dependabot[bot] opened a new pull request, #2176: URL: https://github.com/apache/iceberg-go/pull/2176
Bumps the gomod_updates group with 22 updates: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.68.0` | `1.69.0` | | [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.23.1` | `1.23.2` | | [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.8.1` | `1.8.2` | | [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.4.10` | `0.4.13` | | [github.com/aws/aws-sdk-go-v2/service/glue](https://github.com/aws/aws-sdk-go-v2) | `1.164.0` | `1.167.0` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.113.4` | `1.114.0` | | [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.30` | `4.1.33` | | [github.com/uptrace/bun](https://github.com/uptrace/bun) | `1.2.18` | `1.3.0` | | [github.com/uptrace/bun/dialect/mssqldialect](https://github.com/uptrace/bun) | `1.2.18` | `1.3.0` | | [github.com/uptrace/bun/dialect/mysqldialect](https://github.com/uptrace/bun) | `1.2.18` | `1.3.0` | | [github.com/uptrace/bun/dialect/oracledialect](https://github.com/uptrace/bun) | `1.2.18` | `1.3.0` | | [github.com/uptrace/bun/dialect/pgdialect](https://github.com/uptrace/bun) | `1.2.18` | `1.3.0` | | [github.com/uptrace/bun/dialect/sqlitedialect](https://github.com/uptrace/bun) | `1.2.18` | `1.3.0` | | [github.com/uptrace/bun/driver/sqliteshim](https://github.com/uptrace/bun) | `1.2.18` | `1.3.0` | | [github.com/uptrace/bun/extra/bundebug](https://github.com/uptrace/bun) | `1.2.18` | `1.3.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.299.0` | `0.300.0` | Updates `cloud.google.com/go/storage` from 1.68.0 to 1.69.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/googleapis/google-cloud-go/releases";>cloud.google.com/go/storage's releases</a>.</em></p> <blockquote> <h2>storage: v1.69.0</h2> <h2><a href="https://github.com/googleapis/google-cloud-go/compare/storage/v1.68.0...storage/v1.69.0";>1.69.0</a> (2026-10-01)</h2> <h3>Features</h3> <ul> <li><strong>all:</strong> Update supported go versions (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20520";>#20520</a>) (<a href="https://github.com/googleapis/google-cloud-go/commit/90413d3e9d381ef4b92e3c496d98b023c5b2d8cc";>90413d3</a>)</li> <li><strong>storage:</strong> Add read stall retry for gRPC storage client (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20525";>#20525</a>) (<a href="https://github.com/googleapis/google-cloud-go/commit/8bfc4863da4151976a5e4629ef9dce429edb43d5";>8bfc486</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>storage:</strong> Add App Hub storage.googleapis.com prefix to destination.id (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20569";>#20569</a>) (<a href="https://github.com/googleapis/google-cloud-go/commit/2bca92a333bcadaa78b7c3b841e5a293e3a681d7";>2bca92a</a>)</li> <li><strong>storage:</strong> Follow-ups for read stall retry (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20577";>#20577</a>) (<a href="https://github.com/googleapis/google-cloud-go/commit/24eacd52ffc1697341d5f6a8380abc656292367a";>24eacd5</a>)</li> <li><strong>storage:</strong> Update PartSize documentation and optimize cleanup (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/19930";>#19930</a>) (<a href="https://github.com/googleapis/google-cloud-go/commit/3d09abf7dd357cbf5c1022a7e65c7859d617ccd6";>3d09abf</a>)</li> <li><strong>various:</strong> Address format directive issues (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20547";>#20547</a>) (<a href="https://github.com/googleapis/google-cloud-go/commit/e2e104731999b3bfc75ed0b8f2d71844ced3b073";>e2e1047</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/googleapis/google-cloud-go/commit/1b10ddfc0fc88f9f30f2e428830a736fb563650c";><code>1b10ddf</code></a> chore: release main (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20515";>#20515</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/e6a8b83615a5efaf7a754e2b565bf971bff77b6f";><code>e6a8b83</code></a> chore: address stale grpc dependency declarations (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20539";>#20539</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/56ce1ca05089a895ce4f33e89f6b4f2c3060dead";><code>56ce1ca</code></a> test(spanner): unflake TestIntegration_DbRemovalIsFatal across all channels (...</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/5300f6abc4dbf1adb24beb0f635a2fd7e388f0ed";><code>5300f6a</code></a> chore(main): release storage 1.68.0 (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20537";>#20537</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/8a55dee7d694d1b0b35f9eaff8a0517bffec320d";><code>8a55dee</code></a> fix(storage): minor documentation fixes (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20531";>#20531</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/19651eab31216a6decd2f543d9a186abe97e2ae1";><code>19651ea</code></a> feat(google/cloud/backupdr/v1beta): add backupdr (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20534";>#20534</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/c5626adf844e75388b25b675cc722226b3333be7";><code>c5626ad</code></a> feat(google/cloud/networkservices/v1beta1): add networkservices (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20533";>#20533</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/e6f37a362b6e37b0bc74e77b8d7f151dc7443fb8";><code>e6f37a3</code></a> feat: update API sources and regenerate (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/20526";>#20526</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/6f663ea66ca375d11b18e5a83a2c82dbc2a2424a";><code>6f663ea</code></a> chore(storage): add TryGet to BufferPool and clean up global memory limit (<a href="https://redirect.github.com/googleapis/google-cloud-go/issues/2";>#2</a>...</li> <li><a href="https://github.com/googleapis/google-cloud-go/commit/be88c6a045e0f863c0a25144f8984f25b513e3ab";><code>be88c6a</code></a> test(spanner): unflake TestIntegration_DbRemovalRecovery as TestIntegration_D...</li> <li>Additional commits viewable in <a href="https://github.com/googleapis/google-cloud-go/compare/compute/v1.68.0...compute/v1.69.0";>compare view</a></li> </ul> </details> <br /> Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.23.1 to 1.23.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Azure/azure-sdk-for-go/releases";>github.com/Azure/azure-sdk-for-go/sdk/azcore's releases</a>.</em></p> <blockquote> <h2>sdk/azcore/v1.23.2</h2> <h2>1.23.2 (2026-09-28)</h2> <h3>Bugs Fixed</h3> <ul> <li>Fixed unmarshalling <code>datetime.RFC7231</code> to use a fixed <code>GMT</code> zone.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/e6d24152235d7dc6ca7819916325f8e76387522f";><code>e6d2415</code></a> Unmarshalling RFC7231 sets GMT time zone (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/27613";>#27613</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/27cb57002b4cb2dd29c148d9c6f824e1e98b0d02";><code>27cb570</code></a> Update dependencies (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/27624";>#27624</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/14e5800862e490cab96a5442e74f73fc4ca44cb9";><code>14e5800</code></a> Update CI to the latest two versions of Go (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/27623";>#27623</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/f73af49dcf734bb4d9f93fc6581acff5fc849ba4";><code>f73af49</code></a> Configurations: 'specification/compute/resource-manager/Microsoft.Compute/Bu...</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/339802c04dbbaf29324f42f95f96c3a326c3d2ed";><code>339802c</code></a> Add repository access guidance to deprecation guide (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/27602";>#27602</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/a23355a57855e10cf705501f033c42ecd176065e";><code>a23355a</code></a> [AutoPR sdk-resourcemanager/compute/armcompute]-generated-from-SDK Generation...</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/1d0aa557c8b7f180857ba73e4ee5779d12d26448";><code>1d0aa55</code></a> Remove feature branches from CI triggers [skip ci] (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/27612";>#27612</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/a5cb5a0da72cc552c248f77c3c2d9fc837dc3c02";><code>a5cb5a0</code></a> Update storage CODEOWNERS: add Gunjan Singh, remove Sourav Gupta (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/27607";>#27607</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/31f47a8bf5556f1fd32ad2e15ded7a8a440bbaf9";><code>31f47a8</code></a> [AutoPR sdk-resourcemanager/storage/armstorage]-generated-from-SDK Generation...</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/caa10be87d8dfc44cfb7d2664eec95df9c5c3bda";><code>caa10be</code></a> Deprecate armweightsandbiases (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/27560";>#27560</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.23.1...sdk/azcore/v1.23.2";>compare view</a></li> </ul> </details> <br /> Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.8.1 to 1.8.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Azure/azure-sdk-for-go/releases";>github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases</a>.</em></p> <blockquote> <h2>sdk/storage/azblob/v1.8.2</h2> <h2>1.8.2 (2026-10-01)</h2> <h3>Bugs Fixed</h3> <ul> <li>Fixed <code>blob.Client.GetSASURL()</code> generating a SAS that omitted the pinned blob version from the signed string-to-sign when called on a client returned by <code>WithVersionID</code>. The resulting SAS was byte-for-byte identical to an ordinary base-blob (<code>sr=b</code>) SAS and, once corrected to include <code>sr=bv</code>, would still fail to authenticate because the version identifier was never included in the signed payload. Both the resource-type binding and the signed version identifier are now correctly propagated for <code>SignWithSharedKey</code> and <code>SignWithUserDelegation</code>.</li> <li>Fixed <code>GetSASURL()</code> on <code>blob.Client</code>, <code>container.Client</code>, and <code>service.Client</code> (and the specialized blob clients <code>blockblob.Client</code>, <code>appendblob.Client</code>, <code>pageblob.Client</code> which delegate to <code>blob.Client</code>) appending a duplicated <code>?</code> to the resulting URL when called on a client whose URL already contained a query string (e.g. a client returned by <code>WithSnapshot</code> or <code>WithVersionID</code>, or a custom endpoint with pre-existing query parameters), which produced a malformed SAS URL.</li> </ul> <h3>Other Changes</h3> <ul> <li>Updated <code>azcore</code> version to <code>1.23.2</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/54746265023eaf4025bb53f3b869cae2489d1f27";><code>5474626</code></a> Prepare azidentity v1.8.2 for release (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24108";>#24108</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/4d55b0c696c6f71d4223e66eb28ae3b28d7efe66";><code>4d55b0c</code></a> [tracing/azotel] Enable span link and propagation support (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24081";>#24081</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/dc2f5075a50d6e2cbe41b7787fe6e3d8b5eac00f";><code>dc2f507</code></a> Increment package version after release of storage/azdatalake (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24105";>#24105</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/7efafe444a02db5f11f642ba97c0005d7cffdfac";><code>7efafe4</code></a> Increment package version after release of storage/azfile (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24101";>#24101</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/ae43d8b629bdcc1639597b84ca18c280d7674164";><code>ae43d8b</code></a> Increment package version after release of storage/azblob (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24102";>#24102</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/03b82ac4ee6351d00802b79a62fc01e98bba5080";><code>03b82ac</code></a> prep for azdatalake preview (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24103";>#24103</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/6ee011a6cdfeac68ba880fdcea2065682e3c561d";><code>6ee011a</code></a> [Storage] Prep for release stg97 - Blob and Files (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24100";>#24100</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/db0a6cb483d2a07fa64e236ff8757b669932c770";><code>db0a6cb</code></a> [Storage] stg97 features (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24080";>#24080</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/d9d7f1bf1dd8e33417c6458787666b0c849c9bef";><code>d9d7f1b</code></a> Support Linux environment (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24095";>#24095</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/57bab2115da10765d76d289dfb1ae5405dac805e";><code>57bab21</code></a> Parameterize test-pipeline version separator (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/24094";>#24094</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Azure/azure-sdk-for-go/compare/sdk/azidentity/v1.8.1...sdk/azidentity/v1.8.2";>compare view</a></li> </ul> </details> <br /> Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.4.10 to 0.4.13 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/4e901ebf1a796a679ecec957285b65f5e546816d";><code>4e901eb</code></a> Release 2026-10-01</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/e65b6c619615b89c242059c103a8227c5171033a";><code>e65b6c6</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/0fb4a765121be0d269ffa10d47f7a087aed18711";><code>0fb4a76</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d4a0d302e074abce7115eab9d005580c10ffdc27";><code>d4a0d30</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/171d404e8e0c30901c94ce0f27967fc32b5c1abe";><code>171d404</code></a> Add s3 transfermanager downloader fuzzy test (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3569";>#3569</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2edd815ab36df48a697e3e9baae6deacf060fd35";><code>2edd815</code></a> Parametrize which protocl we use on eventstream tests (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3573";>#3573</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/55377d1abe8000067ce1f8c8dd25752ef89f49ea";><code>55377d1</code></a> Release 2026-09-30</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/7418acf3c735644b9d739554b07604e056382fda";><code>7418acf</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/8e21aaa10c34cfe18bffadccb49778e56375e35e";><code>8e21aaa</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/9b78075629a6719eea2a863c7c2e47ec20810861";><code>9b78075</code></a> Update API model</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/feature/s3/transfermanager/v0.4.10...feature/s3/transfermanager/v0.4.13";>compare view</a></li> </ul> </details> <br /> Updates `github.com/aws/aws-sdk-go-v2/service/glue` from 1.164.0 to 1.167.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/7c25c211744bdcff47a7203a7a894b1241f9da50";><code>7c25c21</code></a> Release 2024-06-26</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/b374423feaf0b04f01c7624b10915871e589b8a1";><code>b374423</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/923f54ea6016e1c70ad45ba0854e7361a72c3ba6";><code>923f54e</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/5f3bdfcf190150f62a7a07a03bc32d9c58a68f2e";><code>5f3bdfc</code></a> track changes for string_array endpoint parameters (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/2699";>#2699</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2b4498c633741e24ff4930313610096601dc4036";><code>2b4498c</code></a> Release 2024-06-25</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/332d372bb946f0d50cae58f9401b9c1244e4b818";><code>332d372</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/9397b8d8c05eb1528910ba81881797e7c0e53d17";><code>9397b8d</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/674e1e4412ce44325902125c935ce124d0bfaf4f";><code>674e1e4</code></a> Release 2024-06-24</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/406eeb4367bab3ac49b75fbd2d842186e961f4f0";><code>406eeb4</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/17bd894f3c3842d21d5963bc23213397557c3105";><code>17bd894</code></a> Update endpoints model</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.164.0...service/ec2/v1.167.0";>compare view</a></li> </ul> </details> <br /> Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.113.4 to 1.114.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/55377d1abe8000067ce1f8c8dd25752ef89f49ea";><code>55377d1</code></a> Release 2026-09-30</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/7418acf3c735644b9d739554b07604e056382fda";><code>7418acf</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/8e21aaa10c34cfe18bffadccb49778e56375e35e";><code>8e21aaa</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/9b78075629a6719eea2a863c7c2e47ec20810861";><code>9b78075</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/404700d41c3f8becfc6188a279a1cdee192badc3";><code>404700d</code></a> Release 2026-09-29</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/bc6eb7570802f4e56870423bf01d26c546eb40e7";><code>bc6eb75</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/51ae28bb93d561848a68b930397fcccbe1480c8a";><code>51ae28b</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2babe29100f7b8d4cc92bf7fc16e091b5f9f7df0";><code>2babe29</code></a> Update smithy-go workflow behavior for forks (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3566";>#3566</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/4b034e5ef60edeb9b4306851815de4ade5289955";><code>4b034e5</code></a> Release 2026-09-28</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/f75fa5677fa3a0fe8bd99d3b80ee85f30c3ee30f";><code>f75fa56</code></a> Regenerated Clients</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.113.4...service/s3/v1.114.0";>compare view</a></li> </ul> </details> <br /> Updates `github.com/pierrec/lz4/v4` from 4.1.30 to 4.1.33 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pierrec/lz4/commit/b3ae24d689a8c0020f1567fc424c53bde9dfc4f7";><code>b3ae24d</code></a> lz4: document OnBlockDone concurrency</li> <li><a href="https://github.com/pierrec/lz4/commit/d9853db5175e7be1105f2b75f5d6f905649c7825";><code>d9853db</code></a> xxh32: fix a stale BlockSize comment</li> <li><a href="https://github.com/pierrec/lz4/commit/4972926b7d018145fb5c954294478c3adc1e7ac1";><code>4972926</code></a> lz4stream: stop shadowing the data channel in initR</li> <li><a href="https://github.com/pierrec/lz4/commit/637492827d81560d9a806344b3bc0c0e563351ba";><code>6374928</code></a> lz4: drop an else after return in CompressingReader</li> <li><a href="https://github.com/pierrec/lz4/commit/6b13fb9e541ddb0951a820d5c77679c4d1e22ae8";><code>6b13fb9</code></a> lz4: clean up comments</li> <li><a href="https://github.com/pierrec/lz4/commit/0a60c23124f73687e88390812500703b7d7a6868";><code>0a60c23</code></a> Merge pull request <a href="https://redirect.github.com/pierrec/lz4/issues/277";>#277</a> from honeycombio/lizf.testdata-licensing</li> <li><a href="https://github.com/pierrec/lz4/commit/3b766df105c4058285f8d438b03aa82eac0fd28e";><code>3b766df</code></a> testdata: record where each file comes from and its licence</li> <li><a href="https://github.com/pierrec/lz4/commit/d9034fec5bcccc573436692af42de9b8b2e8c960";><code>d9034fe</code></a> testdata: replace the bzImage sample with a C-made legacy frame of text</li> <li><a href="https://github.com/pierrec/lz4/commit/2baa0ce64c8d06a2ec19a0df56bbb58b734a952e";><code>2baa0ce</code></a> Merge pull request <a href="https://redirect.github.com/pierrec/lz4/issues/276";>#276</a> from honeycombio/lizf.legacy-writer-bound</li> <li><a href="https://github.com/pierrec/lz4/commit/b9c03e86b4a8ba5fc8998036c7a9569a9b302961";><code>b9c03e8</code></a> Merge pull request <a href="https://redirect.github.com/pierrec/lz4/issues/275";>#275</a> from honeycombio/lizf.lz4c-install</li> <li>Additional commits viewable in <a href="https://github.com/pierrec/lz4/compare/v4.1.30...v4.1.33";>compare view</a></li> </ul> </details> <br /> Updates `github.com/uptrace/bun` from 1.2.18 to 1.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uptrace/bun/releases";>github.com/uptrace/bun's releases</a>.</em></p> <blockquote> <h2>v1.3.0</h2> <p>Please refer to <a href="https://github.com/uptrace/bun/blob/master/CHANGELOG.md";>CHANGELOG.md</a> for details</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uptrace/bun/blob/master/CHANGELOG.md";>github.com/uptrace/bun's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/uptrace/bun/compare/v1.2.18...v1.3.0";>1.3.0</a> (2026-09-30)</h1> <h3>Breaking Changes</h3> <p>Compared with v1.2.18, this release contains four categories of breaking changes. Two are tracked in <a href="https://redirect.github.com/uptrace/bun/issues/1363";>#1363</a>, and two additional behavioral changes were identified during the release audit.</p> <ul> <li><strong>Count, Limit, and Offset use <code>int64</code></strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1348";>#1348</a>). <code>DeleteQuery.Limit</code>, <code>SelectQuery.Limit</code>, <code>SelectQuery.Offset</code>, <code>SelectQuery.Count</code>, <code>SelectQuery.ScanAndCount</code>, and <code>UpdateQuery.Limit</code> changed from <code>int</code> parameters or return values to <code>int64</code>. Update affected variables and assignments to <code>int64</code>, or add explicit conversions at call sites.</li> <li><strong>pgdriver verifies TLS certificates</strong> (<a href="https://redirect.github.com/uptrace/bun/issues/1398";>#1398</a>, fixed by <a href="https://redirect.github.com/uptrace/bun/pull/1402";>#1402</a>). <code>pgdriver.WithInsecure(false)</code> now verifies the server certificate and hostname. Configure valid trust roots and a matching server name. Code that intentionally needs unverified TLS must now opt in explicitly with <code>WithTLSConfig(&tls.Config{InsecureSkipVerify: true})</code>; this is not recommended for production.</li> <li><strong>Duplicate migration IDs are rejected</strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1357";>#1357</a>). <code>Migrations.Discover</code> now returns an error when different migration base filenames share an ID instead of silently overwriting one migration. This also rejects a Go migration registered with <code>MustRegister</code> or <code>Register</code> when <code>Discover</code> encounters a differently named SQL migration with the same ID. Rename conflicting migration files so each ID has a single base filename; a matching <code>.up.sql</code>/<code>.down.sql</code> pair remains valid.</li> <li><strong>NUL-containing strings are rejected</strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1406";>#1406</a>). <code>schema.BaseDialect.AppendString</code> now reports a formatting error instead of silently stripping NUL bytes. Reject or sanitize such input before building queries. This affects the PostgreSQL, SQLite, Oracle, and MSSQL base dialect paths; MySQL's override is unchanged.</li> </ul> <h3>Security</h3> <ul> <li><strong>pgdriver:</strong> verify server certificate for WithInsecure(false) (<a href="https://redirect.github.com/uptrace/bun/issues/1402";>#1402</a>) (<a href="https://github.com/uptrace/bun/commit/023fe2412daf533a80fdcd99f54043c0efbafc37";>023fe24</a>)</li> <li><strong>schema:</strong> fail closed when a string contains a NUL byte (<a href="https://redirect.github.com/uptrace/bun/issues/1406";>#1406</a>) (<a href="https://github.com/uptrace/bun/commit/276ac9fc9354c209049021576b4f44425854eb41";>276ac9f</a>)</li> <li><strong>schema:</strong> prevent line-comment SQL injection with negative numbers (CVE-2024-44906 class) (<a href="https://redirect.github.com/uptrace/bun/issues/1396";>#1396</a>) (<a href="https://github.com/uptrace/bun/commit/13f55cd2e8dfcd5a27365d5eeed572533e940115";>13f55cd</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>add LineComment function for handling line comment in formatQuery (<a href="https://github.com/uptrace/bun/commit/49b0464e9b965f902d4c377be6ba744e4324ea2f";>49b0464</a>)</li> <li><strong>automigrate:</strong> include scanonly fields in the BunModelInspector output (<a href="https://github.com/uptrace/bun/commit/0a83ffc97f9e0ed8ecd26a15481c8edfc7d24e04";>0a83ffc</a>)</li> <li><strong>bunotel:</strong> honor WithMeterProvider when reporting DB stats metrics (<a href="https://github.com/uptrace/bun/commit/048005b932a10b771bfd0797d18394ce62de36a3";>048005b</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1270";>#1270</a></li> <li>copy execution state in SelectQuery.Clone (<a href="https://github.com/uptrace/bun/commit/9dad9acb486b54b4093bfa789ce7221272c9e414";>9dad9ac</a>)</li> <li>copy whereHasOr field in SelectQuery.Clone() to preserve soft-delete WhereOr state (<a href="https://github.com/uptrace/bun/commit/e7611b7afbc996ee1fba4e5b4bb1fc3f8213ea4a";>e7611b7</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1321";>#1321</a></li> <li>correct error message prefix and error type (<a href="https://github.com/uptrace/bun/commit/89bf06d9bddd3fd1aefbb2db784b0124b5385cbd";>89bf06d</a>)</li> <li><strong>db:</strong> propagate transaction context into RunInTx callback (<a href="https://redirect.github.com/uptrace/bun/issues/1381";>#1381</a>) (<a href="https://github.com/uptrace/bun/commit/640437e757daecb853027a08d4d6cdb5b6be0d68";>640437e</a>)</li> <li>detect duplicate migration IDs during Discover (<a href="https://github.com/uptrace/bun/commit/b8f7b776e31e4e549fd5a71d9430670ed4d80dc8";>b8f7b77</a>)</li> <li>detect OR separators case-insensitively for whereHasOr (<a href="https://github.com/uptrace/bun/commit/1110700cea17dd5866a461f4d9ee3803a6df63fa";>1110700</a>)</li> <li>improve formatQuery in pgdriver for queries with apostrophes in comments (<a href="https://redirect.github.com/uptrace/bun/issues/1349";>#1349</a>) (<a href="https://github.com/uptrace/bun/commit/93974c9c250610227d277af720d78226981990cd";>93974c9</a>)</li> <li><strong>migrate:</strong> do not append blank lines to SQL query (<a href="https://github.com/uptrace/bun/commit/d32af163e931679eee18fc5fac67d80123a97cba";>d32af16</a>)</li> <li><strong>migrate:</strong> ignore --bun:skip with a blank query (<a href="https://github.com/uptrace/bun/commit/a34fd3ae835cbc04600a06a3a48afc5f1d742baa";>a34fd3a</a>)</li> <li><strong>migrate:</strong> surface lost SQL migration finalizer errors (<a href="https://redirect.github.com/uptrace/bun/issues/1389";>#1389</a>) (<a href="https://github.com/uptrace/bun/commit/1a289f81f4488a923a288fd3648b499b030877b1";>1a289f8</a>)</li> <li><strong>mssql:</strong> apply the unicode N prefix to JSON literals (<a href="https://github.com/uptrace/bun/commit/5eb86eeba2c2cc8bf5b11478440eb88a2e854254";>5eb86ee</a>)</li> <li><strong>pgdialect:</strong> return an error instead of panicking on empty array input (<a href="https://github.com/uptrace/bun/commit/a3c48dde686b275803eb03c6aa898f8237869223";>a3c48dd</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1431";>#1431</a></li> <li><strong>pgdriver:</strong> add slice of byte array support to pgdialect (<a href="https://redirect.github.com/uptrace/bun/issues/1391";>#1391</a>) (<a href="https://github.com/uptrace/bun/commit/0e5e8682686253e24add0e8512d351d5e32dd9bf";>0e5e868</a>)</li> <li><strong>pgdriver:</strong> send required params during startup (<a href="https://redirect.github.com/uptrace/bun/issues/1374";>#1374</a>) (<a href="https://github.com/uptrace/bun/commit/e402298277a4ad028af026cddcadfc04d52d7dff";>e402298</a>)</li> <li><strong>query:</strong> remove debug print and simplify union wrapping (<a href="https://github.com/uptrace/bun/commit/4bdf4d8cc5388adb6c9ba752b7a62875a698a13b";>4bdf4d8</a>)</li> <li><strong>query:</strong> skip UNION wrapping for SQLite (<a href="https://github.com/uptrace/bun/commit/777c8e23cc25e9e97d929f98227332888ee2f654";>777c8e2</a>)</li> <li><strong>relation:</strong> do not duplicate joined models on a shared base model (<a href="https://github.com/uptrace/bun/commit/856d4d92682dad7fddb796fda6a286d7189f9aca";>856d4d9</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1386";>#1386</a></li> <li>resolve map column types before scanning rows (<a href="https://github.com/uptrace/bun/commit/af3f6dc3cfd5e39f0453f92342e1c9f5fe0eaa2c";>af3f6dc</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1434";>#1434</a></li> <li>resolve nested Relation() with circular struct composition (<a href="https://github.com/uptrace/bun/commit/dd2e4c98621fb28506f48577e9a487326657cbcd";>dd2e4c9</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1243";>#1243</a></li> <li>return an error instead of panicking when scanning JSON into an unaddressable value (<a href="https://github.com/uptrace/bun/commit/c323fa3b4c37968b2fc2182f5f2576b0a7921fc2";>c323fa3</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1306";>#1306</a></li> <li><strong>schema:</strong> do not reject pointers stored in an interface (<a href="https://github.com/uptrace/bun/commit/cc2cd23a929cd2bad50506f068f1ef65e642eaad";>cc2cd23</a>)</li> <li><strong>schema:</strong> escape backslash in AppendJSON without consuming the next byte (<a href="https://redirect.github.com/uptrace/bun/issues/1405";>#1405</a>) (<a href="https://github.com/uptrace/bun/commit/445907b421ad4d55c2d1de1bb9696070163b2792";>445907b</a>)</li> <li><strong>schema:</strong> resolve m2m BasePKs through the base table's FieldMap (<a href="https://redirect.github.com/uptrace/bun/issues/1375";>#1375</a>) (<a href="https://github.com/uptrace/bun/commit/9f4d368352b903bbb757a672efea357222e8a611";>9f4d368</a>)</li> <li><strong>schema:</strong> return an error when scanning NULL into an unaddressable value (<a href="https://github.com/uptrace/bun/commit/29e4e6e0abe007e6c69ca07272a535e6d9a9fc7e";>29e4e6e</a>)</li> <li><strong>schema:</strong> use dialect-specific AppendBool in QueryGen.Append (<a href="https://redirect.github.com/uptrace/bun/issues/1373";>#1373</a>) (<a href="https://github.com/uptrace/bun/commit/e91aa81e96c562e68aef5bfb0c558eca47402f1b";>e91aa81</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uptrace/bun/commit/7d78f9c936c4db97a06448cadd029f730e53fa25";><code>7d78f9c</code></a> docs: refine v1.3.0 changelog</li> <li><a href="https://github.com/uptrace/bun/commit/8de7fb6a19da34115233638dae9ddbd882c886db";><code>8de7fb6</code></a> fix(schema): reject NUL before opening string literal</li> <li><a href="https://github.com/uptrace/bun/commit/ea8b47c4ab4d6e22b9d8f44b5ad50486d0de5972";><code>ea8b47c</code></a> docs: document v1.3.0 breaking changes</li> <li><a href="https://github.com/uptrace/bun/commit/e73781ce1f9b68c275a96a3c2b0e8255903e0a6a";><code>e73781c</code></a> chore: release v1.3.0 (release.sh)</li> <li><a href="https://github.com/uptrace/bun/commit/691d97d1812f077606501b33afa77b8adf421b36";><code>691d97d</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1428";>#1428</a> from visheshgubrani/feat/uuid-support</li> <li><a href="https://github.com/uptrace/bun/commit/74e036c846cc7d3a7d2041fd743ae6d066990f50";><code>74e036c</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1432";>#1432</a> from chiliec/fix-array-parser-empty-input</li> <li><a href="https://github.com/uptrace/bun/commit/854cf9027e722522dae33ebf8581cdbc00cb69d8";><code>854cf90</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1435";>#1435</a> from hsdfat/fix/map-scan-column-types-deadlock</li> <li><a href="https://github.com/uptrace/bun/commit/aff017d2943d47471d5b280d486d47413046b3de";><code>aff017d</code></a> refactor(schema): isolate UUID handlers behind build tags</li> <li><a href="https://github.com/uptrace/bun/commit/af3f6dc3cfd5e39f0453f92342e1c9f5fe0eaa2c";><code>af3f6dc</code></a> fix: resolve map column types before scanning rows</li> <li><a href="https://github.com/uptrace/bun/commit/e22ddd3e7bf7a938ed68639c6f4720af2cbc2544";><code>e22ddd3</code></a> feat(schema): support Go 1.27 stdlib uuid.UUID (<a href="https://redirect.github.com/uptrace/bun/issues/1427";>#1427</a>)</li> <li>Additional commits viewable in <a href="https://github.com/uptrace/bun/compare/v1.2.18...v1.3.0";>compare view</a></li> </ul> </details> <br /> Updates `github.com/uptrace/bun/dialect/mssqldialect` from 1.2.18 to 1.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uptrace/bun/releases";>github.com/uptrace/bun/dialect/mssqldialect's releases</a>.</em></p> <blockquote> <h2>v1.3.0</h2> <p>Please refer to <a href="https://github.com/uptrace/bun/blob/master/CHANGELOG.md";>CHANGELOG.md</a> for details</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uptrace/bun/blob/master/CHANGELOG.md";>github.com/uptrace/bun/dialect/mssqldialect's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/uptrace/bun/compare/v1.2.18...v1.3.0";>1.3.0</a> (2026-09-30)</h1> <h3>Breaking Changes</h3> <p>Compared with v1.2.18, this release contains four categories of breaking changes. Two are tracked in <a href="https://redirect.github.com/uptrace/bun/issues/1363";>#1363</a>, and two additional behavioral changes were identified during the release audit.</p> <ul> <li><strong>Count, Limit, and Offset use <code>int64</code></strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1348";>#1348</a>). <code>DeleteQuery.Limit</code>, <code>SelectQuery.Limit</code>, <code>SelectQuery.Offset</code>, <code>SelectQuery.Count</code>, <code>SelectQuery.ScanAndCount</code>, and <code>UpdateQuery.Limit</code> changed from <code>int</code> parameters or return values to <code>int64</code>. Update affected variables and assignments to <code>int64</code>, or add explicit conversions at call sites.</li> <li><strong>pgdriver verifies TLS certificates</strong> (<a href="https://redirect.github.com/uptrace/bun/issues/1398";>#1398</a>, fixed by <a href="https://redirect.github.com/uptrace/bun/pull/1402";>#1402</a>). <code>pgdriver.WithInsecure(false)</code> now verifies the server certificate and hostname. Configure valid trust roots and a matching server name. Code that intentionally needs unverified TLS must now opt in explicitly with <code>WithTLSConfig(&tls.Config{InsecureSkipVerify: true})</code>; this is not recommended for production.</li> <li><strong>Duplicate migration IDs are rejected</strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1357";>#1357</a>). <code>Migrations.Discover</code> now returns an error when different migration base filenames share an ID instead of silently overwriting one migration. This also rejects a Go migration registered with <code>MustRegister</code> or <code>Register</code> when <code>Discover</code> encounters a differently named SQL migration with the same ID. Rename conflicting migration files so each ID has a single base filename; a matching <code>.up.sql</code>/<code>.down.sql</code> pair remains valid.</li> <li><strong>NUL-containing strings are rejected</strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1406";>#1406</a>). <code>schema.BaseDialect.AppendString</code> now reports a formatting error instead of silently stripping NUL bytes. Reject or sanitize such input before building queries. This affects the PostgreSQL, SQLite, Oracle, and MSSQL base dialect paths; MySQL's override is unchanged.</li> </ul> <h3>Security</h3> <ul> <li><strong>pgdriver:</strong> verify server certificate for WithInsecure(false) (<a href="https://redirect.github.com/uptrace/bun/issues/1402";>#1402</a>) (<a href="https://github.com/uptrace/bun/commit/023fe2412daf533a80fdcd99f54043c0efbafc37";>023fe24</a>)</li> <li><strong>schema:</strong> fail closed when a string contains a NUL byte (<a href="https://redirect.github.com/uptrace/bun/issues/1406";>#1406</a>) (<a href="https://github.com/uptrace/bun/commit/276ac9fc9354c209049021576b4f44425854eb41";>276ac9f</a>)</li> <li><strong>schema:</strong> prevent line-comment SQL injection with negative numbers (CVE-2024-44906 class) (<a href="https://redirect.github.com/uptrace/bun/issues/1396";>#1396</a>) (<a href="https://github.com/uptrace/bun/commit/13f55cd2e8dfcd5a27365d5eeed572533e940115";>13f55cd</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>add LineComment function for handling line comment in formatQuery (<a href="https://github.com/uptrace/bun/commit/49b0464e9b965f902d4c377be6ba744e4324ea2f";>49b0464</a>)</li> <li><strong>automigrate:</strong> include scanonly fields in the BunModelInspector output (<a href="https://github.com/uptrace/bun/commit/0a83ffc97f9e0ed8ecd26a15481c8edfc7d24e04";>0a83ffc</a>)</li> <li><strong>bunotel:</strong> honor WithMeterProvider when reporting DB stats metrics (<a href="https://github.com/uptrace/bun/commit/048005b932a10b771bfd0797d18394ce62de36a3";>048005b</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1270";>#1270</a></li> <li>copy execution state in SelectQuery.Clone (<a href="https://github.com/uptrace/bun/commit/9dad9acb486b54b4093bfa789ce7221272c9e414";>9dad9ac</a>)</li> <li>copy whereHasOr field in SelectQuery.Clone() to preserve soft-delete WhereOr state (<a href="https://github.com/uptrace/bun/commit/e7611b7afbc996ee1fba4e5b4bb1fc3f8213ea4a";>e7611b7</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1321";>#1321</a></li> <li>correct error message prefix and error type (<a href="https://github.com/uptrace/bun/commit/89bf06d9bddd3fd1aefbb2db784b0124b5385cbd";>89bf06d</a>)</li> <li><strong>db:</strong> propagate transaction context into RunInTx callback (<a href="https://redirect.github.com/uptrace/bun/issues/1381";>#1381</a>) (<a href="https://github.com/uptrace/bun/commit/640437e757daecb853027a08d4d6cdb5b6be0d68";>640437e</a>)</li> <li>detect duplicate migration IDs during Discover (<a href="https://github.com/uptrace/bun/commit/b8f7b776e31e4e549fd5a71d9430670ed4d80dc8";>b8f7b77</a>)</li> <li>detect OR separators case-insensitively for whereHasOr (<a href="https://github.com/uptrace/bun/commit/1110700cea17dd5866a461f4d9ee3803a6df63fa";>1110700</a>)</li> <li>improve formatQuery in pgdriver for queries with apostrophes in comments (<a href="https://redirect.github.com/uptrace/bun/issues/1349";>#1349</a>) (<a href="https://github.com/uptrace/bun/commit/93974c9c250610227d277af720d78226981990cd";>93974c9</a>)</li> <li><strong>migrate:</strong> do not append blank lines to SQL query (<a href="https://github.com/uptrace/bun/commit/d32af163e931679eee18fc5fac67d80123a97cba";>d32af16</a>)</li> <li><strong>migrate:</strong> ignore --bun:skip with a blank query (<a href="https://github.com/uptrace/bun/commit/a34fd3ae835cbc04600a06a3a48afc5f1d742baa";>a34fd3a</a>)</li> <li><strong>migrate:</strong> surface lost SQL migration finalizer errors (<a href="https://redirect.github.com/uptrace/bun/issues/1389";>#1389</a>) (<a href="https://github.com/uptrace/bun/commit/1a289f81f4488a923a288fd3648b499b030877b1";>1a289f8</a>)</li> <li><strong>mssql:</strong> apply the unicode N prefix to JSON literals (<a href="https://github.com/uptrace/bun/commit/5eb86eeba2c2cc8bf5b11478440eb88a2e854254";>5eb86ee</a>)</li> <li><strong>pgdialect:</strong> return an error instead of panicking on empty array input (<a href="https://github.com/uptrace/bun/commit/a3c48dde686b275803eb03c6aa898f8237869223";>a3c48dd</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1431";>#1431</a></li> <li><strong>pgdriver:</strong> add slice of byte array support to pgdialect (<a href="https://redirect.github.com/uptrace/bun/issues/1391";>#1391</a>) (<a href="https://github.com/uptrace/bun/commit/0e5e8682686253e24add0e8512d351d5e32dd9bf";>0e5e868</a>)</li> <li><strong>pgdriver:</strong> send required params during startup (<a href="https://redirect.github.com/uptrace/bun/issues/1374";>#1374</a>) (<a href="https://github.com/uptrace/bun/commit/e402298277a4ad028af026cddcadfc04d52d7dff";>e402298</a>)</li> <li><strong>query:</strong> remove debug print and simplify union wrapping (<a href="https://github.com/uptrace/bun/commit/4bdf4d8cc5388adb6c9ba752b7a62875a698a13b";>4bdf4d8</a>)</li> <li><strong>query:</strong> skip UNION wrapping for SQLite (<a href="https://github.com/uptrace/bun/commit/777c8e23cc25e9e97d929f98227332888ee2f654";>777c8e2</a>)</li> <li><strong>relation:</strong> do not duplicate joined models on a shared base model (<a href="https://github.com/uptrace/bun/commit/856d4d92682dad7fddb796fda6a286d7189f9aca";>856d4d9</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1386";>#1386</a></li> <li>resolve map column types before scanning rows (<a href="https://github.com/uptrace/bun/commit/af3f6dc3cfd5e39f0453f92342e1c9f5fe0eaa2c";>af3f6dc</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1434";>#1434</a></li> <li>resolve nested Relation() with circular struct composition (<a href="https://github.com/uptrace/bun/commit/dd2e4c98621fb28506f48577e9a487326657cbcd";>dd2e4c9</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1243";>#1243</a></li> <li>return an error instead of panicking when scanning JSON into an unaddressable value (<a href="https://github.com/uptrace/bun/commit/c323fa3b4c37968b2fc2182f5f2576b0a7921fc2";>c323fa3</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1306";>#1306</a></li> <li><strong>schema:</strong> do not reject pointers stored in an interface (<a href="https://github.com/uptrace/bun/commit/cc2cd23a929cd2bad50506f068f1ef65e642eaad";>cc2cd23</a>)</li> <li><strong>schema:</strong> escape backslash in AppendJSON without consuming the next byte (<a href="https://redirect.github.com/uptrace/bun/issues/1405";>#1405</a>) (<a href="https://github.com/uptrace/bun/commit/445907b421ad4d55c2d1de1bb9696070163b2792";>445907b</a>)</li> <li><strong>schema:</strong> resolve m2m BasePKs through the base table's FieldMap (<a href="https://redirect.github.com/uptrace/bun/issues/1375";>#1375</a>) (<a href="https://github.com/uptrace/bun/commit/9f4d368352b903bbb757a672efea357222e8a611";>9f4d368</a>)</li> <li><strong>schema:</strong> return an error when scanning NULL into an unaddressable value (<a href="https://github.com/uptrace/bun/commit/29e4e6e0abe007e6c69ca07272a535e6d9a9fc7e";>29e4e6e</a>)</li> <li><strong>schema:</strong> use dialect-specific AppendBool in QueryGen.Append (<a href="https://redirect.github.com/uptrace/bun/issues/1373";>#1373</a>) (<a href="https://github.com/uptrace/bun/commit/e91aa81e96c562e68aef5bfb0c558eca47402f1b";>e91aa81</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uptrace/bun/commit/7d78f9c936c4db97a06448cadd029f730e53fa25";><code>7d78f9c</code></a> docs: refine v1.3.0 changelog</li> <li><a href="https://github.com/uptrace/bun/commit/8de7fb6a19da34115233638dae9ddbd882c886db";><code>8de7fb6</code></a> fix(schema): reject NUL before opening string literal</li> <li><a href="https://github.com/uptrace/bun/commit/ea8b47c4ab4d6e22b9d8f44b5ad50486d0de5972";><code>ea8b47c</code></a> docs: document v1.3.0 breaking changes</li> <li><a href="https://github.com/uptrace/bun/commit/e73781ce1f9b68c275a96a3c2b0e8255903e0a6a";><code>e73781c</code></a> chore: release v1.3.0 (release.sh)</li> <li><a href="https://github.com/uptrace/bun/commit/691d97d1812f077606501b33afa77b8adf421b36";><code>691d97d</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1428";>#1428</a> from visheshgubrani/feat/uuid-support</li> <li><a href="https://github.com/uptrace/bun/commit/74e036c846cc7d3a7d2041fd743ae6d066990f50";><code>74e036c</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1432";>#1432</a> from chiliec/fix-array-parser-empty-input</li> <li><a href="https://github.com/uptrace/bun/commit/854cf9027e722522dae33ebf8581cdbc00cb69d8";><code>854cf90</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1435";>#1435</a> from hsdfat/fix/map-scan-column-types-deadlock</li> <li><a href="https://github.com/uptrace/bun/commit/aff017d2943d47471d5b280d486d47413046b3de";><code>aff017d</code></a> refactor(schema): isolate UUID handlers behind build tags</li> <li><a href="https://github.com/uptrace/bun/commit/af3f6dc3cfd5e39f0453f92342e1c9f5fe0eaa2c";><code>af3f6dc</code></a> fix: resolve map column types before scanning rows</li> <li><a href="https://github.com/uptrace/bun/commit/e22ddd3e7bf7a938ed68639c6f4720af2cbc2544";><code>e22ddd3</code></a> feat(schema): support Go 1.27 stdlib uuid.UUID (<a href="https://redirect.github.com/uptrace/bun/issues/1427";>#1427</a>)</li> <li>Additional commits viewable in <a href="https://github.com/uptrace/bun/compare/v1.2.18...v1.3.0";>compare view</a></li> </ul> </details> <br /> Updates `github.com/uptrace/bun/dialect/mysqldialect` from 1.2.18 to 1.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uptrace/bun/releases";>github.com/uptrace/bun/dialect/mysqldialect's releases</a>.</em></p> <blockquote> <h2>v1.3.0</h2> <p>Please refer to <a href="https://github.com/uptrace/bun/blob/master/CHANGELOG.md";>CHANGELOG.md</a> for details</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uptrace/bun/blob/master/CHANGELOG.md";>github.com/uptrace/bun/dialect/mysqldialect's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/uptrace/bun/compare/v1.2.18...v1.3.0";>1.3.0</a> (2026-09-30)</h1> <h3>Breaking Changes</h3> <p>Compared with v1.2.18, this release contains four categories of breaking changes. Two are tracked in <a href="https://redirect.github.com/uptrace/bun/issues/1363";>#1363</a>, and two additional behavioral changes were identified during the release audit.</p> <ul> <li><strong>Count, Limit, and Offset use <code>int64</code></strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1348";>#1348</a>). <code>DeleteQuery.Limit</code>, <code>SelectQuery.Limit</code>, <code>SelectQuery.Offset</code>, <code>SelectQuery.Count</code>, <code>SelectQuery.ScanAndCount</code>, and <code>UpdateQuery.Limit</code> changed from <code>int</code> parameters or return values to <code>int64</code>. Update affected variables and assignments to <code>int64</code>, or add explicit conversions at call sites.</li> <li><strong>pgdriver verifies TLS certificates</strong> (<a href="https://redirect.github.com/uptrace/bun/issues/1398";>#1398</a>, fixed by <a href="https://redirect.github.com/uptrace/bun/pull/1402";>#1402</a>). <code>pgdriver.WithInsecure(false)</code> now verifies the server certificate and hostname. Configure valid trust roots and a matching server name. Code that intentionally needs unverified TLS must now opt in explicitly with <code>WithTLSConfig(&tls.Config{InsecureSkipVerify: true})</code>; this is not recommended for production.</li> <li><strong>Duplicate migration IDs are rejected</strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1357";>#1357</a>). <code>Migrations.Discover</code> now returns an error when different migration base filenames share an ID instead of silently overwriting one migration. This also rejects a Go migration registered with <code>MustRegister</code> or <code>Register</code> when <code>Discover</code> encounters a differently named SQL migration with the same ID. Rename conflicting migration files so each ID has a single base filename; a matching <code>.up.sql</code>/<code>.down.sql</code> pair remains valid.</li> <li><strong>NUL-containing strings are rejected</strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1406";>#1406</a>). <code>schema.BaseDialect.AppendString</code> now reports a formatting error instead of silently stripping NUL bytes. Reject or sanitize such input before building queries. This affects the PostgreSQL, SQLite, Oracle, and MSSQL base dialect paths; MySQL's override is unchanged.</li> </ul> <h3>Security</h3> <ul> <li><strong>pgdriver:</strong> verify server certificate for WithInsecure(false) (<a href="https://redirect.github.com/uptrace/bun/issues/1402";>#1402</a>) (<a href="https://github.com/uptrace/bun/commit/023fe2412daf533a80fdcd99f54043c0efbafc37";>023fe24</a>)</li> <li><strong>schema:</strong> fail closed when a string contains a NUL byte (<a href="https://redirect.github.com/uptrace/bun/issues/1406";>#1406</a>) (<a href="https://github.com/uptrace/bun/commit/276ac9fc9354c209049021576b4f44425854eb41";>276ac9f</a>)</li> <li><strong>schema:</strong> prevent line-comment SQL injection with negative numbers (CVE-2024-44906 class) (<a href="https://redirect.github.com/uptrace/bun/issues/1396";>#1396</a>) (<a href="https://github.com/uptrace/bun/commit/13f55cd2e8dfcd5a27365d5eeed572533e940115";>13f55cd</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>add LineComment function for handling line comment in formatQuery (<a href="https://github.com/uptrace/bun/commit/49b0464e9b965f902d4c377be6ba744e4324ea2f";>49b0464</a>)</li> <li><strong>automigrate:</strong> include scanonly fields in the BunModelInspector output (<a href="https://github.com/uptrace/bun/commit/0a83ffc97f9e0ed8ecd26a15481c8edfc7d24e04";>0a83ffc</a>)</li> <li><strong>bunotel:</strong> honor WithMeterProvider when reporting DB stats metrics (<a href="https://github.com/uptrace/bun/commit/048005b932a10b771bfd0797d18394ce62de36a3";>048005b</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1270";>#1270</a></li> <li>copy execution state in SelectQuery.Clone (<a href="https://github.com/uptrace/bun/commit/9dad9acb486b54b4093bfa789ce7221272c9e414";>9dad9ac</a>)</li> <li>copy whereHasOr field in SelectQuery.Clone() to preserve soft-delete WhereOr state (<a href="https://github.com/uptrace/bun/commit/e7611b7afbc996ee1fba4e5b4bb1fc3f8213ea4a";>e7611b7</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1321";>#1321</a></li> <li>correct error message prefix and error type (<a href="https://github.com/uptrace/bun/commit/89bf06d9bddd3fd1aefbb2db784b0124b5385cbd";>89bf06d</a>)</li> <li><strong>db:</strong> propagate transaction context into RunInTx callback (<a href="https://redirect.github.com/uptrace/bun/issues/1381";>#1381</a>) (<a href="https://github.com/uptrace/bun/commit/640437e757daecb853027a08d4d6cdb5b6be0d68";>640437e</a>)</li> <li>detect duplicate migration IDs during Discover (<a href="https://github.com/uptrace/bun/commit/b8f7b776e31e4e549fd5a71d9430670ed4d80dc8";>b8f7b77</a>)</li> <li>detect OR separators case-insensitively for whereHasOr (<a href="https://github.com/uptrace/bun/commit/1110700cea17dd5866a461f4d9ee3803a6df63fa";>1110700</a>)</li> <li>improve formatQuery in pgdriver for queries with apostrophes in comments (<a href="https://redirect.github.com/uptrace/bun/issues/1349";>#1349</a>) (<a href="https://github.com/uptrace/bun/commit/93974c9c250610227d277af720d78226981990cd";>93974c9</a>)</li> <li><strong>migrate:</strong> do not append blank lines to SQL query (<a href="https://github.com/uptrace/bun/commit/d32af163e931679eee18fc5fac67d80123a97cba";>d32af16</a>)</li> <li><strong>migrate:</strong> ignore --bun:skip with a blank query (<a href="https://github.com/uptrace/bun/commit/a34fd3ae835cbc04600a06a3a48afc5f1d742baa";>a34fd3a</a>)</li> <li><strong>migrate:</strong> surface lost SQL migration finalizer errors (<a href="https://redirect.github.com/uptrace/bun/issues/1389";>#1389</a>) (<a href="https://github.com/uptrace/bun/commit/1a289f81f4488a923a288fd3648b499b030877b1";>1a289f8</a>)</li> <li><strong>mssql:</strong> apply the unicode N prefix to JSON literals (<a href="https://github.com/uptrace/bun/commit/5eb86eeba2c2cc8bf5b11478440eb88a2e854254";>5eb86ee</a>)</li> <li><strong>pgdialect:</strong> return an error instead of panicking on empty array input (<a href="https://github.com/uptrace/bun/commit/a3c48dde686b275803eb03c6aa898f8237869223";>a3c48dd</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1431";>#1431</a></li> <li><strong>pgdriver:</strong> add slice of byte array support to pgdialect (<a href="https://redirect.github.com/uptrace/bun/issues/1391";>#1391</a>) (<a href="https://github.com/uptrace/bun/commit/0e5e8682686253e24add0e8512d351d5e32dd9bf";>0e5e868</a>)</li> <li><strong>pgdriver:</strong> send required params during startup (<a href="https://redirect.github.com/uptrace/bun/issues/1374";>#1374</a>) (<a href="https://github.com/uptrace/bun/commit/e402298277a4ad028af026cddcadfc04d52d7dff";>e402298</a>)</li> <li><strong>query:</strong> remove debug print and simplify union wrapping (<a href="https://github.com/uptrace/bun/commit/4bdf4d8cc5388adb6c9ba752b7a62875a698a13b";>4bdf4d8</a>)</li> <li><strong>query:</strong> skip UNION wrapping for SQLite (<a href="https://github.com/uptrace/bun/commit/777c8e23cc25e9e97d929f98227332888ee2f654";>777c8e2</a>)</li> <li><strong>relation:</strong> do not duplicate joined models on a shared base model (<a href="https://github.com/uptrace/bun/commit/856d4d92682dad7fddb796fda6a286d7189f9aca";>856d4d9</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1386";>#1386</a></li> <li>resolve map column types before scanning rows (<a href="https://github.com/uptrace/bun/commit/af3f6dc3cfd5e39f0453f92342e1c9f5fe0eaa2c";>af3f6dc</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1434";>#1434</a></li> <li>resolve nested Relation() with circular struct composition (<a href="https://github.com/uptrace/bun/commit/dd2e4c98621fb28506f48577e9a487326657cbcd";>dd2e4c9</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1243";>#1243</a></li> <li>return an error instead of panicking when scanning JSON into an unaddressable value (<a href="https://github.com/uptrace/bun/commit/c323fa3b4c37968b2fc2182f5f2576b0a7921fc2";>c323fa3</a>), closes <a href="https://redirect.github.com/uptrace/bun/issues/1306";>#1306</a></li> <li><strong>schema:</strong> do not reject pointers stored in an interface (<a href="https://github.com/uptrace/bun/commit/cc2cd23a929cd2bad50506f068f1ef65e642eaad";>cc2cd23</a>)</li> <li><strong>schema:</strong> escape backslash in AppendJSON without consuming the next byte (<a href="https://redirect.github.com/uptrace/bun/issues/1405";>#1405</a>) (<a href="https://github.com/uptrace/bun/commit/445907b421ad4d55c2d1de1bb9696070163b2792";>445907b</a>)</li> <li><strong>schema:</strong> resolve m2m BasePKs through the base table's FieldMap (<a href="https://redirect.github.com/uptrace/bun/issues/1375";>#1375</a>) (<a href="https://github.com/uptrace/bun/commit/9f4d368352b903bbb757a672efea357222e8a611";>9f4d368</a>)</li> <li><strong>schema:</strong> return an error when scanning NULL into an unaddressable value (<a href="https://github.com/uptrace/bun/commit/29e4e6e0abe007e6c69ca07272a535e6d9a9fc7e";>29e4e6e</a>)</li> <li><strong>schema:</strong> use dialect-specific AppendBool in QueryGen.Append (<a href="https://redirect.github.com/uptrace/bun/issues/1373";>#1373</a>) (<a href="https://github.com/uptrace/bun/commit/e91aa81e96c562e68aef5bfb0c558eca47402f1b";>e91aa81</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uptrace/bun/commit/7d78f9c936c4db97a06448cadd029f730e53fa25";><code>7d78f9c</code></a> docs: refine v1.3.0 changelog</li> <li><a href="https://github.com/uptrace/bun/commit/8de7fb6a19da34115233638dae9ddbd882c886db";><code>8de7fb6</code></a> fix(schema): reject NUL before opening string literal</li> <li><a href="https://github.com/uptrace/bun/commit/ea8b47c4ab4d6e22b9d8f44b5ad50486d0de5972";><code>ea8b47c</code></a> docs: document v1.3.0 breaking changes</li> <li><a href="https://github.com/uptrace/bun/commit/e73781ce1f9b68c275a96a3c2b0e8255903e0a6a";><code>e73781c</code></a> chore: release v1.3.0 (release.sh)</li> <li><a href="https://github.com/uptrace/bun/commit/691d97d1812f077606501b33afa77b8adf421b36";><code>691d97d</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1428";>#1428</a> from visheshgubrani/feat/uuid-support</li> <li><a href="https://github.com/uptrace/bun/commit/74e036c846cc7d3a7d2041fd743ae6d066990f50";><code>74e036c</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1432";>#1432</a> from chiliec/fix-array-parser-empty-input</li> <li><a href="https://github.com/uptrace/bun/commit/854cf9027e722522dae33ebf8581cdbc00cb69d8";><code>854cf90</code></a> Merge pull request <a href="https://redirect.github.com/uptrace/bun/issues/1435";>#1435</a> from hsdfat/fix/map-scan-column-types-deadlock</li> <li><a href="https://github.com/uptrace/bun/commit/aff017d2943d47471d5b280d486d47413046b3de";><code>aff017d</code></a> refactor(schema): isolate UUID handlers behind build tags</li> <li><a href="https://github.com/uptrace/bun/commit/af3f6dc3cfd5e39f0453f92342e1c9f5fe0eaa2c";><code>af3f6dc</code></a> fix: resolve map column types before scanning rows</li> <li><a href="https://github.com/uptrace/bun/commit/e22ddd3e7bf7a938ed68639c6f4720af2cbc2544";><code>e22ddd3</code></a> feat(schema): support Go 1.27 stdlib uuid.UUID (<a href="https://redirect.github.com/uptrace/bun/issues/1427";>#1427</a>)</li> <li>Additional commits viewable in <a href="https://github.com/uptrace/bun/compare/v1.2.18...v1.3.0";>compare view</a></li> </ul> </details> <br /> Updates `github.com/uptrace/bun/dialect/oracledialect` from 1.2.18 to 1.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uptrace/bun/releases";>github.com/uptrace/bun/dialect/oracledialect's releases</a>.</em></p> <blockquote> <h2>v1.3.0</h2> <p>Please refer to <a href="https://github.com/uptrace/bun/blob/master/CHANGELOG.md";>CHANGELOG.md</a> for details</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uptrace/bun/blob/master/CHANGELOG.md";>github.com/uptrace/bun/dialect/oracledialect's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/uptrace/bun/compare/v1.2.18...v1.3.0";>1.3.0</a> (2026-09-30)</h1> <h3>Breaking Changes</h3> <p>Compared with v1.2.18, this release contains four categories of breaking changes. Two are tracked in <a href="https://redirect.github.com/uptrace/bun/issues/1363";>#1363</a>, and two additional behavioral changes were identified during the release audit.</p> <ul> <li><strong>Count, Limit, and Offset use <code>int64</code></strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1348";>#1348</a>). <code>DeleteQuery.Limit</code>, <code>SelectQuery.Limit</code>, <code>SelectQuery.Offset</code>, <code>SelectQuery.Count</code>, <code>SelectQuery.ScanAndCount</code>, and <code>UpdateQuery.Limit</code> changed from <code>int</code> parameters or return values to <code>int64</code>. Update affected variables and assignments to <code>int64</code>, or add explicit conversions at call sites.</li> <li><strong>pgdriver verifies TLS certificates</strong> (<a href="https://redirect.github.com/uptrace/bun/issues/1398";>#1398</a>, fixed by <a href="https://redirect.github.com/uptrace/bun/pull/1402";>#1402</a>). <code>pgdriver.WithInsecure(false)</code> now verifies the server certificate and hostname. Configure valid trust roots and a matching server name. Code that intentionally needs unverified TLS must now opt in explicitly with <code>WithTLSConfig(&tls.Config{InsecureSkipVerify: true})</code>; this is not recommended for production.</li> <li><strong>Duplicate migration IDs are rejected</strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1357";>#1357</a>). <code>Migrations.Discover</code> now returns an error when different migration base filenames share an ID instead of silently overwriting one migration. This also rejects a Go migration registered with <code>MustRegister</code> or <code>Register</code> when <code>Discover</code> encounters a differently named SQL migration with the same ID. Rename conflicting migration files so each ID has a single base filename; a matching <code>.up.sql</code>/<code>.down.sql</code> pair remains valid.</li> <li><strong>NUL-containing strings are rejected</strong> (<a href="https://redirect.github.com/uptrace/bun/pull/1406";>#1406</a>). <code>schema.BaseDialect.AppendString</code> now reports a formatting error instead of silently stripping NUL bytes. Reject or sanitize such input before building queries. This affects the PostgreSQL, SQLite, Oracle, and MSSQL base dialect paths; MySQL's override is unchanged.</li> </ul> <h3>Security</h3> <ul> <li><strong>pgdriver:</strong> verify server certificate for WithInsecure(false) (<a href="https://redirect.github.com/uptrace/bun/issues/1402";>#1402</a>) (<a href="https://github.com/uptrace/bun/commit/023fe2412daf533a80fdcd99f54043c0efbafc37";>023fe24</a>)</li> <li><strong>schema:</strong> fail closed when a string contains a NUL byte (<a href="https://redirect.github.com/uptrace/bun/issues/1406";>#1406</a>) (<a href="https://github.com/uptrace/bun/commit/276ac9fc9354c209049021576b4f44425854eb41";>276ac9f</a>)</li> <li><strong>schema:</strong> prevent line-comment SQL injection with negative numbers (CVE-2024-44906 class) (<a href="https://redirect.github.com/uptrace/bun/issues/1396";>#1396</a>) (<a href="https://github.com/uptrace/bun/commit/13f55cd2e8dfcd5a27365d5eeed572533e940115";>13f55cd</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>add LineComment function for handling line comment in formatQuery (<a href="https://github.com/uptrace/bun/commit/49b0464e9b965f902d4c377be6ba744e4324ea2f";>49b0464</a>)</li> <li><strong>automigrate:</strong> include scanonly fields in the BunModelInspector output (<a href="https://github.com/uptrace/bun/commit/0a83ffc97f9e0ed8ecd26a15481c8edfc7d24e04";>0a83ffc</a>)</li> <li><strong>bunotel:</strong> honor WithMeterProvider when reporting DB stats metrics (<a href="https://github.com/uptrace/bun/commit/048005b932a10b771bfd0797d18394ce62de36a3";>048005b</a>), closes <a href="ht... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
