dependabot[bot] opened a new pull request, #4297: URL: https://github.com/apache/arrow-adbc/pull/4297
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.49.1 to 1.50.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md";>modernc.org/sqlite's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <ul> <li> <p>2026-04-24 v1.50.0:</p> <ul> <li>Upgrade to sqlite-vec <a href="https://github.com/asg017/sqlite-vec/releases/tag/v0.1.9";>v0.1.9</a>.</li> <li>Introduce <code>ColumnInfo</code>, enabling dynamic query builders and ORMs to retrieve underlying SQLite C-API metadata (<code>OriginName</code>, <code>TableName</code>, <code>DatabaseName</code>, and <code>DeclType</code>).</li> <li>This feature is exposed via the idiomatic <code>database/sql</code> escape hatch <code>(*sql.Conn).Raw()</code>, avoiding custom statement handles and keeping the standard library workflow intact.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/113";>#113</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/113";>https://gitlab.com/cznic/sqlite/-/merge_requests/113</a>), thanks Josh Bleecher Snyder!</li> </ul> </li> <li> <p>2026-04-17 v1.49.0: Upgrade to <a href="https://sqlite.org/releaselog/3_53_0.html";>SQLite 3.53.0</a>.</p> <ul> <li>Added <code>-DSQLITE_ENABLE_DBPAGE_VTAB</code> to the transpilation. See <a href="https://www.sqlite.org/dbpage.html";>"The SQLITE_DBPAGE Virtual Table"</a> for details.</li> </ul> </li> <li> <p>2026-04-06 v1.48.2:</p> <ul> <li>Fix ABI mapping mismatch in the pre-update hook trampoline that caused silent truncation of large 64-bit RowIDs.</li> <li>Ensure the Go trampoline signature correctly aligns with the public <code>sqlite3_preupdate_hook</code> C API, preventing data corruption for high-entropy keys (e.g., Snowflake IDs).</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/98";>#98</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/98";>https://gitlab.com/cznic/sqlite/-/merge_requests/98</a>), thanks Josh Bleecher Snyder!</li> <li>Fix the memory allocator used in <code>(*conn).Deserialize</code>.</li> <li>Replace <code>tls.Alloc</code> with <code>sqlite3_malloc64</code> to prevent internal allocator corruption. This ensures the buffer is safely owned by SQLite, which may resize or free it due to the <code>SQLITE_DESERIALIZE_RESIZEABLE</code> and <code>SQLITE_DESERIALIZE_FREEONCLOSE</code> flags.</li> <li>Prevent a memory leak by properly freeing the allocated buffer if fetching the main database name fails before handing ownership to SQLite.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/100";>#100</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/100";>https://gitlab.com/cznic/sqlite/-/merge_requests/100</a>), thanks Josh Bleecher Snyder!</li> <li>Fix <code>(*conn).Deserialize</code> to explicitly reject <code>nil</code> or empty byte slices.</li> <li>Prevent silent database disconnection and connection pool corruption caused by SQLite's default behavior when <code>sqlite3_deserialize</code> receives a 0-length buffer.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/101";>#101</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/101";>https://gitlab.com/cznic/sqlite/-/merge_requests/101</a>), thanks Josh Bleecher Snyder!</li> <li>Fix <code>commitHookTrampoline</code> and <code>rollbackHookTrampoline</code> signatures by removing the unused <code>pCsr</code> parameter.</li> <li>Aligns internal hook callbacks accurately with the underlying SQLite C API, cleaning up the code to prevent potential future confusion or bugs.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/102";>#102</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/102";>https://gitlab.com/cznic/sqlite/-/merge_requests/102</a>), thanks Josh Bleecher Snyder!</li> <li>Fix <code>checkptr</code> instrumentation failures during <code>go test -race</code> when registering and using virtual tables (<code>vtab</code>).</li> <li>Allocate <code>sqlite3_module</code> instances using the C allocator (<code>libc.Xcalloc</code>) instead of the Go heap. This ensures transpiled C code can safely perform pointer operations on the struct without tripping Go's pointer checks.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/103";>#103</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/103";>https://gitlab.com/cznic/sqlite/-/merge_requests/103</a>), thanks Josh Bleecher Snyder!</li> <li>Fix data race on <code>mutex.id</code> in the <code>mutexTry</code> non-recursive path.</li> <li>Ensure consistent atomic writes (<code>atomic.StoreInt32</code>) to prevent data races with atomic loads in <code>mutexHeld</code> and <code>mutexNotheld</code> during concurrent execution.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/104";>#104</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/104";>https://gitlab.com/cznic/sqlite/-/merge_requests/104</a>), thanks Josh Bleecher Snyder!</li> <li>Fix resource leak in <code>(*Backup).Commit</code> where the destination connection was not closed on error.</li> <li>Ensure <code>dstConn</code> is properly closed when <code>sqlite3_backup_finish</code> fails, preventing file descriptor, TLS, and memory leaks.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/105";>#105</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/105";>https://gitlab.com/cznic/sqlite/-/merge_requests/105</a>), thanks Josh Bleecher Snyder!</li> <li>Fix <code>Exec</code> to fully drain rows when encountering <code>SQLITE_ROW</code>, preventing silent data loss in DML statements.</li> <li>Previously, <code>Exec</code> aborted after the first row, meaning <code>INSERT</code>, <code>UPDATE</code>, or <code>DELETE</code> statements with a <code>RETURNING</code> clause would fail to process subsequent rows. The execution path now correctly loops until <code>SQLITE_DONE</code> and properly respects context cancellations during the drain loop, fully aligning with native C <code>sqlite3_exec</code> semantics.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/106";>#106</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/106";>https://gitlab.com/cznic/sqlite/-/merge_requests/106</a>), thanks Josh Bleecher Snyder!</li> <li>Fix "Shadowed err value (stmt.go)".</li> <li>See [GitLab issue <a href="https://gitlab.com/cznic/sqlite/issues/249";>#249</a>](<a href="https://gitlab.com/cznic/sqlite/-/work_items/249";>https://gitlab.com/cznic/sqlite/-/work_items/249</a>), thanks Emrecan BATI!</li> <li>Fix silent omission of virtual table savepoint callbacks by correctly setting the sqlite3_module version.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/107";>#107</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/107";>https://gitlab.com/cznic/sqlite/-/merge_requests/107</a>), thanks Josh Bleecher Snyder!</li> <li>Fix <code>vfsRead</code> to properly handle partial and fragmented reads from <code>io.Reader</code>.</li> <li>Replace <code>f.Read</code> with <code>io.ReadFull</code> to ensure the buffer is fully populated, preventing premature <code>SQLITE_IOERR_SHORT_READ</code> errors on valid mid-stream partial reads. Unread tail bytes at EOF are now efficiently zero-filled using the built-in <code>clear</code> function.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/108";>#108</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/108";>https://gitlab.com/cznic/sqlite/-/merge_requests/108</a>), thanks Josh Bleecher Snyder!</li> <li>Refactor internal error formatting to safely handle uninitialized or closed database pointers.</li> <li>Prevent a misleading "out of memory" error message when an operation fails and the underlying SQLite database handle is <code>NULL</code> (<code>db == 0</code>).</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/109";>#109</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/109";>https://gitlab.com/cznic/sqlite/-/merge_requests/109</a>), thanks Josh Bleecher Snyder!</li> <li>Fix error handling in database backup and restore initialization (<code>sqlite3_backup_init</code>).</li> <li>Ensure error codes and messages are accurately read from the destination database handle rather than hardcoding the source or remote handle. This prevents swallowed errors or mismatched "not an error" messages when a backup or restore operation fails to start.</li> <li>See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/issues/111";>#111</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/111";>https://gitlab.com/cznic/sqlite/-/merge_requests/111</a>), thanks Josh Bleecher Snyder!</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://gitlab.com/cznic/sqlite/commit/e220cc9b51f0ce842490194538f3c45daf2572b3";><code>e220cc9</code></a> CHANGELOG.md: add !113</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/a58d5e552a64d5082bdf1488db35f27ce7536c1d";><code>a58d5e5</code></a> Merge branch 'columns' into 'master'</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/119d8b1c8514ceadf0a5a4aa8a9c94514b739377";><code>119d8b1</code></a> add ColumnInfo, for inspecting query columns</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/c353a4f762ca821c6ebc6a17097e19e9dcec5306";><code>c353a4f</code></a> upgrade to sqlite-vec v0.1.9</li> <li>See full diff in <a href="https://gitlab.com/cznic/sqlite/compare/v1.49.1...v1.50.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
