chore(deps): bump the go-minor group across 1 directory with 9 updates by dependabot[bot] · Pull Request #16 · mpyw/sql-http-proxy

dependabot · 2026-08-11T05:10:08Z

Bumps the go-minor group with 8 updates in the / directory:

Package	From	To
github.com/go-chi/chi/v5	`5.2.3`	`5.3.1`
github.com/go-sql-driver/mysql	`1.9.3`	`1.10.0`
github.com/jackc/pgx/v5	`5.8.0`	`5.10.0`
github.com/microsoft/go-mssqldb	`1.9.5`	`1.10.0`
github.com/samber/lo	`1.52.0`	`1.53.0`
github.com/santhosh-tekuri/jsonschema/v6	`6.0.2`	`6.0.3`
github.com/urfave/cli/v3	`3.6.1`	`3.10.1`
modernc.org/sqlite	`1.42.2`	`1.56.0`

Updates github.com/go-chi/chi/v5 from 5.2.3 to 5.3.1

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.1

What's Changed

Honor Discard() in httpFancyWriter.ReadFrom by @DucMinhNe in go-chi/chi#1110

Tidy build directives by @JRaspass in go-chi/chi#1113

feat(middleware): add text/xml and application/xml to default compressible types by @VojtechVitek in go-chi/chi#1127

Fix defaultLogEntry.Panic not respecting NoColor setting by @doganarif in go-chi/chi#1050

middleware: document printPrettyStack and harden NoColor panic test by @VojtechVitek in go-chi/chi#1131

feat(mux): support http QUERY method ietf rfc10008 by @VojtechVitek in go-chi/chi#1132

ci: pin GitHub Actions to full commit SHAs by @XananasX7 in go-chi/chi#1116

New Contributors

@DucMinhNe made their first contribution in go-chi/chi#1110

@doganarif made their first contribution in go-chi/chi#1050

@XananasX7 made their first contribution in go-chi/chi#1116

Full Changelog: go-chi/chi@v5.3.0...v5.3.1

v5.3.0

What's Changed

Use strings.ReplaceAll where applicable by @JRaspass in go-chi/chi#1046

Propagate inline middlewares across mounted subrouters by @LukasJenicek in go-chi/chi#1049

add go 1.26 to ci by @pkieltyka in go-chi/chi#1052

Remove last uses of io/ioutil by @JRaspass in go-chi/chi#1054

Simplify chi.walk with slices.Concat by @JRaspass in go-chi/chi#1053

Apply the stringscutprefix modernizer by @JRaspass in go-chi/chi#1051

Bump minimum Go to 1.23, always use request.Pattern by @JRaspass in go-chi/chi#1048

middleware: fix httpFancyWriter.ReadFrom double-counting bytes with Tee by @alliasgher in go-chi/chi#1085

Fix typo in Route doc comment by @gouwazi in go-chi/chi#1073

fix: set Request.Pattern from RoutePattern() by @leno23 in go-chi/chi#1097

feat: middleware.ClientIP, a replacement for middleware.RealIP by @VojtechVitek in go-chi/chi#967

New Contributors

@LukasJenicek made their first contribution in go-chi/chi#1049

@alliasgher made their first contribution in go-chi/chi#1085

@gouwazi made their first contribution in go-chi/chi#1073

@leno23 made their first contribution in go-chi/chi#1097

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

@VojtechVitek submitted PR #967, which introduces middleware.ClientIP — a replacement for middleware.RealIP that closes the three open spoofing advisories:

GHSA-9g5q-2w5x-hmxf — IP spoofing via XFF in RemoteAddr resolution (convto)

GHSA-rjr7-jggh-pgcp — RealIP allows IP spoofing via unvalidated XFF (rezmoss)

GHSA-3fxj-6jh8-hvhx — IP spoofing in middleware.RealIP (Saku0512, Critical / 9.3)

It also addresses issues outlined at:

go-chi/chi#708

https://adam-p.ca/blog/2022/03/x-forwarded-for/

go-chi/chi#711

go-chi/chi#453

go-chi/chi#908

... (truncated)

Commits

8b258c7 ci: pin GitHub Actions to full commit SHAs (#1116)
caf87e6 feat(mux): support http QUERY method ietf rfc10008 (#1132)
7fcb8a2 middleware: document printPrettyStack and harden NoColor panic test (#1131)
878fe71 Fix defaultLogEntry.Panic not respecting NoColor setting (#1050)
d7b767b feat(middleware): add text/xml and application/xml to default compressible ty...
3b50c7c Tidy build directives (#1113)
2b9fca2 Honor Discard() in httpFancyWriter.ReadFrom (#1110)
3b17157 feat: middleware.ClientIP, a replacement for middleware.RealIP (#967)
818fdcf fix: set Request.Pattern from RoutePattern() (#1097)
f975af0 Fix typo in Route doc comment (#1073)
Additional commits viewable in compare view

Updates github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.0

What's Changed

add Go 1.24 to the test matrix by @shogo82148 in go-sql-driver/mysql#1681

modernize for Go 1.22 by @methane in go-sql-driver/mysql#1695

test stability improvement. by @methane in go-sql-driver/mysql#1698

simplify collation tests by @methane in go-sql-driver/mysql#1700

fix bigint unsigned null column scan to err type int64 by @elonnzhang in go-sql-driver/mysql#1612

Transaction Commit/Rollback returns conn's cached error, if present by @brad-defined in go-sql-driver/mysql#1691

add BenchmarkReceive10kRowsCompress by @methane in go-sql-driver/mysql#1704

optimize readPacket by @methane in go-sql-driver/mysql#1705

MariaDB Metadata skipping and DEPRECATE_EOF by @rusher in go-sql-driver/mysql#1708

Optimization: statements reuse previous column name by @methane in go-sql-driver/mysql#1711

update outdated MySQL internals documentation links by @demouth in go-sql-driver/mysql#1714

fix PING on compressed connections by @methane in go-sql-driver/mysql#1721

add DeepWiki badge by @methane in go-sql-driver/mysql#1722

Update edwards25519 dependency to v1.1.1 by @williamhaw in go-sql-driver/mysql#1749

Configure Dependabot for Go modules by @methane in go-sql-driver/mysql#1755

Bump dominikh/staticcheck-action from 1.3.1 to 1.4.1 by @dependabot[bot] in go-sql-driver/mysql#1759

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in go-sql-driver/mysql#1760

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in go-sql-driver/mysql#1757

fix staticcheck error by @methane in go-sql-driver/mysql#1761

Bump actions/checkout from 4 to 6 by @dependabot[bot] in go-sql-driver/mysql#1758

Fix getSystemVar buffer reuse by @morgo in go-sql-driver/mysql#1754

Consolidate Dependabot update noise by grouping weekly dependency PRs by @Copilot in go-sql-driver/mysql#1762

Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0 by @dependabot[bot] in go-sql-driver/mysql#1756

CI: Update GitHub Actions Go matrix to 1.24–1.26 by @Copilot in go-sql-driver/mysql#1763

Enhance interpolateParams to correctly handle placeholders by @rusher in go-sql-driver/mysql#1732

modernize by @methane in go-sql-driver/mysql#1764

release v1.10.0 by @methane in go-sql-driver/mysql#1765

New Contributors

@elonnzhang made their first contribution in go-sql-driver/mysql#1612

@brad-defined made their first contribution in go-sql-driver/mysql#1691

@rusher made their first contribution in go-sql-driver/mysql#1708

@demouth made their first contribution in go-sql-driver/mysql#1714

@williamhaw made their first contribution in go-sql-driver/mysql#1749

@dependabot[bot] made their first contribution in go-sql-driver/mysql#1759

@morgo made their first contribution in go-sql-driver/mysql#1754

@Copilot made their first contribution in go-sql-driver/mysql#1762

Full Changelog: go-sql-driver/mysql@v1.9.2...v1.10.0

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.0 (2026-04-28)

Fix getSystemVar("max_allowed_packet") potentially returned wrong value. (#1754) This affects only when maxAllowedPacket=0 is set.

Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0. (#1756) While older versions have reported CVEs, they do not affect go-mysql.

Update Go versions to 1.24-1.26. (#1763)

Enhance interpolateParams to correctly handle placeholders. (#1732) The question mark (?) within strings and comments will no longer be treated as a placeholder.

Commits

a065b60 release v1.10.0 (#1765)
09e4187 modernize (#1764)
6c44a9a Enhance interpolateParams to correctly handle placeholders (#1732)
688ce56 Update supported Go version to 1.24–1.26 (#1763)
118d07f Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0 (#1756)
d6b2d3e Consolidate Dependabot update noise by grouping weekly dependency PRs (#1762)
037dfd8 Fix getSystemVar buffer reuse (#1754)
900f330 Bump actions/checkout from 4 to 6 (#1758)
ab9e380 fix staticcheck error (#1761)
f298c66 Bump actions/setup-go from 5 to 6 (#1757)
Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.8.0 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)

Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)

Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)

Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)

pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)

Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)

Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)

Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)

Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)

Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)

Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)

Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)

Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

Fix scanning "char" (OID 18) into *string in binary format (luongs3)

Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)

Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)

Fix data race when context is cancelled during connect

Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)

pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)

pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)

pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check

Add missing error check of rows.Err to load types (Jen Altavilla)

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

The non-default simple protocol is used.

A dollar quoted string literal is used in the SQL query.

That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.

The value of that placeholder is controllable by the attacker.

... (truncated)

Commits

7293fb1 Update changelog for v5.10.0
1ade285 pgconn: document secure connection configuration
b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
b28e65b pgtype: bound array element count against remaining message bytes
cd1f389 pgtype: bound array binary decode element length against remaining bytes
ff27b5b pgtype: bound hstore binary decode against malicious server input
a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
44f6173 pgconn: cap server-supplied SCRAM iteration count
1a976f7 pgconn: add require_auth to restrict accepted server auth methods
Additional commits viewable in compare view

Updates github.com/microsoft/go-mssqldb from 1.9.5 to 1.10.0

Release notes

Sourced from github.com/microsoft/go-mssqldb's releases.

v1.10.0

1.10.0 (2026-04-25)

Features

add devcontainer for VS Code and GitHub Codespaces (#317) (b55beeb)

add FailoverPartnerSPN connection string parameter (#327) (ea77c2e)

add NewConnectorWithProcessQueryText for mssql driver compatibility (#341) (2be611f)

add nullable civil types for date/time parameters (#325) (c10fa99)

Bug Fixes

allow named pipe protocol support for ARM64 Windows (#232) (a82c058)

configure release-please with PAT and correct component mapping (#349) (23bac05)

detect server-aborted transactions to prevent silent auto-commit (XACT_ABORT) (#370) (586ea53)

expose TrustServerCertificate in msdsn.Config and URL round-trip (#312) (9937cfe)

handle COLINFO (0xA5) and TABNAME (0xA4) TDS tokens returned by tables with triggers (#343) (7c905ad)

implement driver.DriverContext interface (#365) (1b610a0), closes #236

make readCancelConfirmation respect context cancellation (#359) (65e137f)

replace broken AppVeyor badge with GitHub Actions badge (#334) (d3429f5)

return interface{} scanType for sql_variant instead of nil (#362) (296a83a), closes #186

sanitize credentials from connection string parsing errors (#319) (93f5ef0)

surface server errors from Rows.Close() during token drain (#361) (ea69792), closes #244

v1.9.8

What's Changed

bump dependencies to clear govulncheck by @shueybubbles in microsoft/go-mssqldb#328

Full Changelog: microsoft/go-mssqldb@v1.9.7...v1.9.8

v1.9.7

What's Changed

perf: do not copy columnStruct by @lidavidm in microsoft/go-mssqldb#308

Add support for EPA by @paraddise in microsoft/go-mssqldb#295

perf: use pointer receiver for columnStruct to avoid copy by @lidavidm in microsoft/go-mssqldb#316

bulkcopy: fix column escaping by @dlapko in microsoft/go-mssqldb#253

Fix handling of stateSep in batch package. Addresses bug #247 by @flaviopicci in microsoft/go-mssqldb#248

fix: update release-please action and config by @dlevy-msft-sql in microsoft/go-mssqldb#322

Add unit tests for type conversion, SQL quoting, and error handling by @Copilot in microsoft/go-mssqldb#321

docs: add LLM optimization files for AI code assistant discoverability by @dlevy-msft-sql in microsoft/go-mssqldb#311

test: improve code coverage with comprehensive unit tests by @dlevy-msft-sql in microsoft/go-mssqldb#323

New Contributors

@paraddise made their first contribution in microsoft/go-mssqldb#295

@flaviopicci made their first contribution in microsoft/go-mssqldb#248

@dlevy-msft-sql made their first contribution in microsoft/go-mssqldb#322

... (truncated)

Changelog

Sourced from github.com/microsoft/go-mssqldb's changelog.

1.10.0 (2026-04-25)

Features

add devcontainer for VS Code and GitHub Codespaces (#317) (b55beeb)

add FailoverPartnerSPN connection string parameter (#327) (ea77c2e)

add NewConnectorWithProcessQueryText for mssql driver compatibility (#341) (2be611f)

add nullable civil types for date/time parameters (#325) (c10fa99)

Bug Fixes

allow named pipe protocol support for ARM64 Windows (#232) (a82c058)

configure release-please with PAT and correct component mapping (#349) (23bac05)

detect server-aborted transactions to prevent silent auto-commit (XACT_ABORT) (#370) (586ea53)

expose TrustServerCertificate in msdsn.Config and URL round-trip (#312) (9937cfe)

handle COLINFO (0xA5) and TABNAME (0xA4) TDS tokens returned by tables with triggers (#343) (7c905ad)

implement driver.DriverContext interface (#365) (1b610a0), closes #236

make readCancelConfirmation respect context cancellation (#359) (65e137f)

replace broken AppVeyor badge with GitHub Actions badge (#334) (d3429f5)

return interface{} scanType for sql_variant instead of nil (#362) (296a83a), closes #186

sanitize credentials from connection string parsing errors (#319) (93f5ef0)

surface server errors from Rows.Close() during token drain (#361) (ea69792), closes #244

1.9.6

Features

Added new serverCertificate connection parameter for byte-for-byte certificate validation, matching Microsoft.Data.SqlClient behavior. This parameter skips hostname validation, chain validation, and expiry checks, only verifying that the server's certificate exactly matches the provided file. This is useful when the server's hostname doesn't match the certificate CN/SAN. (#304)

The existing certificate parameter maintains backward compatibility with traditional X.509 chain validation including hostname checks, expiry validation, and chain-of-trust verification.

serverCertificate cannot be used with certificate or hostnameincertificate parameters to prevent conflicting validation methods.

1.9.3

Bug fixes

Fix parsing of ADO connection strings with double-quoted values containing semicolons (#282)

1.9.2

Bug fixes

Fix race condition in message queue query model (#277)

1.9.1

Bug fixes

Fix bulk insert failure with datetime values near midnight due to day overflow (#271)

... (truncated)

Commits

f92e6f0 chore(main): release 1.10.0 (#351)
03094d0 ci: add least-privilege permissions and pin actions to SHA (#354)
65e137f fix: make readCancelConfirmation respect context cancellation (#359)
c10fa99 feat: add nullable civil types for date/time parameters (#325)
9937cfe fix: expose TrustServerCertificate in msdsn.Config and URL round-trip (#312)
429c61d chore(deps): bump googleapis/release-please-action from 4.4.1 to 5.0.0 in the...
ea77c2e feat: add FailoverPartnerSPN connection string parameter (#327)
04d26c2 ci: add devcontainer build validation workflow (#355)
b55beeb feat: add devcontainer for VS Code and GitHub Codespaces (#317)
586ea53 fix: detect server-aborted transactions to prevent silent auto-commit (XACT_A...
Additional commits viewable in compare view

Updates github.com/samber/lo from 1.52.0 to 1.53.0

Release notes

Sourced from github.com/samber/lo's releases.

v1.53.0

Announcing the latest release of lo with lots of good gifts! 🎁

🌊 First, a big thanks to @d-enk for making lots of performance improvements in the recent weeks.

🧪 Second, this release introduces a new simd experimental package. If you run on an amd64 architecture and a recent CPU, you can perform very fast operations thanks to SIMD CPU instructions. -> Documentation: https://lo.samber.dev/docs/experimental/simd

💥 Third, this version adds *Err variants of many lo helpers (like MapErr, FlatMapErr, ReduceErr, etc.) whose callbacks can return an error and short-circuit execution when one occurs.

[!NOTE] The simd sub-package is considered not stable. We might break the initial API based on developers' feedback in the coming months.

Features & improvements

feat: adding SIMD helpers by @samber in samber/lo#801

feat: adding Error variants: MapErr, FlatMapErr, ReduceErr... by @samber in samber/lo#823

feat: support for buffer iterator by @mimol91 in samber/lo#824

feat: add Take, TakeWhile, FilterTake, Window, and Sliding functions by @juliazadorozhnaya in samber/lo#760

feat: add a Concat slice function. by @FGasper in samber/lo#714

feat: add iterator slice helpers by @juliazadorozhnaya in samber/lo#791

feat(it): adding loit.Concat by @samber in samber/lo#722

feat: Allow Union/Intersect to take many lists by @frankywahl in samber/lo#181

feat: Add Clone function to return shallow copy of slice collections by @quexer in samber/lo#732

feat: IntersectBy by @ghosx in samber/lo#653

feat: Support Custom Assert by @RelicOfTesla in samber/lo#755

feat: Must support Custom error handler. by @RelicOfTesla in samber/lo#752

feat: WithoutNth handle non-comparable types by @urisimchoni in samber/lo#774

refactor: remove unnecessary type arguments in NewThrottle by @d-enk in samber/lo#773

refactor: lo.IntersectBy + adding loit.IntersectBy + adding doc by @samber in samber/lo#739

fix: rename IsSortedByKey to IsSortedBy by @NathanBaulch in samber/lo#735

fix(iter/tuples): support break iteration over Zip[By] seq by @d-enk in samber/lo#757

fix(it.Mode): align behavior with lo.Mode and ensure consistent slice… by @intojhanurag in samber/lo#711

fix: improve Clone function to preserve nilness and avoid liveness issues by @quexer in samber/lo#740

fix: reset n counter per iteration in it.Replace by @LikimiaD in samber/lo#799

fix: make Ellipsis operate on runes instead of bytes to prevent Unicode truncation by @veeceey in samber/lo#796

fix: correct DropByIndex handling of negative indices out of bounds by @d-enk in samber/lo#778

Deprecation

refactor: remove helpers deprecated for more than 3y by @samber in samber/lo#810

Performance improvements

feat: Optimize UniqMap to reduce unnecessary slice preallocation by @ivolkoff in samber/lo#710

refactor(it): simplify DropLast, TrimSuffix, TrimPrefix and use range loops by @d-enk in samber/lo#782

bench: fix iterators to actually iterate in benchmarks by @d-enk in samber/lo#781

refactor: simplify slice cut/trim prefix/suffix functions by @d-enk in samber/lo#787

perf: optimize Sliding by pre-allocating result capacity by @d-enk in samber/lo#783

... (truncated)

Commits

cf6fb4f bump v1.53.0
56ef3be feat: support for buffer iterator (#824)
6a9f881 💄
7f0c2e0 feat: adding UnzipByErrX helpers
af46a13 feat: adding RejectErr helpers
6f42e74 doc: improve examples
ff0e293 feat: adding FilterErr helpers
4bb58fd feat: adding RepeatByErr helpers
72a33aa feat: adding FilterKeysErr + FilterValuesErr helpers
dd1d58e feat: adding FindDuplicatesByErr helper
Additional commits viewable in compare view

Updates github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3

Release notes

Sourced from github.com/santhosh-tekuri/jsonschema/v6's releases.

v6.0.3

bugfixes:

empty instLocation for propetyNames and contentSchema

fix intLocation for items and additionalItems validation

check invalid floats NaN/Inf

fix closing quote check in email validation

ensure both are numbers in equals validation

features

ef59f39: ref like property in custom vocab

Commits

b0fc661 ci: upgrade golangci/golangci-lint-action from v4 to v6
3d8c98f ci: upgrade actions/setup-go from v3 to v6
b0cc7ab ci: upgrade actions/checkout from v3 to v7
4bdda86 validator/fix: empty instLocation for propetyNames and contentSchema
833329d fix/typo: fix type in error message
180cde3 misc: remove vim swap file (#254)
1a20556 validator/items: fix instanceLocation
cfca0e3 validator: check invalid floats NaN/Inf (#249)
befd2c1 validator/additionalItems: fix instanceLocation (#253)
dfcec1c format/email: add closing quote check (#251)
Additional commits viewable in compare view

Updates github.com/urfave/cli/v3 from 3.6.1 to 3.10.1

Release notes

Sourced from github.com/urfave/cli/v3's releases.

v3.10.1

What's Changed

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in urfave/cli#2371

fix: align gfmrun example counter with actual runnable count by @dearchap in urfave/cli#2369

v3: yield the version flag's -v alias to a user-defined flag by @c-tonneslan in urfave/cli#2330

fix: keep completion subcommand order deterministic in help output by @suzuki-shunsuke in urfave/cli#2374

fix: allow DefaultCommand to handle its own flags by @lihan3238 in urfave/cli#2322

New Contributors

@lihan3238 made their first contribution in urfave/cli#2322

Full Changelog: urfave/cli@v3.10.0...v3.10.1

v3.10.0

What's Changed

feat: add Flag.SchemaType() and Flag.SchemaItemsType() for JSON Schema introspection by @dearchap in urfave/cli#2368

feat: add Command.Walk() and Command.Path() convenience methods by @dearchap in urfave/cli#2353

fix: let --help flag take precedence over parse errors by @dearchap in urfave/cli#2360

fix: resolve remaining help invocation inconsistencies by @dearchap in urfave/cli#2361

fix: skip After hook when help is displayed on subcommand by @dearchap in urfave/cli#2363

fix: show GLOBAL OPTIONS in SubcommandHelpTemplate by @dearchap in urfave/cli#2359

fix: resolve broken links in CHANGELOG.md by @dearchap in urfave/cli#2357

docs: document what happened to build tags in v3 migration guide by @dearchap in urfave/cli#2358

Various docs updates and dependency bumps

Full Changelog: urfave/cli@v3.9.1...v3.10.0

v3.9.1

What's Changed

fix: inherit Reader/Writer/ErrWriter from parent on subcommand setup by @c-tonneslan in urfave/cli#2329

fix: correct greedy colon parsing in bash completion script by @TimSoethout in urfave/cli#2336

fix: Honor env sources on duplicated flags by @ibobgunardi in urfave/cli#2355

fix: Remove incorrect flag check by @MohitPanchariya in urfave/cli#2280

fix: let completion command use normal flag parsing pipeline by @suzuki-shunsuke in urfave/cli#2279

fix: bash completion spacing by @cyphercodes in urfave/cli#2337

fix: fish custom completion arguments by @puneetdixit200 in urfave/cli#2338

fix: empty positional arg after a flag regression test by @c-tonneslan in urfave/cli#2328

docs: document build tags in v3 migration guide by @dearchap in urfave/cli#2358

chore(deps): bump mkdocs-git-revision-date-localized-plugin by @dependabot in urfave/cli#2347

Fix typos by @myfloss in urfave/cli#2339

Full Changelog: urfave/cli@v3.9.0...v3.9.1

v3.9.0

What's Changed

chore(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in urfave/cli#2300

chore(deps): bump the python-packages group across 1 directory with 3 updates by @dependabot[bot] in urfave/cli#2301

docs: fix typo by @acrobatstick in urfave/cli#2299

feat: add descriptions for bash and powershell autocompletion by @gabelluardo in urfave/cli#2298

... (truncated)

Commits

c5f123b Merge pull request #2322 from lihan3238/fix-2249
8449859 Merge branch 'main' into fix-2249
02bdfb0 Merge pull request

Bumps the go-minor group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.2.3` | `5.3.1` | | [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.9.3` | `1.10.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.8.0` | `5.10.0` | | [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.9.5` | `1.10.0` | | [github.com/samber/lo](https://github.com/samber/lo) | `1.52.0` | `1.53.0` | | [github.com/santhosh-tekuri/jsonschema/v6](https://github.com/santhosh-tekuri/jsonschema) | `6.0.2` | `6.0.3` | | [github.com/urfave/cli/v3](https://github.com/urfave/cli) | `3.6.1` | `3.10.1` | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.42.2` | `1.56.0` | Updates `github.com/go-chi/chi/v5` from 5.2.3 to 5.3.1 - [Release notes](https://github.com/go-chi/chi/releases) - [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md) - [Commits](go-chi/chi@v5.2.3...v5.3.1) Updates `github.com/go-sql-driver/mysql` from 1.9.3 to 1.10.0 - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md) - [Commits](go-sql-driver/mysql@v1.9.3...v1.10.0) Updates `github.com/jackc/pgx/v5` from 5.8.0 to 5.10.0 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.8.0...v5.10.0) Updates `github.com/microsoft/go-mssqldb` from 1.9.5 to 1.10.0 - [Release notes](https://github.com/microsoft/go-mssqldb/releases) - [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md) - [Commits](microsoft/go-mssqldb@v1.9.5...v1.10.0) Updates `github.com/samber/lo` from 1.52.0 to 1.53.0 - [Release notes](https://github.com/samber/lo/releases) - [Commits](samber/lo@v1.52.0...v1.53.0) Updates `github.com/santhosh-tekuri/jsonschema/v6` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/santhosh-tekuri/jsonschema/releases) - [Commits](santhosh-tekuri/jsonschema@v6.0.2...v6.0.3) Updates `github.com/urfave/cli/v3` from 3.6.1 to 3.10.1 - [Release notes](https://github.com/urfave/cli/releases) - [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md) - [Commits](urfave/cli@v3.6.1...v3.10.1) Updates `golang.org/x/text` from 0.32.0 to 0.36.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.32.0...v0.36.0) Updates `modernc.org/sqlite` from 1.42.2 to 1.56.0 - [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.42.2...v1.56.0) --- updated-dependencies: - dependency-name: github.com/go-chi/chi/v5 dependency-version: 5.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/microsoft/go-mssqldb dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/samber/lo dependency-version: 1.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/santhosh-tekuri/jsonschema/v6 dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor - dependency-name: github.com/urfave/cli/v3 dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: golang.org/x/text dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: modernc.org/sqlite dependency-version: 1.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-18T05:08:42Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 11, 2026

dependabot Bot closed this Aug 18, 2026

dependabot Bot deleted the dependabot/go_modules/go-minor-e8ac8e22a9 branch August 18, 2026 05:08

Navigation Menu

Repository navigation

chore(deps): bump the go-minor group across 1 directory with 9 updates - #16

chore(deps): bump the go-minor group across 1 directory with 9 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-e8ac8e22a9

dependabot Bot commented on behalf of github Aug 11, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.3.1

What's Changed

New Contributors

v5.3.0

What's Changed

New Contributors

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

v1.10.0

What's Changed

New Contributors

v1.10.0 (2026-04-28)

5.10.0 (June 3, 2026)

Features

Security Hardening

Fixes

5.9.2 (April 18, 2026)

v1.10.0

1.10.0 (2026-04-25)

Features

Bug Fixes

v1.9.8

What's Changed

v1.9.7

What's Changed

New Contributors

1.10.0 (2026-04-25)

Features

Bug Fixes

1.9.6

Features

1.9.3

Bug fixes

1.9.2

Bug fixes

1.9.1

Bug fixes

v1.53.0

Features & improvements

Deprecation

Performance improvements

v6.0.3

bugfixes:

features

v3.10.1

What's Changed

New Contributors

v3.10.0

What's Changed

v3.9.1

What's Changed

v3.9.0

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Aug 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 11, 2026 •

edited

Loading