build(deps): bump the go-dev-dependencies group across 1 directory with 8 updates

[dependabot]

Bumps the go-dev-dependencies group with 8 updates in the / directory:

Package	From	To
github.com/rs/zerolog	1.35.0	1.35.1
github.com/bytedance/sonic	1.15.0	1.15.1
github.com/cloudwego/base64x	0.1.6	0.1.7
github.com/fsnotify/fsnotify	1.9.0	1.10.0
github.com/mattn/go-isatty	0.0.21	0.0.22
github.com/mattn/go-sqlite3	1.14.42	1.14.44
github.com/pelletier/go-toml/v2	2.3.0	2.3.1
go.mongodb.org/mongo-driver/v2	2.5.1	2.6.0

Updates github.com/rs/zerolog from 1.35.0 to 1.35.1

Commits

• 116c806 event: restore Err() logging when ErrorStackMarshaler returns nil (#763)
• See full diff in compare view

Updates github.com/bytedance/sonic from 1.15.0 to 1.15.1

Release notes

Sourced from github.com/bytedance/sonic's releases.

v1.15.1

What's Changed

• refactor: improve code formatting and remove unused lookup_small_key … by @​liuq19 in bytedance/sonic#903
• ci: add macOS ARM (Apple Silicon) runners to workflows by @​liuq19 in bytedance/sonic#911
• chore: use go fmt format by @​liuq19 in bytedance/sonic#913
• fix(decoder): memory corruption when decode prefilled interface by @​liuq19 in bytedance/sonic#914
• fix(decoder): align jit string-tag mismatch with encoding/json by @​liuq19 in bytedance/sonic#917
• revert: drop integer range mismatch and related tests by @​liuq19 in bytedance/sonic#922
• fix(rt): align map IndirectElem semantics across Go versions by @​liuq19 in bytedance/sonic#924
• feat:(encoder) not omit zero value for omitempty tag by @​AsterDY in bytedance/sonic#927
• opt: unify JIT funcs in single moduledata on Pretouch by @​AsterDY in bytedance/sonic#932
• chore: update loader v0.5.1 by @​AsterDY in bytedance/sonic#933
• docs: update README Go 1.26 support by @​equationzhao in bytedance/sonic#931

New Contributors

• @​equationzhao made their first contribution in bytedance/sonic#931

Full Changelog: bytedance/sonic@v1.15.0...v1.15.1

Commits

• 4ddcd08 docs: update README Go 1.26 support (#931)
• 4c8f70b chore: update loader v0.5.1 (#933)
• d64ddf9 opt: unify JIT funcs in single moduledata on Pretouch (#932)
• 3835c03 feat:(encoder) not omit zero value for omitempty tag (#927)
• c9e5b0f fix(rt): align map IndirectElem semantics across Go versions (#924)
• 28040bd revert: drop integer range mismatch and related tests (#922)
• f8ba977 fix(decoder): align jit string-tag mismatch with encoding/json (#917)
• 9a1c148 fix(decoder): memory corruption when decode prefilled interface (#914)
• 0724463 chore: use go fmt format (#913)
• f7c86b9 ci: add macOS ARM (Apple Silicon) runners to workflows (#911)
• Additional commits viewable in compare view

Updates github.com/cloudwego/base64x from 0.1.6 to 0.1.7

Release notes

Sourced from github.com/cloudwego/base64x's releases.

v0.1.7

What's Changed

• fix: guard native code on portable builds by @​liuq19 in cloudwego/base64x#14
• fix: upgrade sonic loader for go1.26 by @​liuq19 in cloudwego/base64x#15

Full Changelog: cloudwego/base64x@v0.1.6...v0.1.7

Commits

• 4122261 fix: upgrade sonic loader for go1.26 (#15)
• 33496ef fix: guard native code on portable builds (#14)
• See full diff in compare view

Updates github.com/fsnotify/fsnotify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/fsnotify/fsnotify's releases.

v1.10.0

This version of fsnotify needs Go 1.23.

Changes and fixes

• inotify: improve initialization error message (#731)

• inotify: send Rename event if recursive watch is renamed (#696)

• inotify: avoid copying event buffers when reading names (#741)

• kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

• kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

• windows: fix nil pointer dereference in remWatch (#736)

• windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Changelog

Sourced from github.com/fsnotify/fsnotify's changelog.

1.10.0 2026-04-30

This version of fsnotify needs Go 1.23.

Changes and fixes

• inotify: improve initialization error message (#731)

• inotify: send Rename event if recursive watch is renamed (#696)

• inotify: avoid copying event buffers when reading names (#741)

• kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

• kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

• windows: fix nil pointer dereference in remWatch (#736)

• windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Commits

• 8d01d7b Release 1.10.0
• 602284e Update changelog
• 7f03e59 kqueue: skip ENOENT entries in watchDirectoryFiles (#748)
• dab9dde windows: lock watch field updates against concurrent WatchList (#709) (#749)
• eadf267 kqueue: drop watches directly in Close() instead of going through remove() (#...
• fdcafbf avoid copying inotify event buffers (#741)
• 7cf61a8 update minimum Go version requirement to 1.23 in README.md (#747)
• 907df2a run go fix ./... (#746)
• e53b542 all: bump minimum Go version to 1.23 (#744)
• 0ead6d1 windows: re-enable chanClosed check in TestClose/events_not_read (#743)
• Additional commits viewable in compare view

Updates github.com/mattn/go-isatty from 0.0.21 to 0.0.22

Commits

• 9a68506 Fix isCygwinPipeName to accept Windows 7 trailing suffix (#90)
• See full diff in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.44

Commits

• 20826e8 Merge pull request #1394 from mattn/sqlite-amalgamation-3053000
• 2d4d220 fix changelog URL when minor or patch version is zero
• 3761cf7 Upgrade SQLite to version 3053000
• 1aa7317 Merge pull request #1388 from mattn/stmt-cache-lru
• c719e20 Merge pull request #1392 from mattn/fix-issue-1390-query-comment-panic
• 869e516 fix panic when querying input with no SQL (only comments/whitespace)
• 6690238 extract finalizeCachedStmt helper and drop redundant tail reset
• 59e8e75 only set stmt cacheKey when cache is enabled
• 2badb4c use slice len/cap for stmt cache instead of separate counters
• 7716c20 evict LRU stmt when stmt cache is full
• Additional commits viewable in compare view

Updates github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1

Release notes

Sourced from github.com/pelletier/go-toml/v2's releases.

v2.3.1

What's Changed

Fixed bugs

• Fix incorrect error positions in unstable parser Range() (#1047) by @​pelletier in pelletier/go-toml#1056
• fix: change DisallowUnknownFields error from "missing field" to "unknown field" by @​Yanhu007 in pelletier/go-toml#1054

Other changes

• README.md: remove reference to old go versions and modules by @​maruel in pelletier/go-toml#1048

New Contributors

• @​Yanhu007 made their first contribution in pelletier/go-toml#1054
• @​maruel made their first contribution in pelletier/go-toml#1048

Full Changelog: pelletier/go-toml@v2.3.0...v2.3.1

Commits

• f85c4e8 README.md: remove reference to old go versions and modules (#1048)
• 45d4fb4 fix: change DisallowUnknownFields error from "missing field" to "unknown fiel...
• c171216 Fix incorrect error positions in unstable parser Range() (#1047) (#1056)
• See full diff in compare view

Updates go.mongodb.org/mongo-driver/v2 from 2.5.1 to 2.6.0

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.6.0

The MongoDB Go Driver Team is pleased to release version 2.6.0 of the official MongoDB Go Driver.

Release Highlights

[!IMPORTANT] Go Driver v2.6 will be the last minor version to support MongoDB 4.2. Go Driver v2.7 will require MongoDB 4.4 or newer.

This release adds support for MongoDB's Intelligent Workload Management (IWM) and ingress connection rate limiting features. The driver now gracefully handles write-blocking scenarios and optimizes connection establishment during high-load conditions to maintain application availability.

Two new methods of ClientOptions are available:

• SetMaxAdaptiveRetries - specifies the maximum number of times the driver should retry operations that fail with a server side overload error. If not invoked, the default is 2. MaxAdaptiveRetries can also be set through the "maxAdaptiveRetries" URI option (e.g. "maxAdaptiveRetries=5").
• SetEnableOverloadRetargeting - specifies whether the driver should enable overload retargeting for operations that fail with a server side overload error. If not invoked, the default is false. EnableOverloadRetargeting can also be set through the "enableOverloadRetargeting" URI option (e.g. "enableOverloadRetargeting=true").

What's Changed

✨ New Features

• GODRIVER-3734 Add TransactionRunning to Session API by @​prestonvasquez in mongodb/mongo-go-driver#2309
• GODRIVER-3719: Expand server deprioritization to all topologies by @​RafaelCenzano in mongodb/mongo-go-driver#2292
• GODRIVER-3647 Add backoff for transaction retry. by @​qingyang-hu in mongodb/mongo-go-driver#2327
• GODRIVER-3646 Implement backpressure error labels for connection establishment by @​tadjik1 in mongodb/mongo-go-driver#2330
• GODRIVER-3822 Server selection deprioritization only for overload errors on replica sets. by @​qingyang-hu in mongodb/mongo-go-driver#2341
• GODRIVER-3658 Implement backpressure retry logic. by @​qingyang-hu in mongodb/mongo-go-driver#2353
• GODRIVER-3810 Update WithTransaction to raise timeout error. by @​qingyang-hu in mongodb/mongo-go-driver#2344
• GODRIVER-3844 Add maxAdaptiveRetries and enableOverloadRetargeting options for backpressure. by @​qingyang-hu in mongodb/mongo-go-driver#2363
• GODRIVER-3778 Add code examples for non-backpressure drivers handling backpressure errors. by @​qingyang-hu in mongodb/mongo-go-driver#2338

Full Changelog: mongodb/mongo-go-driver@v2.5.1...v2.6.0

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

Commits

• fd85a83 BUMP v2.6.0
• 52b385d GODRIVER-3829 Cleanup skip list. (#2369)
• 71375d7 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.1...
• 65f4e94 GODRIVER-3870 Use a generic type parameter for retry func in overload code ex...
• 00ab776 GODRIVER-3849 Update backpressure errors handling examples. (#2365)
• fa56c25 Bump github/codeql-action from 4.35.1 to 4.35.2 in the actions group (#2367)
• 4ee727e GODRIVER-3844 Add maxAdaptiveRetries and enableOverloadRetargeting option...
• 881269a GODRIVER-3810 Update WithTransaction to raise timeout error. (#2344)
• c1d47f7 Bump actions/upload-artifact from 7.0.0 to 7.0.1 in the actions group (#2361)
• 9a15470 GODRIVER-3658 Implement backpressure retry logic. (#2353)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 7 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA af8beb3.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

go.mod

Package	Version	License	Issue Type
github.com/bytedance/sonic	1.15.1	Null	Unknown License
github.com/cloudwego/base64x	0.1.7	Null	Unknown License
github.com/fsnotify/fsnotify	1.10.0	Null	Unknown License
github.com/mattn/go-isatty	0.0.22	Null	Unknown License
github.com/mattn/go-sqlite3	1.14.44	Null	Unknown License
github.com/pelletier/go-toml/v2	2.3.1	Null	Unknown License
github.com/rs/zerolog	1.35.1	Null	Unknown License

Allowed Licenses:

0BSD, AGPL-3.0-or-later, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-3-Clause-Clear, BSD-3-Clause, BSL-1.0, bzip2-1.0.6, CAL-1.0, CC-BY-3.0, CC-BY-4.0, CC-BY-SA-4.0, CC0-1.0, EPL-2.0, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-2.0, GPL-3.0-only, GPL-3.0-or-later, GPL-3.0, ISC, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1, LGPL-3.0-only, LGPL-3.0, LGPL-3.0-or-later, MIT, MIT-CMU, MPL-1.1, MPL-2.0, OFL-1.1, PSF-2.0, Python-2.0, Python-2.0.1, Unicode-3.0, Unicode-DFS-2016, Unlicense, Zlib, ZPL-2.1

OpenSSF Scorecard

Package	Version	Score	Details
gomod/github.com/bytedance/sonic	1.15.1	Unknown	Unknown
gomod/github.com/cloudwego/base64x	0.1.7	Unknown	Unknown
gomod/github.com/fsnotify/fsnotify	1.10.0	Unknown	Unknown
gomod/github.com/mattn/go-isatty	0.0.22	Unknown	Unknown
gomod/github.com/mattn/go-sqlite3	1.14.44	Unknown	Unknown
gomod/github.com/pelletier/go-toml/v2	2.3.1	Unknown	Unknown
gomod/github.com/rs/zerolog	1.35.1	Unknown	Unknown
gomod/go.mongodb.org/mongo-driver/v2	2.6.0	🟢 7.8	Details Check Score Reason Dependency-Update-Tool 🟢 10 update tool detected Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Code-Review 🟢 7 Found 10/13 approved changesets -- score normalized to 7 Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Vulnerabilities 🟢 4 6 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Fuzzing 🟢 10 project is fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection 🟢 4 branch protection is not maximal on development and all release branches CI-Tests 🟢 10 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 25 contributing companies or organizations

Scanned Files

• go.mod

[github-actions]

Conventional Commits Report

😢 No conventional commits found.

👉 Learn more about the conventional commits usage at Greenbone.

[codecov]

Codecov Report

❌ Patch coverage is 33.33333% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 57.72%. Comparing base (b8a5bef) to head (af8beb3).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
pkg/configReader/configReader.go	50.00%	1 Missing ⚠️
pkg/httpassert/extracter.go	0.00%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #311   +/-   ##
=======================================
  Coverage   57.72%   57.72%           
=======================================
  Files          59       59           
  Lines        3080     3080           
=======================================
  Hits         1778     1778           
  Misses       1165     1165           
  Partials      137      137           

Flag	Coverage Δ
opensearch-tests	95.68% <ø> (ø)
postgres-tests	92.03% <ø> (ø)
unit-tests	50.62% <33.33%> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.