This is an automated email from the ASF dual-hosted git repository.
zeroshade pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-go.git
The following commit(s) were added to refs/heads/main by this push:
new e6b8381e chore: Bump modernc.org/sqlite from 1.59.0 to 1.60.1 (#1356)
e6b8381e is described below
commit e6b8381e4d1daf0ee0e9d5b0c3e0a515e3b5645d
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Oct 5 19:05:13 2026 -0400
chore: Bump modernc.org/sqlite from 1.59.0 to 1.60.1 (#1356)
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.59.0
to 1.60.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md";>modernc.org/sqlite's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>Entries for v1.38.1 through v1.44.1 and for v1.49.1 were added on
2026-09-05, reconstructed from the git history and the merge requests
they cite; they were missing at release time.</p>
<ul>
<li>
<p>2026-09-30 v1.61.0:</p>
<ul>
<li>Add <code>_time_format=string_no_monotonic</code>,
<strong>opt-in</strong>: times are written in the default layout but
without Go's monotonic clock reading, the <code> m=+...</code> suffix,
so a scanned time matches its row again when bound in <code>WHERE col =
?</code>. The default is unchanged. Resolves [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/259";>#259</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/259";>https://gitlab.com/cznic/sqlite/-/issues/259</a>).
See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/142";>#142</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/142";>https://gitlab.com/cznic/sqlite/-/merge_requests/142</a>),
thanks 不插电 (<a
href="https://gitlab.com/r27153733";><code>@r27153733</code></a>)!</li>
<li>Each release tag now gets a signed provenance document, linked from
its GitLab release; <code>VERIFYING.md</code> says what it proves and
how to check one. Tooling only. See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/141";>#141</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/141";>https://gitlab.com/cznic/sqlite/-/merge_requests/141</a>).</li>
<li>Add an opt-in SQLite authorizer per connection:
<code>AuthorizerRegisterer</code>, reached through
<code>sql.Conn.Raw</code> or installed on every pooled connection from
<code>RegisterConnectionHook</code>; existing connections are unchanged.
Resolves [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/256";>#256</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/256";>https://gitlab.com/cznic/sqlite/-/issues/256</a>).
See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/139";>#139</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/139";>https://gitlab.com/cznic/sqlite/-/merge_requests/139</a>),
thanks Tedla Brandsema (<a
href="https://gitlab.com/TedlaBrandsema";><code>@TedlaBrandsema</code></a>)!</li>
<li>Closing a connection now forgets the pre-update, commit and rollback
hooks registered on it; their entries used to linger after
<code>Close</code>.</li>
</ul>
</li>
<li>
<p>2026-09-29 v1.60.1:</p>
<ul>
<li>Binding arguments to a statement is no longer quadratic in the
number of its parameters, which made multi-row <code>INSERT</code>s with
thousands of <code>?</code> parameters slow. Resolves [GitHub issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/8";>#8</a>](<a
href="https://redirect.github.com/modernc-org/sqlite/issues/8";>modernc-org/sqlite#8</a>),
thanks wencycool!</li>
</ul>
</li>
<li>
<p>2026-09-28 v1.60.0:</p>
<ul>
<li><strong>A fault while reading the memory-mapped <code>-shm</code>
file of a WAL database no longer crashes the process.</strong> The
statement fails with a disk I/O error, extended code
<code>SQLITE_IOERR_IN_PAGE</code> (8714), and the connection stays
usable, as in MSVC builds of SQLite. On by default on every platform and
not switchable; <code>lib.SehInject</code> and
<code>lib.SehPending</code> inject such a fault for tests. Resolves
[GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/221";>#221</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/221";>https://gitlab.com/cznic/sqlite/-/issues/221</a>),
thanks Roman (<a
href="https://gitlab.com/requilence";><code>@requilence</code></a>) for
the report, and supersedes <a
href="https://gitlab.com/cznic/libsqlite3/-/merge_requests/4";>libsqlite3!4</a>
and [GitHub pull request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/7";>#7</a>](<a
href="https://redirect.github.com/modernc-org/sqlite/pull/7";>modernc-org/sqlite#7</a>),
thanks hazyhaar for the two rounds, the <code>ccgo</code> finding and
the Windows Server runs!</li>
<li>Re-vendor <code>lib/</code> from <a
href="https://gitlab.com/cznic/libsqlite3/-/tags/v1.15.0";>modernc.org/libsqlite3
v1.15.0</a> and <code>vec/</code> from <a
href="https://gitlab.com/cznic/libsqlite_vec/-/tags/v0.6.0";>modernc.org/libsqlite_vec
v0.6.0</a>; SQLite stays 3.53.4 and sqlite-vec v0.1.9. <strong>Go 1.26
is now required</strong>, and the pinned <code>modernc.org/libc</code>
becomes <a
href="https://gitlab.com/cznic/libc/-/tags/v1.77.1";>v1.77.1</a>; as
always, downstream <code>go.mod</code> files must pin the same
<code>modernc.org/libc</code> version this repository's
<code>go.mod</code> does, see [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/177";>#177</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/177";>https://gitlab.com/cznic/sqlite/-/issues/177</a>).</li>
<li><strong>Nine exported <code>lib</code> constants that never had a
meaningful value are gone</strong>: <code>INFINITY</code>,
<code>MB_CUR_MAX</code>, <code>NAN</code>, <code>RESERVED_BYTE</code>,
<code>SHARED_FIRST</code>, <code>SQLITE_CANTOPEN_BKPT</code>,
<code>SQLITE_CORRUPT_BKPT</code>, <code>SQLITE_DEFAULT_LOOKASIDE</code>
and <code>SQLITE_MISUSE_BKPT</code>. The transpiler now evaluates
object-like macros as C expressions, so other constants take their C
value (<code>lib.WALINDEX_PGSZ</code> is 32768, not 0) and some appear;
the full list is in <a
href="https://gitlab.com/cznic/libsqlite3/-/blob/master/CHANGELOG.md";>libsqlite3's
CHANGELOG</a> under 2026-09-19.</li>
<li><code>make vendor</code> now writes <code>vendor.json</code>, the
<code>modernc.org/libsqlite3</code> and
<code>modernc.org/libsqlite_vec</code> commits and the Go toolchain
<code>lib/</code> and <code>vec/</code> were vendored with, so <code>git
show vX.Y.Z:vendor.json</code> says which revisions a release carries;
the test suite fails when they no longer match. Tooling only. See
[GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/140";>#140</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/140";>https://gitlab.com/cznic/sqlite/-/merge_requests/140</a>).</li>
<li><strong><code>vfs.FS.Close</code> now refuses while a database
opened through it is still open</strong>, returning an error that wraps
the new <code>vfs.ErrInUse</code> and leaving the VFS registered. It
used to free the VFS the open connection still called through, so the
next query crashed the process or read through freed memory. Close the
databases first, then the <code>FS</code>.</li>
<li>Fix handle reuse in <code>modernc.org/sqlite/vfs</code> on 32-bit
targets: after 2^32 file opens in one process the handle counter wrapped
and could overwrite a live entry, such as a file system registered at
start-up, and crash. 64-bit targets were not affected.</li>
<li><strong>The pluggable page cache now panics when a
<code>Cache</code> breaks its contract</strong> by returning nil, or a
different <code>Page</code>, from <code>Fetch</code> for a page SQLite
still holds pinned. It used to free memory SQLite was still using,
corrupting the database without an error. Only a <code>Cache</code>
implementation with that bug is affected;
<code>modernc.org/sqlite/pcache</code> is not.</li>
<li>Document three limits of the pluggable page cache on
<code>RegisterPageCache</code> and <code>Cache</code>: it cannot be
combined with <code>modernc.org/sqlite/vec</code>,
<code>PageCache.Create</code> may be called concurrently, and under
<code>cache=shared</code> a <code>Cache</code> is called from several
goroutines. Documentation only.</li>
<li>Document in the package documentation that state set on a pooled
connection is inherited by the next caller to borrow it, and that a
connection reached through <code>sql.Conn.Raw</code> is not safe for
concurrent use. Documentation only.</li>
<li>Add <code>StrictPragmas</code>, <strong>opt-in and off by
default</strong>: once enabled, a connection whose <code>_pragma</code>
DSN value holds more than one SQL statement fails to open with
<code>ErrMultiStatementPragma</code>, before any DSN parameter is
applied. A <code>_pragma</code> value runs as SQL text, so anything
after a <code>;</code> runs too. Recommended for any application whose
DSN is not a compile-time constant.</li>
<li>Document SQLite's own URI query parameters on
<code>Driver.Open</code>: <code>mode</code>, <code>cache</code>,
<code>immutable</code>, <code>nolock</code>, <code>psow</code> and
<code>modeof</code>, which have always worked in a DSN starting with
<code>file:</code>, and the trap that a plain file name has its query
stripped before SQLite sees it, so <code>/path/to.db?mode=ro</code>
opens read-write. Resolves [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/257";>#257</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/257";>https://gitlab.com/cznic/sqlite/-/issues/257</a>).
Documentation only.</li>
<li>Add <code>SECURITY.md</code>, the vulnerability reporting policy:
three private channels, what is in scope, that only the latest release
is supported, and how a confirmed report is disclosed, including an
entry in the Go vulnerability database so <code>govulncheck</code>
reports it. <code>IRP.md</code>, linked from it, is the maintainers'
incident response plan. Documentation only.</li>
<li>Add <code>CONTRIBUTING.md</code>: where to send a merge request,
which files are generated and must not be edited by hand, how to build
and test across the 20 supported targets, and the
<code>AUTHORS</code>/<code>CONTRIBUTORS</code> convention. Documentation
only.</li>
<li>Ship <code>LICENSE-3RD-PARTY.md</code>, a transitively flattened
inventory of every third-party component this module carries with all
seventeen license texts in full, and a Software Bill of Materials,
<code>sbom.cdx.json</code> (CycloneDX 1.6) and
<code>sbom.spdx.json</code> (SPDX 2.3), explained in
<code>SBOM.md</code>. Both cover what a module-graph tool cannot see:
the transpiled SQLite and <code>sqlite-vec</code> C, and the upstreams
<code>modernc.org/libc</code> carries, musl among them. Documentation
only.</li>
</ul>
</li>
<li>
<p>2026-09-15 v1.59.0:</p>
<ul>
<li>Bump the pinned <code>modernc.org/libc</code> to <a
href="https://gitlab.com/cznic/libc/-/tags/v1.75.7";>v1.75.7</a> and
re-vendor <code>lib/</code> and <code>vec/</code>. The transpiled SQLite
is unchanged, still 3.53.4. On the Linux targets the new libc replaces
transpiled musl <code>memcpy</code>, <code>memmove</code>,
<code>memset</code>, <code>memcmp</code> and <code>strlen</code> with
native Go, cutting CPU time on query-heavy workloads by up to a third;
see the new Performance section below. As always, downstream
<code>go.mod</code> files must pin the same
<code>modernc.org/libc</code> version this repository's
<code>go.mod</code> does; see [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/177";>#177</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/177";>https://gitlab.com/cznic/sqlite/-/issues/177</a>).</li>
<li>Hand user-defined function and aggregate callbacks a pooled
<code>*FunctionContext</code> instead of allocating a fresh one per
call, removing the last driver-side allocation per invocation. Like the
argument slice, it is valid only for the duration of the callback and
must not be retained past its return. Updates [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/226";>#226</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/226";>https://gitlab.com/cznic/sqlite/-/issues/226</a>).
See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/137";>#137</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/137";>https://gitlab.com/cznic/sqlite/-/merge_requests/137</a>).</li>
<li>Add regression tests pinning the identity and the pooling of that
context. See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/138";>#138</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/138";>https://gitlab.com/cznic/sqlite/-/merge_requests/138</a>),
thanks Ian Chechin!</li>
<li>Add a Performance section to the package documentation: measured
CPU-time ratios of this driver against the same SQLite compiled from C,
where the gap comes from, and the two consequences for applications —
index the columns that <code>ORDER BY</code>, <code>GROUP BY</code> and
<code>WHERE</code> use, and bound the <code>database/sql</code> pool
with <code>SetMaxOpenConns</code>.</li>
</ul>
</li>
<li>
<p>2026-09-01 v1.58.0:</p>
<ul>
<li>Upgrade to <a
href="https://sqlite.org/releaselog/3_53_4.html";>SQLite 3.53.4</a>. It
carries upstream's own fix for the journal-rollback data-corruption bug,
so the local super-journal patch v1.56.0 introduced is dropped; recovery
behavior is unchanged. Also bumps the pinned
<code>modernc.org/libc</code> to v1.75.6; as always, downstream modules
must pin the same version this one does, see [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/177";>#177</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/177";>https://gitlab.com/cznic/sqlite/-/issues/177</a>).</li>
<li>Add opt-in support for <strong>Linux Open File Description (OFD)
locks</strong> on database files, <strong>off by default</strong>;
without opting in, locking behavior is byte-for-byte that of previous
releases. A POSIX record lock is owned by the (process, inode) pair, so
any <code>Close</code> of any descriptor of the database file anywhere
in the process silently strips SQLite's locks; OFD locks survive that.
Enable it process-wide with <code>MODERNC_SQLITE_OFD_LOCK=1</code> in
the environment, or with the new <code>OFDLocking(true)</code> before
the first connection is opened; <code>OFDLockingEnabled</code> reports
the mode in effect, and the new <code>ErrOFDLockingTooLate</code> and
<code>ErrOFDLockingUnavailable</code> report a switch attempted too late
and a platform or filesystem without the feature. Why it is process-wide
rather than a DSN parameter, what WAL's <code>-shm</code> coordination
still uses, and the <code>/proc/locks</code> measurements behind the
design are in [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/255";>#255</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/255";>https://gitlab.com/cznic/sqlite/-/issues/255</a>).</li>
<li>Resolves [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/255";>#255</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/255";>https://gitlab.com/cznic/sqlite/-/issues/255</a>).
See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/136";>#136</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/136";>https://gitlab.com/cznic/sqlite/-/merge_requests/136</a>),
thanks Nathan Herring (<a
href="https://gitlab.com/technosloth";><code>@technosloth</code></a>),
and thanks Gani Georgiev (<a
href="https://gitlab.com/ganigeorgiev";><code>@ganigeorgiev</code></a>)
for pressing the opt-in default!</li>
</ul>
</li>
<li>
<p>2026-08-19 v1.57.0:</p>
<ul>
<li>Add an opt-in <code>_defensive</code> DSN query parameter turning on
SQLite's defensive mode for the connection. On such a connection
<code>PRAGMA writable_schema=ON</code>, <code>PRAGMA
journal_mode=OFF</code> and <code>PRAGMA schema_version=N</code> become
silent no-ops, and writes to a virtual table's shadow tables and to
<code>sqlite_dbpage</code> fail. It is a hardening measure, not a
sandbox for hostile database files, for which it is only one of the
steps <a href="https://www.sqlite.org/security.html";>SQLite
recommends</a>, and it is a property of the connection, not of the file.
Absent, or <code>_defensive=0</code>, nothing changes.</li>
<li>Reject <code>_defensive=1</code> together with
<code>_journal_mode=OFF</code> (or <code>_journal=OFF</code>) instead of
opening a connection in which neither was honoured: SQLite turns that
PRAGMA into a no-op that still reports success. Only DSNs using the new
parameter can be affected. See [GitHub pull request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/6";>#6</a>](<a
href="https://redirect.github.com/modernc-org/sqlite/pull/6";>modernc-org/sqlite#6</a>),
thanks wsman!</li>
<li>Ship the <a
href="https://github.com/asg017/sqlite-vec";>sqlite-vec</a> license
notice this module has been missing since <code>vec/</code> arrived in
v1.47.0. sqlite-vec is Copyright (c) 2024 Alex Garcia, dual-licensed
Apache-2.0 OR MIT and used here under MIT; the text now ships as
<code>LICENSE-SQLITE_VEC</code>, and <code>make vendor</code> fails
rather than quietly dropping it.</li>
<li><strong>The SQLite notice is renamed from
<code>SQLITE-LICENSE</code> to <code>LICENSE-SQLITE</code></strong>;
update any direct links to it. Its contents are unchanged. The rename is
what makes <code>go mod vendor</code> carry both notices into downstream
<code>vendor/</code> trees: it selects license files by name prefix, so
a name merely ending in <code>LICENSE</code> was never propagated.</li>
<li>Let a caller-constructed <code>Driver</code> register its own
functions, collations and virtual table modules, through new
<code>RegisterFunction</code>, <code>RegisterScalarFunction</code>,
<code>RegisterDeterministicScalarFunction</code>,
<code>RegisterCollationUtf8</code> and <code>RegisterModule</code>
methods plus <code>Must*</code> variants, and let
<code>vtab.RegisterModule</code> honour its <code>db</code> argument.
<strong>Behavior change</strong>: <code>vtab.RegisterModule(db,
...)</code> where <code>db</code> was opened on a caller-constructed
<code>Driver</code> used to discard <code>db</code> and land on the
registered <code>sqlite</code> driver, reaching every connection in the
process; it now lands on that <code>Driver</code> alone, so a
<code>sql.Open("sqlite")</code> connection that used to
resolve such a module gets <code>no such module</code>. Everything else
is additive, and the isolating change discussed in [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/-/work_items/254";>#254</a>](<a
href="https://gitlab.com/cznic/sqlite/-/issues/254";>https://gitlab.com/cznic/sqlite/-/issues/254</a>)
is deliberately not made here. See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/-/work_items/135";>#135</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/135";>https://gitlab.com/cznic/sqlite/-/merge_requests/135</a>),
thanks Ian Chechin!</li>
<li>Promote <code>freebsd/386</code>, <code>freebsd/arm</code> and
<code>netbsd/amd64</code> from experimental to fully supported. The
package documentation's platform table had carried seventeen entries
while this module shipped, cross-built and tested twenty; all three have
been in the builder matrix since v1.53.0 and pass the full suite on this
release's commit. Documentation only — <code>lib/</code> is
byte-for-byte what v1.56.0 shipped.</li>
</ul>
</li>
<li>
<p>2026-08-03 v1.56.0:</p>
<ul>
<li>Re-vendor the transpiled sources, picking up
<code>modernc.org/libsqlite3</code>'s patch for an <strong>upstream
data-corruption bug in SQLite 3.53.3's journal rollback</strong>. A
crash during the commit of a multi-database (ATTACH) transaction can
leave a hot journal whose zeroed super-journal name still validates, so
<code>pager_playback()</code> deletes it without playing it back and
leaves the database corrupted. Not a transpilation artifact: a plain gcc
build of stock 3.53.3 fails on the same bytes. The SQLite version is
unchanged at <a
href="https://sqlite.org/releaselog/3_53_3.html";>3.53.3</a>, every
supported target carries the patch, and it will be dropped once upstream
ships its own fix.</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/b122d0417c01508beb55158faedeb64a0c5bfd8a";><code>b122d04</code></a>
conn: bind statement arguments in linear time</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/7d5a37693ebb757dcae7aa0f90d7ff833d3807e8";><code>7d5a376</code></a>
CHANGELOG.md: slim the v1.60.0 section</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/a604165aed43884e6cf353a9f1a054de9a459b34";><code>a604165</code></a>
CHANGELOG.md: the SEH emulation, the re-vendor and the removed lib
constants;...</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/fb4aac493098a52c9e0d6a018f79f1835161ce0b";><code>fb4aac4</code></a>
vendor.json: stamp lib/ from libsqlite3 v1.15.0 and vec/ from
libsqlite_vec v...</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/0f7ae7d71679039a81e4f9d93d41fdfec8b81831";><code>0f7ae7d</code></a>
Merge branch 'master' into seh-emulation</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/2e4332404f5cc1be407523259068e5752fc9d22e";><code>2e43324</code></a>
lib: re-vendor from modernc.org/libsqlite3 v1.15.0 (SEH emulation), pin
libc ...</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/50380ee041c17a22737c144f87eba4bb6461af1f";><code>50380ee</code></a>
lib, tests: Go side of the wal.c SEH emulation for Windows in-page
faults (<a
href="https://gitlab.com/cznic/sqlite/-/work_items/221";>#221</a>)</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/4552e53ec5342cbb08542166c75c1f381ccdd84d";><code>4552e53</code></a>
Merge branch 'vendor-stamp' into 'master'</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/377517737a53611045ebe5ace90dbacb03f35601";><code>3775177</code></a>
Makefile, doc.go, IRP.md: VENDORFLAGS for debug builds; name every
refusal</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/86c97d49058dda7e509f2248862f656ace2e083b";><code>86c97d4</code></a>
CHANGELOG.md: link merge request !140</li>
<li>Additional commits viewable in <a
href="https://gitlab.com/cznic/sqlite/compare/v1.59.0...v1.60.1";>compare
view</a></li>
</ul>
</details>
<br />
<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>
| Dependency Name | Ignore Conditions |
| --- | --- |
| modernc.org/sqlite | [>= 1.34.a, < 1.35] |
</details>
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
go.mod | 16 ++++++++--------
go.sum | 40 ++++++++++++++++++++--------------------
2 files changed, 28 insertions(+), 28 deletions(-)
diff --git a/go.mod b/go.mod
index 9ba12210..dd0bf302 100644
--- a/go.mod
+++ b/go.mod
@@ -51,7 +51,7 @@ require (
gonum.org/v1/gonum v0.17.0
google.golang.org/grpc v1.84.0
google.golang.org/protobuf v1.36.12
- modernc.org/sqlite v1.59.0
+ modernc.org/sqlite v1.60.1
)
require (
@@ -87,14 +87,14 @@ require (
github.com/tidwall/pretty v1.2.0 // indirect
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
go.yaml.in/yaml/v3 v3.0.5 // indirect
- golang.org/x/mod v0.38.0 // indirect
- golang.org/x/net v0.58.0 // indirect
- golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959 // indirect
- golang.org/x/term v0.45.0 // indirect
- golang.org/x/text v0.41.0 // indirect
- golang.org/x/tools v0.48.0 // indirect
+ golang.org/x/mod v0.41.0 // indirect
+ golang.org/x/net v0.59.0 // indirect
+ golang.org/x/telemetry v0.0.0-20260908163034-4bcc4b2ee518 // indirect
+ golang.org/x/term v0.46.0 // indirect
+ golang.org/x/text v0.42.0 // indirect
+ golang.org/x/tools v0.50.0 // indirect
google.golang.org/genproto/googleapis/rpc
v0.0.0-20260706201446-f0a921348800 // indirect
- modernc.org/libc v1.75.7 // indirect
+ modernc.org/libc v1.77.1 // indirect
modernc.org/mathutil v1.7.1 // indirect
modernc.org/memory v1.12.1 // indirect
)
diff --git a/go.sum b/go.sum
index e1c99c39..c18e6659 100644
--- a/go.sum
+++ b/go.sum
@@ -169,14 +169,14 @@ golang.org/x/exp v0.0.0-20260112195511-716be5621a96
h1:Z/6YuSHTLOHfNFdb8zVZomZr7
golang.org/x/exp v0.0.0-20260112195511-716be5621a96/go.mod
h1:nzimsREAkjBCIEFtHiYkrJyT+2uy9YZJB7H1k68CXZU=
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod
h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk=
-golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40=
+golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
+golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod
h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod
h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod
h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
-golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
+golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=
+golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -195,28 +195,28 @@ golang.org/x/sys v0.1.0/go.mod
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
-golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959
h1:RJhm5l6Fo4rmEIcndxDllNhhf/fAx8qIm4t6A7vpm2A=
-golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959/go.mod
h1:LV7u5Oco+Z/g6XI7PqN+EUUUGGkEcmB1uj2ceI0fOVg=
+golang.org/x/telemetry v0.0.0-20260908163034-4bcc4b2ee518
h1:F5BWKvW126NXR74uxkxuc1jQHhm/rwm/J3rSiFyuRs4=
+golang.org/x/telemetry v0.0.0-20260908163034-4bcc4b2ee518/go.mod
h1:i+ivNqjDnTF3WTElsdk5g9V5DTSBYgdNo7xTU9SDwYA=
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod
h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
golang.org/x/term v0.0.0-20210220032956-6a3ed077a48d/go.mod
h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b/go.mod
h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod
h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0=
-golang.org/x/term v0.45.0/go.mod
h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w=
+golang.org/x/term v0.46.0 h1:3+OXuTbaKDgwk8jTi3aSLHRlmWqHEUDUtxnbFigO4YE=
+golang.org/x/term v0.46.0/go.mod
h1:+K02xbkittuwc0Am4abfA3Fc+XRGXkvBXNO88NCXPoc=
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
-golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
-golang.org/x/text v0.41.0/go.mod
h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
+golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI=
+golang.org/x/text v0.42.0/go.mod
h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E=
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod
h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod
h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.1.12/go.mod
h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
golang.org/x/tools v0.6.0/go.mod
h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.48.0 h1:3+hClM1aLL5mjMKm5ovokw9epgRXPuu2tILgismM6RE=
-golang.org/x/tools v0.48.0/go.mod
h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk=
+golang.org/x/tools v0.50.0 h1:c2ifzfcuY7L90lZ2aKd8S4K2NpASF08SZx9ZuJkHmSU=
+golang.org/x/tools v0.50.0/go.mod
h1:7ulVMw3831Mwi5EZD6RomGyffr4VFjuNYXf2BbCEAV0=
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod
h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
gonum.org/v1/gonum v0.17.0/go.mod
h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
@@ -233,10 +233,10 @@ gopkg.in/yaml.v2 v2.2.4/go.mod
h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod
h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod
h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-modernc.org/cc/v4 v4.29.2 h1:h6+9ciCnPKutf4I03CvheAvDLX7+IHlqR6Iy6J+cgd8=
-modernc.org/cc/v4 v4.29.2/go.mod
h1:OnovgIhbbMXMu1aISnJ0wvVD1KnW+cAUJkIrAWh+kVI=
-modernc.org/ccgo/v4 v4.35.0 h1:F+TUsmw09QxLzmi3aeYYGxjAXarmZaKgj3mKQHNaA8w=
-modernc.org/ccgo/v4 v4.35.0/go.mod
h1:qrVGs9S3Sr2Ztcg9ve+kTAYMp5a3YvWjo+SoN06kJ5I=
+modernc.org/cc/v4 v4.29.7 h1:q+NXGJ0bK3b4TXFYQQVr9pYETGnmwFWkrUzJnMya/Tg=
+modernc.org/cc/v4 v4.29.7/go.mod
h1:OnovgIhbbMXMu1aISnJ0wvVD1KnW+cAUJkIrAWh+kVI=
+modernc.org/ccgo/v4 v4.36.1 h1:ZNIUZAryN0UgnJwtyxrdEzcFc3yD4Cu4AzjfPXsLsIE=
+modernc.org/ccgo/v4 v4.36.1/go.mod
h1:rrtGc2QkS239nYb/mQNuBMyjq3/y3ZXWbBjPoV3wqzA=
modernc.org/fileutil v1.4.0 h1:j6ZzNTftVS054gi281TyLjHPp6CPHr2KCxEXjEbD6SM=
modernc.org/fileutil v1.4.0/go.mod
h1:EqdKFDxiByqxLk8ozOxObDSfcVOv/54xDs/DUHdvCUU=
modernc.org/gc/v2 v2.6.5 h1:nyqdV8q46KvTpZlsw66kWqwXRHdjIlJOhG6kxiV/9xI=
@@ -245,8 +245,8 @@ modernc.org/gc/v3 v3.1.5
h1:21ldfPfRYE31Tb7B3mwAK8gy1AxP4+dKjrOQPfqakoc=
modernc.org/gc/v3 v3.1.5/go.mod h1:HFK/6AGESC7Ex+EZJhJ2Gni6cTaYpSMmU/cT9RmlfYY=
modernc.org/goabi0 v0.2.0 h1:HvEowk7LxcPd0eq6mVOAEMai46V+i7Jrj13t4AzuNks=
modernc.org/goabi0 v0.2.0/go.mod
h1:CEFRnnJhKvWT1c1JTI3Avm+tgOWbkOu5oPA8eH8LnMI=
-modernc.org/libc v1.75.7 h1:o3DTP9/0p9pKmY2WCKQaySW6wIiZhNM7wc2lUoyhfew=
-modernc.org/libc v1.75.7/go.mod h1:bO5o2ztHxBb2rjz0PgdHN0sSMw57CgxGFLZ3Qd/QpVQ=
+modernc.org/libc v1.77.1 h1:Ct8j47QtiZ1Enj2DtFXQtUqrPCAjdCmPjtCuvrYQ0Hs=
+modernc.org/libc v1.77.1/go.mod h1:87/pZ4L6nD1zqW4nItuS12YO7hN1igAah34xjnQo/W0=
modernc.org/mathutil v1.7.1 h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU=
modernc.org/mathutil v1.7.1/go.mod
h1:4p5IwJITfppl0G4sUEDtCr4DthTaT47/N3aT6MhfgJg=
modernc.org/memory v1.12.1 h1:nFMiWrpStgZczNl6XI9GnIk/rWhYIyHGUaR04pGbp9g=
@@ -255,8 +255,8 @@ modernc.org/opt v0.2.0
h1:tGyef5ApycA7FSEOMraay9SaTk5zmbx7Tu+cJs4QKZg=
modernc.org/opt v0.2.0/go.mod h1:03fq9lsNfvkYSfxrfUhZCWPk1lm4cq4N+Bh//bEtgns=
modernc.org/sortutil v1.2.1 h1:+xyoGf15mM3NMlPDnFqrteY07klSFxLElE2PVuWIJ7w=
modernc.org/sortutil v1.2.1/go.mod
h1:7ZI3a3REbai7gzCLcotuw9AC4VZVpYMjDzETGsSMqJE=
-modernc.org/sqlite v1.59.0 h1:X1es1GpqBlS/5T+vbM4HLUdaa8OtQx468DF2vrx+38A=
-modernc.org/sqlite v1.59.0/go.mod
h1:+paeT2A3iPRHkQDwG7oA6Tk0zQd5woMEI8q7orfry8k=
+modernc.org/sqlite v1.60.1 h1:/blz53O951KWFOso4QQvEs/Fq6cDBKLtMVrYNSeJVKw=
+modernc.org/sqlite v1.60.1/go.mod
h1:1dIoEagfDE72QytD5scH1lxARtaUgKgHC/NuApA27r0=
modernc.org/strutil v1.2.1 h1:UneZBkQA+DX2Rp35KcM69cSsNES9ly8mQWD71HKlOA0=
modernc.org/strutil v1.2.1/go.mod
h1:EHkiggD70koQxjVdSBM3JKM7k6L0FbGE5eymy9i3B9A=
modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y=
