Skip to content

build(deps): bump the production-dependencies group across 3 directories with 6 updates - #4674

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/examples/production-dependencies-4cbf5e9fca
Open

build(deps): bump the production-dependencies group across 3 directories with 6 updates#4674
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/examples/production-dependencies-4cbf5e9fca

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 6 updates in the /examples directory:

Package From To
github.com/ClickHouse/clickhouse-go/v2 2.49.0 2.50.0
github.com/duckdb/duckdb-go/v2 2.10506.0 2.20000.0
github.com/googleapis/go-sql-spanner 1.27.0 1.28.0
github.com/jackc/pgx/v5 5.11.0 5.12.0
google.golang.org/api 0.304.0 0.306.0
google.golang.org/grpc 1.84.0 1.85.0
github.com/duckdb/duckdb-go/v2 2.10506.0 2.20000.0
github.com/jackc/pgx/v5 5.11.0 5.12.0
github.com/jackc/pgx/v5 5.11.0 5.12.0
google.golang.org/api 0.304.0 0.306.0
google.golang.org/grpc 1.84.0 1.85.0

Bumps the production-dependencies group with 2 updates in the /internal/endtoend/testdata directory: github.com/duckdb/duckdb-go/v2 and github.com/jackc/pgx/v5.
Bumps the production-dependencies group with 3 updates in the /internal/goldeneye directory: github.com/jackc/pgx/v5, google.golang.org/api and google.golang.org/grpc.

Updates github.com/ClickHouse/clickhouse-go/v2 from 2.49.0 to 2.50.0

Release notes

Sourced from github.com/ClickHouse/clickhouse-go/v2's releases.

v2.50.0

What's Changed

Improvements 🚀

Bug Fixes 🐛

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.49.0...v2.50.0

Changelog

Sourced from github.com/ClickHouse/clickhouse-go/v2's changelog.

v2.50.0, 2026-10-26

What's Changed

Improvements 🚀

Bug Fixes 🐛

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.49.0...v2.50.0

Commits
  • 1c0a5f9 Update release notes
  • 619220c Merge pull request #2082 from ClickHouse/kavirajk/redact-parse-in-dsn-parse-e...
  • 413454d chore: fix the error message with more clear info
  • 7a89b7f chore: handle edge cases with ? param
  • 607e42e Merge pull request #2083 from ClickHouse/kavirajk/fix-potential-flaky-tests-c...
  • 649884b chore: add agent instructions
  • 098f98d chore: fix potential flaky cases on cloud
  • 5ff1fe7 chore: do further trace on other edge cases
  • 3a57d61 chore: address re-parse comment with tests
  • f0fc7b5 Merge pull request #2081 from ClickHouse/kavirajk/fix-flaky-async-tests-on-cloud
  • Additional commits viewable in compare view

Updates github.com/duckdb/duckdb-go/v2 from 2.10506.0 to 2.20000.0

Release notes

Sourced from github.com/duckdb/duckdb-go/v2's releases.

v2.20000.0

[!IMPORTANT] Upgrades to DuckDB v2.0.0 through duckdb-go-bindings v0.20000.0. The native libraries now come from go.duckdb.org, so setups that restrict GOPROXY must allow it. The Go API is unchanged, but some behavior changes with DuckDB v2: RowsAffected for CREATE TABLE AS, profiling metrics, and dropped rows after a failed appender flush. Custom dynamic and static linking changed too. See Upgrading to DuckDB v2 in the README.

What's Changed

Full Changelog: duckdb/duckdb-go@v2.10506.0...v2.20000.0

Commits
  • bb8380a Merge pull request #217 from mlafeldt/duckdb-v2-bindings
  • cd69e0f Document that a failed AppendRow does not append its row
  • 76fd883 Verify the shared library the dynamic lib tests download
  • 554d7ae Document upgrading to DuckDB v2
  • c936ff5 Test dynamic and static linking against the bindings' DuckDB build
  • 7863d1a Report dropped appender rows on Close until Clear acknowledges them
  • 1ce76d5 Read profiling metrics from DuckDB v2's metric groups
  • b4db755 Match DuckDB v2's query logging in TestLogStorage
  • bc675d8 Expect CREATE TABLE AS to report its rows as affected
  • 725eb6c Return nil for typed NULL UDF arguments instead of aborting
  • Additional commits viewable in compare view

Updates github.com/googleapis/go-sql-spanner from 1.27.0 to 1.28.0

Release notes

Sourced from github.com/googleapis/go-sql-spanner's releases.

v1.28.0

1.28.0 (2026-10-28)

Features

  • Add driver support for Spanner Omni connection options (#927) (09e8564)
  • Add support for parsing savepoint statements (#922) (7ae7869)

Bug Fixes

  • Update all dependencies (#919) (f020b2a)
  • Update dependency com.google.errorprone:error_prone_annotations to v2.51.0 (#921) (2d12eda)
  • Update dependency io.grpc:grpc-bom to v1.84.3 (#916) (cd72bcb)
  • Update dependency io.grpc:grpc-bom to v1.85.1 (#920) (290d0cd)
Changelog

Sourced from github.com/googleapis/go-sql-spanner's changelog.

1.28.0 (2026-10-28)

Features

  • Add driver support for Spanner Omni connection options (#927) (09e8564)
  • Add support for parsing savepoint statements (#922) (7ae7869)

Bug Fixes

  • Update all dependencies (#919) (f020b2a)
  • Update dependency com.google.errorprone:error_prone_annotations to v2.51.0 (#921) (2d12eda)
  • Update dependency io.grpc:grpc-bom to v1.84.3 (#916) (cd72bcb)
  • Update dependency io.grpc:grpc-bom to v1.85.1 (#920) (290d0cd)
Commits
  • 3c0bdca chore(main): release 1.28.0 (#918)
  • 77a31ed chore: update module github.com/go-jose/go-jose/v4 to v4.1.6 [security] (#928)
  • 290d0cd fix: update dependency io.grpc:grpc-bom to v1.85.1 (#920)
  • 45639bf chore: update all dependencies to v26 (#926)
  • f020b2a fix: update all dependencies (#919)
  • 09e8564 feat: add driver support for Spanner Omni connection options (#927)
  • ff8b8d0 chore: add SetTransactionActive method (#923)
  • 7ae7869 feat: add support for parsing savepoint statements (#922)
  • 840ef87 build: pin Ruby grpc to < 1.85 temporarily (#925)
  • 2d12eda fix: update dependency com.google.errorprone:error_prone_annotations to v2.51...
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.11.0 to 5.12.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.12.0 (October 30, 2026)

This release fixes two security vulnerabilities with narrow triggering conditions but serious impact. Affected applications should upgrade to v5.12.0; see Security Fixes below.

It also adds batched transaction startup, client certificate policy controls, and per-query batch timing, and improves connection pool cancellation and type handling. Custom implementations of BatchResults, including mocks, must add the new Tx method.

Security Fixes

  • SQL injection in simple-protocol batches (GHSA-j38q-h3ph-jjpq, high severity). In pgx v5 before v5.12.0, SendBatch using the non-default simple protocol could allow arbitrary SQL execution with the application's database privileges when a queued query ends in a -- comment without a newline and the next query has an attacker-controlled string argument on its first line. Batched queries are now separated by a newline to end such comments. Extended-protocol modes are unaffected. Reported by Igor Kupczyński (@​igor-kupczynski).
  • Bypass of require_auth and channel_binding=require (GHSA-95fj-3fxw-g62g, high severity). In pgx v5.9.0 through v5.11.0, applications relying on these settings without verifying the server's identity with sslmode=verify-full (or equivalent TLS verification) could accept an impersonating server that skips authentication. The attacker could read queries and parameters and return fabricated results. pgx now enforces authentication completion and required channel binding before accepting the connection. This vulnerability does not bypass TLS server certificate verification. Reported by @​president-xd.

Features

  • Add Batch.BeginTx and BatchResults.Tx to begin a transaction as the first query of a batch, saving the round trip for BeginTx. Call Batch.BeginTx before queuing any queries, consume the begin query's result first, and close the batch before using the transaction. With pgxpool.Pool.SendBatch, the connection remains acquired until the transaction is committed or rolled back. Add FailedBatchResults for wrappers that fail before sending a batch (Timo Furrer)
  • Add TraceBatchQueryData.ReadStartTime and per-query durations to tracelog batch query entries. These measure result consumption, including application time spent reading rows, rather than server execution alone (Yasser-Ameur)
  • pgconn: support the sslcertmode connection parameter, PGSSLCERTMODE environment variable, and Config.SSLCertMode. The default, allow, sends an available client certificate when requested; disable prevents sending one and skips loading certificate/key files; require fails unless the server requests and receives a certificate. require does not guarantee server-side certificate validation, disables TLS session resumption, and stops further host or TLS fallbacks when the certificate requirement fails (k-zshiba)
  • pgtype: add support for PostgreSQL 19's oid8 and oid8[] (k-zshiba)

Changes

  • pgxpool: background attempts to satisfy MinConns and MinIdleConns now have a 60-second timeout, including connection hooks. Initial background connections preserve the constructor context's values but ignore its cancellation and deadline.
  • pgxpool: canceling Acquire during a health-check ping now returns promptly and lets a successful ping return

... (truncated)

Commits
  • b2ef08b Update changelog for v5.12.0
  • 8199015 Merge commit from fork
  • 5b1a6a0 Merge commit from fork
  • 65a4125 Merge pull request #2697 from b84330808/windows-default-servicefile
  • f2701a0 pgconn: only fall back when Windows service file is missing
  • db95468 Merge pull request #2696 from k-zshiba/support-oid8
  • fa2327d Start each query on a new line when joining a simple protocol batch
  • 2283b85 pgconn: read the default service file from %APPDATA%\postgresql on Windows
  • efc0b74 Merge upstream master into support-oid8
  • 5a17450 pgconn: require AuthenticationOk before ReadyForQuery
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.304.0 to 0.306.0

Release notes

Sourced from google.golang.org/api's releases.

v0.306.0

0.306.0 (2026-10-20)

Features

Bug Fixes

  • gensupport: Defer chunk context cancellation until response body is closed (#3782) (ef4e011)

v0.305.0

0.305.0 (2026-10-18)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.306.0 (2026-10-20)

Features

Bug Fixes

  • gensupport: Defer chunk context cancellation until response body is closed (#3782) (ef4e011)

0.305.0 (2026-10-18)

Features

Commits

Updates google.golang.org/grpc from 1.84.0 to 1.85.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.85.0

New Features

  • stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#9296)
  • metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#9282)

Bug Fixes

  • transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#9563)
  • server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#9394)
  • server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#9414)
  • server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#9391)
  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#9365)
  • xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#9353)
  • client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#9277)
  • transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#9204)
Commits

Updates github.com/duckdb/duckdb-go/v2 from 2.10506.0 to 2.20000.0

Release notes

Sourced from github.com/duckdb/duckdb-go/v2's releases.

v2.20000.0

[!IMPORTANT] Upgrades to DuckDB v2.0.0 through duckdb-go-bindings v0.20000.0. The native libraries now come from go.duckdb.org, so setups that restrict GOPROXY must allow it. The Go API is unchanged, but some behavior changes with DuckDB v2: RowsAffected for CREATE TABLE AS, profiling metrics, and dropped rows after a failed appender flush. Custom dynamic and static linking changed too. See Upgrading to DuckDB v2 in the README.

What's Changed

Full Changelog: duckdb/duckdb-go@v2.10506.0...v2.20000.0

Commits
  • bb8380a Merge pull request #217 from mlafeldt/duckdb-v2-bindings
  • cd69e0f Document that a failed AppendRow does not append its row
  • 76fd883 Verify the shared library the dynamic lib tests download
  • 554d7ae Document upgrading to DuckDB v2
  • c936ff5 Test dynamic and static linking against the bindings' DuckDB build
  • 7863d1a Report dropped appender rows on Close until Clear acknowledges them
  • 1ce76d5 Read profiling metrics from DuckDB v2's metric groups
  • b4db755 Match DuckDB v2's query logging in TestLogStorage
  • bc675d8 Expect CREATE TABLE AS to report its rows as affected
  • 725eb6c Return nil for typed NULL UDF arguments instead of aborting
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.11.0 to 5.12.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.12.0 (October 30, 2026)

This release fixes two security vulnerabilities with narrow triggering conditions but serious impact. Affected applications should upgrade to v5.12.0; see Security Fixes below.

It also adds batched transaction startup, client certificate policy controls, and per-query batch timing, and improves connection pool cancellation and type handling. Custom implementations of BatchResults, including mocks, must add the new Tx method.

Security Fixes

  • SQL injection in simple-protocol batches (GHSA-j38q-h3ph-jjpq, high severity). In pgx v5 before v5.12.0, SendBatch using the non-default simple protocol could allow arbitrary SQL execution with the application's database privileges when a queued query ends in a -- comment without a newline and the next query has an attacker-controlled string argument on its first line. Batched queries are now separated by a newline to end such comments. Extended-protocol modes are unaffected. Reported by Igor Kupczyński (@​igor-kupczynski).
  • Bypass of require_auth and channel_binding=require (GHSA-95fj-3fxw-g62g, high severity). In pgx v5.9.0 through v5.11.0, applications relying on these settings without verifying the server's identity with sslmode=verify-full (or equivalent TLS verification) could accept an impersonating server that skips authentication. The attacker could read queries and parameters and return fabricated results. pgx now enforces authentication completion and required channel binding before accepting the connection. This vulnerability does not bypass TLS server certificate verification. Reported by @​president-xd.

Features

  • Add Batch.BeginTx and BatchResults.Tx to begin a transaction as the first query of a batch, saving the round trip for BeginTx. Call Batch.BeginTx before queuing any queries, consume the begin query's result first, and close the batch before using the transaction. With pgxpool.Pool.SendBatch, the connection remains acquired until the transaction is committed or rolled back. Add FailedBatchResults for wrappers that fail before sending a batch (Timo Furrer)
  • Add TraceBatchQueryData.ReadStartTime and per-query durations to tracelog batch query entries. These measure result consumption, including application time spent reading rows, rather than server execution alone (Yasser-Ameur)
  • pgconn: support the sslcertmode connection parameter, PGSSLCERTMODE environment variable, and Config.SSLCertMode. The default, allow, sends an available client certificate when requested; disable prevents sending one and skips loading certificate/key files; require fails unless the server requests and receives a certificate. require does not guarantee server-side certificate validation, disables TLS session resumption, and stops further host or TLS fallbacks when the certificate requirement fails (k-zshiba)
  • pgtype: add support for PostgreSQL 19's oid8 and oid8[] (k-zshiba)

Changes

  • pgxpool: background attempts to satisfy MinConns and MinIdleConns now have a 60-second timeout, including connection hooks. Initial background connections preserve the constructor context's values but ignore its cancellation and deadline.
  • pgxpool: canceling Acquire during a health-check ping now returns promptly and lets a successful ping return

... (truncated)

Commits
  • b2ef08b Update changelog for v5.12.0
  • 8199015 Merge commit from fork
  • 5b1a6a0 Merge commit from fork
  • 65a4125 Merge pull request #2697 from b84330808/windows-default-servicefile
  • f2701a0 pgconn: only fall back when Windows service file is missing
  • db95468 Merge pull request #2696 from k-zshiba/support-oid8
  • fa2327d Start each query on a new line when joining a simple protocol batch
  • 2283b85 pgconn: read the default service file from %APPDATA%\postgresql on Windows
  • efc0b74 Merge upstream master into support-oid8
  • 5a17450 pgconn: require AuthenticationOk before ReadyForQuery
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.11.0 to 5.12.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.12.0 (October 30, 2026)

This release fixes two security vulnerabilities with narrow triggering conditions but serious impact. Affected applications should upgrade to v5.12.0; see Security Fixes below.

It also adds batched transaction startup, client certificate policy controls, and per-query batch timing, and improves connection pool cancellation and type handling. Custom implementations of BatchResults, including mocks, must add the new Tx method.

Security Fixes

  • SQL injection in simple-protocol batches (GHSA-j38q-h3ph-jjpq, high severity). In pgx v5 before v5.12.0, SendBatch using the non-default simple protocol could allow arbitrary SQL execution with the application's database privileges when a queued query ends in a -- comment without a newline and the next query has an attacker-controlled string argument on its first line. Batched queries are now separated by a newline to end such comments. Extended-protocol modes are unaffected. Reported by Igor Kupczyński (@​igor-kupczynski).
  • Bypass of require_auth and channel_binding=require (GHSA-95fj-3fxw-g62g, high severity). In pgx v5.9.0 through v5.11.0, applications relying on these settings without verifying the server's identity with sslmode=verify-full (or equivalent TLS verification) could accept an impersonating server that skips authentication. The attacker could read queries and parameters and return fabricated results. pgx now enforces authentication completion and required channel binding before accepting the connection. This vulnerability does not bypass TLS server certificate verification. Reported by @​president-xd.

Features

  • Add Batch.BeginTx and BatchResults.Tx to begin a transaction as the first query of a batch, saving the round trip for BeginTx. Call Batch.BeginTx before queuing any queries, consume the begin query's result first, and close the batch before using the transaction. With pgxpool.Pool.SendBatch, the connection remains acquired until the transaction is committed or rolled back. Add FailedBatchResults for wrappers that fail before sending a batch (Timo Furrer)
  • Add TraceBatchQueryData.ReadStartTime and per-query durations to tracelog batch query entries. These measure result consumption, including application time spent reading rows, rather than server execution alone (Yasser-Ameur)
  • pgconn: support the sslcertmode connection parameter, PGSSLCERTMODE environment variable, and Config.SSLCertMode. The default, allow, sends an available client certificate when requested; disable prevents sending one and skips loading certificate/key files; require fails unless the server requests and receives a certificate. require does not guarantee server-side certificate validation, disables TLS session resumption, and stops further host or TLS fallbacks when the certificate requirement fails (k-zshiba)
  • pgtype: add support for PostgreSQL 19's oid8 and oid8[] (k-zshiba)

Changes

  • pgxpool: background attempts to satisfy MinConns and MinIdleConns now have a 60-second timeout, including connection hooks. Initial background connections preserve the constructor context's values but ignore its cancellation and deadline.
  • pgxpool: canceling Acquire during a health-check ping now returns promptly and lets a successful ping return

... (truncated)

Commits
  • b2ef08b Update changelog for v5.12.0
  • 8199015 Merge commit from fork
  • 5b1a6a0 Merge commit from fork
  • 65a4125 Merge pull request #2697 from b84330808/windows-default-servicefile
  • f2701a0 pgconn: only fall back when Windows service file is missing
  • db95468 Merge pull request #2696 from k-zshiba/support-oid8
  • fa2327d Start each query on a new line when joining a simple protocol batch
  • 2283b85 pgconn: read the default service file from %APPDATA%\postgresql on Windows
  • efc0b74 Merge upstream master into support-oid8
  • 5a17450 pgconn: require AuthenticationOk before ReadyForQuery
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.304.0 to 0.306.0

Release notes

Sourced from google.golang.org/api's releases.

Description has been truncated

@dependabot
build(deps): bump the production-dependencies group across 3 director…
c6d2a84 
…ies with 6 updates

Bumps the production-dependencies group with 6 updates in the /examples directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.49.0` | `2.50.0` |
| [github.com/duckdb/duckdb-go/v2](https://github.com/duckdb/duckdb-go) | `2.10506.0` | `2.20000.0` |
| [github.com/googleapis/go-sql-spanner](https://github.com/googleapis/go-sql-spanner) | `1.27.0` | `1.28.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.11.0` | `5.12.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.304.0` | `0.306.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.84.0` | `1.85.0` |
| [github.com/duckdb/duckdb-go/v2](https://github.com/duckdb/duckdb-go) | `2.10506.0` | `2.20000.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.11.0` | `5.12.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.11.0` | `5.12.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.304.0` | `0.306.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.84.0` | `1.85.0` |

Bumps the production-dependencies group with 2 updates in the /internal/endtoend/testdata directory: [github.com/duckdb/duckdb-go/v2](https://github.com/duckdb/duckdb-go) and [github.com/jackc/pgx/v5](https://github.com/jackc/pgx).
Bumps the production-dependencies group with 3 updates in the /internal/goldeneye directory: [github.com/jackc/pgx/v5](https://github.com/jackc/pgx), [google.golang.org/api](https://github.com/googleapis/google-api-go-client) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/ClickHouse/clickhouse-go/v2` from 2.49.0 to 2.50.0
- [Release notes](https://github.com/ClickHouse/clickhouse-go/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-go/blob/main/CHANGELOG.md)
- [Commits](ClickHouse/clickhouse-go@v2.49.0...v2.50.0)

Updates `github.com/duckdb/duckdb-go/v2` from 2.10506.0 to 2.20000.0
- [Release notes](https://github.com/duckdb/duckdb-go/releases)
- [Commits](duckdb/duckdb-go@v2.10506.0...v2.20000.0)

Updates `github.com/googleapis/go-sql-spanner` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/googleapis/go-sql-spanner/releases)
- [Changelog](https://github.com/googleapis/go-sql-spanner/blob/main/CHANGES.md)
- [Commits](googleapis/go-sql-spanner@v1.27.0...v1.28.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `google.golang.org/api` from 0.304.0 to 0.306.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.304.0...v0.306.0)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

Updates `github.com/duckdb/duckdb-go/v2` from 2.10506.0 to 2.20000.0
- [Release notes](https://github.com/duckdb/duckdb-go/releases)
- [Commits](duckdb/duckdb-go@v2.10506.0...v2.20000.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `google.golang.org/api` from 0.304.0 to 0.306.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.304.0...v0.306.0)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

Updates `github.com/duckdb/duckdb-go/v2` from 2.10506.0 to 2.20000.0
- [Release notes](https://github.com/duckdb/duckdb-go/releases)
- [Commits](duckdb/duckdb-go@v2.10506.0...v2.20000.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `github.com/duckdb/duckdb-go/v2` from 2.10506.0 to 2.20000.0
- [Release notes](https://github.com/duckdb/duckdb-go/releases)
- [Commits](duckdb/duckdb-go@v2.10506.0...v2.20000.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `google.golang.org/api` from 0.304.0 to 0.310.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.304.0...v0.306.0)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `google.golang.org/api` from 0.304.0 to 0.310.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.304.0...v0.306.0)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

---
updated-dependencies:
- dependency-name: github.com/ClickHouse/clickhouse-go/v2
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/duckdb/duckdb-go/v2
  dependency-version: 2.20000.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/googleapis/go-sql-spanner
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.306.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/duckdb/duckdb-go/v2
  dependency-version: 2.20000.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.306.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/duckdb/duckdb-go/v2
  dependency-version: 2.20000.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/duckdb/duckdb-go/v2
  dependency-version: 2.20000.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.310.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.310.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants