chore(deps): bump the dependencies group across 1 directory with 12 updates by dependabot[bot] · Pull Request #1034 · NUTFes/FinanSu

dependabot · 2026-01-12T04:49:14Z

Bumps the dependencies group with 8 updates in the /api directory:

Package	From	To
github.com/go-sql-driver/mysql	`1.8.1`	`1.9.3`
github.com/labstack/echo/v4	`4.11.4`	`4.15.0`
github.com/minio/minio-go/v7	`7.0.83`	`7.0.97`
github.com/oapi-codegen/runtime	`1.1.1`	`1.1.2`
github.com/slack-go/slack	`0.13.0`	`0.17.3`
gorm.io/driver/mysql	`1.3.3`	`1.6.0`
github.com/go-testfixtures/testfixtures/v3	`3.14.0`	`3.19.0`
github.com/google/wire	`0.6.0`	`0.7.0`

Updates github.com/go-sql-driver/mysql from 1.8.1 to 1.9.3

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.9.3

What's Changed

[1.9] test stability improvement. by @methane in go-sql-driver/mysql#1699

[1.9] Transaction Commit/Rollback returns conn's cached error by @methane in go-sql-driver/mysql#1702

backport benchmark_test by @methane in go-sql-driver/mysql#1706

[1.9] optimize readPacket (#1705) by @methane in go-sql-driver/mysql#1707

[1.9] fix PING on compressed connections by @methane in go-sql-driver/mysql#1723

release v1.9.3 by @methane in go-sql-driver/mysql#1725

Full Changelog: go-sql-driver/mysql@v1.9.2...v1.9.3

v1.9.2

What's Changed

v1.9.2 is a re-release of v1.9.1 due to a release process issue; no changes were made to the content.

Full Changelog: go-sql-driver/mysql@v1.9.1...v1.9.2

v1.9.1

What's Changed

add Charset() option by @methane in go-sql-driver/mysql#1679

Fix FormatDSN missing ConnectionAttributes by @bogcon in go-sql-driver/mysql#1619

go.mod: fix go version format by @methane in go-sql-driver/mysql#1682

release v1.9.1 by @methane in go-sql-driver/mysql#1683

New Contributors

@bogcon made their first contribution in go-sql-driver/mysql#1619

Full Changelog: go-sql-driver/mysql@v1.9.0...v1.9.1

v1.9.0

Major Changes

Implement zlib compression. (#1487)

Supported Go version is updated to Go 1.21+. (#1639)

Add support for VECTOR type introduced in MySQL 9.0. (#1609)

Config object can have custom dial function. (#1527)

Bugfixes

Fix auth errors when username/password are too long. (#1625)

Check if MySQL supports CLIENT_CONNECT_ATTRS before sending client attributes. (#1640)

Fix auth switch request handling. (#1666)

Other changes

Add "filename:line" prefix to log in go-mysql. Custom loggers now show it. (#1589)

Improve error handling. It reduces the "busy buffer" errors. (#1595, #1601, #1641)

Use strconv.Atoi to parse max_allowed_packet. (#1661)

rejectReadOnly option now handles ER_READ_ONLY_MODE (1290) error too. (#1660)

... (truncated)

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.9.3 (2025-06-13)

tx.Commit() and tx.Rollback() returned ErrInvalidConn always. Now they return cached real error if present. (#1690)

Optimize reading small resultsets to fix performance regression introduced by compression protocol support. (#1707)

Fix db.Ping() on compressed connection. (#1723)

v1.9.2 (2025-04-07)

v1.9.2 is a re-release of v1.9.1 due to a release process issue; no changes were made to the content.

v1.9.1 (2025-03-21)

Major Changes

Add Charset() option. (#1679)

Bugfixes

go.mod: fix go version format (#1682)

Fix FormatDSN missing ConnectionAttributes (#1619)

v1.9.0 (2025-02-18)

Major Changes

Implement zlib compression. (#1487)

Supported Go version is updated to Go 1.21+. (#1639)

Add support for VECTOR type introduced in MySQL 9.0. (#1609)

Config object can have custom dial function. (#1527)

Bugfixes

Fix auth errors when username/password are too long. (#1625)

Check if MySQL supports CLIENT_CONNECT_ATTRS before sending client attributes. (#1640)

Fix auth switch request handling. (#1666)

Other changes

Add "filename:line" prefix to log in go-mysql. Custom loggers now show it. (#1589)

Improve error handling. It reduces the "busy buffer" errors. (#1595, #1601, #1641)

Use strconv.Atoi to parse max_allowed_packet. (#1661)

rejectReadOnly option now handles ER_READ_ONLY_MODE (1290) error too. (#1660)

Commits

62984ad release v1.9.3 (#1725)
324cbb3 [1.9] fix PING on compressed connections (#1723)
dfd973a optimize readPacket (#1707)
2ed589b backport benchmark_test (#1706)
ac04e5f Transaction Commit/Rollback returns conn's cached error (#1702)
1bee809 test stability improvement. (#1699)
21ef4c6 release v1.9.2 (#1693)
1fbafa8 release v1.9.1 (#1683)
b84ac5a go.mod: fix go version format (#1682)
88ff88b Fix FormatDSN missing ConnectionAttributes (#1619)
Additional commits viewable in compare view

Updates github.com/labstack/echo/v4 from 4.11.4 to 4.15.0

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.15.0

Security

WARNING: If your application relies on cross-origin or same-site (same subdomain) requests do not blindly push this version to production

The CSRF middleware now supports the Sec-Fetch-Site header as a modern, defense-in-depth approach to CSRF protection, implementing the OWASP-recommended Fetch Metadata API alongside the traditional token-based mechanism.

How it works:

Modern browsers automatically send the Sec-Fetch-Site header with all requests, indicating the relationship between the request origin and the target. The middleware uses this to make security decisions:

same-origin or none: Requests are allowed (exact origin match or direct user navigation)

same-site: Falls back to token validation (e.g., subdomain to main domain)

cross-site: Blocked by default with 403 error for unsafe methods (POST, PUT, DELETE, PATCH)

For browsers that don't send this header (older browsers), the middleware seamlessly falls back to traditional token-based CSRF protection.

New Configuration Options:

TrustedOrigins []string: Allowlist specific origins for cross-site requests (useful for OAuth callbacks, webhooks)

AllowSecFetchSiteFunc func(echo.Context) (bool, error): Custom logic for same-site/cross-site request validation

Example:
e.Use(middleware.CSRFWithConfig(middleware.CSRFConfig{
    // Allow OAuth callbacks from trusted provider
    TrustedOrigins: []string{"https://oauth-provider.com"},
// Custom validation for same-site requests
AllowSecFetchSiteFunc: func(c echo.Context) (bool, error) {
    // Your custom authorization logic here
    return validateCustomAuth(c), nil
    // return true, err  // blocks request with error
    // return true, nil  // allows CSRF request through
    // return false, nil // falls back to legacy token logic
},

}))
PR: labstack/echo#2858

Type-Safe Generic Parameter Binding

Added generic functions for type-safe parameter extraction and context access by @aldas in labstack/echo#2856

Echo now provides generic functions for extracting path, query, and form parameters with automatic type conversion, eliminating manual string parsing and type assertions.

... (truncated)

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.15.0 - 2026-01-01

Security

NB: If your application relies on cross-origin or same-site (same subdomain) requests do not blindly push this version to production

The CSRF middleware now supports the Sec-Fetch-Site header as a modern, defense-in-depth approach to CSRF protection, implementing the OWASP-recommended Fetch Metadata API alongside the traditional token-based mechanism.

How it works:

Modern browsers automatically send the Sec-Fetch-Site header with all requests, indicating the relationship between the request origin and the target. The middleware uses this to make security decisions:

same-origin or none: Requests are allowed (exact origin match or direct user navigation)

same-site: Falls back to token validation (e.g., subdomain to main domain)

cross-site: Blocked by default with 403 error for unsafe methods (POST, PUT, DELETE, PATCH)

For browsers that don't send this header (older browsers), the middleware seamlessly falls back to traditional token-based CSRF protection.

New Configuration Options:

TrustedOrigins []string: Allowlist specific origins for cross-site requests (useful for OAuth callbacks, webhooks)

AllowSecFetchSiteFunc func(echo.Context) (bool, error): Custom logic for same-site/cross-site request validation

Example:
e.Use(middleware.CSRFWithConfig(middleware.CSRFConfig{
    // Allow OAuth callbacks from trusted provider
    TrustedOrigins: []string{"https://oauth-provider.com"},
// Custom validation for same-site requests
AllowSecFetchSiteFunc: func(c echo.Context) (bool, error) {
    // Your custom authorization logic here
    return validateCustomAuth(c), nil
    // return true, err  // blocks request with error
    // return true, nil  // allows CSRF request through
    // return false, nil // falls back to legacy token logic
},

}))
PR: labstack/echo#2858

Type-Safe Generic Parameter Binding

Added generic functions for type-safe parameter extraction and context access by @aldas in labstack/echo#2856

Echo now provides generic functions for extracting path, query, and form parameters with automatic type conversion,

... (truncated)

Commits

482bb46 v4.15.0 changelog
d0f9d1e CRSF with Sec-Fetch-Site=same-site falls back to legacy token
f3fc618 CRSF with Sec-Fetch-Site checks
4dcb9b4 licence headers
cbc0ac1 Add PathParam(Or)/QueryParam(Or)/FormParam(Or) generic functions
6b14f4e Add Context.Get generic functions
321530d disable test - returns different error under Windows
c8abd9f disable flaky test
9fe43f7 fix Rate limiter disallows fractional rates
1b5122a document things to reduce false positives
Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.0.83 to 7.0.97

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

Bugfix Release

What's Changed

test: add test for PresignedPostPolicy with empty fileName by @jiuker in minio/minio-go#2119

fix: prefix should use stringLike when new a bucketPolicy (2) by @mannreis in minio/minio-go#2124

update all deps by @harshavardhana in minio/minio-go#2125

set checksum headers requested properly by @harshavardhana in minio/minio-go#2130

fix: missing append() API behavior by @harshavardhana in minio/minio-go#2131

extend more missing headers for PartUploads by @harshavardhana in minio/minio-go#2132

fix: explicitly use UTC for expiration field when marshaling PostPolicy by @qwwqe in minio/minio-go#2135

fix: DurationSeconds is a QueryValues not a Form data (#2128) by @vlaborie in minio/minio-go#2129

make sure to avoid closing the input reader by @harshavardhana in minio/minio-go#2137

New Contributors

@mannreis made their first contribution in minio/minio-go#2124

@qwwqe made their first contribution in minio/minio-go#2135

@vlaborie made their first contribution in minio/minio-go#2129

Full Changelog: minio/minio-go@v7.0.94...v7.0.95

Bugfix Release

What's Changed

fix: canceled context should not start list before do listObjects by @jiuker in minio/minio-go#2122

Full Changelog: minio/minio-go@v7.0.93...v7.0.94

Bugfix Release

What's Changed

replication: add in progress metric and target status by @poornas in minio/minio-go#2109

Add Checksums to versioned list results by @klauspost in minio/minio-go#2116

add iterator based RemoveObjects implementation by @harshavardhana in minio/minio-go#2113

Doc by @toastsandwich in minio/minio-go#2111

fix: parse the mime metadata when do get/head object by @jiuker in minio/minio-go#2106

test: add mint test case for metadata with non-us-ascll by @jiuker in minio/minio-go#2118

Add support of error responses in 200 OK body by @vadmeste in minio/minio-go#2115

Add constants for response errors by @OlegLaban in minio/minio-go#2120

New Contributors

@toastsandwich made their first contribution in minio/minio-go#2111

@OlegLaban made their first contribution in minio/minio-go#2120

Full Changelog: minio/minio-go@v7.0.92...v7.0.93

Bugfix Release and new APIs

What's Changed

Add copy destination fields by @klauspost in minio/minio-go#2095

feat: make JSON lib configurable by @secDre4mer in minio/minio-go#2088

implement Go native iterator style ListObjects() by @harshavardhana in minio/minio-go#2099

Add API for bucket resync cancellation by @poornas in minio/minio-go#2101

support aws s3 express zone behavior by @harshavardhana in minio/minio-go#2103

... (truncated)

Commits

83bf4e2 Wrap brackets only for IPv6 address (#2176)
f14663f fix: putObjectMultipartStreamFromReadAt goroutine leak (#2170)
6217ce2 Add ConfigName option to LDAP STS request (#2173)
9207380 removed NodeHostname from InventoryJobStatus (#2172)
785b638 update InventoryJobStatus field ExecutionTime from time.Duration to string (#...
a5f6380 Added fields to InventoryJobStatus (#2168)
f4c4350 update all missing docs
af6dc51 feat: add error reporting fields to InventoryJobStatus (#2164)
ec35de6 Add QOS API's (#2148)
ec103a7 add AGENTS.md and also updated API documentation
Additional commits viewable in compare view

Updates github.com/oapi-codegen/runtime from 1.1.1 to 1.1.2

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.1.2: fixes for maps and x-go-type-skip-optional-pointer

🐛 Bug fixes

Fix #70: Use %w formatting directives when fmt.Error'ing an error. (#71) @constantoine

Fix BindQueryParameter for optional parameters (#48) @TelpeNight

fix: make BindQueryParameter play along with x-go-type-skip-optional-pointer (#47) @swistakm

fix: correctly handle maps with different value types when binding (#38) @andnow873

👻 Maintenance

docs(sponsors): add FUNDING.yml (#46) @jamietanna

Simplify CI build matrix + build against Go 1.22 (#33) @jamietanna

📦 Dependency updates

chore(deps): pin dependencies (#63) @renovate

Sponsors

We would like to thank our sponsors for their support during this release.

... (truncated)

Commits

0f4916e Use %w formatting directives when fmt.Error'ing an error. (#71)
409f622 chore(deps): pin dependencies
912bc9f Merge pull request #48 from TelpeNight/fix-opt-query-params
fb5c804 Fix BindQueryParameter for optional parameters
8c8696b Merge pull request #47 from swistakm/fix/make-query-bindparam-play-along-with...
4061fba fix: make BindQueryParameter play along with x-go-type-skip-optional-pointer
46dbe22 docs(sponsors): add FUNDING.yml
9fd2a77 Merge pull request #38oapi-codegen/runtime#37
1b61163 Change styleMap to iterate via reflection
d741dd7 fix #37
Additional commits viewable in compare view

Updates github.com/slack-go/slack from 0.13.0 to 0.17.3

Release notes

Sourced from github.com/slack-go/slack's releases.

v0.17.3

What's New

Add IsEmailConfirmed to User by @nlopes in slack-go/slack#1458

Fixes

Parse simple string based errors as part of the response by @nlopes in slack-go/slack#1452 In the previous version we introduced the ability to parse specific errors (more complex ones) but Slack can still send us a string. string is now the fallback type.

Other

Examples are now using environment variables and command line arguments consistently by @nlopes in slack-go/slack#1456 Also added a https://github.com/slack-go/slack/blob/HEAD/examples/README.md explaining the patterns that should be used.

Full Changelog: slack-go/slack@v0.17.2...v0.17.3

v0.17.2

Features added

Add Timezone parameter for the slack TimePickerBlockElement by @jamesjarvis in slack-go/slack#1448 and slack-go/slack#1449

Add support for Slack image file objects in the ImageBlockElement by @superturkey650 in slack-go/slack#1444

Add ability to add file ids when updating a message by @nlopes in slack-go/slack#1451

Add support for the API endpoint /migration.exchange to the library by @nlopes in slack-go/slack#1453

Add /apps.connections.open handler to slacktest by @prologic in slack-go/slack#1447

New Contributors

@jamesjarvis made their first contribution in slack-go/slack#1448

@prologic made their first contribution in slack-go/slack#1447

@superturkey650 made their first contribution in slack-go/slack#1444

Full Changelog: slack-go/slack@v0.17.1...v0.17.2

v0.17.1

This has the potential to be a breaking change if and only if you have been building SlackResponse by hand, which you shouldn't 😬. If you are, my apologies for adding this in a minor version, I thought the likelihood of this to be very very low. See slack-go/slack#1443 for more details.

Features added

Add channel_unshared event by @nlopes in slack-go/slack#1437

Add missing Blocks to UploadFileContextV2 by @dalyndalton in slack-go/slack#1435 This adds the missing optional dependency for Blocks to the upload file method, allowing users to use rich blocks and buttons during the file upload process.

Return Errors field in SlackErrorResponse by @nlopes in slack-go/slack#1443

Detailed list of all of the changes

chore: add CI test status badge to README by @nlopes in slack-go/slack#1431

feat: add channel_unshared event by @nlopes in slack-go/slack#1437

chore: add test for section block expand option by @nlopes in slack-go/slack#1440

chore: order inner events vars alphabetically by @nlopes in slack-go/slack#1442

chore: better events example code by @nlopes in slack-go/slack#1441

feat: Add missing Blocks to UploadFileContextV2 by @dalyndalton in slack-go/slack#1435

feat: return Errors field in SlackErrorResponse by @nlopes in slack-go/slack#1443

doc: add README.md to examples/eventsapi by @nlopes in slack-go/slack#1445

New Contributors

... (truncated)

Commits

e29b7e3 fix: parse simple string based errors as part of the response (#1452)
13c4aec feat(users): add IsEmailConfirmed to User (#1458)
4a2676d feat(users): add IsEmailConfirmed to User
6efef11 feat: bring consistency to examples (#1456)
36472df chore: add generated README to examples/
bc1f95f chore: more linting
dc611a3 fix(examples): quit if unable to send message
dccc5d8 chore: remove a bunch of global vars
369013a chore: better code
f89cda5 chore: fix lint in team example
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in stretchr/testify#1614

Lazily render mock diff output on successful match by @mikeauclair in stretchr/testify#1615

assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in stretchr/testify#1427

assert: add IsNotType by @bartventer in stretchr/testify#1730

assert.JSONEq: shortcut if same strings by @dolmen in stretchr/testify#1754

assert.YAMLEq: shortcut if same strings by @dolmen in stretchr/testify#1755

assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in stretchr/testify#1761

suite: faster methods filtering (internal refactor) by @dolmen in stretchr/testify#1758

Fixes

assert.ErrorAs: log target type by @craig65535 in stretchr/testify#1345

Fix failure message formatting for Positive and Negative asserts in stretchr/testify#1062

Improve ErrorIs message when error is nil but an error was expected by @tsioftas in stretchr/testify#1681

fix Subset/NotSubset when calling with mixed input types by @siliconbrain in stretchr/testify#1729

Improve ErrorAs failure message when error is nil by @ccoVeille in stretchr/testify#1734

mock.AssertNumberOfCalls: improve error msg by @3scalation in stretchr/testify#1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in stretchr/testify#1688

Replace deprecated io/ioutil with io and os by @alexandear in stretchr/testify#1684

Document consequences of calling t.FailNow() by @greg0ire in stretchr/testify#1710

chore: update docs for Unset #1621 by @techfg in stretchr/testify#1709

README: apply gofmt to examples by @alexandear in stretchr/testify#1687

refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in stretchr/testify#1674

Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in stretchr/testify#1716

Update documentation for the Error function in assert or require package by @architagr in stretchr/testify#1675

assert: remove deprecated build constraints by @alexandear in stretchr/testify#1671

assert: apply gofumpt to internal test suite by @ccoVeille in stretchr/testify#1739

CI: fix shebang in .ci.*.sh scripts by @dolmen in stretchr/testify#1746

assert,require: enable parallel testing on (almost) all top tests by @dolmen in stretchr/testify#1747

suite.Passed: add one more status test report by @Ararsa-Derese in stretchr/testify#1706

Add Helper() method in internal mocks and assert.CollectT by @dolmen in stretchr/testify#1423

assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in stretchr/testify#1742

mock: enable parallel testing on internal testsuite by @dolmen in stretchr/testify#1756

suite: cleanup use of 'testing' internals at runtime by @dolmen in stretchr/testify#1751

assert: check test failure message for Empty and NotEmpty by @ccoVeille in stretchr/testify#1745

... (truncated)

Commits

2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
af8c912 Backport #1786 to release/1.11
b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
69831f3 build(deps): bump actions/checkout from 4 to 5
a53be35 Improve captureTestingT helper
aafb604 mock: improve formatting of error message
7218e03 improve error msg
929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
bc7459e suite: faster filtering of methods (-testify.m)
7d37b5c suite: refactor methodFilter
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.31.0 to 0.46.0

Commits

19acf81 go.mod: update golang.org/x dependencies
3a1c6b4 x509roots/fallback: update bundle
f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory
4e0068c go.mod: update golang.org/x dependencies
e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
f91f7a7 ssh/agent: prevent panic on malformed constraint
2df4153 acme/autocert: let automatic renewal work with short lifetime certs
bcf6a84 acme: pass context to request
b4f2b62 ssh: fix error message on unsupported cipher
79ec3a5 ssh: allow to bind to a hostname in remote forwarding
Additional commits viewable in compare view

Updates gorm.io/driver/mysql from 1.3.3 to 1.6.0

Commits

d744156 Don't overwrite existing clause builders
f0a2645 build(deps): bump gorm.io/gorm from 1.25.11 to 1.30.0 (#172)
d815729 Fix creating unique index on non-unique field (#168)
449c37a Updated the go version to 1.18. (#159)
c829f6e Fixed missing database name with table name. (#153)
361eb5f define default driver name constant (#155)
9d1b8d6 Fix insert id order for mariadb
d848c69 Fix set time field's precision to 0
e724f92 only trim paired single-quotes for column.DefaultValue (#143)
739f97b feat: map mysql error 1451 to gorm error (#145)
Additional commits viewable in compare view

Updates gorm.io/gorm from 1.23.4 to 1.30.0

Release notes

Sourced from gorm.io/gorm's releases.

Release v1.30.0

Changes

(WIP) Implement Generics API @jinzhu (#7424)

perf(schema): avoid redundant strings.ToLower call @1911860538 (#7464)

fix: return init dialector error @codingplz (#7379)

perf: break early on match failure in ParseConstraint @1911860538 (#7402)

feat: error message show field name @pi12138 (#7452)

perf: use strings.IndexByte to replace strings.Index @1911860538 (#7454)

perf: use strings.Cut to replace strings.SplitN @1911860538 (#7455)

Release v1.26.1

Changes

fix: int type variable defaultMaxSize overflows in 32-bit environment @iTanken (#7439)

Release v1.26.0

Changes

Preparestmt use LRU Map instead default map @Yaccc (#7435)

use golangci replace reviewdog @jinzhu (#7426)

test: mssql ci @a631807682 (#7388)

fix deprecated reflect.PtrTo reflect.PointerTo usage @Aman-Shitta (#7366)

Fix concurrent map writes #7297 @Ponywka (#7298)

chore: update copyright year @maxktz (#7332)

Enhance db.Scan with ParamsFilter - Issue 7336 - Suggestion @evyaffe (#7337)

Fixed Empty Returning Clause Merge Edge Case @aviyam181199 (#7339)

feat:Capitalize the priority field of IndexOption（go-gorm/gorm#7331 @nowindexman (#7342)

fix: deterministic index ordering when migrating @bamo (#7208)

use map look-up for indexes @abbyssoul (#7242)

#6372 Fixed nullable constraint bug for columns during auto migration @wookie0 (#7269)

Create CODE_OF_CONDUCT.md @omidfth (#7240)

Enhance Release Process: Implement Automated Release Management and Notes Generation @YidiDev (#7224)

refactor: improve logging for unimplemented ErrorTranslator in TranlateError config enabled @Invidam (#7225)

Add GitHub Actions workflow to automate release creation on tagged pushes @YidiDev (#7209)

Use official SQL Server docker image for tests @omkar-foss (#7205)

feat: Modernize Docker Compose File @isso-719 (#7086)

Generate unique savepoint names for nested transactions @phro... Description has been truncated Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

cloudflare-workers-and-pages · 2026-01-12T04:49:16Z

Deploying finansu with Cloudflare Pages

Latest commit:	`fae108e`
Status:	✅ Deploy successful!
Preview URL:	https://cc8ef16f.finansu.pages.dev
Branch Preview URL:	https://dependabot-go-modules-api-de-8c4y.finansu.pages.dev

View logs

…pdates Bumps the dependencies group with 8 updates in the /api directory: | Package | From | To | | --- | --- | --- | | [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.8.1` | `1.9.3` | | [github.com/labstack/echo/v4](https://github.com/labstack/echo) | `4.11.4` | `4.15.0` | | [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.83` | `7.0.97` | | [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime) | `1.1.1` | `1.1.2` | | [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.13.0` | `0.17.3` | | [gorm.io/driver/mysql](https://github.com/go-gorm/mysql) | `1.3.3` | `1.6.0` | | [github.com/go-testfixtures/testfixtures/v3](https://github.com/go-testfixtures/testfixtures) | `3.14.0` | `3.19.0` | | [github.com/google/wire](https://github.com/google/wire) | `0.6.0` | `0.7.0` | Updates `github.com/go-sql-driver/mysql` from 1.8.1 to 1.9.3 - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/v1.9.3/CHANGELOG.md) - [Commits](go-sql-driver/mysql@v1.8.1...v1.9.3) Updates `github.com/labstack/echo/v4` from 4.11.4 to 4.15.0 - [Release notes](https://github.com/labstack/echo/releases) - [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md) - [Commits](labstack/echo@v4.11.4...v4.15.0) Updates `github.com/minio/minio-go/v7` from 7.0.83 to 7.0.97 - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](minio/minio-go@v7.0.83...v7.0.97) Updates `github.com/oapi-codegen/runtime` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/oapi-codegen/runtime/releases) - [Commits](oapi-codegen/runtime@v1.1.1...v1.1.2) Updates `github.com/slack-go/slack` from 0.13.0 to 0.17.3 - [Release notes](https://github.com/slack-go/slack/releases) - [Changelog](https://github.com/slack-go/slack/blob/master/history.go) - [Commits](slack-go/slack@v0.13.0...v0.17.3) Updates `github.com/stretchr/testify` from 1.9.0 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.9.0...v1.11.1) Updates `golang.org/x/crypto` from 0.31.0 to 0.46.0 - [Commits](golang/crypto@v0.31.0...v0.46.0) Updates `gorm.io/driver/mysql` from 1.3.3 to 1.6.0 - [Commits](go-gorm/mysql@v1.3.3...v1.6.0) Updates `gorm.io/gorm` from 1.23.4 to 1.30.0 - [Release notes](https://github.com/go-gorm/gorm/releases) - [Commits](go-gorm/gorm@v1.23.4...v1.30.0) Updates `golang.org/x/text` from 0.23.0 to 0.32.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.23.0...v0.32.0) Updates `github.com/go-testfixtures/testfixtures/v3` from 3.14.0 to 3.19.0 - [Release notes](https://github.com/go-testfixtures/testfixtures/releases) - [Changelog](https://github.com/go-testfixtures/testfixtures/blob/master/CHANGELOG.md) - [Commits](go-testfixtures/testfixtures@v3.14.0...v3.19.0) Updates `github.com/google/wire` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/wire/releases) - [Commits](google/wire@v0.6.0...v0.7.0) --- updated-dependencies: - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.9.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/labstack/echo/v4 dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/minio/minio-go/v7 dependency-version: 7.0.97 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/oapi-codegen/runtime dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/slack-go/slack dependency-version: 0.17.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: gorm.io/driver/mysql dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: gorm.io/gorm dependency-version: 1.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: golang.org/x/text dependency-version: 0.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/go-testfixtures/testfixtures/v3 dependency-version: 3.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/google/wire dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 12, 2026

dependabot bot added the go Pull requests that update go code label Jan 12, 2026

dependabot bot force-pushed the dependabot/go_modules/api/dependencies-10b8d8861c branch 2 times, most recently from 9bc28ec to dc8a332 Compare January 19, 2026 05:01

dependabot bot force-pushed the dependabot/go_modules/api/dependencies-10b8d8861c branch from dc8a332 to 73e0c46 Compare February 2, 2026 04:40

dependabot bot force-pushed the dependabot/go_modules/api/dependencies-10b8d8861c branch from 73e0c46 to 8a9052c Compare February 16, 2026 04:38

dependabot bot force-pushed the dependabot/go_modules/api/dependencies-10b8d8861c branch from 8a9052c to fae108e Compare February 23, 2026 04:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the dependencies group across 1 directory with 12 updates#1034

chore(deps): bump the dependencies group across 1 directory with 12 updates#1034
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/api/dependencies-10b8d8861c

dependabot bot commented on behalf of github Jan 12, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages bot commented Jan 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.9.3

What's Changed

v1.9.2

What's Changed

v1.9.1

What's Changed

New Contributors

v1.9.0

Major Changes

Bugfixes

Other changes

v1.9.3 (2025-06-13)

v1.9.2 (2025-04-07)

v1.9.1 (2025-03-21)

Major Changes

Bugfixes

v1.9.0 (2025-02-18)

Major Changes

Bugfixes

Other changes

v4.15.0

v4.15.0 - 2026-01-01

Bugfix Release

What's Changed

New Contributors

Bugfix Release

What's Changed

Bugfix Release

What's Changed

New Contributors

Bugfix Release and new APIs

What's Changed

v1.1.2: fixes for maps and x-go-type-skip-optional-pointer

🐛 Bug fixes

👻 Maintenance

📦 Dependency updates

Sponsors

v0.17.3

What's New

Fixes

Other

v0.17.2

Features added

New Contributors

v0.17.1

Features added

Detailed list of all of the changes

New Contributors

v1.11.1

What's Changed

v1.11.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Release v1.30.0

Changes

Release v1.26.1

Changes

Release v1.26.0

Changes

Uh oh!

cloudflare-workers-and-pages bot commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying finansu with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Jan 12, 2026 •

edited

Loading

v1.1.2: fixes for `map`s and `x-go-type-skip-optional-pointer`

cloudflare-workers-and-pages bot commented Jan 12, 2026 •

edited

Loading