deps: bump the production-dependencies group across 1 directory with 60 updates

[dependabot]

Bumps the production-dependencies group with 19 updates in the / directory:

Package	From	To
github.com/antinvestor/apis/go/common	1.45.1	1.48.17
github.com/antinvestor/apis/go/device	1.45.2	1.48.16
github.com/antinvestor/apis/go/notification	1.45.2	1.48.16
github.com/antinvestor/apis/go/partition	1.45.2	1.48.16
github.com/antinvestor/apis/go/profile	1.45.2	1.48.16
github.com/pitabwire/frame	1.60.0	1.67.14
go.mau.fi/util	0.9.1	0.9.3
golang.org/x/image	0.32.0	0.33.0
maunium.net/go/mautrix	0.25.1	0.26.0
github.com/HdrHistogram/hdrhistogram-go	1.1.2	1.2.0
github.com/Workiva/go-datastructures	1.1.6	1.1.7
github.com/go-openapi/jsonpointer	0.22.1	0.22.3
github.com/go-openapi/jsonreference	0.21.2	0.21.3
github.com/go-openapi/swag	0.25.1	0.25.3
github.com/google/gnostic-models	0.7.0	0.7.1
github.com/nats-io/nkeys	0.4.11	0.4.12
k8s.io/api	0.34.1	0.34.2
k8s.io/client-go	0.34.1	0.34.2
sigs.k8s.io/structured-merge-diff/v6	6.3.0	6.3.1

Updates github.com/antinvestor/apis/go/common from 1.45.1 to 1.48.17

Release notes

Sourced from github.com/antinvestor/apis/go/common's releases.

v1.48.17 🌈

Changes

• minor lint fixes to the project

v1.48.16 🌈

Changes

• Upgrade common dependancy
• resolve issue with github action

v1.48.15 🌈

• remove need for validating StructPB

v1.48.14 🌈

Changes

• Latest working reliable version

v1.48.13 🌈

Changes

• upgrade common dependancy for golang apps

v1.48.12 🌈

Changes

• bugfix missing endpoint on clients

v1.48.11 🌈

Changes

• upgrade of common and other internal dependancies for golang

v1.48.10 🌈

Changes

• Simplified license statement

v1.48.9 🌈

Changes

• automatically switch http client to h2c when unsecured http is used

v1.48.8 🌈

Changes

• Upgrade to the latest version of common apis

... (truncated)

Commits

• a04bdea resolve lint errors in files
• 4a66e77 Merge branch 'main' of github.com:antinvestor/apis
• 8c8ece4 upgrade available changes in common golang
• c2ee262 Merge pull request #854 from antinvestor/dependabot/go_modules/go/common/buf....
• 12b991d Merge branch 'main' into dependabot/go_modules/go/common/buf.build/go/protova...
• 8221622 remove validations from Struct fields
• 2c65992 chore(common): update changelog and version to v1.48.15
• b41b199 chore(deps): bump buf.build/go/protovalidate in /go/common
• 29bf0a7 upgrade common dependency
• a8377dd upgrade all dependencies appropriatel
• Additional commits viewable in compare view

Updates github.com/antinvestor/apis/go/device from 1.45.2 to 1.48.16

Release notes

Sourced from github.com/antinvestor/apis/go/device's releases.

v1.48.16 🌈

Changes

• Upgrade common dependancy
• resolve issue with github action

v1.48.15 🌈

• remove need for validating StructPB

v1.48.14 🌈

Changes

• Latest working reliable version

v1.48.13 🌈

Changes

• upgrade common dependancy for golang apps

v1.48.12 🌈

Changes

• bugfix missing endpoint on clients

v1.48.11 🌈

Changes

• upgrade of common and other internal dependancies for golang

v1.48.10 🌈

Changes

• Simplified license statement

v1.48.9 🌈

Changes

• automatically switch http client to h2c when unsecured http is used

v1.48.8 🌈

Changes

• Upgrade to the latest version of common apis

v1.48.7 🌈

Changes

• Introduce client request/response logging for golang

... (truncated)

Commits

• 4a66e77 Merge branch 'main' of github.com:antinvestor/apis
• 8c8ece4 upgrade available changes in common golang
• c2ee262 Merge pull request #854 from antinvestor/dependabot/go_modules/go/common/buf....
• 12b991d Merge branch 'main' into dependabot/go_modules/go/common/buf.build/go/protova...
• 8221622 remove validations from Struct fields
• 2c65992 chore(common): update changelog and version to v1.48.15
• b41b199 chore(deps): bump buf.build/go/protovalidate in /go/common
• 29bf0a7 upgrade common dependency
• a8377dd upgrade all dependencies appropriatel
• 40d5736 resolve major bug related to missing endpoint being setup
• Additional commits viewable in compare view

Updates github.com/antinvestor/apis/go/notification from 1.45.2 to 1.48.16

Release notes

Sourced from github.com/antinvestor/apis/go/notification's releases.

v1.48.16 🌈

Changes

• Upgrade common dependancy
• resolve issue with github action

v1.48.15 🌈

• remove need for validating StructPB

v1.48.14 🌈

Changes

• Latest working reliable version

v1.48.13 🌈

Changes

• upgrade common dependancy for golang apps

v1.48.12 🌈

Changes

• bugfix missing endpoint on clients

v1.48.11 🌈

Changes

• upgrade of common and other internal dependancies for golang

v1.48.10 🌈

Changes

• Simplified license statement

v1.48.9 🌈

Changes

• automatically switch http client to h2c when unsecured http is used

v1.48.8 🌈

Changes

• Upgrade to the latest version of common apis

v1.48.7 🌈

Changes

• Introduce client request/response logging for golang

... (truncated)

Commits

• 4a66e77 Merge branch 'main' of github.com:antinvestor/apis
• 8c8ece4 upgrade available changes in common golang
• c2ee262 Merge pull request #854 from antinvestor/dependabot/go_modules/go/common/buf....
• 12b991d Merge branch 'main' into dependabot/go_modules/go/common/buf.build/go/protova...
• 8221622 remove validations from Struct fields
• 2c65992 chore(common): update changelog and version to v1.48.15
• b41b199 chore(deps): bump buf.build/go/protovalidate in /go/common
• 29bf0a7 upgrade common dependency
• a8377dd upgrade all dependencies appropriatel
• 40d5736 resolve major bug related to missing endpoint being setup
• Additional commits viewable in compare view

Updates github.com/antinvestor/apis/go/partition from 1.45.2 to 1.48.16

Release notes

Sourced from github.com/antinvestor/apis/go/partition's releases.

v1.48.16 🌈

Changes

• Upgrade common dependancy
• resolve issue with github action

v1.48.15 🌈

• remove need for validating StructPB

v1.48.14 🌈

Changes

• Latest working reliable version

v1.48.13 🌈

Changes

• upgrade common dependancy for golang apps

v1.48.12 🌈

Changes

• bugfix missing endpoint on clients

v1.48.11 🌈

Changes

• upgrade of common and other internal dependancies for golang

v1.48.10 🌈

Changes

• Simplified license statement

v1.48.9 🌈

Changes

• automatically switch http client to h2c when unsecured http is used

v1.48.8 🌈

Changes

• Upgrade to the latest version of common apis

v1.48.7 🌈

Changes

• Introduce client request/response logging for golang

... (truncated)

Commits

• 4a66e77 Merge branch 'main' of github.com:antinvestor/apis
• 8c8ece4 upgrade available changes in common golang
• c2ee262 Merge pull request #854 from antinvestor/dependabot/go_modules/go/common/buf....
• 12b991d Merge branch 'main' into dependabot/go_modules/go/common/buf.build/go/protova...
• 8221622 remove validations from Struct fields
• 2c65992 chore(common): update changelog and version to v1.48.15
• b41b199 chore(deps): bump buf.build/go/protovalidate in /go/common
• 29bf0a7 upgrade common dependency
• a8377dd upgrade all dependencies appropriatel
• 40d5736 resolve major bug related to missing endpoint being setup
• Additional commits viewable in compare view

Updates github.com/antinvestor/apis/go/profile from 1.45.2 to 1.48.16

Release notes

Sourced from github.com/antinvestor/apis/go/profile's releases.

v1.48.16 🌈

Changes

• Upgrade common dependancy
• resolve issue with github action

v1.48.15 🌈

• remove need for validating StructPB

v1.48.14 🌈

Changes

• Latest working reliable version

v1.48.13 🌈

Changes

• upgrade common dependancy for golang apps

v1.48.12 🌈

Changes

• bugfix missing endpoint on clients

v1.48.11 🌈

Changes

• upgrade of common and other internal dependancies for golang

v1.48.10 🌈

Changes

• Simplified license statement

v1.48.9 🌈

Changes

• automatically switch http client to h2c when unsecured http is used

v1.48.8 🌈

Changes

• Upgrade to the latest version of common apis

v1.48.7 🌈

Changes

• Introduce client request/response logging for golang

... (truncated)

Commits

• 4a66e77 Merge branch 'main' of github.com:antinvestor/apis
• 8c8ece4 upgrade available changes in common golang
• c2ee262 Merge pull request #854 from antinvestor/dependabot/go_modules/go/common/buf....
• 12b991d Merge branch 'main' into dependabot/go_modules/go/common/buf.build/go/protova...
• 8221622 remove validations from Struct fields
• 2c65992 chore(common): update changelog and version to v1.48.15
• b41b199 chore(deps): bump buf.build/go/protovalidate in /go/common
• 29bf0a7 upgrade common dependency
• a8377dd upgrade all dependencies appropriatel
• 40d5736 resolve major bug related to missing endpoint being setup
• Additional commits viewable in compare view

Updates github.com/pitabwire/frame from 1.60.0 to 1.67.14

Release notes

Sourced from github.com/pitabwire/frame's releases.

v1.67.14 🌈

Changes

• minor api fix on the repository layer

v1.67.13 🌈

Changes

• correctly return *connect.Error

v1.67.12 🌈

Changes

• Add utility function to convert db errors to connect api errors

v1.67.11 🌈

Changes

• include connect errors in Not Found checks
• Extend ability to add allowed fields

v1.67.10 🌈

Changes

• resolve lint errors and add tests to cover security claims propagation

v1.67.9 🌈

Changes

• cleanup access to queue events

v1.67.8 🌈

Changes

• fix minor bug related to querying db

v1.67.7 🌈

Changes

• cleanup column validation logic

v1.67.6 🌈

Changes

• 🚀 Enhance Serializer with Comprehensive Test Coverage @​pitabwire (#602)

v1.67.5 🌈

Changes

• test hydra config yaml formatting

... (truncated)

Commits

• 802194b Expose the fields allowed on a repository
• 17dc4ce explicitly return connect.Error
• 8eb4eb2 resolve lint error in error conversion function
• e2d5bca efficiently convert gorm errors to connect api errors
• b6698a4 resolve errors related to frame
• 3123b3a resolve minor issue with checking not found error
• 2cd48b4 add ability to extend allowed fields
• 0cabfc2 fix minor lint errors
• a4fc5c2 extend testing appropriately to security claims propagation
• 2ebffeb resolve access to payloads in the queue
• Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.14.0 to 9.16.0

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.16.0

🚀 Highlights

Maintenance Notifications Support

This release introduces comprehensive support for Redis maintenance notifications, enabling applications to handle server maintenance events gracefully. The new maintnotifications package provides:

• RESP3 Push Notifications: Full support for Redis RESP3 protocol push notifications
• Connection Handoff: Automatic connection migration during server maintenance with configurable retry policies and circuit breakers
• Graceful Degradation: Configurable timeout relaxation during maintenance windows to prevent false failures
• Event-Driven Architecture: Background workers with on-demand scaling for efficient handoff processing

For detailed usage examples and configuration options, see the maintenance notifications documentation.

✨ New Features

• Trace Filtering: Add support for filtering traces for specific commands, including pipeline operations and dial operations (#3519, #3550)
  • New TraceCmdFilter option to selectively trace commands
  • Reduces overhead by excluding high-frequency or low-value commands from traces

🐛 Bug Fixes

• Pipeline Error Handling: Fix issue where pipeline repeatedly sets the same error (#3525)
• Connection Pool: Ensure re-authentication does not interfere with connection handoff operations (#3547)

🔧 Improvements

• Hash Commands: Update hash command implementations (#3523)
• OpenTelemetry: Use metric.WithAttributeSet to avoid unnecessary attribute copying in redisotel (#3552)

📚 Documentation

• Cluster Client: Add explanation for why MaxRetries is disabled for ClusterClient (#3551)

🧪 Testing & Infrastructure

• E2E Testing: Upgrade E2E testing framework with improved reliability and coverage (#3541)
• Release Process: Improved resiliency of the release process (#3530)

📦 Dependencies

• Bump rojopolis/spellcheck-github-actions from 0.51.0 to 0.52.0 (#3520)
• Bump github/codeql-action from 3 to 4 (#3544)

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​ndyakov, @​htemelski-redis, @​Sovietaced, @​Udhayarajan, @​boekkooi-impossiblecloud, @​Pika-Gopher, @​cxljs, @​huiyifyj, @​omid-h70

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.16.0 (2025-10-23)

🚀 Highlights

Maintenance Notifications Support

This release introduces comprehensive support for Redis maintenance notifications, enabling applications to handle server maintenance events gracefully. The new maintnotifications package provides:

• RESP3 Push Notifications: Full support for Redis RESP3 protocol push notifications
• Connection Handoff: Automatic connection migration during server maintenance with configurable retry policies and circuit breakers
• Graceful Degradation: Configurable timeout relaxation during maintenance windows to prevent false failures
• Event-Driven Architecture: Background workers with on-demand scaling for efficient handoff processing
• Production-Ready: Comprehensive E2E testing framework and monitoring capabilities

For detailed usage examples and configuration options, see the maintenance notifications documentation.

✨ New Features

• Trace Filtering: Add support for filtering traces for specific commands, including pipeline operations and dial operations (#3519, #3550)
  • New TraceCmdFilter option to selectively trace commands
  • Reduces overhead by excluding high-frequency or low-value commands from traces

🐛 Bug Fixes

• Pipeline Error Handling: Fix issue where pipeline repeatedly sets the same error (#3525)
• Connection Pool: Ensure re-authentication does not interfere with connection handoff operations (#3547)

🔧 Improvements

• Hash Commands: Update hash command implementations (#3523)
• OpenTelemetry: Use metric.WithAttributeSet to avoid unnecessary attribute copying in redisotel (#3552)

📚 Documentation

• Cluster Client: Add explanation for why MaxRetries is disabled for ClusterClient (#3551)

🧪 Testing & Infrastructure

• E2E Testing: Upgrade E2E testing framework with improved reliability and coverage (#3541)
• Release Process: Improved resiliency of the release process (#3530)

📦 Dependencies

• Bump rojopolis/spellcheck-github-actions from 0.51.0 to 0.52.0 (#3520)
• Bump github/codeql-action from 3 to 4 (#3544)

👥 Contributors

We'd like to thank all the contributors who worked on this release!

... (truncated)

Commits

• f195656 chore(release): 9.16.0 (#3557)
• 70dfa38 feat(otel): add trace filter for process pipeline and dial operation (#3550)
• a15e763 fix(pool): Pool ReAuth should not interfere with handoff (#3547)
• 14a8814 chore(docs): explain why MaxRetries is disabled for ClusterClient (#3551)
• 8ca21d2 chore(redisotel): use metric.WithAttributeSet to avoid copy (#3552)
• 7aa4a60 update gomods to align them with the latest beta (#3539)
• 1e6ee06 test(e2e): testing framework upgrade (#3541)
• f7eed76 Add support for filtering traces for certain commands (#3519)
• 3d68c7e chore(deps): bump github/codeql-action from 3 to 4 (#3544)
• 3ad9f9c fix: add missing error variable for non-unix build constraints (#3538)
• Additional commits viewable in compare view

Updates github.com/valkey-io/valkey-go from 1.0.67 to 1.0.68

Release notes

Sourced from github.com/valkey-io/valkey-go's releases.

1.0.68

Changes

• feat: add new DELEX, DIGEST, MSETEX commands; extend SET and XREADGROUP
• feat: FIPS-compliant SHA-1 loading option for Lua scripts without performance penalty
• feat: add EPSILON option to VSIM

Contributors

We'd like to thank all the contributors who worked on this release!

@​FZambia and @​rueian

Commits

• abde8fe feat: bump v1.0.68
• a4df3e8 feat: add new DELEX, DIGEST, MSETEX commands; extend SET and XREADGROUP (#916)
• 84db6c1 perf: apply betteraligment
• bc0fd43 Couple of tweaks for just introduced LuaOption (#915)
• 7b08ff8 FIPS-compliant SHA-1 loading option for Lua scripts without performance penal...
• aaf61df feat: add EPSILON option to VSIM (#912)
• See full diff in compare view

Updates go.mau.fi/util from 0.9.1 to 0.9.3

Release notes

Sourced from go.mau.fi/util's releases.

v0.9.3

• (unicodeurls,confusables,emojirunes,variationselector) Updated to Unicode v17.
• (dbutil) Added option to log all queries without arguments.
• (exmaps) Added non-synchronous equivalent of exsync.Set.
• (exslices) Added utilities for deleting items by value.
• (exslices) Added non-synchronous Stack type.
• (exstrings) Added LongestCommonPrefix.
• (shlex) Added support for line continuations with backslashes.
• (progver) Fixed linkified version for tags.

v0.9.2

• (progver) Added program version calculation utility like the one used by mautrix bridges and Meowlnir.
• (dbutil) Added sqlite3-fk-wal-fullsync driver which is otherwise equivalent to sqlite3-fk-wal, but sets PRAGMA synchronous=FULL for better crash resistance.
• (dbutil) Added explicit error if comment prefix (--) isn't at the start of the line when using dialect filters with the (lines commented) modifier.
• (exsync) Added NewMapWithData, Clear, Len and CopyFrom methods for maps.
• (exsync) Added iterators for maps and sets.
• (jsontime) Changed Unix*() methods and jsontime.U*Int() functions to treat 0 and the zero time.Time value as the same.

Changelog

Sourced from go.mau.fi/util's changelog.

v0.9.3 (2025-11-16)

• (unicodeurls,confusables,emojirunes,variationselector) Updated to Unicode v17.
• (dbutil) Added option to log all queries without arguments.
• (exmaps) Added non-synchronous equivalent of exsync.Set.
• (exslices) Added utilities for deleting items by value.
• (exslices) Added non-synchronous Stack type.
• (exstrings) Added LongestCommonPrefix.
• (shlex) Added support for line continuations with backslashes.
• (progver) Fixed linkified version for tags.

v0.9.2 (2025-10-16)

• (progver) Added program version calculation utility like the one used by mautrix bridges and Meowlnir.
• (dbutil) Added sqlite3-fk-wal-fullsync driver which is otherwise equivalent to sqlite3-fk-wal, but sets PRAGMA synchronous=FULL for better crash resistance.
• (dbutil) Added explicit error if comment prefix (--) isn't at the start of the line when using dialect filters with the (lines commented) modifier.
• (exsync) Added NewMapWithData, Clear, Len and CopyFrom methods for maps.
• (exsync) Added iterators for maps and sets.
• (jsontime) Changed Unix*() methods and jsontime.U*Int() functions to treat 0 and the zero time.Time value as the same.

Commits

• b9e8794 Bump version to v0.9.3
• 765da68 progver: fix handling unknown tag
• b5236c5 exslices: add stack
• bf2f50c changelog: update
• 79ce867 exsync/map: add GetDefault
• ffc0c04 shlex: Handle line continuations (#35)
• 8a7afa7 exstrings: add LongestCommonPrefix
• 762d488 exslices: add delete utilities
• 8c8ae8b exmaps: add non-sync set
• d708c33 progver: set commit to "unknown" if empty
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.43.0 to 0.44.0

Commits

• 122a78f go.mod: update golang.org/x dependencies
• c0531f9 all: eliminate vet diagnostics
• 0997000 all: fix some comments
• 017a1aa chacha20poly1305: panic on dst and additionalData overlap
• cf29fa9 sha3: make it mostly a wrapper around crypto/sha3
• 0b7aa0c ssh: use reflect.TypeFor instead of reflect.TypeOf
• 1faea29 all: fix some typos in comment
• See full diff in compare view

Updates golang.org/x/exp from 0.0.0-20251009144603-d2f985daa21b to 0.0.0-20251113190631-e25ba8c21ef6

Commits

• See full diff in compare view

Updates golang.org/x/image from 0.32.0 to 0.33.0

Commits

• 9c9d08c go.mod: update golang.org/x dependencies
• 742b1b7 all: fix some comments
• 7321200 vector: use built-in max/min to simplify the code
• See full diff in compare view

Updates golang.org/x/oauth2 from 0.32.0 to 0.33.0

Commits

• f28b0b5 all: fix some comments
• fd15e0f x/oauth2: populate RetrieveError from DeviceAuth
• See full diff in compare view

Updates golang.org/x/sync from 0.17.0 to 0.18.0

Commits

• 1966f53 errgroup: fix some typos in comment
• See full diff in compare view

Updates golang.org/x/term from 0.36.0 to 0.37.0

Commits

• 1231d54 go.mod: update golang.org/x dependencies
• 3475bc8 term: fix some comments
• See full diff in compare view

Updates google.golang.org/grpc from 1.76.0 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

• mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

• balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

• xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
• client: Ignore HTTP status header for gRPC streams. (#8548)
• client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
  • Special Thanks: @​jgold2-stripe
• client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
  • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
• balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
• server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
  • Special Thanks: @​hugehoo
• balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
• mem: Clear large buffers before re-using. (#8670)

Performance Improvements

• transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
• transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
• mem: Avoid clearing newly allocated buffers. (#8670)

New Features

• outlierdetection: Add metrics specified in gRFC A91. (#8644)
  • Special Thanks: @​davinci26, @​PardhuKonakanchi
• stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
• xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
  • Special Thanks: @​dimpavloff
• experimental/stats: Add support for up/down counters. (#8581)

Commits

• 805b1f8 Change version to 1.77.0 (#8677)
• ea7b66e Cherrypick #8702 to v1.77.x (#8709)
• cadae08 Cherry-pick #8536 to v1.77.x (#8691)
• 4288cfc Cherrypick #8657 and #8667 to v1.77.x (#8690)
• f959da6 transport: Reduce heap allocations (#8668)
• 0d49384 deps: update all dependencies (#8673)
• e3e142d pickfirst: Remove old pickfirst (#8672)
• 254ab10 documentation: fix typos in benchmark and auth docs (#8674)
• 2d56bda mem: Remove Reader interface and export the concrete struct (#8669)
• 8ab0c82 mem: Avoid clearing new buffers and clear buffers from simpleBufferPools (#8670)
• Additional commits viewable in compare view

Updates gorm.io/gorm from 1.31.0 to 1.31.1

Release notes

Sourced from gorm.io/gorm's releases.

Release v1.31.1

Changes

• Add Namer-based column lookup to Schema.LookUpField @​cmmoran (#7619)
• fix: Allow escaped double quotes in struct tag parser @​kankankanp (#7631)
• Fix slog logger caller frame detection to output correct source file @​ifooth (#7610)
• chore(docs): edited the badge test @​Olexandr88 (#7635)
• Fix AutoMigrate default value comparison for string fields (issue #7590) @​nowindexman (#7591)
• fix(UnixSecondSerializer.Value): Avoid panic when handling unsigned integer values @​dushaoshuai (#7608)
• chore: fix some comments @​wyrapeseed (#7615)
• Rename IsValidDBNameChar to IsInvalidDBNameChar @​mengxunQAQ (#7582)

Commits

• eabca1f Allow Select/Omit for Generics Create, close #7638, #7633
• a57abbe Add Namer-based column lookup to Schema.LookUpField (#7619)
• 5eaf05a fix: Allow escaped double quotes in struct tag parser (#7631)
• 2c3d109 Fix slog logger caller frame detection to output correct source file (#7610)
• 4808ff5 Update README.md (#7635)
• 141388f Fix AutoMigrate default value comparison for string fields (issue #7590) (#7591)
• d9372f5 fix(UnixSecondSerializer.Value): Avoid panic when handling unsigned integer v...
• d8cdb39 chore: fix some comment (#7615)
• b881483 Rename IsValidDBNameChar to IsInvalidDBNameChar (#7582)
• See full diff in compare view

Updates maunium.net/go/mautrix from 0.25.1 to 0.26.0

Release notes

Sourced from maunium.net/go/mautrix's releases.

v0.26.0

• (client,appservice) Deprecated SendMassagedStateEvent as SendStateEvent has been able to do the same for a while now.
• (client,federation) Added size limits for responses to make it safer to send requests to untrusted servers.
• (client) Added wrapper for /admin/whois client API (thanks to @​nexy7574 in #411).
• (synapseadmin) Added force_purge option to DeleteRoom (thanks to @​nexy7574 in #420).
• (statestore) Added saving join rules for rooms.
• (bridgev2) Added optional automatic rollback of room state if bridging the change to the remote network fails.
• (bridgev2) Added management room notices if transient disconnect state doesn't resolve within 3 minutes.
• (bridgev2) Added interface to signal that certain participants couldn't be invited when creating a group.
• (bridgev2) Added select type for user input fields in login.
• (bridgev2) Added interface to let network connector customize personal filtering space.
• (bridgev2/matrix) Added checks to avoid sending error messages in reply to other bots.
• (bridgev2/matrix) Switched to using MSC4169 to send redactions whenever possible.
• (bridgev2/publicmedia) Added support for custom path prefixes, file names, and encrypted files.
• (bridgev2/commands) Added command to resync a single portal.
• (bridgev2/commands) Added create group command.
• (bridgev2/config) Added option to limit maximum number of logins.
• (bridgev2) Changed ghost joining to skip unnecessary invite if portal room is public.
• (bridgev2/disappear) Changed read receipt handling to only start disappearing timers for messages up to the read message (note: may not work in all cases if the read receipt points at an unknown event).
• (event/reply) Changed plaintext reply fallback removal to only happen when an HTML reply fallback is removed successfully.
• (bridgev2/matrix) Fixed unnecessary sleep after registering bot on first run.
• (crypto/goolm) Fixed panic when processing certain malformed Olm messages.
• (federation) Fixed HTTP method for sending transactions (thanks to @​nexy7574 in #426).
• (federation) Fixed response body being closed even when using DontReadBody parameter.
• (federation) Fixed validating auth for requests with query params.
• (federation/eventauth) Fixed typo causing restricted joins to not work.

v0.25.2

• Breaking change (id) Split UserID.ParseAndValidate into ParseAndValidateRelaxed and ParseAndValidateStrict. Strict is the old behavior, but most users likely want the relaxed version, as there are real users whose user IDs aren't valid under the strict rules.
• (crypto) Added helper methods for generating and verifying with recovery keys.
• (bridgev2/matrix) Added config option to automatically generate a recovery key for the bridge bot and self-sign the bridge's device.
• (bridgev2/matrix) Added initial support for using appservice/MSC3202 mode for encryption with standard servers like Synapse.
• (bridgev2) Added optional support for implicit read receipts.
• (bridgev2) Added interface for deleting chats on remote network.
• (bridgev2) Added local enforcement of media duration and size limits.
• (bridgev2) Extended event duration logging to log any event taking too long.
• (bridgev2) Improved validation in group creation provisioning API.
• (event) Added event type constant for poll end events.
• (client) Added wrapper for searching user directory.
• (client) Improved support for managing MSC4140 delayed events.
• (crypto/helper) Changed default sync handling to not block on waiting for decryption keys. On initial sync, keys won't be requested at all by default.
• (crypto) Fixed olm unwedging not working (regressed in v0.25.1).
• (bridgev2) Fixed various bugs with migrating to split portals.
• (event) Fixed poll start events having incorrect null m.relates_to.
• (client) Fixed RespUserProfile losing standard fields when re-marshaling.
• (federation) Fixed various bugs in event auth.

Changelog

Sourced from maunium.net/go/mautrix's changelog.

v0.26.0 (2025-11-16)

• (client,appservice) Deprecated SendMassagedStateEvent as SendStateEvent has been able to do the same for a while now.
• (client,federation) Added size limits for responses to make it safer to send requests to untrusted servers.
• (client) Added wrapper for /admin/whois client API (thanks to [@​nexy7574] in #411).
• (synapseadmin) Added force_purge option to DeleteRoom (thanks to [@​nexy7574] in #420).
• (statestore) Added saving join rules for rooms.
• (bridgev2) Added optional automatic rollback of room state if bridging the change to the remote network fails.
• (bridgev2) Added management room notices if transient disconnect state doesn't resolve within 3 minutes.
• (bridgev2) Added interface to signal that certain participants couldn't be invited when creating a group.
• (bridgev2) Added select type for user input fields in login.
• (bridgev2) Added interface to let network connector customize personal filtering space.
• (bridgev2/matrix) Added checks to avoid sending error messages in reply to other bots.
• (bridgev2/matrix) Switched to using MSC4169 to send redactions whenever possible.
• (bridgev2/publicmedia) Added support for custom path prefixes, file names, and encrypted files.
• (bridgev2/commands) Added command to resync a single portal.
• (bridgev2/commands) Added create group command.
• (bridgev2/config) Added option to limit maximum number of logins.
• (bridgev2) Changed ghost joining to skip unnecessary invite if portal room is public.
• (bridgev2/disappear) Changed read receipt handling to only start disappearing timers for messages up to the read message (note: may not work in all cases if the read receipt points ...

  Description has been truncated

[github-actions]

❌ Auto-merge cancelled: Tests failed or are still pending. Please check the test results and merge manually if appropriate.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.