a\u003e. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-hcxc-wf8j-23hv\"\u003eCVE-2026-55689\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/sahajamoth\"\u003e\u003ccode\u003e@​sahajamoth\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003cli\u003eEnforce that \u003ccode\u003eauthn.oidc.issuer\u003c/code\u003e and \u003ccode\u003eauthn.oidc.audience\u003c/code\u003e are both set when \u003ccode\u003eauthn.method\u003c/code\u003e is \u003ccode\u003eoidc\u003c/code\u003e. Previously, omitting \u003ccode\u003e--authn-oidc-audience\u003c/code\u003e caused the JWT \u003ccode\u003eaud\u003c/code\u003e claim to be silently skipped during token validation, allowing any validly-signed token from the trusted issuer to be accepted regardless of its intended audience. OpenFGA will now refuse to start if either value is missing. Thank you \u003ca href=\"https://github.com/0xVijay\"\u003e\u003ccode\u003e@​0xVijay\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.17.1...v1.18.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.17.1...v1.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PR workflow benchmark comparison to be less flakey. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3153\"\u003e#3153\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. \u003ccode\u003eErrTransactionThrottled\u003c/code\u003e, \u003ccode\u003echeck.ErrValidation\u003c/code\u003e, \u003ccode\u003echeck.ErrInvalidUser\u003c/code\u003e, and \u003ccode\u003e*tuple.InvalidTupleError\u003c/code\u003e (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3150\"\u003e#3150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3155\"\u003e#3155\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eReadChanges\u003c/code\u003e pagination erroring past the first page when an object type name contains \u003ccode\u003e|\u003c/code\u003e, and tightened \u003ccode\u003eDeserialize\u003c/code\u003e to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3152\"\u003e#3152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3159\"\u003e#3159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.52\u003c/code\u003e, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003e#3164\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003eopenfga/openfga#3164\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.17.0...v1.17.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.17.0...v1.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded a configurable trace sampler via \u003ccode\u003etrace.sampler\u003c/code\u003e (\u003ccode\u003eOPENFGA_TRACE_SAMPLER\u003c/code\u003e / \u003ccode\u003eOTEL_TRACES_SAMPLER\u003c/code\u003e), supporting the standard OpenTelemetry strategies \u003ccode\u003ealways_on\u003c/code\u003e, \u003ccode\u003ealways_off\u003c/code\u003e, \u003ccode\u003etraceidratio\u003c/code\u003e, \u003ccode\u003eparentbased_always_on\u003c/code\u003e, \u003ccode\u003eparentbased_always_off\u003c/code\u003e, and \u003ccode\u003eparentbased_traceidratio\u003c/code\u003e. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to \u003ccode\u003etraceidratio\u003c/code\u003e to preserve existing behavior. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003e#3072\u003c/a\u003e Thanks \u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRedesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3148\"\u003e#3148\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003eopenfga/openfga#3072\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.16.1...v1.17.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.16.1...v1.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.16.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.18.0] - 2026-06-16\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003ecrypto/subtle.ConstantTimeCompare\u003c/code\u003e for preshared key authentication to close a timing side-channel where the prior map lookup could reveal information about valid key bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3168\"\u003e#3168\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/geo-chen\"\u003e\u003ccode\u003e@​geo-chen\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed identifier comparison on the MySQL backend to be case-sensitive, matching Postgres and SQLite. Ships schema migrations 008, which require a maintenance window — see the \u003ca href=\"https://github.com/openfga/openfga/blob/main/assets/migrations/mysql/collation_migrations.md\"\u003eoperator runbook\u003c/a\u003e before upgrading. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6\"\u003eCVE-2026-55170\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/sahajamoth\"\u003e\u003ccode\u003e@​sahajamoth\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003cli\u003eEnforce that \u003ccode\u003eauthn.oidc.issuer\u003c/code\u003e and \u003ccode\u003eauthn.oidc.audience\u003c/code\u003e are both set when \u003ccode\u003eauthn.method\u003c/code\u003e is \u003ccode\u003eoidc\u003c/code\u003e. Previously, omitting \u003ccode\u003e--authn-oidc-audience\u003c/code\u003e caused the JWT \u003ccode\u003eaud\u003c/code\u003e claim to be silently skipped during token validation, allowing any validly-signed token from the trusted issuer to be accepted regardless of its intended audience. OpenFGA will now refuse to start if either value is missing. Resolves \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-hcxc-wf8j-23hv\"\u003eCVE-2026-55689\u003c/a\u003e. Thank you \u003ca href=\"https://github.com/0xVijay\"\u003e\u003ccode\u003e@​0xVijay\u003c/code\u003e\u003c/a\u003e for bringing this to our attention.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.17.1] - 2026-06-05\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PR workflow benchmark comparison to be less flakey. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3153\"\u003e#3153\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. \u003ccode\u003eErrTransactionThrottled\u003c/code\u003e, \u003ccode\u003echeck.ErrValidation\u003c/code\u003e, \u003ccode\u003echeck.ErrInvalidUser\u003c/code\u003e, and \u003ccode\u003e*tuple.InvalidTupleError\u003c/code\u003e (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3150\"\u003e#3150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3155\"\u003e#3155\u003c/a\u003e Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eReadChanges\u003c/code\u003e pagination erroring past the first page when an object type name contains \u003ccode\u003e|\u003c/code\u003e, and tightened \u003ccode\u003eDeserialize\u003c/code\u003e to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3152\"\u003e#3152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3159\"\u003e#3159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.52\u003c/code\u003e, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.4\"\u003eGo 1.26.4 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3164\"\u003e#3164\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Keralin\"\u003e\u003ccode\u003e@​Keralin\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.17.0] - 2026-06-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded a configurable trace sampler via \u003ccode\u003etrace.sampler\u003c/code\u003e (\u003ccode\u003eOPENFGA_TRACE_SAMPLER\u003c/code\u003e / \u003ccode\u003eOTEL_TRACES_SAMPLER\u003c/code\u003e), supporting the standard OpenTelemetry strategies \u003ccode\u003ealways_on\u003c/code\u003e, \u003ccode\u003ealways_off\u003c/code\u003e, \u003ccode\u003etraceidratio\u003c/code\u003e, \u003ccode\u003eparentbased_always_on\u003c/code\u003e, \u003ccode\u003eparentbased_always_off\u003c/code\u003e, and \u003ccode\u003eparentbased_traceidratio\u003c/code\u003e. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to \u003ccode\u003etraceidratio\u003c/code\u003e to preserve existing behavior. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3072\"\u003e#3072\u003c/a\u003e Thanks \u003ca href=\"https://github.com/armujahid\"\u003e\u003ccode\u003e@​armujahid\u003c/code\u003e\u003c/a\u003e!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRedesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3148\"\u003e#3148\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.1] - 2026-05-28\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded workflow-level \u003ccode\u003econcurrency.group\u003c/code\u003e and \u003ccode\u003ecancel-in-progress\u003c/code\u003e for PR-related workflow runs to reduce wasted effort. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3140\"\u003e#3140\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e incorrectly falling back to the standard algorithm on deadline/cancellation/throttle-timeout errors; these are now returned directly. Also fixed \u003ccode\u003eweighted_graph_check\u003c/code\u003e emitting metrics under the wrong method label when used as the primary algorithm. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3141\"\u003e#3141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where the \u003ccode\u003eweight2\u003c/code\u003e strategy could return false denies when contextual tuples were present, because their concatenation with datastore results violated the sort assumption of the pruning optimization. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3145\"\u003e#3145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate grpc-health-probe to \u003ccode\u003ev0.4.50\u003c/code\u003e to address multiple CVEs in the go std lib. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3146\"\u003e#3146\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.0] - 2026-05-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/81089a31698505b4d5f01311c04e83b9adfcf383\"\u003e\u003ccode\u003e81089a3\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.18.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3174\"\u003e#3174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/44596773b2e62738720ef215bf7fa04352954271\"\u003e\u003ccode\u003e4459677\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/a2e0dbefc3e01a95c785f81a3563bc6571b08b11\"\u003e\u003ccode\u003ea2e0dbe\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/0c759472cb1918632b67170cf6ecdb3a409a1029\"\u003e\u003ccode\u003e0c75947\u003c/code\u003e\u003c/a\u003e fix: use constant-time comparison for preshared key authentication (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3168\"\u003e#3168\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/7a356c9f5d57f08dabe0cfaf17a82c830840ea13\"\u003e\u003ccode\u003e7a356c9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3166\"\u003e#3166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/9ac791ff458dd04ba05b6c9a97200830369101f2\"\u003e\u003ccode\u003e9ac791f\u003c/code\u003e\u003c/a\u003e chore(deps): bump the dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3167\"\u003e#3167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/393db3f903b923a0414c96145012e527af700685\"\u003e\u003ccode\u003e393db3f\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.17.1\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3165\"\u003e#3165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/ec685d0d02d992c292feaa3ba7d7fcedc705db71\"\u003e\u003ccode\u003eec685d0\u003c/code\u003e\u003c/a\u003e chore: bump grpc-health-probe to v0.4.52 (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3164\"\u003e#3164\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c4523743b28f69d4dd62382614d32aada3485095\"\u003e\u003ccode\u003ec452374\u003c/code\u003e\u003c/a\u003e docs: update caching docs (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3163\"\u003e#3163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/4f00251a719bb2451cefedf4e31fc3afc728b32f\"\u003e\u003ccode\u003e4f00251\u003c/code\u003e\u003c/a\u003e fix: continuation token deserializer - handle \u003ccode\u003e|\u003c/code\u003e in type names (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3152\"\u003e#3152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.8.13...v1.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to...\n\n_Description has been truncated_","html_url":"https://github.com/OneFineStarstuff/grafana/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OneFineStarstuff%2Fgrafana/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"}},{"old_version":"5.9.2","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-30T00:48:45.000Z","version_change":"5.9.2 → 5.10.0","issue":{"uuid":"4772692149","node_id":"PR_kwDOSIBbIM7sA4uQ","number":18,"state":"open","title":"chore(deps): bump the go-dependencies group across 1 directory with 16 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-30T00:48:45.000Z","updated_at":"2026-06-30T00:48:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-dependencies","update_count":16,"packages":[{"name":"github.com/dgraph-io/badger/v4","old_version":"4.9.1","new_version":"4.9.2","repository_url":"https://github.com/dgraph-io/badger"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/nats-io/nats-server/v2","old_version":"2.12.8","new_version":"2.14.2","repository_url":"https://github.com/nats-io/nats-server"},{"name":"github.com/nats-io/nats.go","old_version":"1.51.0","new_version":"1.52.0","repository_url":"https://github.com/nats-io/nats.go"},{"name":"go.mongodb.org/mongo-driver/v2","old_version":"2.5.0","new_version":"2.7.0","repository_url":"https://github.com/mongodb/mongo-go-driver"},{"name":"google.golang.org/grpc","old_version":"1.80.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"modernc.org/sqlite","old_version":"1.46.1","new_version":"1.53.0"},{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.7","new_version":"1.42.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.17","new_version":"1.32.25","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/sqs","old_version":"1.42.27","new_version":"1.44.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/rabbitmq/amqp091-go","old_version":"1.11.0","new_version":"1.12.0","repository_url":"https://github.com/rabbitmq/amqp091-go"},{"name":"github.com/spf13/pflag","old_version":"1.0.9","new_version":"1.0.10","repository_url":"https://github.com/spf13/pflag"},{"name":"github.com/twmb/franz-go","old_version":"1.21.1","new_version":"1.21.3","repository_url":"https://github.com/twmb/franz-go"},{"name":"golang.org/x/sync","old_version":"0.20.0","new_version":"0.21.0","repository_url":"https://github.com/golang/sync"},{"name":"google.golang.org/api","old_version":"0.274.0","new_version":"0.286.0","repository_url":"https://github.com/googleapis/google-api-go-client"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-dependencies group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger) | `4.9.1` | `4.9.2` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.12.8` | `2.14.2` |\n| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.51.0` | `1.52.0` |\n| [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver) | `2.5.0` | `2.7.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.1` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.46.1` | `1.53.0` |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.42.0` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.25` |\n| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.42.27` | `1.44.0` |\n| [github.com/rabbitmq/amqp091-go](https://github.com/rabbitmq/amqp091-go) | `1.11.0` | `1.12.0` |\n| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.9` | `1.0.10` |\n| [github.com/twmb/franz-go](https://github.com/twmb/franz-go) | `1.21.1` | `1.21.3` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.274.0` | `0.286.0` |\n\n\nUpdates `github.com/dgraph-io/badger/v4` from 4.9.1 to 4.9.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dgraph-io/badger/releases\"\u003egithub.com/dgraph-io/badger/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.9.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(core): remove unused event log by \u003ca href=\"https://github.com/xqqp\"\u003e\u003ccode\u003e@​xqqp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2257\"\u003edgraph-io/badger#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cd): upload build artifacts to GitHub Release by \u003ca href=\"https://github.com/matthewmcneely\"\u003e\u003ccode\u003e@​matthewmcneely\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2273\"\u003edgraph-io/badger#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Prevent NPE on sync with inmemory DB by \u003ca href=\"https://github.com/alpe\"\u003e\u003ccode\u003e@​alpe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2264\"\u003edgraph-io/badger#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip lsm lookup for expired entries during value log rewrite by \u003ca href=\"https://github.com/lamb007\"\u003e\u003ccode\u003e@​lamb007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2269\"\u003edgraph-io/badger#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update jemalloc to 5.3.1 by \u003ca href=\"https://github.com/solracsf\"\u003e\u003ccode\u003e@​solracsf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2275\"\u003edgraph-io/badger#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix : read only user should be able to open db on ReadOnly mode  by \u003ca href=\"https://github.com/Naelpuissant\"\u003e\u003ccode\u003e@​Naelpuissant\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2268\"\u003edgraph-io/badger#2268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compaction): clamp baseLevel to \u0026gt;=1 to prevent L0-\u0026gt;L0 panic on la… by \u003ca href=\"https://github.com/shiva-istari\"\u003e\u003ccode\u003e@​shiva-istari\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2296\"\u003edgraph-io/badger#2296\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xqqp\"\u003e\u003ccode\u003e@​xqqp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2257\"\u003edgraph-io/badger#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alpe\"\u003e\u003ccode\u003e@​alpe\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2264\"\u003edgraph-io/badger#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lamb007\"\u003e\u003ccode\u003e@​lamb007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2269\"\u003edgraph-io/badger#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Naelpuissant\"\u003e\u003ccode\u003e@​Naelpuissant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2268\"\u003edgraph-io/badger#2268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/shiva-istari\"\u003e\u003ccode\u003e@​shiva-istari\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dgraph-io/badger/pull/2296\"\u003edgraph-io/badger#2296\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/dgraph-io/badger/compare/v4.9.1...v4.9.2\"\u003ehttps://github.com/dgraph-io/badger/compare/v4.9.1...v4.9.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dgraph-io/badger/blob/main/CHANGELOG.md\"\u003egithub.com/dgraph-io/badger/v4's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cp\u003eAll notable changes to this project will be documented in this file.\u003c/p\u003e\n\u003cp\u003eThe format is based on \u003ca href=\"http://keepachangelog.com/en/1.0.0/\"\u003eKeep a Changelog\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/284cea00ccee8618d23f5e60246c4a40fd5e4bb1\"\u003e\u003ccode\u003e284cea0\u003c/code\u003e\u003c/a\u003e fix(compaction): clamp baseLevel to \u0026gt;=1 to prevent L0-\u0026gt;L0 panic on la… (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2296\"\u003e#2296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/897f12fdb4631a9bf2aea347bde0a93d930d3001\"\u003e\u003ccode\u003e897f12f\u003c/code\u003e\u003c/a\u003e fix : read only user should be able to open db on ReadOnly mode  (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2268\"\u003e#2268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/ca9e10bb8f10ca60cb047a946bf381a7039ce53d\"\u003e\u003ccode\u003eca9e10b\u003c/code\u003e\u003c/a\u003e enh: compile with jemalloc 5.3.1 (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2275\"\u003e#2275\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/7427d56925199bf23827e6f08d1c1ad119b1b4fc\"\u003e\u003ccode\u003e7427d56\u003c/code\u003e\u003c/a\u003e perf: skip lsm lookup for expired entries during value log rewrite (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2269\"\u003e#2269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/773a8356d9074cd0d56f5f80d773236c88aca494\"\u003e\u003ccode\u003e773a835\u003c/code\u003e\u003c/a\u003e fix: Prevent NPE on sync with inmemory DB (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2264\"\u003e#2264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/abbb9a574e03c36e13f5f0fa62c74504c5e9ee05\"\u003e\u003ccode\u003eabbb9a5\u003c/code\u003e\u003c/a\u003e fix(cd): upload build artifacts to GitHub Release (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2273\"\u003e#2273\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dgraph-io/badger/commit/796cb85f662c06cb4660f0143af176ca7cf1a857\"\u003e\u003ccode\u003e796cb85\u003c/code\u003e\u003c/a\u003e chore(core): remove unused event log (\u003ca href=\"https://redirect.github.com/dgraph-io/badger/issues/2257\"\u003e#2257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/dgraph-io/badger/compare/v4.9.1...v4.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/nats-io/nats-server/v2` from 2.12.8 to 2.14.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nats-io/nats-server/releases\"\u003egithub.com/nats-io/nats-server/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v2.14.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cp\u003eRefer to the \u003ca href=\"https://docs.nats.io/release-notes/whats_new/whats_new_214\"\u003e2.14 Upgrade Guide\u003c/a\u003e for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.\u003c/p\u003e\n\u003ch3\u003eGo Version\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1.26.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egolang.org/x/crypto v0.52.0\u003c/li\u003e\n\u003cli\u003egolang.org/x/sys v0.45.0\u003c/li\u003e\n\u003cli\u003egithub.com/nats-io/jwt/v2 v2.8.2\u003c/li\u003e\n\u003cli\u003egithub.com/nats-io/nkeys v0.4.16\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImproved\u003c/h3\u003e\n\u003cp\u003eGeneral\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe client ID is now available through the embedded \u003ccode\u003eClientAuthentication\u003c/code\u003e API (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cp\u003eGeneral\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eA race condition when handling subscription interest over routes has been fixed (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8235\"\u003e#8235\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePotential protocol-level corruption from rewriting \u003ccode\u003e$JS.ACK\u003c/code\u003e subjects has been fixed (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8242\"\u003e#8242\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePotential protocol-level corruption from buffer misuse in compressed WebSocket clients has been fixed (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8244\"\u003e#8244\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003e/accstatz\u003c/code\u003e monitoring endpoint no longer omits accounts with only leaf connections (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8252\"\u003e#8252\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eJetStream\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a case where Raft peers were not correctly tracked after an inactivity stall during catchup (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8226\"\u003e#8226\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eQuorum needed is now calculated correctly when bootstrapping the metalayer when gateway URLs resolve to multiple IP addresses (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8238\"\u003e#8238\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe filestore no longer performs a block skip check on streams with extremely high subject counts, as it could result in runaway CPU usage (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8227\"\u003e#8227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed a case where the filestore would not release a lock after handling a write error (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8232\"\u003e#8232\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePurge operations on both file and memory stores are now more consistent with each other (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8241\"\u003e#8241\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed a case where the consumer lock would not release a lock after handling a start sequence error (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8230\"\u003e#8230\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCounter streams and message schedules now have configuration constraints applied to prevent incorrect usage patterns (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8240\"\u003e#8240\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImproved stream and consumer scale down behaviour consistency (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8253\"\u003e#8253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed an issue where the per-subject state last block was not stored correctly with a max messages per subject limit of 1 (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8254\"\u003e#8254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed a drift that could occur in the peer sets after a peer remove of an online node (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8258\"\u003e#8258\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eComplete Changes\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nats-io/nats-server/compare/v2.14.1...v2.14.2\"\u003ehttps://github.com/nats-io/nats-server/compare/v2.14.1...v2.14.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v2.14.2-RC.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/1d065926bb99ed14ebe9cf6a21529d28310fc8d3\"\u003e\u003ccode\u003e1d06592\u003c/code\u003e\u003c/a\u003e Release v2.14.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/4e1aefa11412f699f6e31549ea215389824d4c07\"\u003e\u003ccode\u003e4e1aefa\u003c/code\u003e\u003c/a\u003e Cherry-picks for v2.14.2 (\u003ca href=\"https://redirect.github.com/nats-io/nats-server/issues/8256\"\u003e#8256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/ac092ff7c60aa4a0fa3f466198aa89d58bd15f47\"\u003e\u003ccode\u003eac092ff\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/01e589d49a512276adfa9f60699560c5be63bfd5\"\u003e\u003ccode\u003e01e589d\u003c/code\u003e\u003c/a\u003e [FIXED] Peer set desync/re-add after stream peer-remove\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/3d122e82432917c2e4395523a33e929cc71ec5ca\"\u003e\u003ccode\u003e3d122e8\u003c/code\u003e\u003c/a\u003e De-flake TestJetStreamConsumerPrioritized\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/3836d96692a7b9d1405ea404161e6a7f48ba3115\"\u003e\u003ccode\u003e3836d96\u003c/code\u003e\u003c/a\u003e [FIXED] Initial MaxMsgsPerSubject update not enforced\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/92cf2e314fe7ef38f3ac6223f874efa0f58819e0\"\u003e\u003ccode\u003e92cf2e3\u003c/code\u003e\u003c/a\u003e [FIXED] Filestore only stores last block when MaxMsgsPerSubject 1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/3288b4fe279b6f689dc985758add443acb9095db\"\u003e\u003ccode\u003e3288b4f\u003c/code\u003e\u003c/a\u003e (2.14) [IMPROVED] Remove redundant error check in filestore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/6ea46d54029a662ae3545da70b01c32976f6cdbc\"\u003e\u003ccode\u003e6ea46d5\u003c/code\u003e\u003c/a\u003e [FIXED] Stream and consumer scale down consistency\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats-server/commit/5edd91c01a32945e1a4837a104c59114972c9bfb\"\u003e\u003ccode\u003e5edd91c\u003c/code\u003e\u003c/a\u003e [FIXED] AccountStatz omits accounts with only leaf connections\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nats-io/nats-server/compare/v2.12.8...v2.14.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/nats-io/nats.go` from 1.51.0 to 1.52.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nats-io/nats.go/releases\"\u003egithub.com/nats-io/nats.go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.52.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cp\u003eThis release focuses on 2.14 nats-server features support.\u003c/p\u003e\n\u003ch3\u003eADDED\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJetStream:\n\u003cul\u003e\n\u003cli\u003eAdded fast batch stream config field (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2052\"\u003e#2052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded message scheduling headers and publish opts (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2051\"\u003e#2051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003eStreamConfig\u003c/code\u003e with \u003ccode\u003eConsumer\u003c/code\u003e field and added \u003ccode\u003eAckFlowControlPolicy\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2070\"\u003e#2070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded reset consumer API (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2069\"\u003e#2069\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFIXED\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCore NATS:\n\u003cul\u003e\n\u003cli\u003eFix Subscription.StatusChanged channel closure on Closed Subscription. Thanks \u003ca href=\"https://github.com/nithimani38-prog\"\u003e\u003ccode\u003e@​nithimani38-prog\u003c/code\u003e\u003c/a\u003e for the contribution (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2034\"\u003e#2034\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eIMPROVED\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Flaky JS cluster tests (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2062\"\u003e#2062\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eComplete Changes\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nats-io/nats.go/compare/v1.51.0...v1.52.0\"\u003ehttps://github.com/nats-io/nats.go/compare/v1.51.0...v1.52.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/e9f2a36e31b1065f69b252ea090c01e8869eab0b\"\u003e\u003ccode\u003ee9f2a36\u003c/code\u003e\u003c/a\u003e Release v1.52.0 (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2074\"\u003e#2074\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/609274f8c57b65c9d11b01b008b0e40fadfc9d5b\"\u003e\u003ccode\u003e609274f\u003c/code\u003e\u003c/a\u003e [FIXED] Subscription.StatusChanged channel closure on Closed Subscription (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/f7cde748abc86c2981cb1391ca828fceea02af66\"\u003e\u003ccode\u003ef7cde74\u003c/code\u003e\u003c/a\u003e [IMPROVED] Use latest release build for badge in README (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2064\"\u003e#2064\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/c7476ea556818d561945e78863adab422f00de03\"\u003e\u003ccode\u003ec7476ea\u003c/code\u003e\u003c/a\u003e [IMPROVED] Reject empty consumer info in CONSUMER.RESET response (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2072\"\u003e#2072\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/8fde36fd10a34224e22f4f8a8ad1f61ecaedd18f\"\u003e\u003ccode\u003e8fde36f\u003c/code\u003e\u003c/a\u003e [ADDED] ResetConsumer JetStream API (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2069\"\u003e#2069\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/dcfd0fcc6f63c4a2e4436e5aa3ecd4e1dcc598df\"\u003e\u003ccode\u003edcfd0fc\u003c/code\u003e\u003c/a\u003e [ADDED] StreamSource.Consumer config field and AckFlowControlPolicy (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2070\"\u003e#2070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/7a28503b5d5d633d2caaa2639571e5f19c8eebec\"\u003e\u003ccode\u003e7a28503\u003c/code\u003e\u003c/a\u003e [ADDED] Publish options and consts for message scheduling (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2051\"\u003e#2051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/6c91a518e305e56c6481cf63ba52416300b7f5d3\"\u003e\u003ccode\u003e6c91a51\u003c/code\u003e\u003c/a\u003e [ADDED] AllowBatchPublish stream config field (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2052\"\u003e#2052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nats-io/nats.go/commit/a614d0be24c7e9a22a406572bee44d897cff27c3\"\u003e\u003ccode\u003ea614d0b\u003c/code\u003e\u003c/a\u003e [FIXED] Flaky JS cluster tests due to race in setupJSClusterWithSize (\u003ca href=\"https://redirect.github.com/nats-io/nats.go/issues/2062\"\u003e#2062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nats-io/nats.go/compare/v1.51.0...v1.52.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.mongodb.org/mongo-driver/v2` from 2.5.0 to 2.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-go-driver/releases\"\u003ego.mongodb.org/mongo-driver/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMongoDB Go Driver 2.7.0\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Go Driver Team is pleased to release version 2.7.0 of the official MongoDB Go Driver.\u003c/p\u003e\n\u003ch2\u003eRelease Highlights\u003c/h2\u003e\n\u003cp\u003eThis release adds support for sending afterClusterTime on writes in causally consistent sessions, improving alignment between read and write behavior in session-based workflows. It also continues cleanup of session-related and internal-only APIs by deprecating the experimental session API, helping clarify which surfaces are intended for long-term public use. Alongside that, the release includes a handful of targeted quality improvements across BSON validation, change streams, and error reporting to make the driver more predictable and easier to debug.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e✨ New Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3921 retro backpressure cleanup by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2394\"\u003emongodb/mongo-go-driver#2394\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3912 Add prose test for database.ListCollection routing by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2390\"\u003emongodb/mongo-go-driver#2390\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3874 Send afterClusterTime on writes in causally-consistent sessions by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2412\"\u003emongodb/mongo-go-driver#2412\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3957 Fix long lines in bson/decoder_example_test.go and expand check-fmt to cover both *_example_test.go and *_examples_test.go files by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2428\"\u003emongodb/mongo-go-driver#2428\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3962 fix: change stream set batch size nil cursor by \u003ca href=\"https://github.com/zigzagdev\"\u003e\u003ccode\u003e@​zigzagdev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2424\"\u003emongodb/mongo-go-driver#2424\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3965 fix: misleading error message type info in rewrap function by \u003ca href=\"https://github.com/zigzagdev\"\u003e\u003ccode\u003e@​zigzagdev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2430\"\u003emongodb/mongo-go-driver#2430\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🐛 Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3862: Collection.Clone propegates BSONOptions by \u003ca href=\"https://github.com/softprops\"\u003e\u003ccode\u003e@​softprops\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2364\"\u003emongodb/mongo-go-driver#2364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3858 Split write batches by wire-message size, not document payload (Merge up from release/2.6). by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2397\"\u003emongodb/mongo-go-driver#2397\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3931 Fix bson.Raw.Validate panic on zero-length BSON document by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2418\"\u003emongodb/mongo-go-driver#2418\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3832: Fix mongo.ErrorCodes() with ClientBulkWriteException by \u003ca href=\"https://github.com/FGasper\"\u003e\u003ccode\u003e@​FGasper\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2420\"\u003emongodb/mongo-go-driver#2420\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3960 fix: format Arguments swapping by \u003ca href=\"https://github.com/zigzagdev\"\u003e\u003ccode\u003e@​zigzagdev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2423\"\u003emongodb/mongo-go-driver#2423\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGODRIVER-3838 Update comments on SetLimit(). by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2372\"\u003emongodb/mongo-go-driver#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3871 Make files in \u0026quot;examples\u0026quot; runnable. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2381\"\u003emongodb/mongo-go-driver#2381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3880 Skip QE \u0026quot;prefixPreview\u0026quot; and \u0026quot;suffixPreview\u0026quot; tests on server 9.0.0+. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2378\"\u003emongodb/mongo-go-driver#2378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3917 Replace curl | sh with go install in etc/golangci-lint.sh by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2391\"\u003emongodb/mongo-go-driver#2391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3829 Cleanup skip list. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2392\"\u003emongodb/mongo-go-driver#2392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3884 Use gpg verification for libmongocrypt windows build variant by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2404\"\u003emongodb/mongo-go-driver#2404\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3868 Update extended bson cases. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2400\"\u003emongodb/mongo-go-driver#2400\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3623 Deprecate AggregateOptions Custom functionality as internal-only. by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2411\"\u003emongodb/mongo-go-driver#2411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove the 2125 skips to standalone container by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2421\"\u003emongodb/mongo-go-driver#2421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3904 Add QE string prefix/suffix/substring case and diacritic insensitive prose tests by \u003ca href=\"https://github.com/prestonvasquez\"\u003e\u003ccode\u003e@​prestonvasquez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2415\"\u003emongodb/mongo-go-driver#2415\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3937 Deprecate x/mongo/driver/session package. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2416\"\u003emongodb/mongo-go-driver#2416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3936 Migrate check_fmt.sh to a Go script under internal/cmd/check-fmt by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2414\"\u003emongodb/mongo-go-driver#2414\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3726 Use unmarshaling for AutoEncryptOpts in the unified spec test by \u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2413\"\u003emongodb/mongo-go-driver#2413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake capitalization of MongoDB Go Driver consistent in the README. by \u003ca href=\"https://github.com/matthewdale\"\u003e\u003ccode\u003e@​matthewdale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2422\"\u003emongodb/mongo-go-driver#2422\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3113 Skip flaky test in commit.json. by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2435\"\u003emongodb/mongo-go-driver#2435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGODRIVER-3559 Skip Docker Runner Tests by \u003ca href=\"https://github.com/qingyang-hu\"\u003e\u003ccode\u003e@​qingyang-hu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2432\"\u003emongodb/mongo-go-driver#2432\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/softprops\"\u003e\u003ccode\u003e@​softprops\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2364\"\u003emongodb/mongo-go-driver#2364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/linborland\"\u003e\u003ccode\u003e@​linborland\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2411\"\u003emongodb/mongo-go-driver#2411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zigzagdev\"\u003e\u003ccode\u003e@​zigzagdev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/pull/2423\"\u003emongodb/mongo-go-driver#2423\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v2.6.2...v2.7.0\"\u003ehttps://github.com/mongodb/mongo-go-driver/compare/v2.6.2...v2.7.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor a full list of tickets included in this release, please see the \u003ca href=\"https://jira.mongodb.org/issues/?jql=project%3Dgodriver%20and%20fixVersion%3D2.7.0\"\u003elist of fixed issues\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/7d61ab3563603dd35ba3e0eab2ee0ce544a83dd7\"\u003e\u003ccode\u003e7d61ab3\u003c/code\u003e\u003c/a\u003e BUMP v2.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/d9593db35f17bfb724d5b74436434afcb50f391c\"\u003e\u003ccode\u003ed9593db\u003c/code\u003e\u003c/a\u003e GODRIVER-3559 Skip Docker Runner Tests (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2432\"\u003e#2432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/6d0f68db630c49d96d09501f9cfa76a64c820241\"\u003e\u003ccode\u003e6d0f68d\u003c/code\u003e\u003c/a\u003e Merge release/2.6 into master (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2437\"\u003e#2437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/0ff564fdfe1da0829b19a6bc8b1661f63475e814\"\u003e\u003ccode\u003e0ff564f\u003c/code\u003e\u003c/a\u003e Merge branch 'release/2.6'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/867c9b5127c2135ea8b6d8fb7db1814d7ccd8e1e\"\u003e\u003ccode\u003e867c9b5\u003c/code\u003e\u003c/a\u003e BUMP v2.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/5b9065941002a19d89557901373c6c9b7db7c95a\"\u003e\u003ccode\u003e5b90659\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into merge-release/2.6-into-master-1781722303033\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/797c020f0833e2213a9b996c87181c19a52c0283\"\u003e\u003ccode\u003e797c020\u003c/code\u003e\u003c/a\u003e GODRIVER-3964: Skip CSE prose tests requiring contention (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2431\"\u003e#2431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/283aa8ba8ed67be5bfb2c8d6723f06db9e7f604c\"\u003e\u003ccode\u003e283aa8b\u003c/code\u003e\u003c/a\u003e GODRIVER-3113 Skip flaky test in commit.json. (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2435\"\u003e#2435\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/1803b12a7304f1944d84c70531b13e9b348c9627\"\u003e\u003ccode\u003e1803b12\u003c/code\u003e\u003c/a\u003e GODRIVER-3965 fix: misleading error message type info in rewrap function (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2430\"\u003e#2430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-go-driver/commit/2995aaf600491c1c11df54263239517b9dc22724\"\u003e\u003ccode\u003e2995aaf\u003c/code\u003e\u003c/a\u003e GODRIVER-3906 Exclude tls.RecordHeaderError from backpressure labels  (\u003ca href=\"https://redirect.github.com/mongodb/mongo-go-driver/issues/2417\"\u003e#2417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/mongo-go-driver/compare/v2.5.0...v2.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.80.0 to 1.81.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.81.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per \u003ca href=\"https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md\"\u003egRFC A41\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/al4an444\"\u003e\u003ccode\u003e@​al4an444\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eotel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.81.0\u003c/h2\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8808\"\u003e#8808\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eDependencies\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eMinimum supported Go version is now 1.25. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8969\"\u003e#8969\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8956\"\u003e#8956\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Send a \u003ccode\u003eRST_STREAM\u003c/code\u003e when receiving an \u003ccode\u003eEND_STREAM\u003c/code\u003e when the stream is not already half-closed. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8832\"\u003e#8832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Fix ADS resource name validation to prevent a panic. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8970\"\u003e#8970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc/stats: Add support for custom labels in per-call metrics (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A108-otel-custom-per-call-label.md\"\u003egRFC A108\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9008\"\u003e#9008\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support for Server Name Indication (SNI) and SAN validation (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A101-SNI-setting-and-SNI-SAN-validation.md\"\u003egRFC A101\u003c/a\u003e). Disabled by default. To enable, set \u003ccode\u003eGRPC_EXPERIMENTAL_XDS_SNI=true\u003c/code\u003e environment variable. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9016\"\u003e#9016\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A85-lrs-custom-metrics-changes.md\"\u003egRFC A85\u003c/a\u003e). Disabled by default. To enable, set \u003ccode\u003eGRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9005\"\u003e#9005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add metrics to track xDS client connectivity and cached resource state (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md\"\u003egRFC A78\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8807\"\u003e#8807\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estats/otel: Enhance \u003ccode\u003egrpc.subchannel.disconnections\u003c/code\u003e metric by adding disconnection reason to the \u003ccode\u003egrpc.disconnect_error\u003c/code\u003e label (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A94-subchannel-otel-metrics.md\"\u003egRFC A94\u003c/a\u003e). This provides granular insights into why subchannels are closing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8973\"\u003e#8973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Add \u003ccode\u003emem.Buffer.Slice()\u003c/code\u003e API to slice the buffer like a slice. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8977\"\u003e#8977\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/ash2k\"\u003e\u003ccode\u003e@​ash2k\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ealts: Pool read buffers to lower memory utilization when sockets are unreadable. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8964\"\u003e#8964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set \u003ccode\u003eGRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false\u003c/code\u003e and report any issues. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9032\"\u003e#9032\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8\"\u003e\u003ccode\u003ecaf0772\u003c/code\u003e\u003c/a\u003e Change version from 1.81.1-dev to 1.81.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9122\"\u003e#9122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215\"\u003e\u003ccode\u003e6ccbeeb\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9121\"\u003e#9121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29\"\u003e\u003ccode\u003eb33c29e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9102\"\u003e#9102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834\"\u003e\u003ccode\u003ec45fae6\u003c/code\u003e\u003c/a\u003e Change version to 1.81.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9063\"\u003e#9063\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/cb18228317ff523e63d931b4058b0329585b7dcd\"\u003e\u003ccode\u003ecb18228\u003c/code\u003e\u003c/a\u003e Change version to 1.81.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9062\"\u003e#9062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/96748f973e20bbfcafa19a8bdffc85ad5da138d1\"\u003e\u003ccode\u003e96748f9\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9105\"\u003e#9105\u003c/a\u003e to 1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9106\"\u003e#9106\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/91832222f0144f76527b630ca55cfea6e1aa015a\"\u003e\u003ccode\u003e9183222\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9055\"\u003e#9055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9032\"\u003e#9032\u003c/a\u003e to v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9095\"\u003e#9095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/5cba6da4211f3b130238c792937f5921741b616a\"\u003e\u003ccode\u003e5cba6da\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;deps: update dependencies for all modules (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9065\"\u003e#9065\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9067\"\u003e#9067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/af8a9364aa7523ab24d214e9ef13e6ad64d5c5f9\"\u003e\u003ccode\u003eaf8a936\u003c/code\u003e\u003c/a\u003e deps: update dependencies for all modules (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9065\"\u003e#9065\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/cdc60dfaaadde45e16aa3c28237c0e655a722c1a\"\u003e\u003ccode\u003ecdc60df\u003c/code\u003e\u003c/a\u003e transport: optimize heap allocations in ready reader and update syscall conne...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `modernc.org/sqlite` from 1.46.1 to 1.53.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-25 v1.54.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUnder the opt-in \u003ccode\u003e_texttotime\u003c/code\u003e DSN parameter, best-effort parse date-shaped TEXT values from columns SQLite reports with an empty declared type — aggregates and expressions over a date column (\u003ccode\u003eMAX(d)\u003c/code\u003e, \u003ccode\u003eCOALESCE(d, ...)\u003c/code\u003e, \u003ccode\u003eupper(d)\u003c/code\u003e, \u003ccode\u003ed || ''\u003c/code\u003e), subqueries, and typeless real columns (\u003ccode\u003eCREATE TABLE t(x)\u003c/code\u003e) — into \u003ccode\u003etime.Time\u003c/code\u003e, instead of delivering them as a raw string that \u003ccode\u003eScan\u003c/code\u003e cannot store into a \u003ccode\u003e*time.Time\u003c/code\u003e. The existing declared \u003ccode\u003eDATE\u003c/code\u003e/\u003ccode\u003eDATETIME\u003c/code\u003e/\u003ccode\u003eTIME\u003c/code\u003e/\u003ccode\u003eTIMESTAMP\u003c/code\u003e path is unchanged; this only adds the empty-decltype case. The conversion is strictly best-effort: a value that does not parse as a time falls through to the original string, so no \u003ccode\u003eScan\u003c/code\u003e that worked before can newly fail. \u003ccode\u003eColumnTypeScanType\u003c/code\u003e continues to report \u003ccode\u003estring\u003c/code\u003e for empty-decltype columns, since the declared type cannot prove the column is temporal. Without \u003ccode\u003e_texttotime\u003c/code\u003e the behavior is byte-for-byte unchanged. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/248\"\u003e#248\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/248\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/248\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/133\"\u003e#133\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/133\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/133\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-21 v1.53.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003enetbsd/amd64\u003c/code\u003e support, resolving the long-standing build break in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/246\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/246\u003c/a\u003e). This target is intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: the port had been broken for years and is only now revived, and there is as yet no real-world experience running it under production workloads. Green CI is not the same as battle-tested — so while the full test suite (including the \u003ccode\u003epcache\u003c/code\u003e and \u003ccode\u003evec\u003c/code\u003e packages and the \u003ccode\u003e-race\u003c/code\u003e concurrency test) passes on NetBSD 10.1 / Go 1.26.3, and the entire upstream toolchain (\u003ccode\u003elibc\u003c/code\u003e, \u003ccode\u003ecc\u003c/code\u003e, \u003ccode\u003eccgo\u003c/code\u003e, \u003ccode\u003elibz\u003c/code\u003e, \u003ccode\u003elibtcl8.6\u003c/code\u003e, \u003ccode\u003elibsqlite3\u003c/code\u003e, \u003ccode\u003elibsqlite_vec\u003c/code\u003e) is green on the NetBSD CI builder, the target is offered for evaluation only. If you run NetBSD, please exercise it with your own workloads and report back via \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e; the intent is to promote it to a fully supported platform after a period of broader real-world testing (on the order of a month) elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: the previously shipped \u003ccode\u003elib/sqlite_netbsd_amd64.go\u003c/code\u003e was a stale old-generator transpile that no longer compiled (the \u003ccode\u003emu.enter\u003c/code\u003e/\u003ccode\u003emu.leave\u003c/code\u003e break in \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e); it is replaced by a fresh new-generator transpile consistent with every other platform, and \u003ccode\u003emodernc.org/sqlite/vec\u003c/code\u003e (sqlite-vec) is vendored and auto-registers on netbsd. Correct operation requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e, which carries two NetBSD-specific fixes found during this work: the \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003ePAD\u003c/code\u003e-argument ABI (without it, concurrent WAL access faults with SIGBUS in the WAL-index shared memory) and a working \u003ccode\u003eabort(3)\u003c/code\u003e (the prior stub left SQLite's crash-recovery \u003ccode\u003ewritecrash\u003c/code\u003e test unable to terminate by signal). As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/82\"\u003e#82\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/82\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/82\u003c/a\u003e), thanks Leonardo Taccari (\u003ca href=\"https://github.com/iamleot\"\u003e\u003ccode\u003e@​iamleot\u003c/code\u003e\u003c/a\u003e) and Thomas Klausner (@\u003cem\u003ewiz\u003c/em\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003efreebsd/386\u003c/code\u003e and \u003ccode\u003efreebsd/arm\u003c/code\u003e support. As with the \u003ccode\u003enetbsd/amd64\u003c/code\u003e target above, these two 32-bit FreeBSD ports are intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: \u003ccode\u003efreebsd/386\u003c/code\u003e previously shipped a stale, effectively untested SQLite 3.41 transpile, and \u003ccode\u003efreebsd/arm\u003c/code\u003e is entirely new, so neither has real-world production mileage yet. Both are now freshly transpiled at SQLite 3.53.2 consistent with every other platform, build cleanly, and pass the full test suite (core, WAL/concurrency, and the \u003ccode\u003evec\u003c/code\u003e package) on the FreeBSD CI builders; they are offered for evaluation only. If you run 32-bit FreeBSD, please exercise these targets with your own workloads and report back — the intent is to promote \u003ccode\u003efreebsd/386\u003c/code\u003e, \u003ccode\u003efreebsd/arm\u003c/code\u003e, and \u003ccode\u003enetbsd/amd64\u003c/code\u003e to fully supported platforms in a future release cycle, once a period of broader real-world testing elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: correct operation on \u003ccode\u003efreebsd/arm\u003c/code\u003e requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e (v1.73.4), which fixes the per-arch \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003eoff_t\u003c/code\u003e encoding for 32-bit FreeBSD; without it the WAL shared-memory mapping faults with SIGBUS under concurrent access, the same class of bug found on the netbsd port. As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/119\"\u003e#119\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/119\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/119\u003c/a\u003e), thanks Olivier Cochard-Labbé (\u003ca href=\"https://github.com/ocochard\"\u003e\u003ccode\u003e@​ocochard\u003c/code\u003e\u003c/a\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd a Go-facing wrapper for \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e. \u003ccode\u003ePageCache\u003c/code\u003e is the factory and \u003ccode\u003eCache\u003c/code\u003e the per-database instance, both idiomatic Go interfaces; \u003ccode\u003ePage\u003c/code\u003e exposes the raw \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e pointers that SQLite reads through the C pcache contract. \u003ccode\u003eRegisterPageCache\u003c/code\u003e and \u003ccode\u003eMustRegisterPageCache\u003c/code\u003e install the module process-globally before the first \u003ccode\u003esql.Open\u003c/code\u003e; subsequent Open calls are gated through a one-shot \u003ccode\u003eXsqlite3_config(SQLITE_CONFIG_PCACHE2)\u003c/code\u003e so a too-late Register returns \u003ccode\u003eErrPageCacheTooLate\u003c/code\u003e rather than silently falling through to the built-in pcache1. The binding owns the \u003ccode\u003esqlite3_pcache_page\u003c/code\u003e stub and re-consults the implementation on every Fetch, reusing the stub only when the returned \u003ccode\u003ePage\u003c/code\u003e value is unchanged, which keeps a bounded/evicting purgeable cache safe by construction.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/126\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/126\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e, the reference page-cache implementation that accompanies the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e wrapper. \u003ccode\u003epcache.New\u003c/code\u003e returns a \u003ccode\u003e*Pool\u003c/code\u003e satisfying the \u003ccode\u003ePageCache\u003c/code\u003e interface; register it once with \u003ccode\u003esqlite.MustRegisterPageCache(pcache.New())\u003c/code\u003e and every connection opened afterwards draws its pages from it. Each \u003ccode\u003ePool.Create\u003c/code\u003e mints a fresh per-database \u003ccode\u003eCache\u003c/code\u003e: a bounded, LRU-evicting page store that honours the \u003ccode\u003ePRAGMA cache_size\u003c/code\u003e soft cap and releases the least-recently-unpinned page when it must make room. Page memory — the \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e buffers SQLite reads through — is allocated with \u003ccode\u003elibc.Xmalloc\u003c/code\u003e/\u003ccode\u003elibc.Xcalloc\u003c/code\u003e and therefore lives off the Go heap, which keeps SQLite's interior pointer arithmetic on the page extras from tripping the race detector's checkptr enforcement. \u003ccode\u003ePool.Stats\u003c/code\u003e reports aggregate lifetime counters (hits, misses, allocs, evictions, rekeys, truncates, caches) across every cache a Pool has created, so hit/miss/eviction behaviour is observable without instrumenting individual caches. Cross-connection page sharing is out of scope for now; each \u003ccode\u003eCreate\u003c/code\u003e returns an independent per-database cache.\u003c/li\u003e\n\u003cli\u003eValidated end-to-end against the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e stress workload (\u003ccode\u003ecache_size=16\u003c/code\u003e, 4000 BLOB rows with DELETE and \u003ccode\u003eincremental_vacuum\u003c/code\u003e, \u003ccode\u003eintegrity_check\u003c/code\u003e clean under \u003ccode\u003e-race\u003c/code\u003e) and benchmarked for the memory-utilization goal tracked in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/204\"\u003e#204\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/204\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/204\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/127\"\u003e#127\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/127\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/127\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eTighten the \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e reference implementation per cznic's !127 review follow-ups. Adds \u003ccode\u003eStats.EasyRefusals\u003c/code\u003e, a per-Pool counter for the cases where \u003ccode\u003eFetchCreateEasy\u003c/code\u003e returns nil at cap; SQLite reacts to a refusal by spilling dirty pages and retrying with \u003ccode\u003eFetchCreateForce\u003c/code\u003e, so the new field is a direct proxy for the I/O pressure the strict Easy contract imposes vs pcache1's recycle-without-spill behavior. \u003ccode\u003eBenchmarkPoolEvictionChurn\u003c/code\u003e was reworked to drive a rotating-residue DELETE (\u003ccode\u003ek % 3 = i % 3\u003c/code\u003e) and re-insert a matching batch each cycle so the spill pressure recurs and \u003ccode\u003eeasy-refusals/op\u003c/code\u003e scales with \u003ccode\u003eb.N\u003c/code\u003e instead of capping at the seed's one-time first-cycle cost; both existing benchmarks now report \u003ccode\u003eeasy-refusals/op\u003c/code\u003e alongside the page-allocs/evictions metrics. \u003ccode\u003eStats.Evictions\u003c/code\u003e documentation was tightened to match the actual behavior (counts LRU eviction, \u003ccode\u003eUnpin(discard=true)\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e releases, and \u003ccode\u003eUnpin(discard=false)\u003c/code\u003e trimming back to target after a \u003ccode\u003eFetchCreateForce\u003c/code\u003e overcommit; bulk frees from \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e collisions, and \u003ccode\u003eDestroy\u003c/code\u003e are not counted). The \u003ccode\u003eTestPoolRoundTripIntegrity\u003c/code\u003e comment claiming the workload exercises \u003ccode\u003exRekey\u003c/code\u003e ~15 times has been corrected; the SQL surface does not reliably emit xRekey here, and that codepath is covered by the unit tests instead.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/130\"\u003e#130\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/130\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/130\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e \u003ccode\u003e-race\u003c/code\u003e-clean under SQLite's \u003ccode\u003ecache=shared\u003c/code\u003e mode. The pool already runs correctly under shared-cache because every callback into a given \u003ccode\u003eCache\u003c/code\u003e is serialised internally by SQLite's \u003ccode\u003esqlite3BtreeEnter\u003c/code\u003e on the \u003ccode\u003eBtShared\u003c/code\u003e mutex; verified empirically with a lock-free in-flight probe (max-in-flight = 1 on the canonical two-connection workload, 4 on a positive control with goroutines hitting the cache directly). However the Go race detector does not recognise SQLite's libc mutex as a happens-before edge and reports false-positive races on \u003ccode\u003eFetch\u003c/code\u003e vs \u003ccode\u003eUnpin\u003c/code\u003e reads/writes of the per-cache state, which surfaces as \u003ccode\u003eDATA RACE\u003c/code\u003e failures for any user who registers the pool and runs their suite under \u003ccode\u003e-race\u003c/code\u003e. A \u003ccode\u003esync.Mutex\u003c/code\u003e on the \u003ccode\u003ecache\u003c/code\u003e type is now taken on every public method (\u003ccode\u003eSetSize\u003c/code\u003e, \u003ccode\u003ePageCount\u003c/code\u003e, \u003ccode\u003eFetch\u003c/code\u003e, \u003ccode\u003eUnpin\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e, \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eDestroy\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e), always. On the common non-shared-cache path the lock is uncontended (one atomic CAS per Lock/Unlock pair, negligible next to the SQLite work it bookends); on the shared-cache path it just rubber-stamps the order SQLite's \u003ccode\u003eBtShared\u003c/code\u003e mutex already established. A new \u003ccode\u003ee2e_test.go\u003c/code\u003e \u003ccode\u003eTestSharedCacheTwoConns_Integrity\u003c/code\u003e drives two \u003ccode\u003esql.Conn\u003c/code\u003e against the same \u003ccode\u003ecache=shared\u003c/code\u003e URI with concurrent writers and asserts \u003ccode\u003ePRAGMA integrity_check = ok\u003c/code\u003e under \u003ccode\u003e-race\u003c/code\u003e; passes cleanly with the lock, would surface the false-positive without it. Design notes live in \u003ccode\u003epcache/sharing.go\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/131\"\u003e#131\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/131\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/131\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd a Go wrapper for \u003ccode\u003esqlite3_db_status\u003c/code\u003e, the per-connection runtime counters (cache hit/miss/write/spill rates, schema and prepared-statement memory, lookaside usage, deferred foreign keys). \u003ccode\u003eDBStatus\u003c/code\u003e is an interface implemented by the driver connection and reached through the \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, mirroring the existing \u003ccode\u003eFileControl\u003c/code\u003e surface; \u003ccode\u003eDBStatusOp\u003c/code\u003e is a distinct typed enum of the \u003ccode\u003eSQLITE_DBSTATUS_*\u003c/code\u003e verbs so a counter from a different op family will not compile in its place. \u003ccode\u003eStatus(op, reset)\u003c/code\u003e returns the \u003ccode\u003e(current, high)\u003c/code\u003e pair and optionally resets the counter. This also lets \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e measure real I/O instead of the \u003ccode\u003eEasyRefusals\u003c/code\u003e proxy: the new \u003ccode\u003eBenchmarkPoolSpillIO\u003c/code\u003e reads the pager-level \u003ccode\u003eSQLITE_DBSTATUS_CACHE_SPILL\u003c/code\u003e/\u003ccode\u003e_CACHE_WRITE\u003c/code\u003e counters, which the pager maintains identically for pcache1 and the pool, making the pcache1-vs-pool comparison cznic raised on the !127 review a genuine apples-to-apples measurement. On the rotating-residue eviction-churn workload at \u003ccode\u003ecache_size=16\u003c/code\u003e the pool spills ~3.5x more than pcache1 (cache-spill/op 31.96 vs 8.96) for ~3% more page writes (cache-write/op 450 vs 436) at identical hit/miss, quantifying the I/O cost of the strict Easy contract that \u003ccode\u003eEasyRefusals\u003c/code\u003e only proxied.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/132\"\u003e#132\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/132\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/132\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_dqs\u003c/code\u003e DSN query parameter that disables SQLite's double-quoted string literal compatibility quirk on a per-connection basis. When \u003ccode\u003e_dqs=0\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e false value) is supplied, the driver calls \u003ccode\u003esqlite3_db_config\u003c/code\u003e with \u003ccode\u003eSQLITE_DBCONFIG_DQS_DDL\u003c/code\u003e and \u003ccode\u003eSQLITE_DBCONFIG_DQS_DML\u003c/code\u003e set to off before any statement is prepared, so a double-quoted identifier that fails to resolve raises a parse error instead of silently falling back to a string literal. Absence of the parameter, or \u003ccode\u003e_dqs=1\u003c/code\u003e, leaves SQLite's default behavior unchanged; existing DSNs continue to work byte-for-byte. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/61\"\u003e#61\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/61\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/61\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/128\"\u003e#128\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/128\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/128\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_error_rc\u003c/code\u003e DSN query parameter for clearer error reporting on open-time failures. When \u003ccode\u003e_error_rc=1\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e true value) is supplied, error strings synthesised from a \u003ccode\u003e(rc, db)\u003c/code\u003e pair only append \u003ccode\u003esqlite3_errmsg(db)\u003c/code\u003e when \u003ccode\u003esqlite3_extended_errcode(db)\u003c/code\u003e is consistent with the operation rc (full match first, primary code \u003ccode\u003e\u0026amp;0xff\u003c/code\u003e as fallback). On mismatch the canonical \u003ccode\u003esqlite3_errstr(rc)\u003c/code\u003e is used alone, so an open-time \u003ccode\u003eSQLITE_CANTOPEN\u003c/code\u003e no longer carries the temporary handle's stale \u0026quot;out of memory\u0026quot; errmsg. Absence of the parameter, or \u003ccode\u003e_error_rc=0\u003c/code\u003e, preserves the legacy \u0026quot;errstr: errmsg\u0026quot; form byte-for-byte; existing callers that parse error strings are unaffected. The driver's \u003ccode\u003e*Error.Code()\u003c/code\u003e returns the same SQLite result code in both modes. Parsed before \u003ccode\u003esqlite3_open_v2\u003c/code\u003e so open-time errors are covered. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/230\"\u003e#230\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/230\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/230\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/129\"\u003e#129\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/129\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/129\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-06 v1.52.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_2.html\"\u003eSQLite 3.53.2\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eBackup.Remaining\u003c/code\u003e and \u003ccode\u003eBackup.PageCount\u003c/code\u003e, thin wrappers around the existing \u003ccode\u003esqlite3_backup_remaining\u003c/code\u003e and \u003ccode\u003esqlite3_backup_pagecount\u003c/code\u003e C symbols. Together they expose the per-\u003ccode\u003eStep\u003c/code\u003e progress counters that the underlying backup object already maintains, enabling progress reporting during online backups without dropping to \u003ccode\u003emodernc.org/sqlite/lib\u003c/code\u003e directly.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/122\"\u003e#122\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/122\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/122\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eDrop the redundant second copy in \u003ccode\u003e(*conn).columnText\u003c/code\u003e, the path that backs every \u003ccode\u003eRows.Scan\u003c/code\u003e into a Go \u003ccode\u003estring\u003c/code\u003e for a TEXT column. The value's bytes are still copied once out of SQLite-owned memory into a fresh Go buffer; that buffer is then reinterpreted as the result string with \u003ccode\u003eunsafe.String\u003c/code\u003e rather than copied a second time by the implicit \u003ccode\u003estring([]byte)\u003c/code\u003e conversion. This removes one allocation per TEXT value per row and roughly halves the bytes allocated on that path; on the new \u003ccode\u003eBenchmarkColumnTextScan\u003c/code\u003e cases it is ~13–20% faster for payloads of 256 B and larger, with no measurable change for very short strings. Purely internal: no API or behavioral change, and the returned string never aliases SQLite's buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/123\"\u003e#123\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/123\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/123\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache each result column's declared type once per result set in \u003ccode\u003enewRows\u003c/code\u003e instead of recomputing it on every row. The TEXT branch of \u003ccode\u003eRows.Next\u003c/code\u003e calls \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e for every TEXT column on every row (independent of any DSN flag), which previously did a \u003ccode\u003elibc.GoString\u003c/code\u003e + \u003ccode\u003estrings.ToUpper\u003c/code\u003e each time; that lookup is now a single index into a cached, pre-uppercased \u003ccode\u003e[]string\u003c/code\u003e, and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e reads the same cache and drops its per-call \u003ccode\u003estrings.ToLower\u003c/code\u003e. The declared type is fixed for the lifetime of a prepared statement, so the C round-trip is paid once per column rather than once per column per row, removing exactly 1 alloc + 8 B per TEXT column per row from the \u003ccode\u003eNext\u003c/code\u003e hot path. The new \u003ccode\u003eBenchmarkTextToTimeScan\u003c/code\u003e cases show ~7% faster on a 1000-row DATETIME SELECT under \u003ccode\u003e_texttotime=1\u003c/code\u003e. Purely internal: \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e return identical values, no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/124\"\u003e#124\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/124\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/124\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache, per result column, the \u003ccode\u003eparseTimeFormats\u003c/code\u003e index that first parsed a TEXT-stored DATE/DATETIME/TIMESTAMP value, and try that format first on later rows instead of re-walking the list from the top. \u003ccode\u003e(*conn).parseTime\u003c/code\u003e previously ran \u003ccode\u003etime.Parse\u003c/code\u003e down the format list on every such row; for the canonical SQLite TEXT datetime format every row paid two failed \u003ccode\u003etime.Parse\u003c/code\u003e attempts — each allocating a \u003ccode\u003e*time.ParseError\u003c/code\u003e — before the match. On a 1000-row DATETIME TEXT SELECT this cuts ~50% of allocs/op and ~57% of B/op and is ~37% faster. The fall-through chain is preserved exactly: the seven formats are mutually exclusive, so the cached hint can never select a different match than the in-order scan, and the parsed \u003ccode\u003edriver.Value\u003c/code\u003e is identical to before. Purely internal: no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/125\"\u003e#125\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/125\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/125\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-28 v1.51.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePool the \u003ccode\u003e[]driver.Value\u003c/code\u003e slice passed to scalar/aggregate UDF callbacks and to vtab \u003ccode\u003eFilter\u003c/code\u003e/\u003ccode\u003eInsert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e callbacks, eliminating the dominant per-row allocation on UDF-heavy queries. Benchmarks on a 1000-row, 3-arg noop scalar UDF show ~40% fewer bytes/op and ~15% fewer allocs/op.\u003c/li\u003e\n\u003cli\u003eDocument the matching \u0026quot;arguments are not valid past return\u0026quot; contract on \u003ccode\u003evtab.Cursor.Filter\u003c/code\u003e and \u003ccode\u003evtab.Updater.Insert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e, consistent with the existing rule for \u003ccode\u003eFunctionImpl.Scalar\u003c/code\u003e / \u003ccode\u003eAggregateFunction.Step\u003c/code\u003e / \u003ccode\u003eWindowInverse\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/226\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/226\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/114\"\u003e#114\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/114\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/114\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eFileControl.FileControlDataVersion\u003c/code\u003e, a wrapper around \u003ccode\u003eSQLITE_FCNTL_DATA_VERSION\u003c/code\u003e for observing pager-cache data-version changes, including those made on the same connection. Useful a...\n\n_Description has been truncated_","html_url":"https://github.com/olucasandrade/kaptanto/pull/18","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/olucasandrade%2Fkaptanto/issues/18","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/18/packages"}},{"old_version":"5.9.2","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-22T19:49:35.000Z","version_change":"5.9.2 → 5.10.0","issue":{"uuid":"4720060518","node_id":"PR_kwDOR8M3rM7pWLrz","number":183,"state":"closed","title":"deps: bump the go-minor-patch group across 1 directory with 11 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-29T19:45:07.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-22T19:49:35.000Z","updated_at":"2026-06-29T19:45:09.000Z","time_to_close":604532,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps: bump","group_name":"go-minor-patch","update_count":11,"packages":[{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.7","new_version":"1.42.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/credentials","old_version":"1.19.16","new_version":"1.19.24","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/s3","old_version":"1.101.0","new_version":"1.104.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/go-playground/validator/v10","old_version":"10.30.2","new_version":"10.30.3","repository_url":"https://github.com/go-playground/validator"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/samber/oops","old_version":"1.21.0","new_version":"1.22.0","repository_url":"https://github.com/samber/oops"},{"name":"github.com/testcontainers/testcontainers-go","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"github.com/testcontainers/testcontainers-go/modules/nats","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"github.com/testcontainers/testcontainers-go/modules/postgres","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/testcontainers/testcontainers-go"},{"name":"github.com/zitadel/zitadel-go/v3","old_version":"3.29.0","new_version":"3.29.1","repository_url":"https://github.com/zitadel/zitadel-go"},{"name":"golang.org/x/sync","old_version":"0.20.0","new_version":"0.21.0","repository_url":"https://github.com/golang/sync"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 11 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.42.0` |\n| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.16` | `1.19.24` |\n| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.101.0` | `1.104.0` |\n| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.30.2` | `10.30.3` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/samber/oops](https://github.com/samber/oops) | `1.21.0` | `1.22.0` |\n| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [github.com/testcontainers/testcontainers-go/modules/nats](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [github.com/testcontainers/testcontainers-go/modules/postgres](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |\n| [github.com/zitadel/zitadel-go/v3](https://github.com/zitadel/zitadel-go) | `3.29.0` | `3.29.1` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.42.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9a3190f79c9e3f7dce5d602be375c07ecd8973cc\"\u003e\u003ccode\u003e9a3190f\u003c/code\u003e\u003c/a\u003e Release 2026-06-08\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b20dd5bb52bbb193b036c3e81525e7a06f3f819b\"\u003e\u003ccode\u003eb20dd5b\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/75a45eaa192d32d7e1247a666f9572a61443b48a\"\u003e\u003ccode\u003e75a45ea\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e736f55ba6d11d83f9b8d858bbd9ab6c1a883ee2\"\u003e\u003ccode\u003ee736f55\u003c/code\u003e\u003c/a\u003e Add preview of changes for standard retry mode behind flag (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3400\"\u003e#3400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ba08dc9776ad30b7e5299dd98f3f0360d39656d4\"\u003e\u003ccode\u003eba08dc9\u003c/code\u003e\u003c/a\u003e Release 2026-06-05.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9a67e21ffef3d8b3c9c84e9ce7d90314b646f395\"\u003e\u003ccode\u003e9a67e21\u003c/code\u003e\u003c/a\u003e Revert schema serde (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3442\"\u003e#3442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/51692f80a1919052106b080468a7d231649d10a4\"\u003e\u003ccode\u003e51692f8\u003c/code\u003e\u003c/a\u003e s3/transfermanager: avoid double-closing concurrentReader channel after read ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f696d5bbafd406a16429239844c6e70627aee935\"\u003e\u003ccode\u003ef696d5b\u003c/code\u003e\u003c/a\u003e Release 2026-06-05\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7efb8fd6bd7b33d2242586a63a32eca93f774f89\"\u003e\u003ccode\u003e7efb8fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1a420c53c9599f9267285650a61009933de8c9bb\"\u003e\u003ccode\u003e1a420c5\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.7...v1.42.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.16 to 1.19.24\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/0016334f314179e3bb1d63ac7a5dbcb2ee7b3ee1\"\u003e\u003ccode\u003e0016334\u003c/code\u003e\u003c/a\u003e Release 2026-06-10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/396a18287497ccfa2cff73a10ae0dd946a167352\"\u003e\u003ccode\u003e396a182\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/3eb85338c6dfc5721c5933253b2d66e5f8e96830\"\u003e\u003ccode\u003e3eb8533\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7bbea79fac21abb6cc7b037466074575e2138f34\"\u003e\u003ccode\u003e7bbea79\u003c/code\u003e\u003c/a\u003e Release 2026-06-09\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1fefa6c28b6345014a2da360a6e47fc5bd5b7e72\"\u003e\u003ccode\u003e1fefa6c\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a2cf49ff138b824c9a5963c0f8f34429c86a199a\"\u003e\u003ccode\u003ea2cf49f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/d87be6894e8451a757cc33d65bca734f51e256a9\"\u003e\u003ccode\u003ed87be68\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9a3190f79c9e3f7dce5d602be375c07ecd8973cc\"\u003e\u003ccode\u003e9a3190f\u003c/code\u003e\u003c/a\u003e Release 2026-06-08\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b20dd5bb52bbb193b036c3e81525e7a06f3f819b\"\u003e\u003ccode\u003eb20dd5b\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/75a45eaa192d32d7e1247a666f9572a61443b48a\"\u003e\u003ccode\u003e75a45ea\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.16...credentials/v1.19.24\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.101.0 to 1.104.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/99943aa792387847a5ee723320a98af18e5c3271\"\u003e\u003ccode\u003e99943aa\u003c/code\u003e\u003c/a\u003e Release 2026-06-16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/85941352ba17c55c1b715211b60bc39c8b3f94b6\"\u003e\u003ccode\u003e8594135\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/14151e5a04b45402df5df389db1490197e305ae9\"\u003e\u003ccode\u003e14151e5\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f43e77cd1b3bb74336f67e0e273dcf3fe183ff5c\"\u003e\u003ccode\u003ef43e77c\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9fcc53abdf577092eb228458d78d0d2af8329c17\"\u003e\u003ccode\u003e9fcc53a\u003c/code\u003e\u003c/a\u003e Release 2026-06-15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/65154c157b52b67a6029315c162f36d70ed9a99f\"\u003e\u003ccode\u003e65154c1\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b86c7b982b4d6caec7b6a466468d2112f4fad1fd\"\u003e\u003ccode\u003eb86c7b9\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/750e42a6493c92739684c3b99b99dba175bf6260\"\u003e\u003ccode\u003e750e42a\u003c/code\u003e\u003c/a\u003e Release 2026-06-12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f64ce2ceba5c9b7811df5f08f6a0ec0c5d23edaf\"\u003e\u003ccode\u003ef64ce2c\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/04e975554b5f9d665bb76157ec00bf7002763a09\"\u003e\u003ccode\u003e04e9755\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.101.0...service/s3/v1.104.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-playground/validator/v10` from 10.30.2 to 10.30.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-playground/validator/releases\"\u003egithub.com/go-playground/validator/v10's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.30.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix/issue 1550 UUID case insensitive by \u003ca href=\"https://github.com/leo-jp-edwards\"\u003e\u003ccode\u003e@​leo-jp-edwards\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1551\"\u003ego-playground/validator#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeat: Add NoneOf Validation by \u003ca href=\"https://github.com/Carmen-Shannon\"\u003e\u003ccode\u003e@​Carmen-Shannon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1554\"\u003ego-playground/validator#1554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd bcp47_strict_language_tag validator by \u003ca href=\"https://github.com/bfabio\"\u003e\u003ccode\u003e@​bfabio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1489\"\u003ego-playground/validator#1489\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1558\"\u003ego-playground/validator#1558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1559\"\u003ego-playground/validator#1559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd CLAUDE.md with repo guidance for Claude Code by \u003ca href=\"https://github.com/deankarn\"\u003e\u003ccode\u003e@​deankarn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1564\"\u003ego-playground/validator#1564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce build size with dead code elimination by \u003ca href=\"https://github.com/zemzale\"\u003e\u003ccode\u003e@​zemzale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1542\"\u003ego-playground/validator#1542\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactored out detectFileMIMEType, matchesMIMEType logic for reuse. Added standalone isMIMEType validator for flexibility by \u003ca href=\"https://github.com/dapzthelegend\"\u003e\u003ccode\u003e@​dapzthelegend\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1544\"\u003ego-playground/validator#1544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(translations): add timezone support for en and ja locales by \u003ca href=\"https://github.com/dedyf5\"\u003e\u003ccode\u003e@​dedyf5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1566\"\u003ego-playground/validator#1566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use errors.As in README and translations example by \u003ca href=\"https://github.com/eyupcanakman\"\u003e\u003ccode\u003e@​eyupcanakman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1563\"\u003ego-playground/validator#1563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typos by \u003ca href=\"https://github.com/rymiyamoto\"\u003e\u003ccode\u003e@​rymiyamoto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1568\"\u003ego-playground/validator#1568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add origin validator for web origin URLs by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1565\"\u003ego-playground/validator#1565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject hostnames with trailing hyphen in RFC 952 validator by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1569\"\u003ego-playground/validator#1569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lint): correctly disable govet inline analyzer \u0026amp; deprecated gomodguard by \u003ca href=\"https://github.com/nodivbyzero\"\u003e\u003ccode\u003e@​nodivbyzero\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1574\"\u003ego-playground/validator#1574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1572\"\u003ego-playground/validator#1572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1571\"\u003ego-playground/validator#1571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cron): anchor regex and accept full cron syntax by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1577\"\u003ego-playground/validator#1577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1580\"\u003ego-playground/validator#1580\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: omit blank tag names from namespace by \u003ca href=\"https://github.com/abemedia\"\u003e\u003ccode\u003e@​abemedia\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1567\"\u003ego-playground/validator#1567\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(docs): correct ripemd160 tag name in README validation table by \u003ca href=\"https://github.com/napoleonbot\"\u003e\u003ccode\u003e@​napoleonbot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1582\"\u003ego-playground/validator#1582\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leo-jp-edwards\"\u003e\u003ccode\u003e@​leo-jp-edwards\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1551\"\u003ego-playground/validator#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Carmen-Shannon\"\u003e\u003ccode\u003e@​Carmen-Shannon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1554\"\u003ego-playground/validator#1554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dapzthelegend\"\u003e\u003ccode\u003e@​dapzthelegend\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1544\"\u003ego-playground/validator#1544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dedyf5\"\u003e\u003ccode\u003e@​dedyf5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1566\"\u003ego-playground/validator#1566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eyupcanakman\"\u003e\u003ccode\u003e@​eyupcanakman\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1563\"\u003ego-playground/validator#1563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rymiyamoto\"\u003e\u003ccode\u003e@​rymiyamoto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1568\"\u003ego-playground/validator#1568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abemedia\"\u003e\u003ccode\u003e@​abemedia\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1567\"\u003ego-playground/validator#1567\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/napoleonbot\"\u003e\u003ccode\u003e@​napoleonbot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1582\"\u003ego-playground/validator#1582\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\"\u003ehttps://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/ac4c1bab0d4aa957466faa1948af28130767e43a\"\u003e\u003ccode\u003eac4c1ba\u003c/code\u003e\u003c/a\u003e fix(docs): correct ripemd160 tag name in README validation table (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1582\"\u003e#1582\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/feacb34d4fa5bd263392bcd03d5348a94ca28870\"\u003e\u003ccode\u003efeacb34\u003c/code\u003e\u003c/a\u003e feat: omit blank tag names from namespace (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1567\"\u003e#1567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/5ed0a7ea9ac87c2409326e1d88f34678658b84e0\"\u003e\u003ccode\u003e5ed0a7e\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1580\"\u003e#1580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/0364541fa467027703223b3d0cace07a667c8302\"\u003e\u003ccode\u003e0364541\u003c/code\u003e\u003c/a\u003e fix(cron): anchor regex and accept full cron syntax (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1577\"\u003e#1577\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/8eb2659789a33bda9262ce62eed2d714539dc8c5\"\u003e\u003ccode\u003e8eb2659\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1571\"\u003e#1571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/f7e1721521360af7958fe59e9c34ba0813f25bf8\"\u003e\u003ccode\u003ef7e1721\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1572\"\u003e#1572\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/cf37fce7a1a5dee2810a085ae39aec5c78e7cd8a\"\u003e\u003ccode\u003ecf37fce\u003c/code\u003e\u003c/a\u003e fix(lint): correctly disable govet inline analyzer \u0026amp; deprecated gomodguard (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/7c334e52092ad1224f0a2eed6bc77408374048b7\"\u003e\u003ccode\u003e7c334e5\u003c/code\u003e\u003c/a\u003e fix: reject hostnames with trailing hyphen in RFC 952 validator (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1569\"\u003e#1569\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/6bcb7bcaf6a99f8d6cf16cc8d062ad8c47950901\"\u003e\u003ccode\u003e6bcb7bc\u003c/code\u003e\u003c/a\u003e feat: add origin validator for web origin URLs (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1565\"\u003e#1565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/6fd2fa82069c9aede1882d703c0e7ee2660bc4d9\"\u003e\u003ccode\u003e6fd2fa8\u003c/code\u003e\u003c/a\u003e docs: fix typos (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1568\"\u003e#1568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/samber/oops` from 1.21.0 to 1.22.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/samber/oops/releases\"\u003egithub.com/samber/oops's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.22.0\u003c/h2\u003e\n\u003ch2\u003eSummary\u003c/h2\u003e\n\u003cp\u003eHuge performance gain, thanks to a refactoring of the error builder (\u003ca href=\"https://redirect.github.com/samber/oops/issues/121\"\u003e#121\u003c/a\u003e):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUse of lazy loading in error builder\u003c/li\u003e\n\u003cli\u003e-90% error build time and no more alloc when wrapping nil error (general case)\u003c/li\u003e\n\u003cli\u003e-30% to -90% error build time and memory allocation for effective errors\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf/multiple perf improvements by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/108\"\u003esamber/oops#108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeature/caller skip by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/109\"\u003esamber/oops#109\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: change User and Tenant param type to ...any by \u003ca href=\"https://github.com/cley44\"\u003e\u003ccode\u003e@​cley44\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/36\"\u003esamber/oops#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add AsError[T] generic helper and document AsOops in README by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/103\"\u003esamber/oops#103\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: OopsError.Is() now compares by identity, not by type by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/105\"\u003esamber/oops#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(trace): explicit Trace() always beats auto-generated trace by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/106\"\u003esamber/oops#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: deep review improvements — bug fixes, docs, and test coverage by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/107\"\u003esamber/oops#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(tests): migrate to table-driven test pattern by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/120\"\u003esamber/oops#120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(builder): migrate to functional options pattern (linked-list optionFunc) by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/121\"\u003esamber/oops#121\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add OopsError.Layers() to inspect individual error chain layers by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/110\"\u003esamber/oops#110\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: add table-driven unit tests for recursive functions by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/111\"\u003esamber/oops#111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eCI\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(ci): adding codeql by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/98\"\u003esamber/oops#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: disable govulncheck, pin go-version-file and add trivyignore in security workflow by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/119\"\u003esamber/oops#119\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: security scan CI failures by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/112\"\u003esamber/oops#112\u003c/a\u003e\n\u003ca href=\"https://redirect.github.com/samber/oops/pull/115\"\u003esamber/oops#115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDependencies\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump github.com/samber/lo from 1.52.0 to 1.53.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/samber/oops/pull/102\"\u003esamber/oops#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump codecov/codecov-action from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/samber/oops/pull/100\"\u003esamber/oops#100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump softprops/action-gh-release from 2 to 3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/samber/oops/pull/117\"\u003esamber/oops#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in\u003c/li\u003e\n\u003cli\u003eci: add dependabot automerge workflow by \u003ca href=\"https://github.com/headless-samber\"\u003e\u003ccode\u003e@​headless-samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/118\"\u003esamber/oops#118\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edoc: clarify why Wrapf uses fmt.Errorf instead of fmt.Sprintf by \u003ca href=\"https://github.com/samber\"\u003e\u003ccode\u003e@​samber\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/samber/oops/pull/104\"\u003esamber/oops#104\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cley44\"\u003e\u003ccode\u003e@​cley44\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/samber/oops/pull/36\"\u003esamber/oops#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/headless-samber\"\u003e\u003ccode\u003e@​headless-samber\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/samber/oops/pull/118\"\u003esamber/oops#118\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/samber/oops/compare/v1.21.0...v1.22.0\"\u003ehttps://github.com/samber/oops/compare/v1.21.0...v1.22.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/682da16508ede6f5620671521ac235049b45dbd6\"\u003e\u003ccode\u003e682da16\u003c/code\u003e\u003c/a\u003e bump v1.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/50ff369e9af74aa5bb0761e1a8ccccf33f79cd90\"\u003e\u003ccode\u003e50ff369\u003c/code\u003e\u003c/a\u003e ci(release): add contents:write permission to release job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/da8c6ce0d88f5523ce9f3a4b1dda7ea44b19dd5e\"\u003e\u003ccode\u003eda8c6ce\u003c/code\u003e\u003c/a\u003e refactor(builder): migrate to functional options pattern (linked-list optionF...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/9c5c4af9b2d26a7dc6e22f88cba6fd3681e53c51\"\u003e\u003ccode\u003e9c5c4af\u003c/code\u003e\u003c/a\u003e ci: disable govulncheck, pin go-version-file and add trivyignore in security ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/b9e478c8459180bd2c4bf7abcf5fe99f52b03d1c\"\u003e\u003ccode\u003eb9e478c\u003c/code\u003e\u003c/a\u003e refactor(tests): migrate to table-driven test pattern (\u003ca href=\"https://redirect.github.com/samber/oops/issues/120\"\u003e#120\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/5d0edf21ce3a02fcab04c1e1308139476b5b35ae\"\u003e\u003ccode\u003e5d0edf2\u003c/code\u003e\u003c/a\u003e ci: add dependabot automerge workflow (\u003ca href=\"https://redirect.github.com/samber/oops/issues/118\"\u003e#118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/457cdc1d7809ac8e8eef6425f1f208f4008f9f12\"\u003e\u003ccode\u003e457cdc1\u003c/code\u003e\u003c/a\u003e chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 (\u003ca href=\"https://redirect.github.com/samber/oops/issues/115\"\u003e#115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/c18d0e974f26ff71638e858ed2519d9acd4a6b63\"\u003e\u003ccode\u003ec18d0e9\u003c/code\u003e\u003c/a\u003e chore(deps): bump softprops/action-gh-release from 2 to 3 (\u003ca href=\"https://redirect.github.com/samber/oops/issues/117\"\u003e#117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/1460827f264ff1476f405bb5d0b506609f144317\"\u003e\u003ccode\u003e1460827\u003c/code\u003e\u003c/a\u003e fix: security scan CI failures (\u003ca href=\"https://redirect.github.com/samber/oops/issues/112\"\u003e#112\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samber/oops/commit/0372e7b9d26f74b8013a5a7c14e8b16ebc2e95d0\"\u003e\u003ccode\u003e0372e7b\u003c/code\u003e\u003c/a\u003e feat: add OopsError.Layers() to inspect individual error chain layers (\u003ca href=\"https://redirect.github.com/samber/oops/issues/110\"\u003e#110\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/samber/oops/compare/v1.21.0...v1.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go/modules/nats` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go/modules/nats's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/testcontainers/testcontainers-go/modules/postgres` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/testcontainers/testcontainers-go/releases\"\u003egithub.com/testcontainers/testcontainers-go/modules/postgres's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.43.0\u003c/h2\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003ch2\u003e⚠️ Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers of \u003ccode\u003ewait.ForSQL\u003c/code\u003e need to follow the new API contract, using Moby's \u003ccode\u003enetwork.Port\u003c/code\u003e instead of \u003ccode\u003estring\u003c/code\u003e when building the callback function to check the URL. Please see \u003ca href=\"https://golang.testcontainers.org/features/wait/sql/\"\u003ehttps://golang.testcontainers.org/features/wait/sql/\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003eUsers implementing their own \u003ccode\u003etestcontainers.ImageProvider\u003c/code\u003e need to implement the new \u003ccode\u003ePullImageWithPlatform\u003c/code\u003e method introduced by this PR.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e🚀 Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e) \u003ca href=\"https://github.com/jeanbza\"\u003e\u003ccode\u003e@​jeanbza\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(eventhubs): add WithAzuriteContainer and functional-options config builder (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3722\"\u003e#3722\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add PullImageWithPlatform to DockerProvider (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3710\"\u003e#3710\u003c/a\u003e) \u003ca href=\"https://github.com/blueprismo\"\u003e\u003ccode\u003e@​blueprismo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(modules/dex): add Dex OIDC provider module (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3659\"\u003e#3659\u003c/a\u003e) \u003ca href=\"https://github.com/guilycst\"\u003e\u003ccode\u003e@​guilycst\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): remove debug code that leaks Docker credentials (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3721\"\u003e#3721\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ollama): align local exec test with Ollama 0.30.6 log format (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3715\"\u003e#3715\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close temp file handle before removal  (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3672\"\u003e#3672\u003c/a\u003e) \u003ca href=\"https://github.com/acouvreur\"\u003e\u003ccode\u003e@​acouvreur\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compose): close docker clients to prevent goroutine leaks (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3661\"\u003e#3661\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for log production goroutine to drain on stop (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3660\"\u003e#3660\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: update usage metrics (2026-06) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3714\"\u003e#3714\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧹 Housekeeping\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e) \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update usage metrics (2026-05) (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3670\"\u003e#3670\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/github-actions\"\u003egithub-actions[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove cgroupnsMode setting from K3s container configuration (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3653\"\u003e#3653\u003c/a\u003e) \u003ca href=\"https://github.com/lixin9311\"\u003e\u003ccode\u003e@​lixin9311\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e) \u003ca href=\"https://github.com/Steven-Harris\"\u003e\u003ccode\u003e@​Steven-Harris\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e) \u003ca href=\"https://github.com/mdelapenya\"\u003e\u003ccode\u003e@​mdelapenya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3677\"\u003e#3677\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump idna from 3.11 to 3.15 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3708\"\u003e#3708\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3709\"\u003e#3709\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump urllib3 from 2.6.3 to 2.7.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3704\"\u003e#3704\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/0835739aaf45d6cb7eb295f0c820e6f9e92102df\"\u003e\u003ccode\u003e0835739\u003c/code\u003e\u003c/a\u003e chore: use new version (v0.43.0) in modules and examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/85b6d7075d69260feb15b9d3b5bdab14d4698546\"\u003e\u003ccode\u003e85b6d70\u003c/code\u003e\u003c/a\u003e chore(deps): update dependencies to latest versions in go.mod and go.sum (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3729\"\u003e#3729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/8360f719408c23a4f3b731be25a94b267b624a28\"\u003e\u003ccode\u003e8360f71\u003c/code\u003e\u003c/a\u003e feat(k3s):  pull image opts (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3716\"\u003e#3716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/b5e70223aa57f409f7721a89d66abf5b2a453468\"\u003e\u003ccode\u003eb5e7022\u003c/code\u003e\u003c/a\u003e chore: bump sshd-docker image to 1.4.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3727\"\u003e#3727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/1c05dd58a894fd52b48ab272ef6cb6aceaa57dd2\"\u003e\u003ccode\u003e1c05dd5\u003c/code\u003e\u003c/a\u003e chore(deps): bump Ryuk to v0.14.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3313\"\u003e#3313\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/96ab0957556c744987ad7e97f59c78c469604e10\"\u003e\u003ccode\u003e96ab095\u003c/code\u003e\u003c/a\u003e feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3719\"\u003e#3719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/42ac7d2e9a30de22f91da9e45d6084628ae2acb2\"\u003e\u003ccode\u003e42ac7d2\u003c/code\u003e\u003c/a\u003e chore(wait)!: change url callback in wait.ForSQL to accept network.Port (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/ab312e0088c3d615d64a4c6159805b9ab6db356d\"\u003e\u003ccode\u003eab312e0\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3713\"\u003e#3713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/c5c95e5f9bbc01ef374cb76f8c63c09d9add93e4\"\u003e\u003ccode\u003ec5c95e5\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3712\"\u003e#3712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/testcontainers/testcontainers-go/commit/465d00250e529349f6975e88eb30d9338c6ae991\"\u003e\u003ccode\u003e465d002\u003c/code\u003e\u003c/a\u003e chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (\u003ca href=\"https://redirect.github.com/testcontainers/testcontainers-go/issues/3711\"\u003e#3711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/testcontainers/testcontainers-go/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/zitadel/zitadel-go/v3` from 3.29.0 to 3.29.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/zitadel/zitadel-go/releases\"\u003egithub.com/zitadel/zitadel-go/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.29.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/compare/v3.29.0...v3.29.1\"\u003e3.29.1\u003c/a\u003e (2026-06-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate zitadel api to v4.15.2 (\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/c14ca7cb29ed4116fc5b6b3adfa4d369b72e5146\"\u003ec14ca7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate ZITADEL API to v4.15.2 (\u003ca href=\"https://redirect.github.com/zitadel/zitadel-go/issues/598\"\u003e#598\u003c/a\u003e) (\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/90df7f52519fbbea35319fcae7b5269808d905e4\"\u003e90df7f5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/90df7f52519fbbea35319fcae7b5269808d905e4\"\u003e\u003ccode\u003e90df7f5\u003c/code\u003e\u003c/a\u003e fix: Update ZITADEL API to v4.15.2 (\u003ca href=\"https://redirect.github.com/zitadel/zitadel-go/issues/598\"\u003e#598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/c14ca7cb29ed4116fc5b6b3adfa4d369b72e5146\"\u003e\u003ccode\u003ec14ca7c\u003c/code\u003e\u003c/a\u003e fix: update zitadel api to v4.15.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/3fc69fd4a76028918594a569d29901c136d7a7ee\"\u003e\u003ccode\u003e3fc69fd\u003c/code\u003e\u003c/a\u003e chore(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in the gomod...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zitadel/zitadel-go/commit/86763fc2c26f6299f282348b0af39b4d496a80c3\"\u003e\u003ccode\u003e86763fc\u003c/code\u003e\u003c/a\u003e chore(deps): bump go.opentelemetry.io/otel\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/zitadel/zitadel-go/compare/v3.29.0...v3.29.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/sync` from 0.20.0 to 0.21.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sync/commit/5071ed6a9f1617117556b66384f765c934de3698\"\u003e\u003ccode\u003e5071ed6\u003c/code\u003e\u003c/a\u003e all: fix some comments to improve readability\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/sync/compare/v0.20.0...v0.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/medincident/medincident-backend/pull/183","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/medincident%2Fmedincident-backend/issues/183","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/183/packages"}},{"old_version":"5.9.2","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-22T01:51:12.000Z","version_change":"5.9.2 → 5.10.0","issue":{"uuid":"4712741577","node_id":"PR_kwDOR4PSMM7o96uN","number":53,"state":"closed","title":"build(deps): bump the go-minor-patch group with 6 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-22T03:01:26.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-22T01:51:12.000Z","updated_at":"2026-06-22T03:01:28.000Z","time_to_close":4214,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go-minor-patch","update_count":6,"packages":[{"name":"github.com/coreos/go-oidc/v3","old_version":"3.18.0","new_version":"3.19.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"k8s.io/api","old_version":"0.36.1","new_version":"0.36.2","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/apimachinery","old_version":"0.36.1","new_version":"0.36.2","repository_url":"https://github.com/kubernetes/apimachinery"},{"name":"k8s.io/client-go","old_version":"0.36.1","new_version":"0.36.2","repository_url":"https://github.com/kubernetes/client-go"},{"name":"modernc.org/sqlite","old_version":"1.50.1","new_version":"1.53.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.18.0` | `3.19.0` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.1` | `0.36.2` |\n| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.1` | `0.36.2` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.1` | `0.36.2` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.50.1` | `1.53.0` |\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.18.0 to 3.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Key refresh should set \u003ccode\u003eno-cache\u003c/code\u003e to get most up to date keys by \u003ca href=\"https://github.com/Yanni8\"\u003e\u003ccode\u003e@​Yanni8\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/485\"\u003ecoreos/go-oidc#485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eoidc: add support for validating back-channel logout tokens by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/486\"\u003ecoreos/go-oidc#486\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Yanni8\"\u003e\u003ccode\u003e@​Yanni8\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/485\"\u003ecoreos/go-oidc#485\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/4204f0b2b0f903070de5f51a459fe5e23faca113\"\u003e\u003ccode\u003e4204f0b\u003c/code\u003e\u003c/a\u003e oidc: add support for validating back-channel logout tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/f77e01c50994c6ad4f4c3a6ed3e2380bab1f1ff2\"\u003e\u003ccode\u003ef77e01c\u003c/code\u003e\u003c/a\u003e fix: Key refresh should set no-cache to get most up to date keys\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/api` from 0.36.1 to 0.36.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/2f4cefdbec4e3c3cd76d15844e90c679419f4dc7\"\u003e\u003ccode\u003e2f4cefd\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.2 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/api/compare/v0.36.1...v0.36.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.36.1 to 0.36.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/ae3f98eb01e4bebb7d90db742081949c5c4b1ef7\"\u003e\u003ccode\u003eae3f98e\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.2 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/2ec982dc45d3085c6ec641be237b1fc39a7494ac\"\u003e\u003ccode\u003e2ec982d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/139508\"\u003e#139508\u003c/a\u003e\u003ccode\u003elalitc375/automated-cherry-pick-of-#139480\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/6a881027b107fb0f87aa3a5760610cac17b4d3a0\"\u003e\u003ccode\u003e6a88102\u003c/code\u003e\u003c/a\u003e Fix wrong marking of errors\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/client-go` from 0.36.1 to 0.36.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/877f5359348b5df85619f2aa379abc5bd74bca2d\"\u003e\u003ccode\u003e877f535\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.2 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `modernc.org/sqlite` from 1.50.1 to 1.53.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-21 v1.53.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003enetbsd/amd64\u003c/code\u003e support, resolving the long-standing build break in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/246\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/246\u003c/a\u003e). This target is intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: the port had been broken for years and is only now revived, and there is as yet no real-world experience running it under production workloads. Green CI is not the same as battle-tested — so while the full test suite (including the \u003ccode\u003epcache\u003c/code\u003e and \u003ccode\u003evec\u003c/code\u003e packages and the \u003ccode\u003e-race\u003c/code\u003e concurrency test) passes on NetBSD 10.1 / Go 1.26.3, and the entire upstream toolchain (\u003ccode\u003elibc\u003c/code\u003e, \u003ccode\u003ecc\u003c/code\u003e, \u003ccode\u003eccgo\u003c/code\u003e, \u003ccode\u003elibz\u003c/code\u003e, \u003ccode\u003elibtcl8.6\u003c/code\u003e, \u003ccode\u003elibsqlite3\u003c/code\u003e, \u003ccode\u003elibsqlite_vec\u003c/code\u003e) is green on the NetBSD CI builder, the target is offered for evaluation only. If you run NetBSD, please exercise it with your own workloads and report back via \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e; the intent is to promote it to a fully supported platform after a period of broader real-world testing (on the order of a month) elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: the previously shipped \u003ccode\u003elib/sqlite_netbsd_amd64.go\u003c/code\u003e was a stale old-generator transpile that no longer compiled (the \u003ccode\u003emu.enter\u003c/code\u003e/\u003ccode\u003emu.leave\u003c/code\u003e break in \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e); it is replaced by a fresh new-generator transpile consistent with every other platform, and \u003ccode\u003emodernc.org/sqlite/vec\u003c/code\u003e (sqlite-vec) is vendored and auto-registers on netbsd. Correct operation requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e, which carries two NetBSD-specific fixes found during this work: the \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003ePAD\u003c/code\u003e-argument ABI (without it, concurrent WAL access faults with SIGBUS in the WAL-index shared memory) and a working \u003ccode\u003eabort(3)\u003c/code\u003e (the prior stub left SQLite's crash-recovery \u003ccode\u003ewritecrash\u003c/code\u003e test unable to terminate by signal). As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/82\"\u003e#82\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/82\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/82\u003c/a\u003e), thanks Leonardo Taccari (\u003ca href=\"https://github.com/iamleot\"\u003e\u003ccode\u003e@​iamleot\u003c/code\u003e\u003c/a\u003e) and Thomas Klausner (@\u003cem\u003ewiz\u003c/em\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003efreebsd/386\u003c/code\u003e and \u003ccode\u003efreebsd/arm\u003c/code\u003e support. As with the \u003ccode\u003enetbsd/amd64\u003c/code\u003e target above, these two 32-bit FreeBSD ports are intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: \u003ccode\u003efreebsd/386\u003c/code\u003e previously shipped a stale, effectively untested SQLite 3.41 transpile, and \u003ccode\u003efreebsd/arm\u003c/code\u003e is entirely new, so neither has real-world production mileage yet. Both are now freshly transpiled at SQLite 3.53.2 consistent with every other platform, build cleanly, and pass the full test suite (core, WAL/concurrency, and the \u003ccode\u003evec\u003c/code\u003e package) on the FreeBSD CI builders; they are offered for evaluation only. If you run 32-bit FreeBSD, please exercise these targets with your own workloads and report back — the intent is to promote \u003ccode\u003efreebsd/386\u003c/code\u003e, \u003ccode\u003efreebsd/arm\u003c/code\u003e, and \u003ccode\u003enetbsd/amd64\u003c/code\u003e to fully supported platforms in a future release cycle, once a period of broader real-world testing elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: correct operation on \u003ccode\u003efreebsd/arm\u003c/code\u003e requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e (v1.73.4), which fixes the per-arch \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003eoff_t\u003c/code\u003e encoding for 32-bit FreeBSD; without it the WAL shared-memory mapping faults with SIGBUS under concurrent access, the same class of bug found on the netbsd port. As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/119\"\u003e#119\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/119\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/119\u003c/a\u003e), thanks Olivier Cochard-Labbé (\u003ca href=\"https://github.com/ocochard\"\u003e\u003ccode\u003e@​ocochard\u003c/code\u003e\u003c/a\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd a Go-facing wrapper for \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e. \u003ccode\u003ePageCache\u003c/code\u003e is the factory and \u003ccode\u003eCache\u003c/code\u003e the per-database instance, both idiomatic Go interfaces; \u003ccode\u003ePage\u003c/code\u003e exposes the raw \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e pointers that SQLite reads through the C pcache contract. \u003ccode\u003eRegisterPageCache\u003c/code\u003e and \u003ccode\u003eMustRegisterPageCache\u003c/code\u003e install the module process-globally before the first \u003ccode\u003esql.Open\u003c/code\u003e; subsequent Open calls are gated through a one-shot \u003ccode\u003eXsqlite3_config(SQLITE_CONFIG_PCACHE2)\u003c/code\u003e so a too-late Register returns \u003ccode\u003eErrPageCacheTooLate\u003c/code\u003e rather than silently falling through to the built-in pcache1. The binding owns the \u003ccode\u003esqlite3_pcache_page\u003c/code\u003e stub and re-consults the implementation on every Fetch, reusing the stub only when the returned \u003ccode\u003ePage\u003c/code\u003e value is unchanged, which keeps a bounded/evicting purgeable cache safe by construction.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/126\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/126\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e, the reference page-cache implementation that accompanies the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e wrapper. \u003ccode\u003epcache.New\u003c/code\u003e returns a \u003ccode\u003e*Pool\u003c/code\u003e satisfying the \u003ccode\u003ePageCache\u003c/code\u003e interface; register it once with \u003ccode\u003esqlite.MustRegisterPageCache(pcache.New())\u003c/code\u003e and every connection opened afterwards draws its pages from it. Each \u003ccode\u003ePool.Create\u003c/code\u003e mints a fresh per-database \u003ccode\u003eCache\u003c/code\u003e: a bounded, LRU-evicting page store that honours the \u003ccode\u003ePRAGMA cache_size\u003c/code\u003e soft cap and releases the least-recently-unpinned page when it must make room. Page memory — the \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e buffers SQLite reads through — is allocated with \u003ccode\u003elibc.Xmalloc\u003c/code\u003e/\u003ccode\u003elibc.Xcalloc\u003c/code\u003e and therefore lives off the Go heap, which keeps SQLite's interior pointer arithmetic on the page extras from tripping the race detector's checkptr enforcement. \u003ccode\u003ePool.Stats\u003c/code\u003e reports aggregate lifetime counters (hits, misses, allocs, evictions, rekeys, truncates, caches) across every cache a Pool has created, so hit/miss/eviction behaviour is observable without instrumenting individual caches. Cross-connection page sharing is out of scope for now; each \u003ccode\u003eCreate\u003c/code\u003e returns an independent per-database cache.\u003c/li\u003e\n\u003cli\u003eValidated end-to-end against the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e stress workload (\u003ccode\u003ecache_size=16\u003c/code\u003e, 4000 BLOB rows with DELETE and \u003ccode\u003eincremental_vacuum\u003c/code\u003e, \u003ccode\u003eintegrity_check\u003c/code\u003e clean under \u003ccode\u003e-race\u003c/code\u003e) and benchmarked for the memory-utilization goal tracked in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/204\"\u003e#204\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/204\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/204\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/127\"\u003e#127\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/127\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/127\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eTighten the \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e reference implementation per cznic's !127 review follow-ups. Adds \u003ccode\u003eStats.EasyRefusals\u003c/code\u003e, a per-Pool counter for the cases where \u003ccode\u003eFetchCreateEasy\u003c/code\u003e returns nil at cap; SQLite reacts to a refusal by spilling dirty pages and retrying with \u003ccode\u003eFetchCreateForce\u003c/code\u003e, so the new field is a direct proxy for the I/O pressure the strict Easy contract imposes vs pcache1's recycle-without-spill behavior. \u003ccode\u003eBenchmarkPoolEvictionChurn\u003c/code\u003e was reworked to drive a rotating-residue DELETE (\u003ccode\u003ek % 3 = i % 3\u003c/code\u003e) and re-insert a matching batch each cycle so the spill pressure recurs and \u003ccode\u003eeasy-refusals/op\u003c/code\u003e scales with \u003ccode\u003eb.N\u003c/code\u003e instead of capping at the seed's one-time first-cycle cost; both existing benchmarks now report \u003ccode\u003eeasy-refusals/op\u003c/code\u003e alongside the page-allocs/evictions metrics. \u003ccode\u003eStats.Evictions\u003c/code\u003e documentation was tightened to match the actual behavior (counts LRU eviction, \u003ccode\u003eUnpin(discard=true)\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e releases, and \u003ccode\u003eUnpin(discard=false)\u003c/code\u003e trimming back to target after a \u003ccode\u003eFetchCreateForce\u003c/code\u003e overcommit; bulk frees from \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e collisions, and \u003ccode\u003eDestroy\u003c/code\u003e are not counted). The \u003ccode\u003eTestPoolRoundTripIntegrity\u003c/code\u003e comment claiming the workload exercises \u003ccode\u003exRekey\u003c/code\u003e ~15 times has been corrected; the SQL surface does not reliably emit xRekey here, and that codepath is covered by the unit tests instead.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/130\"\u003e#130\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/130\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/130\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e \u003ccode\u003e-race\u003c/code\u003e-clean under SQLite's \u003ccode\u003ecache=shared\u003c/code\u003e mode. The pool already runs correctly under shared-cache because every callback into a given \u003ccode\u003eCache\u003c/code\u003e is serialised internally by SQLite's \u003ccode\u003esqlite3BtreeEnter\u003c/code\u003e on the \u003ccode\u003eBtShared\u003c/code\u003e mutex; verified empirically with a lock-free in-flight probe (max-in-flight = 1 on the canonical two-connection workload, 4 on a positive control with goroutines hitting the cache directly). However the Go race detector does not recognise SQLite's libc mutex as a happens-before edge and reports false-positive races on \u003ccode\u003eFetch\u003c/code\u003e vs \u003ccode\u003eUnpin\u003c/code\u003e reads/writes of the per-cache state, which surfaces as \u003ccode\u003eDATA RACE\u003c/code\u003e failures for any user who registers the pool and runs their suite under \u003ccode\u003e-race\u003c/code\u003e. A \u003ccode\u003esync.Mutex\u003c/code\u003e on the \u003ccode\u003ecache\u003c/code\u003e type is now taken on every public method (\u003ccode\u003eSetSize\u003c/code\u003e, \u003ccode\u003ePageCount\u003c/code\u003e, \u003ccode\u003eFetch\u003c/code\u003e, \u003ccode\u003eUnpin\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e, \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eDestroy\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e), always. On the common non-shared-cache path the lock is uncontended (one atomic CAS per Lock/Unlock pair, negligible next to the SQLite work it bookends); on the shared-cache path it just rubber-stamps the order SQLite's \u003ccode\u003eBtShared\u003c/code\u003e mutex already established. A new \u003ccode\u003ee2e_test.go\u003c/code\u003e \u003ccode\u003eTestSharedCacheTwoConns_Integrity\u003c/code\u003e drives two \u003ccode\u003esql.Conn\u003c/code\u003e against the same \u003ccode\u003ecache=shared\u003c/code\u003e URI with concurrent writers and asserts \u003ccode\u003ePRAGMA integrity_check = ok\u003c/code\u003e under \u003ccode\u003e-race\u003c/code\u003e; passes cleanly with the lock, would surface the false-positive without it. Design notes live in \u003ccode\u003epcache/sharing.go\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/131\"\u003e#131\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/131\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/131\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd a Go wrapper for \u003ccode\u003esqlite3_db_status\u003c/code\u003e, the per-connection runtime counters (cache hit/miss/write/spill rates, schema and prepared-statement memory, lookaside usage, deferred foreign keys). \u003ccode\u003eDBStatus\u003c/code\u003e is an interface implemented by the driver connection and reached through the \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, mirroring the existing \u003ccode\u003eFileControl\u003c/code\u003e surface; \u003ccode\u003eDBStatusOp\u003c/code\u003e is a distinct typed enum of the \u003ccode\u003eSQLITE_DBSTATUS_*\u003c/code\u003e verbs so a counter from a different op family will not compile in its place. \u003ccode\u003eStatus(op, reset)\u003c/code\u003e returns the \u003ccode\u003e(current, high)\u003c/code\u003e pair and optionally resets the counter. This also lets \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e measure real I/O instead of the \u003ccode\u003eEasyRefusals\u003c/code\u003e proxy: the new \u003ccode\u003eBenchmarkPoolSpillIO\u003c/code\u003e reads the pager-level \u003ccode\u003eSQLITE_DBSTATUS_CACHE_SPILL\u003c/code\u003e/\u003ccode\u003e_CACHE_WRITE\u003c/code\u003e counters, which the pager maintains identically for pcache1 and the pool, making the pcache1-vs-pool comparison cznic raised on the !127 review a genuine apples-to-apples measurement. On the rotating-residue eviction-churn workload at \u003ccode\u003ecache_size=16\u003c/code\u003e the pool spills ~3.5x more than pcache1 (cache-spill/op 31.96 vs 8.96) for ~3% more page writes (cache-write/op 450 vs 436) at identical hit/miss, quantifying the I/O cost of the strict Easy contract that \u003ccode\u003eEasyRefusals\u003c/code\u003e only proxied.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/132\"\u003e#132\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/132\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/132\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_dqs\u003c/code\u003e DSN query parameter that disables SQLite's double-quoted string literal compatibility quirk on a per-connection basis. When \u003ccode\u003e_dqs=0\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e false value) is supplied, the driver calls \u003ccode\u003esqlite3_db_config\u003c/code\u003e with \u003ccode\u003eSQLITE_DBCONFIG_DQS_DDL\u003c/code\u003e and \u003ccode\u003eSQLITE_DBCONFIG_DQS_DML\u003c/code\u003e set to off before any statement is prepared, so a double-quoted identifier that fails to resolve raises a parse error instead of silently falling back to a string literal. Absence of the parameter, or \u003ccode\u003e_dqs=1\u003c/code\u003e, leaves SQLite's default behavior unchanged; existing DSNs continue to work byte-for-byte. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/61\"\u003e#61\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/61\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/61\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/128\"\u003e#128\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/128\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/128\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_error_rc\u003c/code\u003e DSN query parameter for clearer error reporting on open-time failures. When \u003ccode\u003e_error_rc=1\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e true value) is supplied, error strings synthesised from a \u003ccode\u003e(rc, db)\u003c/code\u003e pair only append \u003ccode\u003esqlite3_errmsg(db)\u003c/code\u003e when \u003ccode\u003esqlite3_extended_errcode(db)\u003c/code\u003e is consistent with the operation rc (full match first, primary code \u003ccode\u003e\u0026amp;0xff\u003c/code\u003e as fallback). On mismatch the canonical \u003ccode\u003esqlite3_errstr(rc)\u003c/code\u003e is used alone, so an open-time \u003ccode\u003eSQLITE_CANTOPEN\u003c/code\u003e no longer carries the temporary handle's stale \u0026quot;out of memory\u0026quot; errmsg. Absence of the parameter, or \u003ccode\u003e_error_rc=0\u003c/code\u003e, preserves the legacy \u0026quot;errstr: errmsg\u0026quot; form byte-for-byte; existing callers that parse error strings are unaffected. The driver's \u003ccode\u003e*Error.Code()\u003c/code\u003e returns the same SQLite result code in both modes. Parsed before \u003ccode\u003esqlite3_open_v2\u003c/code\u003e so open-time errors are covered. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/230\"\u003e#230\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/230\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/230\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/129\"\u003e#129\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/129\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/129\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-06 v1.52.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_2.html\"\u003eSQLite 3.53.2\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eBackup.Remaining\u003c/code\u003e and \u003ccode\u003eBackup.PageCount\u003c/code\u003e, thin wrappers around the existing \u003ccode\u003esqlite3_backup_remaining\u003c/code\u003e and \u003ccode\u003esqlite3_backup_pagecount\u003c/code\u003e C symbols. Together they expose the per-\u003ccode\u003eStep\u003c/code\u003e progress counters that the underlying backup object already maintains, enabling progress reporting during online backups without dropping to \u003ccode\u003emodernc.org/sqlite/lib\u003c/code\u003e directly.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/122\"\u003e#122\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/122\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/122\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eDrop the redundant second copy in \u003ccode\u003e(*conn).columnText\u003c/code\u003e, the path that backs every \u003ccode\u003eRows.Scan\u003c/code\u003e into a Go \u003ccode\u003estring\u003c/code\u003e for a TEXT column. The value's bytes are still copied once out of SQLite-owned memory into a fresh Go buffer; that buffer is then reinterpreted as the result string with \u003ccode\u003eunsafe.String\u003c/code\u003e rather than copied a second time by the implicit \u003ccode\u003estring([]byte)\u003c/code\u003e conversion. This removes one allocation per TEXT value per row and roughly halves the bytes allocated on that path; on the new \u003ccode\u003eBenchmarkColumnTextScan\u003c/code\u003e cases it is ~13–20% faster for payloads of 256 B and larger, with no measurable change for very short strings. Purely internal: no API or behavioral change, and the returned string never aliases SQLite's buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/123\"\u003e#123\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/123\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/123\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache each result column's declared type once per result set in \u003ccode\u003enewRows\u003c/code\u003e instead of recomputing it on every row. The TEXT branch of \u003ccode\u003eRows.Next\u003c/code\u003e calls \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e for every TEXT column on every row (independent of any DSN flag), which previously did a \u003ccode\u003elibc.GoString\u003c/code\u003e + \u003ccode\u003estrings.ToUpper\u003c/code\u003e each time; that lookup is now a single index into a cached, pre-uppercased \u003ccode\u003e[]string\u003c/code\u003e, and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e reads the same cache and drops its per-call \u003ccode\u003estrings.ToLower\u003c/code\u003e. The declared type is fixed for the lifetime of a prepared statement, so the C round-trip is paid once per column rather than once per column per row, removing exactly 1 alloc + 8 B per TEXT column per row from the \u003ccode\u003eNext\u003c/code\u003e hot path. The new \u003ccode\u003eBenchmarkTextToTimeScan\u003c/code\u003e cases show ~7% faster on a 1000-row DATETIME SELECT under \u003ccode\u003e_texttotime=1\u003c/code\u003e. Purely internal: \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e return identical values, no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/124\"\u003e#124\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/124\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/124\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache, per result column, the \u003ccode\u003eparseTimeFormats\u003c/code\u003e index that first parsed a TEXT-stored DATE/DATETIME/TIMESTAMP value, and try that format first on later rows instead of re-walking the list from the top. \u003ccode\u003e(*conn).parseTime\u003c/code\u003e previously ran \u003ccode\u003etime.Parse\u003c/code\u003e down the format list on every such row; for the canonical SQLite TEXT datetime format every row paid two failed \u003ccode\u003etime.Parse\u003c/code\u003e attempts — each allocating a \u003ccode\u003e*time.ParseError\u003c/code\u003e — before the match. On a 1000-row DATETIME TEXT SELECT this cuts ~50% of allocs/op and ~57% of B/op and is ~37% faster. The fall-through chain is preserved exactly: the seven formats are mutually exclusive, so the cached hint can never select a different match than the in-order scan, and the parsed \u003ccode\u003edriver.Value\u003c/code\u003e is identical to before. Purely internal: no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/125\"\u003e#125\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/125\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/125\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-28 v1.51.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePool the \u003ccode\u003e[]driver.Value\u003c/code\u003e slice passed to scalar/aggregate UDF callbacks and to vtab \u003ccode\u003eFilter\u003c/code\u003e/\u003ccode\u003eInsert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e callbacks, eliminating the dominant per-row allocation on UDF-heavy queries. Benchmarks on a 1000-row, 3-arg noop scalar UDF show ~40% fewer bytes/op and ~15% fewer allocs/op.\u003c/li\u003e\n\u003cli\u003eDocument the matching \u0026quot;arguments are not valid past return\u0026quot; contract on \u003ccode\u003evtab.Cursor.Filter\u003c/code\u003e and \u003ccode\u003evtab.Updater.Insert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e, consistent with the existing rule for \u003ccode\u003eFunctionImpl.Scalar\u003c/code\u003e / \u003ccode\u003eAggregateFunction.Step\u003c/code\u003e / \u003ccode\u003eWindowInverse\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/226\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/226\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/114\"\u003e#114\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/114\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/114\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eFileControl.FileControlDataVersion\u003c/code\u003e, a wrapper around \u003ccode\u003eSQLITE_FCNTL_DATA_VERSION\u003c/code\u003e for observing pager-cache data-version changes, including those made on the same connection. Useful as a primitive for application-level cache invalidation.\u003c/li\u003e\n\u003cli\u003eExposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, consistent with the existing \u003ccode\u003eFileControlPersistWAL\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/115\"\u003e#115\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/115\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/115\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eFix a regression where in-memory connections (\u003ccode\u003e:memory:\u003c/code\u003e, \u003ccode\u003efile::memory:\u003c/code\u003e, shared-cache memory URIs) were discarded by \u003ccode\u003edatabase/sql\u003c/code\u003e after a context-cancelled query, taking the entire in-memory store with them. The fix for \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/198\"\u003e#198\u003c/a\u003e had added an \u003ccode\u003esqlite3_is_interrupted\u003c/code\u003e check to the connection validator that mistakenly applied to in-memory connections too, re-introducing the bug originally fixed by !74. File-backed connections keep the existing behaviour and are still discarded after an interrupt.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/196\"\u003e#196\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/196\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/196\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/116\"\u003e#116\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/116\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/116\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003eFunctionImpl.VolatileArgs\u003c/code\u003e flag that hands TEXT and BLOB arguments to scalar and aggregate UDF callbacks as zero-copy views (\u003ccode\u003eunsafe.String\u003c/code\u003e/\u003ccode\u003eunsafe.Slice\u003c/code\u003e) over SQLite's own value buffers, eliminating the per-argument \u003ccode\u003elibc.GoString\u003c/code\u003e/\u003ccode\u003emake([]byte)\u003c/code\u003e copy that the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e slice-pooling left as the remaining per-row allocation. On the same 1000-row, 3-arg (INTEGER/TEXT/BLOB) noop scalar UDF this removes a further ~35% of allocs/op and ~11% of bytes/op on top of \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eThe views are valid only for the duration of the callback and must not be retained past return or across rows; a callback that needs to keep a value must copy it. With \u003ccode\u003eVolatileArgs\u003c/code\u003e unset (the default) arguments keep the existing copied, caller-owned semantics, so the flag is fully backward compatible; it has no effect on integer, float, time, or NULL arguments.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/120\"\u003e#120\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/120\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/120\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eExtend the opt-in \u003ccode\u003eVolatileArgs\u003c/code\u003e zero-copy TEXT/BLOB argument access from \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/120\"\u003e#120\u003c/a\u003e to the virtual-table \u003ccode\u003eCursor.Filter\u003c/code\u003e (\u003ccode\u003exFilter\u003c/code\u003e) and \u003ccode\u003eUpdater.Insert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e (\u003ccode\u003exUpdate\u003c/code\u003e) callbacks. A \u003ccode\u003evtab.Module\u003c/code\u003e opts in by implementing the new optional \u003ccode\u003evtab.VolatileArgsOpter\u003c/code\u003e interface (\u003ccode\u003eVolatileArgs() bool\u003c/code\u003e); the flag is read once at module registration and shared by every table created from it. On a vtab call carrying one TEXT and one BLOB argument this removes 2 allocs/op (one \u003ccode\u003elibc.GoString\u003c/code\u003e, one \u003ccode\u003emake([]byte)\u003c/code\u003e) on each of the Filter and Update paths.\u003c/li\u003e\n\u003cli\u003eThe same safety contract as \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/120\"\u003e#120\u003c/a\u003e applies: the views are valid only for the duration of the callback and must not be retained past return or across rows; a callback that needs to keep a value must copy it. Modules that do not implement \u003ccode\u003eVolatileArgsOpter\u003c/code\u003e (the default for all existing modules) are byte-for-byte unchanged, and the flag has no effect on integer, float, time, or NULL arguments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/6b32d1ee965dfe59bf2e50baeb6f451b67d6a71e\"\u003e\u003ccode\u003e6b32d1e\u003c/code\u003e\u003c/a\u003e CHANGELOG.md: document experimental freebsd/386 + freebsd/arm (\u003ca href=\"https://gitlab.com/cznic/sqlite/issues/119\"\u003e#119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/697300ffaa56b03b79e490dc960f218794cb2a75\"\u003e\u003ccode\u003e697300f\u003c/code\u003e\u003c/a\u003e Merge branch 'dbstatus-binding' into 'master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/759639fa15658feabd8218bc766768fc383b3c12\"\u003e\u003ccode\u003e759639f\u003c/code\u003e\u003c/a\u003e sqlite: review fixes for !132 — restore \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/131\"\u003e#131\u003c/a\u003e CHANGELOG link, correct DBStatus...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/40ff0274c43e4f7771456e5c2a06ed669605b797\"\u003e\u003ccode\u003e40ff027\u003c/code\u003e\u003c/a\u003e sqlite: add DBStatus wrapper for sqlite3_db_status + pcache spill-I/O benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/6a28fe7d28a1c7de553ae4d9dc797f59c45f3563\"\u003e\u003ccode\u003e6a28fe7\u003c/code\u003e\u003c/a\u003e HACKING.md: document CHANGELOG versioning + MR integration flow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/adff4b17551c6663f85f2b13400a44887c91a440\"\u003e\u003ccode\u003eadff4b1\u003c/code\u003e\u003c/a\u003e Merge branch 'pcache-shared-cache-draft' into 'master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/14e5790eee01be325551a5ffa20d3c9788bc6135\"\u003e\u003ccode\u003e14e5790\u003c/code\u003e\u003c/a\u003e vendor: regenerate freebsd/arm vec at SQLite 3.53.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/8725c22279f2bbcac7a9c661787bd3f69d66ea6d\"\u003e\u003ccode\u003e8725c22\u003c/code\u003e\u003c/a\u003e Add freebsd/386 + freebsd/arm targets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/73050dce0e8a597fea764c9b1d98689d3387f15a\"\u003e\u003ccode\u003e73050dc\u003c/code\u003e\u003c/a\u003e Merge branch 'pcache-pool-polish' into 'master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/1897fdd636a034eeb5dde210365c0018ebfae09c\"\u003e\u003ccode\u003e1897fdd\u003c/code\u003e\u003c/a\u003e CHANGELOG.md: consolidate untagged v1.53.0/v1.54.0 into one v1.53.0 section\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://gitlab.com/cznic/sqlite/compare/v1.50.1...v1.53.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/skaphos/berth/pull/53","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/skaphos%2Fberth/issues/53","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/53/packages"}},{"old_version":"5.7.4","new_version":"5.9.2","update_type":"minor","path":null,"pr_created_at":"2026-06-20T06:49:05.000Z","version_change":"5.7.4 → 5.9.2","issue":{"uuid":"4705475517","node_id":"PR_kwDOPfH5sc7onYG7","number":9,"state":"open","title":"Bump the go_modules group across 4 directories with 4 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-20T06:49:05.000Z","updated_at":"2026-06-20T06:50:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":4,"packages":[{"name":"go.opentelemetry.io/otel","old_version":"1.39.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.4","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/ydb-platform/ydb-go-sdk/v3","old_version":"3.104.7","new_version":"3.134.2","repository_url":"https://github.com/ydb-platform/ydb-go-sdk"},{"name":"go.opentelemetry.io/otel","old_version":"1.39.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"github.com/go-chi/chi/v5","old_version":"5.2.2","new_version":"5.2.4","repository_url":"https://github.com/go-chi/chi"},{"name":"go.opentelemetry.io/otel","old_version":"1.39.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 3 updates in the /packages/db directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) and [github.com/ydb-platform/ydb-go-sdk/v3](https://github.com/ydb-platform/ydb-go-sdk).\nBumps the go_modules group with 1 update in the /packages/docker-reverse-proxy directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 1 update in the /packages/envd directory: [github.com/go-chi/chi/v5](https://github.com/go-chi/chi).\nBumps the go_modules group with 1 update in the /tests/integration directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.4 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.4...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ydb-platform/ydb-go-sdk/v3` from 3.104.7 to 3.134.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/releases\"\u003egithub.com/ydb-platform/ydb-go-sdk/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.134.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003etable.Session.Execute\u003c/code\u003e ignoring \u003ccode\u003eoptions.WithCommit()\u003c/code\u003e so transactions were not committed when the option was passed\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.134.1...v3.134.2\"\u003ev3.134.1...v3.134.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.134.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChanged multi-partition topic writer (\u003ccode\u003etopicoptions.WithWriteToManyPartitions\u003c/code\u003e) so \u003ccode\u003eWrite\u003c/code\u003e and \u003ccode\u003eFlush\u003c/code\u003e block until internal initialization completes, consistent with single-partition writers\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.134.0...v3.134.1\"\u003ev3.134.0...v3.134.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.134.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003esugar.RemoveRecursive()\u003c/code\u003e for directories containing external data sources or external tables\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003etable.DescribeExternalDataSource()\u003c/code\u003e and \u003ccode\u003etable.DescribeExternalTable()\u003c/code\u003e methods for describing external data sources and external tables\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.133.1...v3.134.0\"\u003ev3.133.1...v3.134.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.133.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eTopicListener.ReadSessionID()\u003c/code\u003e getter\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.133.0...v3.133.1\"\u003ev3.133.0...v3.133.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.133.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eydb.WithIssuesHandler\u003c/code\u003e context option for surfacing YDB \u003ccode\u003eQueryService\u003c/code\u003e issues to \u003ccode\u003edatabase/sql\u003c/code\u003e callers\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.132.0...v3.133.0\"\u003ev3.132.0...v3.133.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.132.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003etopic.Client.CommitOffset()\u003c/code\u003e method for committing a consumer offset without an active read session\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003etopicreader.Reader.ReadSessionID()\u003c/code\u003e method for obtaining the current read session identifier\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.131.0...v3.132.0\"\u003ev3.131.0...v3.132.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.131.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eydb.WithStatsModeBasic\u003c/code\u003e, \u003ccode\u003eydb.WithStatsModeFull\u003c/code\u003e, \u003ccode\u003eydb.WithStatsModeProfile\u003c/code\u003e context options for collecting query statistics via \u003ccode\u003edatabase/sql\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.130.0...v3.131.0\"\u003ev3.130.0...v3.131.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.130.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChanged default for \u003ccode\u003edatabase/sql\u003c/code\u003e driver from \u003ccode\u003eTABLE\u003c/code\u003e service to \u003ccode\u003eQUERY\u003c/code\u003e service\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003e__ydb_partition_key\u003c/code\u003e metadata key to messages for topic writer to store the key used to choose the partition\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.129.0...v3.130.0\"\u003ev3.129.0...v3.130.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.129.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003econfig.WithBuildInfo\u003c/code\u003e option to append child frameworks to \u003ccode\u003ex-ydb-sdk-build-info\u003c/code\u003e header for all API requests\u003c/li\u003e\n\u003cli\u003eAutomatically added (if used) \u003ccode\u003edatabase/sql\u003c/code\u003e framework to \u003ccode\u003ex-ydb-sdk-build-info\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.128.4...v3.129.0\"\u003ev3.128.4...v3.129.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.128.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/blob/master/CHANGELOG.md\"\u003egithub.com/ydb-platform/ydb-go-sdk/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.134.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003etable.Session.Execute\u003c/code\u003e ignoring \u003ccode\u003eoptions.WithCommit()\u003c/code\u003e so transactions were not committed when the option was passed\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.134.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChanged multi-partition topic writer (\u003ccode\u003etopicoptions.WithWriteToManyPartitions\u003c/code\u003e) so \u003ccode\u003eWrite\u003c/code\u003e and \u003ccode\u003eFlush\u003c/code\u003e block until internal initialization completes, consistent with single-partition writers\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.134.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003esugar.RemoveRecursive()\u003c/code\u003e for directories containing external data sources or external tables\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003etable.DescribeExternalDataSource()\u003c/code\u003e and \u003ccode\u003etable.DescribeExternalTable()\u003c/code\u003e methods for describing external data sources and external tables\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.133.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eTopicListener.ReadSessionID()\u003c/code\u003e getter\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.133.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eydb.WithIssuesHandler\u003c/code\u003e context option for surfacing YDB \u003ccode\u003eQueryService\u003c/code\u003e issues to \u003ccode\u003edatabase/sql\u003c/code\u003e callers\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.132.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003etopic.Client.CommitOffset()\u003c/code\u003e method for committing a consumer offset without an active read session\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003etopicreader.Reader.ReadSessionID()\u003c/code\u003e method for obtaining the current read session identifier\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.131.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eydb.WithStatsModeBasic\u003c/code\u003e, \u003ccode\u003eydb.WithStatsModeFull\u003c/code\u003e, \u003ccode\u003eydb.WithStatsModeProfile\u003c/code\u003e context options for collecting query statistics via \u003ccode\u003edatabase/sql\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.130.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChanged default for \u003ccode\u003edatabase/sql\u003c/code\u003e driver from \u003ccode\u003eTABLE\u003c/code\u003e service to \u003ccode\u003eQUERY\u003c/code\u003e service\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003e__ydb_partition_key\u003c/code\u003e metadata key to messages for topic writer to store the key used to choose the partition\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.129.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003econfig.WithBuildInfo\u003c/code\u003e option to append child frameworks to \u003ccode\u003ex-ydb-sdk-build-info\u003c/code\u003e header for all API requests\u003c/li\u003e\n\u003cli\u003eAutomatically added (if used) \u003ccode\u003edatabase/sql\u003c/code\u003e framework to \u003ccode\u003ex-ydb-sdk-build-info\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed panic when topic writer is closed unexpectedly\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed panic and \u003ccode\u003eunsupported type\u003c/code\u003e error when passing a nil pointer to a \u003ccode\u003ejson.Marshaler\u003c/code\u003e-implementing type as a \u003ccode\u003edatabase/sql\u003c/code\u003e query parameter (\u003ccode\u003etoType\u003c/code\u003e now handles \u003ccode\u003ejson.Marshaler\u003c/code\u003e and returns \u003ccode\u003etypes.JSON\u003c/code\u003e, matching the existing \u003ccode\u003etoValue\u003c/code\u003e behaviour)\u003c/li\u003e\n\u003cli\u003eSupported pool of decoders, which implement ResettableReader interface\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDowngraded direct dependency \u003ccode\u003egoogle.golang.org/grpc\u003c/code\u003e to v1.78.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ego_query_mode\u003c/code\u003e / \u003ccode\u003equery_mode\u003c/code\u003e DSN parameters for table-backed modes (\u003ccode\u003edata\u003c/code\u003e, \u003ccode\u003escan\u003c/code\u003e, \u003ccode\u003escheme\u003c/code\u003e, \u003ccode\u003escripting\u003c/code\u003e) to select the TABLE processor so the default query mode applies\u003c/li\u003e\n\u003cli\u003eFixed a bug where the topic writer was not able to resend messages when the partition was split\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.128.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew options for topicwriter:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eWithProducerIDPrefix\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithPartitioningKeyHasher\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithPartitionChooserStrategy\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/6f1e6e33415ae1eb510998c3822cb729e66edf60\"\u003e\u003ccode\u003e6f1e6e3\u003c/code\u003e\u003c/a\u003e Release v3.134.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/25dcff4c41153f1f9413512ba12999b40bf7154d\"\u003e\u003ccode\u003e25dcff4\u003c/code\u003e\u003c/a\u003e Fix table.Session.Execute ignoring options.WithCommit() (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2091\"\u003e#2091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/66fc52ecf59f2468d428a9e5005d9fb926dad043\"\u003e\u003ccode\u003e66fc52e\u003c/code\u003e\u003c/a\u003e Release v3.134.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/042c9243cd61cecd8a53b092c1da0983bd7ec9e3\"\u003e\u003ccode\u003e042c924\u003c/code\u003e\u003c/a\u003e LOGBROKER-10368 Add wait init to multiwriter (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2088\"\u003e#2088\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/c1ddb52f3fc7808eb95614dcaf8a460b5d0e8ec1\"\u003e\u003ccode\u003ec1ddb52\u003c/code\u003e\u003c/a\u003e Remove unused code in database/sql connector (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2085\"\u003e#2085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/d9d2943eb28cde8ac0e038045870bf08e2c20de8\"\u003e\u003ccode\u003ed9d2943\u003c/code\u003e\u003c/a\u003e LOGBROKER-10206 Add tests (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2075\"\u003e#2075\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/f3aeeb14d9aa27769be738a396b89407368e4256\"\u003e\u003ccode\u003ef3aeeb1\u003c/code\u003e\u003c/a\u003e Modernize Go codebase: adopt modern idioms and upgrade CI tooling (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2082\"\u003e#2082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/f2452c1545d78452231445f03264e89c18e9ea9f\"\u003e\u003ccode\u003ef2452c1\u003c/code\u003e\u003c/a\u003e Release v3.134.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/de3907a808e40ccdf1c94e50d28e11c45da6e94b\"\u003e\u003ccode\u003ede3907a\u003c/code\u003e\u003c/a\u003e Describe external data source / external table (\u003ca href=\"https://redirect.github.com/ydb-platform/ydb-go-sdk/issues/2079\"\u003e#2079\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/commit/589dacfe18eee68b6ca650b48d6e84d7460f9d49\"\u003e\u003ccode\u003e589dacf\u003c/code\u003e\u003c/a\u003e Release v3.133.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ydb-platform/ydb-go-sdk/compare/v3.104.7...v3.134.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-chi/chi/v5` from 5.2.2 to 5.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-chi/chi/releases\"\u003egithub.com/go-chi/chi/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd pathvalue example to README and implement PathValue handler. by \u003ca href=\"https://github.com/catatsuy\"\u003e\u003ccode\u003e@​catatsuy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/985\"\u003ego-chi/chi#985\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow multiple whitespace between method \u0026amp; pattern by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1013\"\u003ego-chi/chi#1013\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential nil dereference by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1008\"\u003ego-chi/chi#1008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(mux): support http.Request.Pattern in Go 1.23 by \u003ca href=\"https://github.com/Gusted\"\u003e\u003ccode\u003e@​Gusted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/986\"\u003ego-chi/chi#986\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix/608 - Fix flaky Throttle middleware test by synchronizing token usage by \u003ca href=\"https://github.com/OtavioBernardes\"\u003e\u003ccode\u003e@​OtavioBernardes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1016\"\u003ego-chi/chi#1016\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOptimize throttle middleware by avoiding unnecessary timer creation by \u003ca href=\"https://github.com/vasayxtx\"\u003e\u003ccode\u003e@​vasayxtx\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1011\"\u003ego-chi/chi#1011\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSimplify wildcard replacement in route patterns by \u003ca href=\"https://github.com/srpvpn\"\u003e\u003ccode\u003e@​srpvpn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1012\"\u003ego-chi/chi#1012\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace methodTypString func with reverseMethodMap by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1018\"\u003ego-chi/chi#1018\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1008\"\u003ego-chi/chi#1008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Gusted\"\u003e\u003ccode\u003e@​Gusted\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/986\"\u003ego-chi/chi#986\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/OtavioBernardes\"\u003e\u003ccode\u003e@​OtavioBernardes\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1016\"\u003ego-chi/chi#1016\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/srpvpn\"\u003e\u003ccode\u003e@​srpvpn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1012\"\u003ego-chi/chi#1012\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-chi/chi/compare/v5.2.2...v5.2.3\"\u003ehttps://github.com/go-chi/chi/compare/v5.2.2...v5.2.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/6eb35881c0e438ffb663ddbad3a61babaa5e5d8a\"\u003e\u003ccode\u003e6eb3588\u003c/code\u003e\u003c/a\u003e middleware: harden RedirectSlashes handler (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1044\"\u003e#1044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/de0d16e6d23092aeef0b6e78f146799369160651\"\u003e\u003ccode\u003ede0d16e\u003c/code\u003e\u003c/a\u003e Update comment about min Go version (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1023\"\u003e#1023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/9fb4a15daa6d4ccd5e7286c1227d58872f89f4cb\"\u003e\u003ccode\u003e9fb4a15\u003c/code\u003e\u003c/a\u003e update reverseMethodMap in RegisterMethod (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1022\"\u003e#1022\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/51c977c2da872d16d05531d5bc49ccd027599ce2\"\u003e\u003ccode\u003e51c977c\u003c/code\u003e\u003c/a\u003e Refactor to use atomic type (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1019\"\u003e#1019\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/563ab118626b47810852303c3a60c2106a6bc23c\"\u003e\u003ccode\u003e563ab11\u003c/code\u003e\u003c/a\u003e Refactor graceful shutdown example (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/994\"\u003e#994\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/a52c582b532cd261dbedc4c811d809d6e024c1ff\"\u003e\u003ccode\u003ea52c582\u003c/code\u003e\u003c/a\u003e Bump minimum Go and use new features (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1017\"\u003e#1017\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/9b9fb55def404397748a9fc7e044efe9db1d618e\"\u003e\u003ccode\u003e9b9fb55\u003c/code\u003e\u003c/a\u003e Replace methodTypString func with reverseMethodMap (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1018\"\u003e#1018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/0265fcd786c95e79fe50423a35fa2770ef36683a\"\u003e\u003ccode\u003e0265fcd\u003c/code\u003e\u003c/a\u003e refactor: iterative wildcard collapsing and add test for consecutive wildcard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/cf537d4016bf258bd9bdbe0dccbfdeeac364423f\"\u003e\u003ccode\u003ecf537d4\u003c/code\u003e\u003c/a\u003e Optimize throttle middleware by avoiding unnecessary timer creation (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1011\"\u003e#1011\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/9040e95a07b47df59d96f3cb0e4bac107a931d46\"\u003e\u003ccode\u003e9040e95\u003c/code\u003e\u003c/a\u003e fix/608 - Fix flaky Throttle middleware test by synchronizing token usage (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-chi/chi/compare/v5.2.2...v5.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/GlacierEQ/infra/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nUpdate core Go deps across db, reverse-proxy, envd, and integration packages, and bump the module Go version to 1.25 for compatibility and security. Highlights: `pgx` security fix, OpenTelemetry 1.43, `ydb-go-sdk` bug fixes, and `chi` router updates.\n\n- **Dependencies**\n  - `go.opentelemetry.io/otel` → 1.43.0 across packages (perf improvements; stricter OTLP HTTP TLS checks).\n  - `github.com/jackc/pgx/v5` → 5.9.2 (fixes SQL injection in simple protocol with dollar-quoted strings; protocol/auth updates).\n  - `github.com/ydb-platform/ydb-go-sdk/v3` → 3.134.2 (fixes `options.WithCommit()` not committing; new topic/read session APIs).\n  - `github.com/go-chi/chi/v5` → 5.2.4 (adds `http.Request.Pattern` support; middleware hardening).\n  - `google.golang.org/grpc` → 1.81.1 and `google.golang.org/protobuf` → 1.36.11; assorted `golang.org/x/*` bumps.\n\n- **Migration**\n  - Build with Go 1.25+ (`go` directive updated in multiple modules).\n  - For OTLP HTTP exporters, do not combine an insecure endpoint with TLS settings; it now returns an error.\n\n\u003csup\u003eWritten for commit 6fa526aeeed2d4068f3eea72f1389894e296c6d0. Summary will update on new commits.\u003c/sup\u003e\n\n\u003ca href=\"https://cubic.dev/pr/GlacierEQ/infra/pull/9?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"Review in cubic\" src=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/GlacierEQ/infra/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Finfra/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"}},{"old_version":"5.7.4","new_version":"5.9.2","update_type":"minor","path":"/vcp-core","pr_created_at":"2026-06-18T06:33:23.000Z","version_change":"5.7.4 → 5.9.2","issue":{"uuid":"4689820989","node_id":"PR_kwDOS99KT87nzr_G","number":9,"state":"open","title":"Bump github.com/jackc/pgx/v5 from 5.7.4 to 5.9.2 in /vcp-core","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-18T06:33:23.000Z","updated_at":"2026-06-30T05:32:29.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.7.4","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"}],"path":"/vcp-core","ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.7.4 to 5.9.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.4...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.7.4\u0026new-version=5.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/CSC-Security-sandbox/vcp-fresh-breakability/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/CSC-Security-sandbox/vcp-fresh-breakability/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CSC-Security-sandbox%2Fvcp-fresh-breakability/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"}},{"old_version":"5.9.2","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-17T12:45:51.000Z","version_change":"5.9.2 → 5.10.0","issue":{"uuid":"4683351082","node_id":"PR_kwDOR1S7DM7nehch","number":50,"state":"closed","title":"chore(deps): bump the go-minor-and-patch group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-24T12:44:13.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-17T12:45:51.000Z","updated_at":"2026-06-24T12:44:15.000Z","time_to_close":604702,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-and-patch","update_count":15,"packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/mark3labs/mcp-go","old_version":"0.54.1","new_version":"0.55.0","repository_url":"https://github.com/mark3labs/mcp-go"},{"name":"github.com/minio/minio-go/v7","old_version":"7.1.0","new_version":"7.2.0","repository_url":"https://github.com/minio/minio-go"},{"name":"github.com/nwaples/rardecode/v2","old_version":"2.2.3","new_version":"2.2.5","repository_url":"https://github.com/nwaples/rardecode"},{"name":"github.com/redis/go-redis/v9","old_version":"9.19.0","new_version":"9.20.1","repository_url":"https://github.com/redis/go-redis"},{"name":"go.opentelemetry.io/otel","old_version":"1.43.0","new_version":"1.44.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","old_version":"1.43.0","new_version":"1.44.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"golang.org/x/crypto","old_version":"0.52.0","new_version":"0.53.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/image","old_version":"0.41.0","new_version":"0.42.0","repository_url":"https://github.com/golang/image"},{"name":"golang.org/x/net","old_version":"0.55.0","new_version":"0.56.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/time","old_version":"0.11.0","new_version":"0.15.0","repository_url":"https://github.com/golang/time"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-and-patch group with 11 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |\n| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.54.1` | `0.55.0` |\n| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.1.0` | `7.2.0` |\n| [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode) | `2.2.3` | `2.2.5` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.19.0` | `9.20.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |\n| [golang.org/x/image](https://github.com/golang/image) | `0.41.0` | `0.42.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.55.0` | `0.56.0` |\n| [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.15.0` |\n\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mark3labs/mcp-go` from 0.54.1 to 0.55.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/43c2ca0fedc74f7f21e400558faf757aee25b956\"\u003e\u003ccode\u003e43c2ca0\u003c/code\u003e\u003c/a\u003e oauth: return error instead of (nil, nil) from getServerMetadata (\u003ca href=\"https://redirect.github.com/mark3labs/mcp-go/issues/903\"\u003e#903\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mark3labs/mcp-go/issues/904\"\u003e#904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/3b66aa7b754000017158de364078e792fb900edc\"\u003e\u003ccode\u003e3b66aa7\u003c/code\u003e\u003c/a\u003e mcptest: add SetSamplingHandler and SetElicitationHandler (\u003ca href=\"https://redirect.github.com/mark3labs/mcp-go/issues/902\"\u003e#902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/42bc0b214d0039d6a4e6b3abd37d8e6dd0bf2cd1\"\u003e\u003ccode\u003e42bc0b2\u003c/code\u003e\u003c/a\u003e feat(otel): WithServerLogging — OTEL slog bridge for server structured logs (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/d972f3fe17a0526e751a8bb1146b40480938ad6d\"\u003e\u003ccode\u003ed972f3f\u003c/code\u003e\u003c/a\u003e docs(prompts): add review-pr kit prompt for Go PRs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/d5c0727c06ac2f12295aa9baf44b31ad477af20b\"\u003e\u003ccode\u003ed5c0727\u003c/code\u003e\u003c/a\u003e feat(server): WithLogger consolidates structured logging onto *slog.Logger (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/3f1c760f6d6ad6019d3e8c8257a4110e1115de0f\"\u003e\u003ccode\u003e3f1c760\u003c/code\u003e\u003c/a\u003e feat(tracing): add MetaPropagator for W3C trace context via MCP _meta (SEP-41...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mark3labs/mcp-go/commit/2cacbe77980807b89e315f0fb246c71f51c643ee\"\u003e\u003ccode\u003e2cacbe7\u003c/code\u003e\u003c/a\u003e fix: enforce tool/prompt filters at call time, not just list time (\u003ca href=\"https://redirect.github.com/mark3labs/mcp-go/issues/898\"\u003e#898\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mark3labs/mcp-go/compare/v0.54.1...v0.55.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/minio/minio-go/v7` from 7.1.0 to 7.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/minio/minio-go/releases\"\u003egithub.com/minio/minio-go/v7's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse go tool for ci-lint check by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/minio/minio-go/pull/2229\"\u003eminio/minio-go#2229\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename github.com/go-ini/ini to gopkg.in/ini.v1 by \u003ca href=\"https://github.com/ramondeklein\"\u003e\u003ccode\u003e@​ramondeklein\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/minio/minio-go/pull/2232\"\u003eminio/minio-go#2232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd RDMA / NVIDIA GPU Direct Storage support by \u003ca href=\"https://github.com/harshavardhana\"\u003e\u003ccode\u003e@​harshavardhana\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/minio/minio-go/pull/2233\"\u003eminio/minio-go#2233\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/minio/minio-go/compare/v7.1.0...v7.2.0\"\u003ehttps://github.com/minio/minio-go/compare/v7.1.0...v7.2.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/33792ec24ba19828dc0191f2a7ed5ebc3197d407\"\u003e\u003ccode\u003e33792ec\u003c/code\u003e\u003c/a\u003e Add RDMA / NVIDIA GPU Direct Storage support (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2233\"\u003e#2233\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/6bb13f7c70cd7415f45bfb389b565781040eed2e\"\u003e\u003ccode\u003e6bb13f7\u003c/code\u003e\u003c/a\u003e Rename github.com/go-ini/ini to gopkg.in/ini.v1 (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2232\"\u003e#2232\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/minio/minio-go/commit/d6341dcaf5f8647e6ec8898b35f5e1cd679ec0ad\"\u003e\u003ccode\u003ed6341dc\u003c/code\u003e\u003c/a\u003e Use go tool for ci-lint check (\u003ca href=\"https://redirect.github.com/minio/minio-go/issues/2229\"\u003e#2229\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/minio/minio-go/compare/v7.1.0...v7.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/nwaples/rardecode/v2` from 2.2.3 to 2.2.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/58597b773a5386bb482066a34baf76b41fe56d76\"\u003e\u003ccode\u003e58597b7\u003c/code\u003e\u003c/a\u003e Update pkg.go.dev badge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/b4f6ff7f4bcfefbc10fbfb05c67774e77b887845\"\u003e\u003ccode\u003eb4f6ff7\u003c/code\u003e\u003c/a\u003e fix write error being ignored\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/e4be54a74da92b44b1847957a5c179612f5215c7\"\u003e\u003ccode\u003ee4be54a\u003c/code\u003e\u003c/a\u003e use rar5 file header constants\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/97a50138ff098ddcc29fde1aebd1d359cca93823\"\u003e\u003ccode\u003e97a5013\u003c/code\u003e\u003c/a\u003e use switch statements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/19f7d8d90c5db89d9fac661bcef46380dd313423\"\u003e\u003ccode\u003e19f7d8d\u003c/code\u003e\u003c/a\u003e use binary library functions for readbuf\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/e7fc7443c98d85c67bd0e72f0519ba2added8a1a\"\u003e\u003ccode\u003ee7fc744\u003c/code\u003e\u003c/a\u003e run gofix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nwaples/rardecode/commit/db67bb3c4d1c2b797059cb59846607ea0aa9744d\"\u003e\u003ccode\u003edb67bb3\u003c/code\u003e\u003c/a\u003e simplify copyBytes()\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nwaples/rardecode/compare/v2.2.3...v2.2.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.19.0 to 9.20.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e9.20.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 push peeking\u003c/strong\u003e: \u003ccode\u003ePeekPushNotificationName\u003c/code\u003e no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector params\u003c/strong\u003e: Vector data is now always sent via \u003ccode\u003ePARAMS\u003c/code\u003e with auto-generated param names (\u003ccode\u003e__vector_param_N\u003c/code\u003e, with collision avoidance) when \u003ccode\u003eVectorParamName\u003c/code\u003e is omitted, since Redis no longer accepts inline vector blobs; the \u003ccode\u003eFTHybridOptions.Params\u003c/code\u003e map is no longer mutated, so the same options struct can be reused across calls (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3844\"\u003e#3844\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e forward compatibility\u003c/strong\u003e: Unknown shard- and node-level attributes in the \u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e reply are now skipped via \u003ccode\u003eDiscardNext()\u003c/code\u003e instead of erroring, so clients keep working when the server introduces new fields (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3843\"\u003e#3843\u003c/a\u003e) by \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub double reconnect\u003c/strong\u003e: \u003ccode\u003ePubSub.releaseConn\u003c/code\u003e no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3833\"\u003e#3833\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.20.0\u003c/h2\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md\"\u003egithub.com/redis/go-redis/v9's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.20.1 (2026-06-11)\u003c/h1\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 push peeking\u003c/strong\u003e: \u003ccode\u003ePeekPushNotificationName\u003c/code\u003e no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector params\u003c/strong\u003e: Vector data is now always sent via \u003ccode\u003ePARAMS\u003c/code\u003e with auto-generated param names (\u003ccode\u003e__vector_param_N\u003c/code\u003e, with collision avoidance) when \u003ccode\u003eVectorParamName\u003c/code\u003e is omitted, since Redis no longer accepts inline vector blobs; the \u003ccode\u003eFTHybridOptions.Params\u003c/code\u003e map is no longer mutated, so the same options struct can be reused across calls (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3844\"\u003e#3844\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e forward compatibility\u003c/strong\u003e: Unknown shard- and node-level attributes in the \u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e reply are now skipped via \u003ccode\u003eDiscardNext()\u003c/code\u003e instead of erroring, so clients keep working when the server introduces new fields (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3843\"\u003e#3843\u003c/a\u003e) by \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub double reconnect\u003c/strong\u003e: \u003ccode\u003ePubSub.releaseConn\u003c/code\u003e no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3833\"\u003e#3833\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003e9.20.0 (2026-05-28)\u003c/h1\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8-rc1\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a13416bf1c0556075b843dd0a9cb6db3b3cf2789\"\u003e\u003ccode\u003ea13416b\u003c/code\u003e\u003c/a\u003e chore(release): 9.20.1 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3847\"\u003e#3847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/10dc44f424d58b9c2b4df29e529ca92a2f8fa986\"\u003e\u003ccode\u003e10dc44f\u003c/code\u003e\u003c/a\u003e fix(push): fix peeking when push name is truncated (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3842\"\u003e#3842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/e1a2d68b27e70ca8f3ff5eec61d0dd2b74554670\"\u003e\u003ccode\u003ee1a2d68\u003c/code\u003e\u003c/a\u003e fix(ft.hybrid): Always generate vector param names if they are not provided b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a4b234f4a4f2551d1179181bbc136db132bf5912\"\u003e\u003ccode\u003ea4b234f\u003c/code\u003e\u003c/a\u003e chore(deps): bump codecov/codecov-action from 6 to 7 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3845\"\u003e#3845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/974e717dbf3008497e54aec34636e34452e6872b\"\u003e\u003ccode\u003e974e717\u003c/code\u003e\u003c/a\u003e fix(command): ignore unknown fields in CLUSTER SHARDS response (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3843\"\u003e#3843\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/65d6abde0d812234d26763930b5e84ff05963c96\"\u003e\u003ccode\u003e65d6abd\u003c/code\u003e\u003c/a\u003e fix(pubsub): prevent double reconnect in releaseConn (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3833\"\u003e#3833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/7d05dd3b7ce12a7b8c7923f73da0fede3bfa7c03\"\u003e\u003ccode\u003e7d05dd3\u003c/code\u003e\u003c/a\u003e chore(release): v9.20.0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3832\"\u003e#3832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/97568827124c58f1338d78b9535edc0eb9435453\"\u003e\u003ccode\u003e9756882\u003c/code\u003e\u003c/a\u003e fix(test): make waitForSentinelClusterStable robust to disconnected r… (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3830\"\u003e#3830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/875ce21e4862a7913edb5308b16869141ce5e833\"\u003e\u003ccode\u003e875ce21\u003c/code\u003e\u003c/a\u003e fix(sentinel): do not close sentinel when replica list is empty (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3795\"\u003e#3795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/8a027f21ba2686511e1a6a159f0c6888f11d48e7\"\u003e\u003ccode\u003e8a027f2\u003c/code\u003e\u003c/a\u003e chore(ci): add govulncheck workflow (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3779\"\u003e#3779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.19.0...v9.20.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/trace's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.o...\n\n_Description has been truncated_","html_url":"https://github.com/CollinJAycock/OnScreen/pull/50","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CollinJAycock%2FOnScreen/issues/50","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/50/packages"}},{"old_version":"5.7.2","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-15T08:15:23.000Z","version_change":"5.7.2 → 5.10.0","issue":{"uuid":"4663260625","node_id":"PR_kwDON0P-vs7mcLza","number":258,"state":"closed","title":"chore(deps): bump github.com/jackc/pgx/v5 from 5.7.2 to 5.10.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-28T03:46:08.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-15T08:15:23.000Z","updated_at":"2026-06-28T03:46:10.000Z","time_to_close":1107045,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.7.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.7.2 to 5.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.7.2\u0026new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/VersusControl/versus-incident/pull/258","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/VersusControl%2Fversus-incident/issues/258","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/258/packages"}},{"old_version":"5.9.0","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-15T06:11:28.000Z","version_change":"5.9.0 → 5.10.0","issue":{"uuid":"4662514998","node_id":"PR_kwDOR7gtkc7mZvcI","number":37,"state":"closed","title":"chore(deps)(deps): bump the go-minor-patch group across 1 directory with 12 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-18T18:31:01.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-15T06:11:28.000Z","updated_at":"2026-06-18T18:31:03.000Z","time_to_close":303573,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)(deps): bump","group_name":"go-minor-patch","update_count":12,"packages":[{"name":"github.com/caarlos0/env/v11","old_version":"11.2.2","new_version":"11.4.1","repository_url":"https://github.com/caarlos0/env"},{"name":"github.com/coreos/go-oidc/v3","old_version":"3.11.0","new_version":"3.18.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/go-chi/chi/v5","old_version":"5.1.0","new_version":"5.3.0","repository_url":"https://github.com/go-chi/chi"},{"name":"github.com/go-chi/cors","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/go-chi/cors"},{"name":"github.com/golang-jwt/jwt/v5","old_version":"5.2.2","new_version":"5.3.1","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.0","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/pressly/goose/v3","old_version":"3.22.1","new_version":"3.27.1","repository_url":"https://github.com/pressly/goose"},{"name":"github.com/prometheus/client_golang","old_version":"1.20.5","new_version":"1.23.2","repository_url":"https://github.com/prometheus/client_golang"},{"name":"github.com/rs/zerolog","old_version":"1.33.0","new_version":"1.35.1","repository_url":"https://github.com/rs/zerolog"},{"name":"golang.org/x/crypto","old_version":"0.52.0","new_version":"0.53.0","repository_url":"https://github.com/golang/crypto"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 10 updates in the /backend directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/caarlos0/env/v11](https://github.com/caarlos0/env) | `11.2.2` | `11.4.1` |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.11.0` | `3.18.0` |\n| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.1.0` | `5.3.0` |\n| [github.com/go-chi/cors](https://github.com/go-chi/cors) | `1.2.1` | `1.2.2` |\n| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.2` | `5.3.1` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.0` | `5.10.0` |\n| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.22.1` | `3.27.1` |\n| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.23.2` |\n| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.33.0` | `1.35.1` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |\n\n\nUpdates `github.com/caarlos0/env/v11` from 11.2.2 to 11.4.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/caarlos0/env/releases\"\u003egithub.com/caarlos0/env/v11's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev11.4.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e6daeb06ac7e3c9532a7eaa5768d45917393b7480: fix: use Key instead of OwnKey in rawEnvVars to properly reference existing defaults in complex structs (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/412\"\u003e#412\u003c/a\u003e) (\u003ca href=\"https://github.com/AndrewChubatiuk\"\u003e\u003ccode\u003e@​AndrewChubatiuk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1ff55e6c9733833ce75d62b345916a407dbe4158: docs: adaptive starchart (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/416\"\u003e#416\u003c/a\u003e) (\u003ca href=\"https://github.com/alexandear\"\u003e\u003ccode\u003e@​alexandear\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther work\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecf4a9682420b025e44b4773fd7ee0be48bb68b2f: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/411\"\u003e#411\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e33faf6f333c2c3dacef2991825f8e03960a2c0cb: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/417\"\u003e#417\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e0cb635b62488f4d310809a82a8832cedc9aa94eb: ci(deps): bump the actions group with 6 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/415\"\u003e#415\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ea72d89a8930fc800372a6a338a1acf33e5cc3a56: ci: update release config (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cem\u003eReleased with \u003ca href=\"https://goreleaser.com/pro\"\u003eGoReleaser Pro\u003c/a\u003e!\u003c/em\u003e\u003c/p\u003e\n\u003ch2\u003ev11.4.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eNew Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e2be9960e75cc5f053dcb89c64e43de19765fd154: feat: option to set defaults for zero values only (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/325\"\u003e#325\u003c/a\u003e) (\u003ca href=\"https://github.com/dnovikoff\"\u003e\u003ccode\u003e@​dnovikoff\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ed3505f14213c309f8ca3b0b1e468284749456dde: fix: all new lint issues, update golangci-lint (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eaaa45113e5eb50e2a243959041452bbab40ae3cc: fix: lint issues (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8917d78b4247be8a3f555ccee03305c7763471e4: docs: clarify example a bit (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther work\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e7b10cf56e20fe41042b7a7148555990b64b85f95: ci(deps): bump github/codeql-action in the actions group (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/400\"\u003e#400\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ec98ad844e1e479526ef6b4069e0b0f1ced5c953d: ci(deps): bump github/codeql-action in the actions group (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/410\"\u003e#410\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e2ca9b08cafe0bc271636c15fa34d156733631123: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/393\"\u003e#393\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ecd5c220dbceb1d1353263a5d6fe3f6816aa1217f: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/396\"\u003e#396\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e4d25a4659f428119ce5eaf3ea579176b9161c6e0: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/402\"\u003e#402\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ec660cc91db76b02de72e8ab7e9ad348edef3f891: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/403\"\u003e#403\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e3a3ea05453bd16685c807ba089b20a82033a02f1: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/405\"\u003e#405\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ed28373e3a047e93ad21676ea9878e5dd1ca157f7: ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/408\"\u003e#408\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e7b5005693b54a0014e4d3a2ee6192c7bce336af7: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/397\"\u003e#397\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e6b2db30d1977183eb8a9732c01ff4e6788565a6e: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/399\"\u003e#399\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ef33230e8e7e0377c9cdb65d43940db1666061766: ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/404\"\u003e#404\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e2dc7aec137983c972c29779e951011ddb496fc8b: ci(sec): add codeql, govulncheck, grype (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e82412ce6900082095e9e4b66f5024c0e67ff3fb8: ci: build perms (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e02495c42107d77c9365aef6a031b7089f734af3b: ci: build perms (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee5b3c2c879e43e458e060e2a61fb525e161b7715: ci: lint workflow perms (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e6690dfb3d314535320f3a30365c52f6fb40c8992: ci: pin github actions versions (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e548a7a66c9d5504d8f9c0488ee47a05ae453c7e2: ci: update dependabot (\u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/a72d89a8930fc800372a6a338a1acf33e5cc3a56\"\u003e\u003ccode\u003ea72d89a\u003c/code\u003e\u003c/a\u003e ci: update release config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/6daeb06ac7e3c9532a7eaa5768d45917393b7480\"\u003e\u003ccode\u003e6daeb06\u003c/code\u003e\u003c/a\u003e fix: use Key instead of OwnKey in rawEnvVars to properly reference existing d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/33faf6f333c2c3dacef2991825f8e03960a2c0cb\"\u003e\u003ccode\u003e33faf6f\u003c/code\u003e\u003c/a\u003e ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/417\"\u003e#417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/1ff55e6c9733833ce75d62b345916a407dbe4158\"\u003e\u003ccode\u003e1ff55e6\u003c/code\u003e\u003c/a\u003e docs: adaptive starchart (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/416\"\u003e#416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/0cb635b62488f4d310809a82a8832cedc9aa94eb\"\u003e\u003ccode\u003e0cb635b\u003c/code\u003e\u003c/a\u003e ci(deps): bump the actions group with 6 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/415\"\u003e#415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/cf4a9682420b025e44b4773fd7ee0be48bb68b2f\"\u003e\u003ccode\u003ecf4a968\u003c/code\u003e\u003c/a\u003e ci(deps): bump the actions group with 3 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/411\"\u003e#411\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/aaa45113e5eb50e2a243959041452bbab40ae3cc\"\u003e\u003ccode\u003eaaa4511\u003c/code\u003e\u003c/a\u003e fix: lint issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/4fe3f702002c48f73b892f12d128c215aa7731ee\"\u003e\u003ccode\u003e4fe3f70\u003c/code\u003e\u003c/a\u003e chore: dependabot update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/c98ad844e1e479526ef6b4069e0b0f1ced5c953d\"\u003e\u003ccode\u003ec98ad84\u003c/code\u003e\u003c/a\u003e ci(deps): bump github/codeql-action in the actions group (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/410\"\u003e#410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/caarlos0/env/commit/d28373e3a047e93ad21676ea9878e5dd1ca157f7\"\u003e\u003ccode\u003ed28373e\u003c/code\u003e\u003c/a\u003e ci(deps): bump the actions group with 2 updates (\u003ca href=\"https://redirect.github.com/caarlos0/env/issues/408\"\u003e#408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/caarlos0/env/compare/v11.2.2...v11.4.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.11.0 to 3.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e.github: configure dependabot by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/477\"\u003ecoreos/go-oidc#477\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e.github: update go versions in CI by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/480\"\u003ecoreos/go-oidc#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/478\"\u003ecoreos/go-oidc#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/479\"\u003ecoreos/go-oidc#479\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidc: improve error message for mismatched issuer URLs by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/469\"\u003ecoreos/go-oidc#469\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.16.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: Remove unused time injection from RemoteKeySet by \u003ca href=\"https://github.com/ponimas\"\u003e\u003ccode\u003e@​ponimas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/466\"\u003ecoreos/go-oidc#466\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net dependency by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/467\"\u003ecoreos/go-oidc#467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/467\"\u003ecoreos/go-oidc#467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.15.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidc: verify the ID Token's signature before processing claims by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/464\"\u003ecoreos/go-oidc#464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.14.1...v3.15.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.14.1...v3.15.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.14.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidctest: fix import by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/457\"\u003ecoreos/go-oidc#457\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.14.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidc/oidctest: add new package by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/400\"\u003ecoreos/go-oidc#400\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/da6b3bfca8af72414ee0e6e8746585ff5d206003\"\u003e\u003ccode\u003eda6b3bf\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7f80694215d5eb5b28f851f35845439b1e1e9e5d\"\u003e\u003ccode\u003e7f80694\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7271de57587bb756318f9819796ba846b1ba875a\"\u003e\u003ccode\u003e7271de5\u003c/code\u003e\u003c/a\u003e .github: update go versions in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/3ccf20fdc4afab7c64881a108d6f4c17a4ecc24d\"\u003e\u003ccode\u003e3ccf20f\u003c/code\u003e\u003c/a\u003e .github: configure dependabot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/35b8e031bcac7fed73b96b09d42e6e233a6e6562\"\u003e\u003ccode\u003e35b8e03\u003c/code\u003e\u003c/a\u003e oidc: improve error message for mismatched issuer URLs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/e9584733f8bb6c4683d1e98b4fb22eee121f7dff\"\u003e\u003ccode\u003ee958473\u003c/code\u003e\u003c/a\u003e bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/69b167061fdb7270ef965f150ea6aabe11678728\"\u003e\u003ccode\u003e69b1670\u003c/code\u003e\u003c/a\u003e refactor: Remove unused time injection from RemoteKeySet\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/8d1e57e7e7fb4db0bac61cc200d43846ba071977\"\u003e\u003ccode\u003e8d1e57e\u003c/code\u003e\u003c/a\u003e oidc: verify the ID Token's signature before processing claims\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/a7c457eacb849c163a496b29274242474a8f44ab\"\u003e\u003ccode\u003ea7c457e\u003c/code\u003e\u003c/a\u003e oidctest: fix import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/aba1ce200a9dd76b14bbb455d4e5aea55e97cbb3\"\u003e\u003ccode\u003eaba1ce2\u003c/code\u003e\u003c/a\u003e oidc/oidctest: add new package\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.11.0...v3.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-chi/chi/v5` from 5.1.0 to 5.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-chi/chi/releases\"\u003egithub.com/go-chi/chi/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse strings.ReplaceAll where applicable by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1046\"\u003ego-chi/chi#1046\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePropagate inline middlewares across mounted subrouters by \u003ca href=\"https://github.com/LukasJenicek\"\u003e\u003ccode\u003e@​LukasJenicek\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1049\"\u003ego-chi/chi#1049\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd go 1.26 to ci by \u003ca href=\"https://github.com/pkieltyka\"\u003e\u003ccode\u003e@​pkieltyka\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1052\"\u003ego-chi/chi#1052\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove last uses of io/ioutil by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1054\"\u003ego-chi/chi#1054\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSimplify chi.walk with slices.Concat by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1053\"\u003ego-chi/chi#1053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eApply the stringscutprefix modernizer by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1051\"\u003ego-chi/chi#1051\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump minimum Go to 1.23, always use request.Pattern by \u003ca href=\"https://github.com/JRaspass\"\u003e\u003ccode\u003e@​JRaspass\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1048\"\u003ego-chi/chi#1048\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emiddleware: fix httpFancyWriter.ReadFrom double-counting bytes with Tee by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1085\"\u003ego-chi/chi#1085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix typo in Route doc comment by \u003ca href=\"https://github.com/gouwazi\"\u003e\u003ccode\u003e@​gouwazi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1073\"\u003ego-chi/chi#1073\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: set Request.Pattern from RoutePattern() by \u003ca href=\"https://github.com/leno23\"\u003e\u003ccode\u003e@​leno23\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1097\"\u003ego-chi/chi#1097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: middleware.ClientIP, a replacement for middleware.RealIP by \u003ca href=\"https://github.com/VojtechVitek\"\u003e\u003ccode\u003e@​VojtechVitek\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/967\"\u003ego-chi/chi#967\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/LukasJenicek\"\u003e\u003ccode\u003e@​LukasJenicek\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1049\"\u003ego-chi/chi#1049\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1085\"\u003ego-chi/chi#1085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gouwazi\"\u003e\u003ccode\u003e@​gouwazi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1073\"\u003ego-chi/chi#1073\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leno23\"\u003e\u003ccode\u003e@​leno23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/chi/pull/1097\"\u003ego-chi/chi#1097\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSECURITY: middleware.ClientIP, a replacement for middleware.RealIP\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/VojtechVitek\"\u003e\u003ccode\u003e@​VojtechVitek\u003c/code\u003e\u003c/a\u003e submitted PR \u003ca href=\"https://redirect.github.com/go-chi/chi/issues/967\"\u003e#967\u003c/a\u003e, which introduces middleware.ClientIP — a replacement for middleware.RealIP that closes the three open spoofing advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/security/advisories/GHSA-9g5q-2w5x-hmxf\"\u003eGHSA-9g5q-2w5x-hmxf\u003c/a\u003e — IP spoofing via XFF in \u003ccode\u003eRemoteAddr\u003c/code\u003e resolution (convto)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp\"\u003eGHSA-rjr7-jggh-pgcp\u003c/a\u003e — RealIP allows IP spoofing via unvalidated XFF (rezmoss)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/security/advisories/GHSA-3fxj-6jh8-hvhx\"\u003eGHSA-3fxj-6jh8-hvhx\u003c/a\u003e — IP spoofing in \u003ccode\u003emiddleware.RealIP\u003c/code\u003e (Saku0512, Critical / 9.3)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIt also addresses issues outlined at:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/708\"\u003ego-chi/chi#708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://adam-p.ca/blog/2022/03/x-forwarded-for/\"\u003ehttps://adam-p.ca/blog/2022/03/x-forwarded-for/\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/711\"\u003ego-chi/chi#711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/453\"\u003ego-chi/chi#453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/go-chi/chi/pull/908\"\u003ego-chi/chi#908\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ccode\u003emiddleware.RealIP\u003c/code\u003e is deprecated in this PR with pointers to the new API.\u003c/p\u003e\n\u003cp\u003eThe deprecation only adds a \u003ccode\u003e// Deprecated:\u003c/code\u003e doc comment; the function keeps working for backward compatibility.\u003c/p\u003e\n\u003ch3\u003eWhy a new middleware (not \u0026quot;fix RealIP in place\u0026quot;)\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003eRealIP\u003c/code\u003e has two unfixable design choices: it mutates \u003ccode\u003er.RemoteAddr\u003c/code\u003e, and it tries to be a one-size-fits-all default by walking a hard-coded list of headers any client can supply. Per \u003ca href=\"https://adam-p.ca/blog/2022/03/x-forwarded-for/\"\u003eadam-p's \u0026quot;The perils of the 'real' client IP\u0026quot;\u003c/a\u003e (which calls chi out by name on this), there is no safe default — the user must pick their trust source explicitly.\u003c/p\u003e\n\u003ch3\u003eThe new API\u003c/h3\u003e\n\u003cp\u003eFour middlewares, two accessors. Pick exactly one middleware based on your\ninfrastructure, read the result with one of the two accessors:\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003e// One of the four. There is no safe default — pick exactly one.\r\nfunc ClientIPFromHeader(trustedHeader string) func(http.Handler) http.Handler\r\nfunc ClientIPFromXFF(trustedIPPrefixes ...string) func(http.Handler) http.Handler\r\nfunc ClientIPFromXFFTrustedProxies(numTrustedProxies int) func(http.Handler) http.Handler\r\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt; \n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/3b171578ca44dfd75ca3c5cbddc7b44c600a7b49\"\u003e\u003ccode\u003e3b17157\u003c/code\u003e\u003c/a\u003e feat: middleware.ClientIP, a replacement for middleware.RealIP (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/967\"\u003e#967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/818fdcfc4786168651768377ba647cf9dd5b3953\"\u003e\u003ccode\u003e818fdcf\u003c/code\u003e\u003c/a\u003e fix: set Request.Pattern from RoutePattern() (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1097\"\u003e#1097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/f975af0cb10cbefaccf0422385420fe62722d648\"\u003e\u003ccode\u003ef975af0\u003c/code\u003e\u003c/a\u003e Fix typo in Route doc comment (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1073\"\u003e#1073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/4ef87eaf2cfb27d3126d48194e1a84806acc1aed\"\u003e\u003ccode\u003e4ef87ea\u003c/code\u003e\u003c/a\u003e middleware: fix httpFancyWriter.ReadFrom double-counting bytes with Tee (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1085\"\u003e#1085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/a54874f0e2f12647a19e82ee70dfa8185014100c\"\u003e\u003ccode\u003ea54874f\u003c/code\u003e\u003c/a\u003e Bump minimum Go to 1.23, always use request.Pattern (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1048\"\u003e#1048\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/3328d4d3ab8a08547fa419ed657017355e6d3c4d\"\u003e\u003ccode\u003e3328d4d\u003c/code\u003e\u003c/a\u003e Apply the stringscutprefix modernizer (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1051\"\u003e#1051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/be60b2ec5755a9072cdf27af3ba3034e84781d12\"\u003e\u003ccode\u003ebe60b2e\u003c/code\u003e\u003c/a\u003e Simplify chi.walk with slices.Concat (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1053\"\u003e#1053\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/a36a925a6a195943ec104100d7d18757543e745f\"\u003e\u003ccode\u003ea36a925\u003c/code\u003e\u003c/a\u003e Remove last uses of io/ioutil (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1054\"\u003e#1054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/7d93ee3e86b4d477c20d809c9b1ce9a281dfd706\"\u003e\u003ccode\u003e7d93ee3\u003c/code\u003e\u003c/a\u003e add go 1.26 to ci (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1052\"\u003e#1052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/chi/commit/903cff2596eac0f72538ac46d696058351f1c3fb\"\u003e\u003ccode\u003e903cff2\u003c/code\u003e\u003c/a\u003e Propagate inline middlewares across mounted subrouters (\u003ca href=\"https://redirect.github.com/go-chi/chi/issues/1049\"\u003e#1049\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-chi/chi/compare/v5.1.0...v5.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-chi/cors` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-chi/cors/releases\"\u003egithub.com/go-chi/cors's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate README with install by \u003ca href=\"https://github.com/Uyutaka\"\u003e\u003ccode\u003e@​Uyutaka\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/22\"\u003ego-chi/cors#22\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix broken credits link by \u003ca href=\"https://github.com/lordidiot\"\u003e\u003ccode\u003e@​lordidiot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/25\"\u003ego-chi/cors#25\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix test_default error message \u003ca href=\"https://redirect.github.com/go-chi/cors/issues/28\"\u003e#28\u003c/a\u003e by \u003ca href=\"https://github.com/ablankz\"\u003e\u003ccode\u003e@​ablankz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/29\"\u003ego-chi/cors#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate Go version in CI by \u003ca href=\"https://github.com/VojtechVitek\"\u003e\u003ccode\u003e@​VojtechVitek\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/32\"\u003ego-chi/cors#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Origin header check by \u003ca href=\"https://github.com/c2h5oh\"\u003e\u003ccode\u003e@​c2h5oh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/38\"\u003ego-chi/cors#38\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Uyutaka\"\u003e\u003ccode\u003e@​Uyutaka\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/22\"\u003ego-chi/cors#22\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lordidiot\"\u003e\u003ccode\u003e@​lordidiot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/25\"\u003ego-chi/cors#25\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ablankz\"\u003e\u003ccode\u003e@​ablankz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/29\"\u003ego-chi/cors#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/VojtechVitek\"\u003e\u003ccode\u003e@​VojtechVitek\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/32\"\u003ego-chi/cors#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/c2h5oh\"\u003e\u003ccode\u003e@​c2h5oh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-chi/cors/pull/38\"\u003ego-chi/cors#38\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-chi/cors/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/go-chi/cors/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/3a5381283113550282a3dcfba669a48ba4691d84\"\u003e\u003ccode\u003e3a53812\u003c/code\u003e\u003c/a\u003e Fix Origin header check (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/f8fbaeea0479cfa8a56d3e4e208d9664097a79a8\"\u003e\u003ccode\u003ef8fbaee\u003c/code\u003e\u003c/a\u003e Update Go version in CI (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/32\"\u003e#32\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/b41f76786054f5698f1fee349753c8e1bb7042f5\"\u003e\u003ccode\u003eb41f767\u003c/code\u003e\u003c/a\u003e fix test_default error message \u003ca href=\"https://redirect.github.com/go-chi/cors/issues/28\"\u003e#28\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/29\"\u003e#29\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/76ca79794e02cd16a20fc57320d4930cacf591a2\"\u003e\u003ccode\u003e76ca797\u003c/code\u003e\u003c/a\u003e Fix broken link (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/25\"\u003e#25\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-chi/cors/commit/9aca6170f98f10a194574513b925dfa26664d520\"\u003e\u003ccode\u003e9aca617\u003c/code\u003e\u003c/a\u003e Update README with install (\u003ca href=\"https://redirect.github.com/go-chi/cors/issues/22\"\u003e#22\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-chi/cors/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.3.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🔐 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd spellcheck Github action to catch common spelling mistakes by \u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/458\"\u003egolang-jwt/jwt#458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithNotBeforeRequired\u003c/code\u003e parser option and add test coverage by \u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/456\"\u003egolang-jwt/jwt#456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate godoc example func to properly refer to \u003ccode\u003eNewWithClaims()\u003c/code\u003e by \u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/459\"\u003egolang-jwt/jwt#459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate github workflows by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/462\"\u003egolang-jwt/jwt#462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional test for CustomClaims that validates unmarshalling behaviour by \u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/457\"\u003egolang-jwt/jwt#457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix early file close in jwt cli by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/472\"\u003egolang-jwt/jwt#472\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd TPM signature reference by \u003ca href=\"https://github.com/salrashid123\"\u003e\u003ccode\u003e@​salrashid123\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/473\"\u003egolang-jwt/jwt#473\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove misleading ParserOptions documentation in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/484\"\u003egolang-jwt/jwt#484\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSave signature to Token struct after successful signing by \u003ca href=\"https://github.com/EgorSheff\"\u003e\u003ccode\u003e@​EgorSheff\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/417\"\u003egolang-jwt/jwt#417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet token.Signature in \u003ccode\u003eParseUnverified\u003c/code\u003e by \u003ca href=\"https://github.com/slickwilli\"\u003e\u003ccode\u003e@​slickwilli\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/414\"\u003egolang-jwt/jwt#414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e👒 Dependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump crate-ci/typos from 1.34.0 to 1.35.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/461\"\u003egolang-jwt/jwt#461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.35.4 to 1.36.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/470\"\u003egolang-jwt/jwt#470\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github/codeql-action from 3 to 4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/478\"\u003egolang-jwt/jwt#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.36.2 to 1.39.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/480\"\u003egolang-jwt/jwt#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 8 to 9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/481\"\u003egolang-jwt/jwt#481\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/setup-go from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/469\"\u003egolang-jwt/jwt#469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.39.0 to 1.40.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/488\"\u003egolang-jwt/jwt#488\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/487\"\u003egolang-jwt/jwt#487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.40.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/490\"\u003egolang-jwt/jwt#490\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump crate-ci/typos from 1.41.0 to 1.42.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/492\"\u003egolang-jwt/jwt#492\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/equalsgibson\"\u003e\u003ccode\u003e@​equalsgibson\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/458\"\u003egolang-jwt/jwt#458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/salrashid123\"\u003e\u003ccode\u003e@​salrashid123\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/473\"\u003egolang-jwt/jwt#473\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/EgorSheff\"\u003e\u003ccode\u003e@​EgorSheff\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/417\"\u003egolang-jwt/jwt#417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slickwilli\"\u003e\u003ccode\u003e@​slickwilli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/414\"\u003egolang-jwt/jwt#414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.3.0\u003c/h2\u003e\n\u003cp\u003eThis release is almost identical to to \u003ccode\u003ev5.2.3\u003c/code\u003e but now correctly indicates Go 1.21 as minimum requirement.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCreate CODEOWNERS by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/449\"\u003egolang-jwt/jwt#449\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump Go version to indicate correct minimum requirement by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/452\"\u003egolang-jwt/jwt#452\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.3...v5.3.0\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.2.3...v5.3.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump GitHub workflows and Go versions by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/438\"\u003egolang-jwt/jwt#438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImplementing validation of multiple audiences by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/433\"\u003egolang-jwt/jwt#433\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 7 to 8 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/440\"\u003egolang-jwt/jwt#440\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7ceae619e739dc8a7bf577214aa8ebf26668e9db\"\u003e\u003ccode\u003e7ceae61\u003c/code\u003e\u003c/a\u003e Add release.yml for changelog configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/dce8e4dddcc9dc812cdc0b9d2037512d0e4b3eb5\"\u003e\u003ccode\u003edce8e4d\u003c/code\u003e\u003c/a\u003e Set token.Signature in \u003ccode\u003eParseUnverified\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/414\"\u003e#414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/8889e208aa5c3736e5f7a856107ee70c046b803e\"\u003e\u003ccode\u003e8889e20\u003c/code\u003e\u003c/a\u003e Save signature to Token struct after successful signing (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/417\"\u003e#417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/d237f8204b397bc008b5b07c4e081beb4ec2a7b1\"\u003e\u003ccode\u003ed237f82\u003c/code\u003e\u003c/a\u003e ci: update github-actions schedule interval to monthly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/d8dce95a406fc435aa3d11c5073f2f31a9449116\"\u003e\u003ccode\u003ed8dce95\u003c/code\u003e\u003c/a\u003e Bump crate-ci/typos from 1.41.0 to 1.42.1 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/492\"\u003e#492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/e93180329eab078116176ff7dc4352760bc5f290\"\u003e\u003ccode\u003ee931803\u003c/code\u003e\u003c/a\u003e Bump crate-ci/typos from 1.40.0 to 1.41.0 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/e6a0afa839d74787501369217245b52bfc75f30d\"\u003e\u003ccode\u003ee6a0afa\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/487\"\u003e#487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/9f85c9ec9f10fb6919d773cb8df07029639ec76e\"\u003e\u003ccode\u003e9f85c9e\u003c/code\u003e\u003c/a\u003e Bump crate-ci/typos from 1.39.0 to 1.40.0 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/488\"\u003e#488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/60a8669e0221aed55a6abfd9b5cd20472f0c6ebd\"\u003e\u003ccode\u003e60a8669\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/469\"\u003e#469\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/76f582896da76978896d59ced995d7967c33c434\"\u003e\u003ccode\u003e76f5828\u003c/code\u003e\u003c/a\u003e Remove misleading ParserOptions documentation (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/484\"\u003e#484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.2...v5.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.0 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.0...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/pressly/goose/v3` from 3.22.1 to 3.27.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pressly/goose/releases\"\u003egithub.com/pressly/goose/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pressly/goose/compare/v3.27.0...v3.27.1\"\u003ehttps://github.com/pressly/goose/compare/v3.27.0...v3.27.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePreliminary Spanner dialect support\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/966\"\u003e#966\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMinimum Go version is now 1.25\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003eSQL migration templates no longer include \u003ccode\u003eStatementBegin\u003c/code\u003e and \u003ccode\u003eStatementEnd\u003c/code\u003e annotations. These are only needed for complex statements containing semicolons (e.g., stored procedures). See \u003ca href=\"https://pressly.github.io/goose/documentation/annotations/#complex-statements\"\u003edocs\u003c/a\u003e for details.\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded formatting for YDB table names to include folder (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1007\"\u003e#1007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix tests for StarRocks 3.5 (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1024\"\u003e#1024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI improvements (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1000\"\u003e#1000\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/pressly/goose/issues/1005\"\u003e#1005\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/pressly/goose/issues/1008\"\u003e#1008\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pressly/goose/compare/v3.26.0...v3.27.0\"\u003ehttps://github.com/pressly/goose/compare/v3.26.0...v3.27.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.26.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003e*slog.Logger\u003c/code\u003e support to goose provider via option \u003ccode\u003eWithSlog\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/989\"\u003e#989\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd convenience \u003ccode\u003eWithTableName\u003c/code\u003e provider option (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/985\"\u003e#985\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMinor bug fixes and dependency upgrades\u003c/li\u003e\n\u003cli\u003eAdd general purpose \u003ccode\u003eLocker\u003c/code\u003e interface to support DB locking with a table-based Postgres\nimplementation via \u003ccode\u003elock.NewPostgresTableLocker\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/993\"\u003e#993\u003c/a\u003e for more details)\n\u003cul\u003e\n\u003cli\u003eUnlike \u003ccode\u003eSessionLocker\u003c/code\u003e, this uses the \u003ccode\u003e*sql.DB\u003c/code\u003e connection pool\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithLocker\u003c/code\u003e option to goose provider\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/emmanuel-ferdman\"\u003e\u003ccode\u003e@​emmanuel-ferdman\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pressly/goose/pull/983\"\u003epressly/goose#983\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jamesleeht\"\u003e\u003ccode\u003e@​jamesleeht\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pressly/goose/pull/982\"\u003epressly/goose#982\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pressly/goose/compare/v3.25.0...v3.26.0\"\u003ehttps://github.com/pressly/goose/compare/v3.25.0...v3.26.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.25.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade go deps (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/976\"\u003e#976\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove references/tests for vertica and add deprecation warnings (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/978\"\u003e#978\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pressly/goose/blob/main/CHANGELOG.md\"\u003egithub.com/pressly/goose/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[v3.27.1] - 2026-04-24\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum Go version to 1.25.7\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.27.0] - 2026-02-22\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreliminary Spanner dialect support (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/966\"\u003e#966\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMinimum Go version is now 1.25\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003eSQL migration templates no longer include \u003ccode\u003eStatementBegin\u003c/code\u003e and \u003ccode\u003eStatementEnd\u003c/code\u003e annotations. These\nare only needed for complex statements containing semicolons (e.g., stored procedures). See\n\u003ca href=\"https://pressly.github.io/goose/documentation/annotations/#complex-statements\"\u003edocs\u003c/a\u003e for details.\u003c/li\u003e\n\u003cli\u003eVarious dependency upgrades\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.26.0] - 2025-10-03\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003e*slog.Logger\u003c/code\u003e support to goose provider via option \u003ccode\u003eWithSlog\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/989\"\u003e#989\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd convenience \u003ccode\u003eWithTableName\u003c/code\u003e provider option (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/985\"\u003e#985\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMinor bug fixes and dependency upgrades\u003c/li\u003e\n\u003cli\u003eAdd general purpose \u003ccode\u003eLocker\u003c/code\u003e interface to support DB locking with a table-based Postgres\nimplementation via \u003ccode\u003elock.NewPostgresTableLocker\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/993\"\u003e#993\u003c/a\u003e for more details)\n\u003cul\u003e\n\u003cli\u003eUnlike \u003ccode\u003eSessionLocker\u003c/code\u003e, this uses the \u003ccode\u003e*sql.DB\u003c/code\u003e connection pool\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithLocker\u003c/code\u003e option to goose provider\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.25.0] - 2025-08-24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade go deps (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/976\"\u003e#976\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove references/tests for vertica and add deprecation warnings (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/978\"\u003e#978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Aurora DSQL as a new database dialect to goose \u003ccode\u003eProvider\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/971\"\u003e#971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd DDL isolation support for Aurora DSQL compatibility (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/970\"\u003e#970\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate Apply to respect no versioning option (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/950\"\u003e#950\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExpose dialect \u003ccode\u003eQuerier\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/939\"\u003e#939\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.24.3]\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eGOOSE_TABLE\u003c/code\u003e environment variable -- lower priority than \u003ccode\u003e-table\u003c/code\u003e flag, but higher than the\ndefault table name. (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/932\"\u003e#932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[v3.24.2]\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eTableExists\u003c/code\u003e table existence check for the mysql dialect (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/895\"\u003e#895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpgrade \u003cstrong\u003eminimum Go version to 1.23\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/e3235f7041e1e14453633daeef467165d09d9449\"\u003e\u003ccode\u003ee3235f7\u003c/code\u003e\u003c/a\u003e release: v3.27.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/883e2f7e0e70fe9fd5427afd4961d3752ed551c1\"\u003e\u003ccode\u003e883e2f7\u003c/code\u003e\u003c/a\u003e build(deps): bump Go and dependency versions (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1067\"\u003e#1067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/2e2fe5ce0c21ee2a4595f651f913ff6775a6ead1\"\u003e\u003ccode\u003e2e2fe5c\u003c/code\u003e\u003c/a\u003e build(deps): bump the gomod group with 3 updates (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1048\"\u003e#1048\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/21176ca42730c42fce388fde57944181bf77066d\"\u003e\u003ccode\u003e21176ca\u003c/code\u003e\u003c/a\u003e build(deps): bump modernc.org/sqlite from 1.46.1 to 1.47.0 in the gomod group...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/e7bd535b62f22be7e1f3fd6f5b7430f9ea2ae87a\"\u003e\u003ccode\u003ee7bd535\u003c/code\u003e\u003c/a\u003e build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1042\"\u003e#1042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/f9c7cb4f9e7d9d036c11cde6482a1c7a844da9f6\"\u003e\u003ccode\u003ef9c7cb4\u003c/code\u003e\u003c/a\u003e build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /internal/t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/b6220db4c1346bb6d1205d01266f4604a03fb5c3\"\u003e\u003ccode\u003eb6220db\u003c/code\u003e\u003c/a\u003e build(deps): bump the gomod group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1041\"\u003e#1041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/65e320f7b293f385ce42ef3509f89df9b9533e02\"\u003e\u003ccode\u003e65e320f\u003c/code\u003e\u003c/a\u003e docs: fix README escaping marker in ENVSUB example (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1037\"\u003e#1037\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/18f6ef715e7429c0ad9e67333c1131923353f6b7\"\u003e\u003ccode\u003e18f6ef7\u003c/code\u003e\u003c/a\u003e build(deps): bump goreleaser/goreleaser-action from 6 to 7 (\u003ca href=\"https://redirect.github.com/pressly/goose/issues/1036\"\u003e#1036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pressly/goose/commit/de28e0480a2a75ea050c152fe9be7126d6f696a5\"\u003e\u003ccode\u003ede28e04\u003c/code\u003e\u003c/a\u003e docs: update v3.27.0 release notes with Go 1.25 minimum and dep upgrades\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pressly/goose/compare/v3.22.1...v3.27.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_golang/releases\"\u003egithub.com/prometheus/client_golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.23.2 - 2025-09-05\u003c/h2\u003e\n\u003cp\u003eThis release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e[release-1.23] Upgrade to prometheus/common@v0.66.1 by \u003ca href=\"https://github.com/aknuds1\"\u003e\u003ccode\u003e@​aknuds1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1869\"\u003eprometheus/client_golang#1869\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release-1.23] Cut v1.23.2 by \u003ca href=\"https://github.com/aknuds1\"\u003e\u003ccode\u003e@​aknuds1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1870\"\u003eprometheus/client_golang#1870\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2\"\u003ehttps://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.23.1 - 2025-09-04\u003c/h2\u003e\n\u003cp\u003eThis release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e[release-1.23] Upgrade to prometheus/common v0.66 by \u003ca href=\"https://github.com/aknuds1\"\u003e\u003ccode\u003e@​aknuds1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1866\"\u003eprometheus/client_golang#1866\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release-1.23] Cut v1.23.1 by \u003ca href=\"https://github.com/aknuds1\"\u003e\u003ccode\u003e@​aknuds1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1867\"\u003eprometheus/client_golang#1867\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1\"\u003ehttps://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.23.0 - 2025-07-30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1812\"\u003e#1812\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1766\"\u003e#1766\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add exemplars for native histograms \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1686\"\u003e#1686\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] exp/api: Bubble up status code from writeResponse \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1823\"\u003e#1823\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1833\"\u003e#1833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api: client prompt return on context cancellation \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1729\"\u003e#1729\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md\"\u003egithub.com/prometheus/client_golang's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.23.2 / 2025-09-05\u003c/h2\u003e\n\u003cp\u003eThis release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).\nThere are no functional changes.\u003c/p\u003e\n\u003ch2\u003e1.23.1 / 2025-09-04\u003c/h2\u003e\n\u003cp\u003eThis release is made to be compatible with a backwards incompatible API change\nin prometheus/common v0.66.0. There are no functional changes.\u003c/p\u003e\n\u003ch2\u003e1.23.0 / 2025-07-30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1812\"\u003e#1812\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1766\"\u003e#1766\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add exemplars for native histograms \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1686\"\u003e#1686\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] exp/api: Bubble up status code from writeResponse \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1823\"\u003e#1823\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1833\"\u003e#1833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api: client prompt return on context cancellation \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1729\"\u003e#1729\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.22.0 / 2025-04-07\u003c/h2\u003e\n\u003cp\u003e:warning: This release contains potential breaking change if you use experimental \u003ccode\u003ezstd\u003c/code\u003e support introduce in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1496\"\u003e#1496\u003c/a\u003e :warning:\u003c/p\u003e\n\u003cp\u003eExperimental support for \u003ccode\u003ezstd\u003c/code\u003e on scrape was added, controlled by the request \u003ccode\u003eAccept-Encoding\u003c/code\u003e header.\nIt was enabled by default since version 1.20, but now you need to add a blank import to enable it.\nThe decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon,\n\u003ca href=\"https://redirect.github.com/golang/go/issues/62513\"\u003egolang/go#62513\u003c/a\u003e however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.\u003c/p\u003e\n\u003cp\u003ee.g.:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eimport (\n  _ \u0026quot;github.com/prometheus/client_golang/prometheus/promhttp/zstd\u0026quot;\n)\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003e[FEATURE] prometheus: Add new CollectorFunc utility \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1724\"\u003e#1724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1738\"\u003e#1738\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api: \u003ccode\u003eWithLookbackDelta\u003c/code\u003e and \u003ccode\u003eWithStats\u003c/code\u003e options have been added to API client. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1743\"\u003e#1743\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] :warning: promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1765\"\u003e#1765\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.21.1 / 2025-03-04\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[BUGFIX] prometheus: Revert of \u003ccode\u003eInc\u003c/code\u003e, \u003ccode\u003eAdd\u003c/code\u003e and \u003ccode\u003eObserve\u003c/code\u003e cumulative metric CAS optimizations (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1661\"\u003e#1661\u003c/a\u003e), causing regressions on low contention cases.\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.21.0 / 2025-02-17\u003c/h2\u003e\n\u003cp\u003e:warning: This release contains potential breaking change if you upgrade \u003ccode\u003egithub.com/prometheus/common\u003c/code\u003e to 0.62+ together with client_golang. :warning:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/8179a560819f2c64ef6ade70e6ae4c73aecaca3c\"\u003e\u003ccode\u003e8179a56\u003c/code\u003e\u003c/a\u003e Cut v1.23.2 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1870\"\u003e#1870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/4142b5908bb6c8f5e412b72de5ea4b927d8c219d\"\u003e\u003ccode\u003e4142b59\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1869\"\u003e#1869\u003c/a\u003e from prometheus/arve/upgrade-common\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/4ff40f0d918efc0f59701d13622913805c2425b4\"\u003e\u003ccode\u003e4ff40f0\u003c/code\u003e\u003c/a\u003e Cut v1.23.1 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1867\"\u003e#1867\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/989b0298944e64f88a54ac9c70cd8c8121f10bc9\"\u003e\u003ccode\u003e989b029\u003c/code\u003e\u003c/a\u003e Upgrade to prometheus/common v0.66 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1866\"\u003e#1866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/e4b2208dd8cb6d1425f00250db842ec3c1e8749e\"\u003e\u003ccode\u003ee4b2208\u003c/code\u003e\u003c/a\u003e Cut v1.23.0 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1848\"\u003e#1848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/d9492afd3a6f2e9782a7fc10363281bfd5b743bb\"\u003e\u003ccode\u003ed9492af\u003c/code\u003e\u003c/a\u003e cut v1.23.0-rc.1 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1842\"\u003e#1842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/aeae8a0b4f54a8fa720d19b88638a2d048596f82\"\u003e\u003ccode\u003eaeae8a0\u003c/code\u003e\u003c/a\u003e Cut v1.23.0-rc.0 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1837\"\u003e#1837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/b157309b723f0b8588ea604bb78dbbba196803f2\"\u003e\u003ccode\u003eb157309\u003c/code\u003e\u003c/a\u003e Update common Prometheus files (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1832\"\u003e#1832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/a704e287f467b79744c30af996b7d710d4c6900d\"\u003e\u003ccode\u003ea704e28\u003c/code\u003e\u003c/a\u003e build(deps): bump the github-actions group with 3 updates (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1826\"\u003e#1826\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/c7743110ad2c599de3d8c23682d978a12f9f36d1\"\u003e\u003ccode\u003ec774311\u003c/code\u003e\u003c/a\u003e Fix errNotImplemented reference (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1835\"\u003e#1835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.20.5...v1.23.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/rs/zerolog` from 1.33.0 to 1.35.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/116c8060e034e8d46855354d22db2acbc8df9e1e\"\u003e\u003ccode\u003e116c806\u003c/code\u003e\u003c/a\u003e event: restore Err() logging when ErrorStackMarshaler returns nil (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/13966551e7cc9f174723bddde692f0f0f9a833aa\"\u003e\u003ccode\u003e1396655\u003c/code\u003e\u003c/a\u003e Bump CI Go matrix minimum from 1.21 to 1.23\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/4b65a2f6f63437b9db07d57733d34d381b8f0696\"\u003e\u003ccode\u003e4b65a2f\u003c/code\u003e\u003c/a\u003e Bump actions/cache from 4 to 5 (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/b83579670fae2aef5d260f1350975e4c0b16864c\"\u003e\u003ccode\u003eb835796\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/742\"\u003e#742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/134caf82aab8ea832731c5b4e5967d970abbc538\"\u003e\u003ccode\u003e134caf8\u003c/code\u003e\u003c/a\u003e Added sanitization of journald keys (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/751\"\u003e#751\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/e133b6a5173130c6ce2349645111829ba80d589e\"\u003e\u003ccode\u003ee133b6a\u003c/code\u003e\u003c/a\u003e Added variadic StrsV, ObjectsV, and StringersV (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/752\"\u003e#752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/82017d8fff8d7739ba4daf9b1cf096d501ba7732\"\u003e\u003ccode\u003e82017d8\u003c/code\u003e\u003c/a\u003e Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/753\"\u003e#753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/2f5b8a91be2cea93c2a6792d4ad00f5a06967dae\"\u003e\u003ccode\u003e2f5b8a9\u003c/code\u003e\u003c/a\u003e fix: UpdateContext skips Nop and zero-value loggers (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/754\"\u003e#754\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rs/zerolog/commit/d64c9a7138d98305e963fd437246d2ca0f0c4833\"\u003e\u003ccode\u003ed64c9a7\u003c/code\u003e\u003c/a\u003e Add slog.Handler implementation for zerolog (\u003ca href=\"https://redirect.github.com/rs/zerolog/issues/755\"\u003e#7...\n\n_Description has been truncated_","html_url":"https://github.com/artyomsv/marauder/pull/37","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/artyomsv%2Fmarauder/issues/37","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/37/packages"}},{"old_version":"5.9.0","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-13T10:22:32.000Z","version_change":"5.9.0 → 5.10.0","issue":{"uuid":"4655187269","node_id":"PR_kwDOSlZEDc7mDbaQ","number":12,"state":"open","title":"chore(deps): bump the go-deps group across 1 directory with 11 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-13T10:22:32.000Z","updated_at":"2026-06-13T10:22:33.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-deps","update_count":11,"packages":[{"name":"connectrpc.com/connect","old_version":"1.19.1","new_version":"1.20.0","repository_url":"https://github.com/connectrpc/connect-go"},{"name":"github.com/jackc/pgx/v5","old_version":"5.9.0","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/redis/go-redis/v9","old_version":"9.18.0","new_version":"9.20.1","repository_url":"https://github.com/redis/go-redis"},{"name":"go.opentelemetry.io/otel","old_version":"1.43.0","new_version":"1.44.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","old_version":"1.43.0","new_version":"1.44.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.uber.org/zap","old_version":"1.27.1","new_version":"1.28.0","repository_url":"https://github.com/uber-go/zap"},{"name":"golang.org/x/sync","old_version":"0.20.0","new_version":"0.21.0","repository_url":"https://github.com/golang/sync"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-deps group with 7 updates in the /backend directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.19.1` | `1.20.0` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.0` | `5.10.0` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.18.0` | `9.20.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n\n\nUpdates `connectrpc.com/connect` from 1.19.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/connectrpc/connect-go/releases\"\u003econnectrpc.com/connect's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum supported Go version to 1.25 by \u003ca href=\"https://github.com/jonbodner-buf\"\u003e\u003ccode\u003e@​jonbodner-buf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate Unary-Get query parameter order to match spec recommendation by \u003ca href=\"https://github.com/oliversun9\"\u003e\u003ccode\u003e@​oliversun9\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/926\"\u003e#926\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonbodner-buf\"\u003e\u003ccode\u003e@​jonbodner-buf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\"\u003ehttps://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.19.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eGovernance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ca href=\"https://github.com/timostamm\"\u003e\u003ccode\u003e@​timostamm\u003c/code\u003e\u003c/a\u003e as a maintainer in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/905\"\u003econnectrpc/connect-go#905\u003c/a\u003e 🎉\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBugfixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse 'deadline_exceeded' instead of 'canceled' on HTTP/2 cancelation when appropriate by \u003ca href=\"https://github.com/jhump\"\u003e\u003ccode\u003e@​jhump\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/904\"\u003econnectrpc/connect-go#904\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix nil pointer deref in duplexHTTPCall under concurrent Send + CloseAndReceive by \u003ca href=\"https://github.com/simonferquel\"\u003e\u003ccode\u003e@​simonferquel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/919\"\u003econnectrpc/connect-go#919\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRefactor memhttptest to work with Go 1.25 synctest by \u003ca href=\"https://github.com/codefromthecrypt\"\u003e\u003ccode\u003e@​codefromthecrypt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/881\"\u003econnectrpc/connect-go#881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDoc clarifications by \u003ca href=\"https://github.com/emcfarlane\"\u003e\u003ccode\u003e@​emcfarlane\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/911\"\u003e#911\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/912\"\u003e#912\u003c/a\u003e) and \u003ca href=\"https://github.com/stefanvanburen\"\u003e\u003ccode\u003e@​stefanvanburen\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/906\"\u003e#906\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/codefromthecrypt\"\u003e\u003ccode\u003e@​codefromthecrypt\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/881\"\u003econnectrpc/connect-go#881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonferquel\"\u003e\u003ccode\u003e@​simonferquel\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/pull/919\"\u003econnectrpc/connect-go#919\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e:\n\u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.1...v1.19.2\"\u003ehttps://github.com/connectrpc/connect-go/compare/v1.19.1...v1.19.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/1291a7dcac19b00490f935dce18f44f301fc58f6\"\u003e\u003ccode\u003e1291a7d\u003c/code\u003e\u003c/a\u003e Prepare for v1.20.0 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/927\"\u003e#927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/6df682f19e5b957b96b5fa44ffb28705a2d7bc8c\"\u003e\u003ccode\u003e6df682f\u003c/code\u003e\u003c/a\u003e Update Unary-Get query parameter order to match spec recommendation (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/926\"\u003e#926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/c4aac92b87026cd709cfbccdaabe8c45abef705c\"\u003e\u003ccode\u003ec4aac92\u003c/code\u003e\u003c/a\u003e Chore update buf v1.69.0 and license year (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/a5a6c30f3776b06ae05a66ab3bdd2d60c46db6db\"\u003e\u003ccode\u003ea5a6c30\u003c/code\u003e\u003c/a\u003e Bump Go from v1.24 to v1.25 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/138e2700eb60b8004363eb344031b317bf599a1f\"\u003e\u003ccode\u003e138e270\u003c/code\u003e\u003c/a\u003e Back to development (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/921\"\u003e#921\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/1c195ae986164a681af958e675dd283eed23e365\"\u003e\u003ccode\u003e1c195ae\u003c/code\u003e\u003c/a\u003e Prepare for v1.19.2 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/920\"\u003e#920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/96abc6b87132d1c43f67f1f5c91efdcb6a59b4aa\"\u003e\u003ccode\u003e96abc6b\u003c/code\u003e\u003c/a\u003e Upgrade golangci-lint to v2 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/917\"\u003e#917\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/be72fa520cdc8b942db6839dadbe9af0b44b40df\"\u003e\u003ccode\u003ebe72fa5\u003c/code\u003e\u003c/a\u003e Clarify concurrent use semantics for streaming types (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/911\"\u003e#911\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/299d2e7cdfb5e2fa3fa0963e6cedc51a7364521d\"\u003e\u003ccode\u003e299d2e7\u003c/code\u003e\u003c/a\u003e Fix nil pointer deref in duplexHTTPCall under concurrent Send + CloseAndRecei...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/e299aa60ffcf91633e48fcb3dd594cbbb187ec7f\"\u003e\u003ccode\u003ee299aa6\u003c/code\u003e\u003c/a\u003e Bump google.golang.org/grpc from 1.76.0 to 1.79.3 in /internal/conformance (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.9.0 to 5.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.0...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.18.0 to 9.20.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e9.20.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 push peeking\u003c/strong\u003e: \u003ccode\u003ePeekPushNotificationName\u003c/code\u003e no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector params\u003c/strong\u003e: Vector data is now always sent via \u003ccode\u003ePARAMS\u003c/code\u003e with auto-generated param names (\u003ccode\u003e__vector_param_N\u003c/code\u003e, with collision avoidance) when \u003ccode\u003eVectorParamName\u003c/code\u003e is omitted, since Redis no longer accepts inline vector blobs; the \u003ccode\u003eFTHybridOptions.Params\u003c/code\u003e map is no longer mutated, so the same options struct can be reused across calls (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3844\"\u003e#3844\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e forward compatibility\u003c/strong\u003e: Unknown shard- and node-level attributes in the \u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e reply are now skipped via \u003ccode\u003eDiscardNext()\u003c/code\u003e instead of erroring, so clients keep working when the server introduces new fields (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3843\"\u003e#3843\u003c/a\u003e) by \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub double reconnect\u003c/strong\u003e: \u003ccode\u003ePubSub.releaseConn\u003c/code\u003e no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3833\"\u003e#3833\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.20.0\u003c/h2\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md\"\u003egithub.com/redis/go-redis/v9's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.20.1 (2026-06-11)\u003c/h1\u003e\n\u003cp\u003eThis is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.\u003c/p\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRESP3 pub/sub message loss fixed\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ePeekPushNotificationName\u003c/code\u003e previously inspected only the bytes already buffered by \u003ccode\u003ebufio\u003c/code\u003e, so when a push frame header straddled a buffer fill boundary it could return a \u003cstrong\u003etruncated\u003c/strong\u003e notification name (e.g. \u003ccode\u003e\u0026quot;messa\u0026quot;\u003c/code\u003e instead of \u003ccode\u003e\u0026quot;message\u0026quot;\u003c/code\u003e). The push processor then mis-routed the frame and \u003ccode\u003eReadReply\u003c/code\u003e silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 push peeking\u003c/strong\u003e: \u003ccode\u003ePeekPushNotificationName\u003c/code\u003e no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3839\"\u003e#3839\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3842\"\u003e#3842\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector params\u003c/strong\u003e: Vector data is now always sent via \u003ccode\u003ePARAMS\u003c/code\u003e with auto-generated param names (\u003ccode\u003e__vector_param_N\u003c/code\u003e, with collision avoidance) when \u003ccode\u003eVectorParamName\u003c/code\u003e is omitted, since Redis no longer accepts inline vector blobs; the \u003ccode\u003eFTHybridOptions.Params\u003c/code\u003e map is no longer mutated, so the same options struct can be reused across calls (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3844\"\u003e#3844\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e forward compatibility\u003c/strong\u003e: Unknown shard- and node-level attributes in the \u003ccode\u003eCLUSTER SHARDS\u003c/code\u003e reply are now skipped via \u003ccode\u003eDiscardNext()\u003c/code\u003e instead of erroring, so clients keep working when the server introduces new fields (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3843\"\u003e#3843\u003c/a\u003e) by \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePubSub double reconnect\u003c/strong\u003e: \u003ccode\u003ePubSub.releaseConn\u003c/code\u003e no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3833\"\u003e#3833\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👥 Contributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/madolson\"\u003e\u003ccode\u003e@​madolson\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\"\u003ehttps://github.com/redis/go-redis/compare/v9.20.0...v9.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003e9.20.0 (2026-05-28)\u003c/h1\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8-rc1\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a13416bf1c0556075b843dd0a9cb6db3b3cf2789\"\u003e\u003ccode\u003ea13416b\u003c/code\u003e\u003c/a\u003e chore(release): 9.20.1 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3847\"\u003e#3847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/10dc44f424d58b9c2b4df29e529ca92a2f8fa986\"\u003e\u003ccode\u003e10dc44f\u003c/code\u003e\u003c/a\u003e fix(push): fix peeking when push name is truncated (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3842\"\u003e#3842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/e1a2d68b27e70ca8f3ff5eec61d0dd2b74554670\"\u003e\u003ccode\u003ee1a2d68\u003c/code\u003e\u003c/a\u003e fix(ft.hybrid): Always generate vector param names if they are not provided b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/a4b234f4a4f2551d1179181bbc136db132bf5912\"\u003e\u003ccode\u003ea4b234f\u003c/code\u003e\u003c/a\u003e chore(deps): bump codecov/codecov-action from 6 to 7 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3845\"\u003e#3845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/974e717dbf3008497e54aec34636e34452e6872b\"\u003e\u003ccode\u003e974e717\u003c/code\u003e\u003c/a\u003e fix(command): ignore unknown fields in CLUSTER SHARDS response (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3843\"\u003e#3843\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/65d6abde0d812234d26763930b5e84ff05963c96\"\u003e\u003ccode\u003e65d6abd\u003c/code\u003e\u003c/a\u003e fix(pubsub): prevent double reconnect in releaseConn (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3833\"\u003e#3833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/7d05dd3b7ce12a7b8c7923f73da0fede3bfa7c03\"\u003e\u003ccode\u003e7d05dd3\u003c/code\u003e\u003c/a\u003e chore(release): v9.20.0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3832\"\u003e#3832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/97568827124c58f1338d78b9535edc0eb9435453\"\u003e\u003ccode\u003e9756882\u003c/code\u003e\u003c/a\u003e fix(test): make waitForSentinelClusterStable robust to disconnected r… (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3830\"\u003e#3830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/875ce21e4862a7913edb5308b16869141ce5e833\"\u003e\u003ccode\u003e875ce21\u003c/code\u003e\u003c/a\u003e fix(sentinel): do not close sentinel when replica list is empty (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3795\"\u003e#3795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/8a027f21ba2686511e1a6a159f0c6888f11d48e7\"\u003e\u003ccode\u003e8a027f2\u003c/code\u003e\u003c/a\u003e chore(ci): add govulncheck workflow (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3779\"\u003e#3779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.18.0...v9.20.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e#8153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eString\u003c/code\u003e method for \u003ccode\u003eValue\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8142\"\u003e#8142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSlice\u003c/code\u003e and \u003ccode\u003eSliceValue\u003c/code\u003e functions for new \u003ccode\u003eSLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8166\"\u003e#8166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eSLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/exporters/zipkin\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply \u003ccode\u003eAttributeValueLengthLimit\u003c/code\u003e to \u003ccode\u003eattribute.SLICE\u003c/code\u003e type attribute values in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, recursively truncating contained string values. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8217\"\u003e#8217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eError\u003c/code\u003e field on \u003ccode\u003eRecord\u003c/code\u003e type in \u003ccode\u003ego.opentelemetry.io/otel/log/logtest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8148\"\u003e#8148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithMaxRequestSize\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8157\"\u003e#8157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eSettable\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to allow reusing attribute options. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8178\"\u003e#8178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental support for splitting metric data across multiple batches in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=\u0026lt;max_size\u0026gt;\u003c/code\u003e to enable for all periodic readers.\nSee \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8071\"\u003e#8071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8194\"\u003e#8194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutlog\u003c/code\u003e.\nEnable with \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY=true\u003c/code\u003e environment variable.\nSee \u003ccode\u003ego.opentelemetry.io/otel/stdout/stdoutlog/internal/x\u003c/code\u003e for feature documentation. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithDefaultAttributes\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/metric/x\u003c/code\u003e to support setting default attributes on instruments. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8135\"\u003e#8135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.41.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.41.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8324\"\u003e#8324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Observable variants of instruments to \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8350\"\u003e#8350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGenerate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.41.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8002\"\u003e#8002\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing \u003ccode\u003eattribute.Bool(\u0026quot;otel.metric.overflow\u0026quot;, true)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b62d92831b2dd142f5a0cc89c828270274196877\"\u003e\u003ccode\u003eb62d928\u003c/code\u003e\u003c/a\u003e Release 1.44.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8376\"\u003e#8376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/94132a0a729e94c5aa6e9e1ce7640c0f802dcfea\"\u003e\u003ccode\u003e94132a0\u003c/code\u003e\u003c/a\u003e chore(deps): update golang.org/x/telemetry digest to 5997936 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8379\"\u003e#8379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6fdcf82adfebc3becfb5d357957546d6d7258469\"\u003e\u003ccode\u003e6fdcf82\u003c/code\u003e\u003c/a\u003e feat: add self-observability metrics to otlpmetricgrpc metric exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8192\"\u003e#8192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/761bbfc2f4ae002f4a54f8c57c12b8a58135a741\"\u003e\u003ccode\u003e761bbfc\u003c/code\u003e\u003c/a\u003e fix(deps): update golang.org/x (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8377\"\u003e#8377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3a91dc62d3852313bab40ff151bb3e11fae1745e\"\u003e\u003ccode\u003e3a91dc6\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 3dc84a4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8375\"\u003e#8375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f593185679130f56e14bed3c337fa7f8f60756b1\"\u003e\u003ccode\u003ef593185\u003c/code\u003e\u003c/a\u003e exporters/otlp: default max request size to 64 MiB (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8365\"\u003e#8365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f02feacf8652b69c051851cfa2945d2ed5f0d568\"\u003e\u003ccode\u003ef02feac\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/36c2f1bfd1a6a789dc575f8886399093d7600586\"\u003e\u003ccode\u003e36c2f1b\u003c/code\u003e\u003c/a\u003e semconvkit: add invariant test for histogram-exclusion rule (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0b6cbdff5346557923fd05bd3f5f34df002aeee\"\u003e\u003ccode\u003ed0b6cbd\u003c/code\u003e\u003c/a\u003e sdk/metric: document unit-sensitivity of DefaultAggregationSelector (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8224\"\u003e#8224\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9a68034bd45c6f24c481d9f9c87ebbee0a61482f\"\u003e\u003ccode\u003e9a68034\u003c/code\u003e\u003c/a\u003e add self observability for stdout exporter (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/trace's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eByteSlice\u003c/code\u003e and \u003ccode\u003eByteSliceValue\u003c/code\u003e functions for new \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7948\"\u003e#7948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eKindBytes\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply attribute value limit to the \u003ccode\u003eBYTESLICE\u003c/code\u003e attribute type in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7990\"\u003e#7990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eBYTESLICE\u003c/code\u003e attributes in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8153\"\u003e...\n\n_Description has been truncated_","html_url":"https://github.com/myfxlogs/ant/pull/12","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/myfxlogs%2Fant/issues/12","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/12/packages"}},{"old_version":"5.6.0","new_version":"5.9.2","update_type":"minor","path":"/utils/dorm","pr_created_at":"2026-06-12T01:25:24.000Z","version_change":"5.6.0 → 5.9.2","issue":{"uuid":"4645429303","node_id":"PR_kwDOFigLlc7lkBFH","number":96,"state":"closed","title":"build(deps): bump github.com/jackc/pgx/v5 from 5.6.0 to 5.9.2 in /utils/dorm","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-12T01:48:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-12T01:25:24.000Z","updated_at":"2026-06-12T01:49:00.000Z","time_to_close":1414,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.6.0","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"}],"path":"/utils/dorm","ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.6.0 to 5.9.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.6.0...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.6.0\u0026new-version=5.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dtapps/go-library/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/dtapps/go-library/pull/96","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dtapps%2Fgo-library/issues/96","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/96/packages"}},{"old_version":"5.5.3","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-12T01:24:57.000Z","version_change":"5.5.3 → 5.10.0","issue":{"uuid":"4645427786","node_id":"PR_kwDORx3C_s7lkAxa","number":79,"state":"open","title":"chore(deps): bump github.com/jackc/pgx/v5 from 5.5.3 to 5.10.0","user":"dependabot[bot]","labels":["area/backend"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-12T01:24:57.000Z","updated_at":"2026-06-12T01:29:26.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.5.3","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.5.3 to 5.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.5.3...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.5.3\u0026new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/CaptDany/oscar/pull/79","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CaptDany%2Foscar/issues/79","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/79/packages"}},{"old_version":"5.7.5","new_version":"5.9.2","update_type":"minor","path":null,"pr_created_at":"2026-06-11T23:45:54.000Z","version_change":"5.7.5 → 5.9.2","issue":{"uuid":"4645029829","node_id":"PR_kwDOPmeGcs7liw1w","number":4,"state":"open","title":"Bump the go_modules group across 14 directories with 13 updates","user":"dependabot[bot]","labels":["size/XL","dependencies","go"],"assignees":[],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-11T23:45:54.000Z","updated_at":"2026-06-11T23:47:54.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":13,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.0","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/openfga/openfga","old_version":"1.8.13","new_version":"1.16.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/Azure/go-ntlmssp","old_version":"0.0.0-20220621081337-cb9428e4ac1e","new_version":"0.1.1","repository_url":"https://github.com/Azure/go-ntlmssp"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.37.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 7 updates in the /apps/iam directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.0` | `4.1.4` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.9.2` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.8.13` | `1.16.0` |\n| [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) | `0.0.0-20220621081337-cb9428e4ac1e` | `0.1.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 5 updates in the /apps/plugins directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.45.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 1 update in the /apps/preferences directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /apps/provisioning directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 2 updates in the /apps/secret directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/shorturl directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apimachinery directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/apiserver directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/build directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 1 update in the /pkg/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 1 update in the /pkg/plugins/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 4 updates in the /pkg/promlib directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/buger/jsonparser](https://github.com/buger/jsonparser).\nBumps the go_modules group with 1 update in the /pkg/semconv directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.0 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.0...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.8.13 to 1.16.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown \u003ccode\u003ekid\u003c/code\u003e (rate-limited to once per minute). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003e#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.3\"\u003eGo 1.26.3 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3115\"\u003e#3115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrey-berenda\"\u003e\u003ccode\u003e@​andrey-berenda\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003eopenfga/openfga#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.15.1...v1.16.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.15.1...v1.16.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.15.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReuse a single MySQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3042\"\u003e#3042\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential panic within command error handling. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3091\"\u003e#3091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that propagated expected errors from list objects when a path short-circuits. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3096\"\u003e#3096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e for edges in unions with multiple branches (direct types, wildcards, TTU paths, or intersections). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3097\"\u003e#3097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in the bounded tuple reader that would cause semaphore token leaks under context cancelation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3106\"\u003e#3106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that could cause deadlocks in check by holding message streams open indefinitely upon error. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3111\"\u003e#3111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.15.0...v1.15.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.15.0...v1.15.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImplemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3075\"\u003e#3075\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3086\"\u003e#3086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.2 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.2\"\u003eGo 1.26.2 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.16.0] - 2026-05-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown \u003ccode\u003ekid\u003c/code\u003e (rate-limited to once per minute). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003e#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.3\"\u003eGo 1.26.3 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3115\"\u003e#3115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.15.1] - 2026-05-06\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReuse a single MySQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3042\"\u003e#3042\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential panic within command error handling. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3091\"\u003e#3091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that propagated expected errors from list objects when a path short-circuits. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3096\"\u003e#3096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e for edges in unions with multiple branches (direct types, wildcards, TTU paths, or intersections). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3097\"\u003e#3097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in the bounded tuple reader that would cause semaphore token leaks under context cancelation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3106\"\u003e#3106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that could cause deadlocks in check by holding message streams open indefinitely upon error. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3111\"\u003e#3111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.15.0] - 2026-04-27\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImplemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3075\"\u003e#3075\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3086\"\u003e#3086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.2 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.2\"\u003eGo 1.26.2 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.14.2] - 2026-04-14\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse delimiter in contextual tuple key in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e, and add validation in v2Check. Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3064\"\u003e#3064\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.14.1] - 2026-04-10\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded configuration for the server shutdown timeout. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2976\"\u003e#2976\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd jitter to internal cache TTLs to spread expirations and reduce thundering herd effects. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3033\"\u003e#3033\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMade some minor changes in ListObjects to reduce heap allocations. Results in minor latency reduction. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3043\"\u003e#3043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove cache key generation performance by removing \u003ccode\u003efmt\u003c/code\u003e usage and extend control-character sanitization to all cache key inputs (tuples, conditions, context). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3006\"\u003e#3006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse a single PostgreSQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3018\"\u003e#3018\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/165291872c4577a54200b9ddc7c966d3e89d6c2d\"\u003e\u003ccode\u003e1652918\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.16.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3139\"\u003e#3139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/d42f9f3dea688db5f284e47048b06a2dbd8eecf6\"\u003e\u003ccode\u003ed42f9f3\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/ece3b9ef965a7a790c433d889538319569639527\"\u003e\u003ccode\u003eece3b9e\u003c/code\u003e\u003c/a\u003e fix: unintentional zeroing of slice values by setting slice to nil (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3135\"\u003e#3135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/5b39f175c241f5f9691bacb8ce6721ecad8c9179\"\u003e\u003ccode\u003e5b39f17\u003c/code\u003e\u003c/a\u003e increase the check v2 trace information fidelity (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3134\"\u003e#3134\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/b6d0028e02c9d3df3f5c93633f736f5192d9b2b6\"\u003e\u003ccode\u003eb6d0028\u003c/code\u003e\u003c/a\u003e feat: add datastore ping and ping retry configurations (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3113\"\u003e#3113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/e669ac8b710f9902bbed3fb1f9784ef57e8e8a9a\"\u003e\u003ccode\u003ee669ac8\u003c/code\u003e\u003c/a\u003e fix: prevent v2Check strategies returning spurious false on context cancellat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/857e432cc7c02115b1ec7dd9e0d6b6dd5f8e3d10\"\u003e\u003ccode\u003e857e432\u003c/code\u003e\u003c/a\u003e fix(authn/oidc): refresh JWKS on unknown kid to handle key rotation (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3101\"\u003e#3101\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/8c9e0bf3547877643ff7b31cb4a95f939c10b48d\"\u003e\u003ccode\u003e8c9e0bf\u003c/code\u003e\u003c/a\u003e fix: v2Check falls back to v1 on errors (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3126\"\u003e#3126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c30681262a8cccb3e55e60d065b10cbe3e889323\"\u003e\u003ccode\u003ec306812\u003c/code\u003e\u003c/a\u003e fix: don't cache false results from cancelled-context goroutines in v2Check (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/39113898dc97af10df8c1660f01d014b2cc1d230\"\u003e\u003ccode\u003e3911389\u003c/code\u003e\u003c/a\u003e make union cache key unique by including the node input's label (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3117\"\u003e#3117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.8.13...v1.16.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.41.0 to 0.50.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.41.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.74.2 to 1.80.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.74.2...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Azure/go-ntlmssp` from 0.0.0-20220621081337-cb9428e4ac1e to 0.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/go-ntlmssp/releases\"\u003egithub.com/Azure/go-ntlmssp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.1.1\u003c/h2\u003e\n\u003cp\u003eFix CVE-2026-32952: A malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport.\u003c/p\u003e\n\u003ch2\u003ev0.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum required version to Go 1.24 by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/53\"\u003eAzure/go-ntlmssp#53\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix OOM in NTLM negotiator by avoiding buffering of seekable request bodies by \u003ca href=\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/54\"\u003eAzure/go-ntlmssp#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't modify the rountripped request by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/57\"\u003eAzure/go-ntlmssp#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a race occurring when the wrapped Rountripper closes the request body in another goroutine by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/58\"\u003eAzure/go-ntlmssp#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a race occurring when the wrapped Rountripper reads request fields in another goroutine by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/59\"\u003eAzure/go-ntlmssp#59\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly perform basic auth if requested by the server by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/60\"\u003eAzure/go-ntlmssp#60\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't pass the original body in the client handshake request by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/61\"\u003eAzure/go-ntlmssp#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRe...\n\n_Description has been truncated_","html_url":"https://github.com/OneFineStarstuff/grafana/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OneFineStarstuff%2Fgrafana/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}},{"old_version":"5.9.2","new_version":"5.10.0","update_type":"minor","path":null,"pr_created_at":"2026-06-08T12:52:53.000Z","version_change":"5.9.2 → 5.10.0","issue":{"uuid":"4613033257","node_id":"PR_kwDOEnf8cc7j6NiC","number":227,"state":"closed","title":"build(deps): bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-05T01:30:52.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-08T12:52:53.000Z","updated_at":"2026-07-05T01:30:53.000Z","time_to_close":2291879,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/jackc/pgx/v5","old_version":"5.9.2","new_version":"5.10.0","repository_url":"https://github.com/jackc/pgx"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.9.2 to 5.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.10.0 (June 3, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a significant amount of hardening against malicious or compromised PostgreSQL servers,\ncontributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled\nmessage sizes, caps server-supplied SCRAM iteration counts, adds \u003ccode\u003erequire_auth\u003c/code\u003e to restrict which authentication\nmethods a server may use (mitigating downgrade attacks under \u003ccode\u003esslmode=prefer\u003c/code\u003e), and ensures cancellation requests are\nsent over TLS when the original connection used TLS.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erequire_auth\u003c/code\u003e to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eParseConfigOptions.ConnStringAllowedKeys\u003c/code\u003e to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eStructArgs\u003c/code\u003e and \u003ccode\u003eStrictStructArgs\u003c/code\u003e for \u003ccode\u003e@\u003c/code\u003e-named queries (Tubelight30)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrConnClosed\u003c/code\u003e sentinel error and unwrap it from \u003ccode\u003econnLockError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: check if connection is expired before acquire (arthurdotwork)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity Hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEncrypt \u003ccode\u003eCancelRequest\u003c/code\u003e connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eCap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDefault Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eBound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eDocument secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)\u003c/li\u003e\n\u003cli\u003eFix panic on malformed geometric text; return an error instead (MaIII)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scanning \u003ccode\u003e\u0026quot;char\u0026quot;\u003c/code\u003e (OID 18) into \u003ccode\u003e*string\u003c/code\u003e in binary format (luongs3)\u003c/li\u003e\n\u003cli\u003eFix handling of typed-nil \u003ccode\u003edriver.Valuer\u003c/code\u003e in array and composite codecs (Donncha Fahy)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eCopyData.Data\u003c/code\u003e hex decoding in \u003ccode\u003eUnmarshalJSON\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003eFix data race when context is cancelled during connect\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eparseKeywordValueSettings\u003c/code\u003e rejecting trailing whitespace (alliasgher)\u003c/li\u003e\n\u003cli\u003epgconn: preserve full error chain in \u003ccode\u003enormalizeTimeoutError\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgconn: use a fresh context for the fallback connection in \u003ccode\u003econnectPreferred\u003c/code\u003e (Charlie Tonneslan)\u003c/li\u003e\n\u003cli\u003epgxpool: fix \u003ccode\u003eMaxLifetimeDestroyCount\u003c/code\u003e and ping order for acquire-time expiry check\u003c/li\u003e\n\u003cli\u003eAdd missing error check of \u003ccode\u003erows.Err\u003c/code\u003e to load types (Jen Altavilla)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/7293fb11125be0373a92f716683f2d494f6fd4b0\"\u003e\u003ccode\u003e7293fb1\u003c/code\u003e\u003c/a\u003e Update changelog for v5.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1ade2852841d4ee55677207200f4ffdbc217ce69\"\u003e\u003ccode\u003e1ade285\u003c/code\u003e\u003c/a\u003e pgconn: document secure connection configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b4d6d4d1be7f381bb81d12ebfecae6b10f5c7562\"\u003e\u003ccode\u003eb4d6d4d\u003c/code\u003e\u003c/a\u003e pgtype: bound range, multirange, and tsvector binary decoders\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0639b37f8f4fff31dbe73297087e69b3ccc3bf2b\"\u003e\u003ccode\u003e0639b37\u003c/code\u003e\u003c/a\u003e pgconn: add ParseConfigOptions.ConnStringAllowedKeys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/b28e65b0c3e0cd45c09e7c9ce36e5e29caa6dbe9\"\u003e\u003ccode\u003eb28e65b\u003c/code\u003e\u003c/a\u003e pgtype: bound array element count against remaining message bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/cd1f389d37d775bc8cb11c60363946f928c02c98\"\u003e\u003ccode\u003ecd1f389\u003c/code\u003e\u003c/a\u003e pgtype: bound array binary decode element length against remaining bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/ff27b5bbea012020d1fd8b9bdd56284a88783ef1\"\u003e\u003ccode\u003eff27b5b\u003c/code\u003e\u003c/a\u003e pgtype: bound hstore binary decode against malicious server input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a6002e12a8a393844b48c29d105e7542e7b3a251\"\u003e\u003ccode\u003ea6002e1\u003c/code\u003e\u003c/a\u003e pgproto3: default Frontend max message body length to ~1 GiB\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/44f61732ecdfd08081a1a2ff7227f1e975f0b71e\"\u003e\u003ccode\u003e44f6173\u003c/code\u003e\u003c/a\u003e pgconn: cap server-supplied SCRAM iteration count\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/1a976f7bb91216ea7f8369cb7abe78ce34dc244f\"\u003e\u003ccode\u003e1a976f7\u003c/code\u003e\u003c/a\u003e pgconn: add require_auth to restrict accepted server auth methods\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.9.2...v5.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5\u0026package-manager=go_modules\u0026previous-version=5.9.2\u0026new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/askasoft/pango/pull/227","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/askasoft%2Fpango/issues/227","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/227/packages"}}]}