dependabot[bot] opened a new pull request, #1425: URL: https://github.com/apache/arrow-go/pull/1425
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.60.1 to 1.61.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md";>modernc.org/sqlite's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>Entries for v1.38.1 through v1.44.1 and for v1.49.1 were added on 2026-09-05, reconstructed from the git history and the merge requests they cite; they were missing at release time.</p> <ul> <li> <p>2026-10-21 v1.61.1:</p> <ul> <li><strong>Fix a panic reachable from SQL through a VFS made by <code>vfs.New</code>.</strong> It reported its files as writable, so with <code>PRAGMA journal_mode=OFF</code> a write reached a write method the VFS does not have and the process panicked, as did closing a WAL database shipped with its <code>-wal</code> file; with the journal on, the write failed with a misleading <code>SQLITE_NOMEM</code>. Such files are now read-only to SQLite, and every write fails with <code>SQLITE_READONLY</code>. See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/145";>#145</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/145";>https://gitlab.com/cznic/sqlite/-/merge_requests/145</a>), thanks Ian Chechin!</li> <li><strong>Fix a process abort reachable through a VFS made by <code>vfs.New</code>.</strong> SQLite's request to delete a journal, made when <code>PRAGMA journal_mode</code> leaves <code>PERSIST</code> or <code>TRUNCATE</code> and on the first read of a 0-byte database that has a <code>-journal</code> file next to it in the served file system, reached the transpiled <code>xDelete</code>, an unimplemented stub that aborted the process. It now fails with <code>SQLITE_IOERR_DELETE</code>, which SQLite tolerates, and nothing is deleted; the write methods the VFS lacked answer <code>SQLITE_READONLY</code> instead of being nil.</li> <li><strong><code>Tx.Commit</code> now stops waiting for a lock once the context given to <code>BeginTx</code> is done, and <code>Rows.Next</code> and <code>Rows.Close</code> once the query's context is done</strong>, each returning the context's error; they used to wait the full <code>busy_timeout</code> when a reader's lock in rollback-journal mode blocked the <code>COMMIT</code>, or the commit of an autocommit <code>INSERT ... RETURNING</code> finished or closed after its first row. Only the wait watches the context; <code>Rollback</code> is unchanged. Resolves [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/263";>#263</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/263";>https://gitlab.com/cznic/sqlite/-/issues/263</a>), thanks SirLouen!</li> <li>The <code>attest</code> CI job now copies <code>vendor.json</code> into the provenance document from the tagged commit, not from the working tree <code>make vendor-check</code> has just stamped with its own Go release; the v1.61.0 job failed its own verification over that field, so v1.61.0 has no provenance document, see <code>VERIFYING.md</code>. Tooling only.</li> <li>Add <code>THREAT-MODEL.md</code>, the threat model behind the scope in <code>SECURITY.md</code>: the connection string, the connection lifecycle, the page cache binding and the VFS bridge, one row per concern with its status and the commit that settled it. <code>TestVFSReadEOF</code> now also checks the short read on <code>vfsRead</code> itself. Documentation and tests only. See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/146";>#146</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/146";>https://gitlab.com/cznic/sqlite/-/merge_requests/146</a>), thanks Ian Chechin!</li> </ul> </li> <li> <p>2026-10-21 v1.61.0:</p> <ul> <li>Upgrade to <a href="https://sqlite.org/releaselog/3_54_1.html";>SQLite 3.54.1</a>, re-vendoring <code>lib/</code> from <a href="https://gitlab.com/cznic/libsqlite3/-/tags/v1.15.2";>modernc.org/libsqlite3 v1.15.2</a> and <code>vec/</code> from <a href="https://gitlab.com/cznic/libsqlite_vec/-/tags/v0.7.0";>modernc.org/libsqlite_vec v0.7.0</a>; sqlite-vec stays v0.1.9. The pinned <code>modernc.org/libc</code> becomes <a href="https://gitlab.com/cznic/libc/-/tags/v1.79.0";>v1.79.0</a>; as always, downstream <code>go.mod</code> files must pin the same <code>modernc.org/libc</code> version this repository's <code>go.mod</code> does, see [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/177";>#177</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/177";>https://gitlab.com/cznic/sqlite/-/issues/177</a>).</li> <li>Add <code>_time_format=string_no_monotonic</code>, <strong>opt-in</strong>: times are written in the default layout but without Go's monotonic clock reading, the <code> m=+...</code> suffix, so a scanned time matches its row again when bound in <code>WHERE col = ?</code>. The default is unchanged. Resolves [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/259";>#259</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/259";>https://gitlab.com/cznic/sqlite/-/issues/259</a>). See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/142";>#142</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/142";>https://gitlab.com/cznic/sqlite/-/merge_requests/142</a>), thanks 不插电 (<a href="https://gitlab.com/r27153733";><code>@r27153733</code></a>)!</li> <li>Each release tag now gets a signed provenance document, linked from its GitLab release; <code>VERIFYING.md</code> says what it proves and how to check one. Tooling only. See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/141";>#141</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/141";>https://gitlab.com/cznic/sqlite/-/merge_requests/141</a>).</li> <li>Add an opt-in SQLite authorizer per connection: <code>AuthorizerRegisterer</code>, reached through <code>sql.Conn.Raw</code> or installed on every pooled connection from <code>RegisterConnectionHook</code>; existing connections are unchanged. Resolves [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/256";>#256</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/256";>https://gitlab.com/cznic/sqlite/-/issues/256</a>). See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/139";>#139</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/139";>https://gitlab.com/cznic/sqlite/-/merge_requests/139</a>), thanks Tedla Brandsema (<a href="https://gitlab.com/TedlaBrandsema";><code>@TedlaBrandsema</code></a>)!</li> <li>Closing a connection now forgets the pre-update, commit and rollback hooks registered on it; their entries used to linger after <code>Close</code>.</li> <li><strong>With a shared cache, <code>BeginTx</code> now waits for a lock another connection holds</strong> instead of failing at once with <code>SQLITE_LOCKED_SHAREDCACHE</code> (262), as executing <code>BEGIN IMMEDIATE</code> did; <code>Commit</code> and <code>Rollback</code> wait likewise while another connection changes the schema. <code>busy_timeout</code> does not bound the wait; the call's context does. See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/143";>#143</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/143";>https://gitlab.com/cznic/sqlite/-/merge_requests/143</a>), thanks Ian Chechin!</li> <li><code>PrepareContext</code> and <code>BeginTx</code> with a context that is already done now return the context's error, as <code>ExecContext</code> and <code>QueryContext</code> do. See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/143";>#143</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/143";>https://gitlab.com/cznic/sqlite/-/merge_requests/143</a>), thanks Ian Chechin!</li> <li>A context that is done before a statement starts running, for example while its arguments are being bound, now stops the statement within 1000 VM steps. SQLite discarded that interrupt, so a long statement ran to completion and only then returned the context's error. See [GitHub pull request <a href="https://gitlab.com/cznic/sqlite/-/work_items/9";>#9</a>](<a href="https://redirect.github.com/modernc-org/sqlite/pull/9";>modernc-org/sqlite#9</a>), thanks Chris Gianelloni (<a href="https://gitlab.com/wolf31o2";><code>@wolf31o2</code></a>)!</li> <li><strong>A statement waiting for a lock under <code>busy_timeout</code> now stops waiting once its context is done</strong>, with the context's error, instead of sleeping on until the timeout; the wait's retry schedule and its bound are otherwise unchanged, and so is a call without a deadline. <code>PrepareContext</code> ended this way returns the context's error too, where it returned <code>SQLITE_BUSY</code>. Resolves [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/262";>#262</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/262";>https://gitlab.com/cznic/sqlite/-/issues/262</a>), thanks SirLouen!</li> </ul> </li> <li> <p>2026-09-29 v1.60.1:</p> <ul> <li>Binding arguments to a statement is no longer quadratic in the number of its parameters, which made multi-row <code>INSERT</code>s with thousands of <code>?</code> parameters slow. Resolves [GitHub issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/8";>#8</a>](<a href="https://redirect.github.com/modernc-org/sqlite/issues/8";>modernc-org/sqlite#8</a>), thanks wencycool!</li> </ul> </li> <li> <p>2026-09-28 v1.60.0:</p> <ul> <li><strong>A fault while reading the memory-mapped <code>-shm</code> file of a WAL database no longer crashes the process.</strong> The statement fails with a disk I/O error, extended code <code>SQLITE_IOERR_IN_PAGE</code> (8714), and the connection stays usable, as in MSVC builds of SQLite. On by default on every platform and not switchable; <code>lib.SehInject</code> and <code>lib.SehPending</code> inject such a fault for tests. Resolves [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/221";>#221</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/221";>https://gitlab.com/cznic/sqlite/-/issues/221</a>), thanks Roman (<a href="https://gitlab.com/requilence";><code>@requilence</code></a>) for the report, and supersedes <a href="https://gitlab.com/cznic/libsqlite3/-/merge_requests/4";>libsqlite3!4</a> and [GitHub pull request <a href="https://gitlab.com/cznic/sqlite/-/work_items/7";>#7</a>](<a href="https://redirect.github.com/modernc-org/sqlite/pull/7";>modernc -org/sqlite#7</a>), thanks hazyhaar for the two rounds, the <code>ccgo</code> finding and the Windows Server runs!</li> <li>Re-vendor <code>lib/</code> from <a href="https://gitlab.com/cznic/libsqlite3/-/tags/v1.15.0";>modernc.org/libsqlite3 v1.15.0</a> and <code>vec/</code> from <a href="https://gitlab.com/cznic/libsqlite_vec/-/tags/v0.6.0";>modernc.org/libsqlite_vec v0.6.0</a>; SQLite stays 3.53.4 and sqlite-vec v0.1.9. <strong>Go 1.26 is now required</strong>, and the pinned <code>modernc.org/libc</code> becomes <a href="https://gitlab.com/cznic/libc/-/tags/v1.77.1";>v1.77.1</a>; as always, downstream <code>go.mod</code> files must pin the same <code>modernc.org/libc</code> version this repository's <code>go.mod</code> does, see [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/177";>#177</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/177";>https://gitlab.com/cznic/sqlite/-/issues/177</a>).</li> <li><strong>Nine exported <code>lib</code> constants that never had a meaningful value are gone</strong>: <code>INFINITY</code>, <code>MB_CUR_MAX</code>, <code>NAN</code>, <code>RESERVED_BYTE</code>, <code>SHARED_FIRST</code>, <code>SQLITE_CANTOPEN_BKPT</code>, <code>SQLITE_CORRUPT_BKPT</code>, <code>SQLITE_DEFAULT_LOOKASIDE</code> and <code>SQLITE_MISUSE_BKPT</code>. The transpiler now evaluates object-like macros as C expressions, so other constants take their C value (<code>lib.WALINDEX_PGSZ</code> is 32768, not 0) and some appear; the full list is in <a href="https://gitlab.com/cznic/libsqlite3/-/blob/master/CHANGELOG.md";>libsqlite3's CHANGELOG</a> under 2026-09-19.</li> <li><code>make vendor</code> now writes <code>vendor.json</code>, the <code>modernc.org/libsqlite3</code> and <code>modernc.org/libsqlite_vec</code> commits and the Go toolchain <code>lib/</code> and <code>vec/</code> were vendored with, so <code>git show vX.Y.Z:vendor.json</code> says which revisions a release carries; the test suite fails when they no longer match. Tooling only. See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/140";>#140</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/140";>https://gitlab.com/cznic/sqlite/-/merge_requests/140</a>).</li> <li><strong><code>vfs.FS.Close</code> now refuses while a database opened through it is still open</strong>, returning an error that wraps the new <code>vfs.ErrInUse</code> and leaving the VFS registered. It used to free the VFS the open connection still called through, so the next query crashed the process or read through freed memory. Close the databases first, then the <code>FS</code>.</li> <li>Fix handle reuse in <code>modernc.org/sqlite/vfs</code> on 32-bit targets: after 2^32 file opens in one process the handle counter wrapped and could overwrite a live entry, such as a file system registered at start-up, and crash. 64-bit targets were not affected.</li> <li><strong>The pluggable page cache now panics when a <code>Cache</code> breaks its contract</strong> by returning nil, or a different <code>Page</code>, from <code>Fetch</code> for a page SQLite still holds pinned. It used to free memory SQLite was still using, corrupting the database without an error. Only a <code>Cache</code> implementation with that bug is affected; <code>modernc.org/sqlite/pcache</code> is not.</li> <li>Document three limits of the pluggable page cache on <code>RegisterPageCache</code> and <code>Cache</code>: it cannot be combined with <code>modernc.org/sqlite/vec</code>, <code>PageCache.Create</code> may be called concurrently, and under <code>cache=shared</code> a <code>Cache</code> is called from several goroutines. Documentation only.</li> <li>Document in the package documentation that state set on a pooled connection is inherited by the next caller to borrow it, and that a connection reached through <code>sql.Conn.Raw</code> is not safe for concurrent use. Documentation only.</li> <li>Add <code>StrictPragmas</code>, <strong>opt-in and off by default</strong>: once enabled, a connection whose <code>_pragma</code> DSN value holds more than one SQL statement fails to open with <code>ErrMultiStatementPragma</code>, before any DSN parameter is applied. A <code>_pragma</code> value runs as SQL text, so anything after a <code>;</code> runs too. Recommended for any application whose DSN is not a compile-time constant.</li> <li>Document SQLite's own URI query parameters on <code>Driver.Open</code>: <code>mode</code>, <code>cache</code>, <code>immutable</code>, <code>nolock</code>, <code>psow</code> and <code>modeof</code>, which have always worked in a DSN starting with <code>file:</code>, and the trap that a plain file name has its query stripped before SQLite sees it, so <code>/path/to.db?mode=ro</code> opens read-write. Resolves [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/257";>#257</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/257";>https://gitlab.com/cznic/sqlite/-/issues/257</a>). Documentation only.</li> <li>Add <code>SECURITY.md</code>, the vulnerability reporting policy: three private channels, what is in scope, that only the latest release is supported, and how a confirmed report is disclosed, including an entry in the Go vulnerability database so <code>govulncheck</code> reports it. <code>IRP.md</code>, linked from it, is the maintainers' incident response plan. Documentation only.</li> <li>Add <code>CONTRIBUTING.md</code>: where to send a merge request, which files are generated and must not be edited by hand, how to build and test across the 20 supported targets, and the <code>AUTHORS</code>/<code>CONTRIBUTORS</code> convention. Documentation only.</li> <li>Ship <code>LICENSE-3RD-PARTY.md</code>, a transitively flattened inventory of every third-party component this module carries with all seventeen license texts in full, and a Software Bill of Materials, <code>sbom.cdx.json</code> (CycloneDX 1.6) and <code>sbom.spdx.json</code> (SPDX 2.3), explained in <code>SBOM.md</code>. Both cover what a module-graph tool cannot see: the transpiled SQLite and <code>sqlite-vec</code> C, and the upstreams <code>modernc.org/libc</code> carries, musl among them. Documentation only.</li> </ul> </li> <li> <p>2026-09-15 v1.59.0:</p> <ul> <li>Bump the pinned <code>modernc.org/libc</code> to <a href="https://gitlab.com/cznic/libc/-/tags/v1.75.7";>v1.75.7</a> and re-vendor <code>lib/</code> and <code>vec/</code>. The transpiled SQLite is unchanged, still 3.53.4. On the Linux targets the new libc replaces transpiled musl <code>memcpy</code>, <code>memmove</code>, <code>memset</code>, <code>memcmp</code> and <code>strlen</code> with native Go, cutting CPU time on query-heavy workloads by up to a third; see the new Performance section below. As always, downstream <code>go.mod</code> files must pin the same <code>modernc.org/libc</code> version this repository's <code>go.mod</code> does; see [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/177";>#177</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/177";>https://gitlab.com/cznic/sqlite/-/issues/177</a>).</li> <li>Hand user-defined function and aggregate callbacks a pooled <code>*FunctionContext</code> instead of allocating a fresh one per call, removing the last driver-side allocation per invocation. Like the argument slice, it is valid only for the duration of the callback and must not be retained past its return. Updates [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/226";>#226</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/226";>https://gitlab.com/cznic/sqlite/-/issues/226</a>). See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/137";>#137</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/137";>https://gitlab.com/cznic/sqlite/-/merge_requests/137</a>).</li> <li>Add regression tests pinning the identity and the pooling of that context. See [GitLab merge request <a href="https://gitlab.com/cznic/sqlite/-/work_items/138";>#138</a>](<a href="https://gitlab.com/cznic/sqlite/-/merge_requests/138";>https://gitlab.com/cznic/sqlite/-/merge_requests/138</a>), thanks Ian Chechin!</li> <li>Add a Performance section to the package documentation: measured CPU-time ratios of this driver against the same SQLite compiled from C, where the gap comes from, and the two consequences for applications — index the columns that <code>ORDER BY</code>, <code>GROUP BY</code> and <code>WHERE</code> use, and bound the <code>database/sql</code> pool with <code>SetMaxOpenConns</code>.</li> </ul> </li> <li> <p>2026-09-01 v1.58.0:</p> <ul> <li>Upgrade to <a href="https://sqlite.org/releaselog/3_53_4.html";>SQLite 3.53.4</a>. It carries upstream's own fix for the journal-rollback data-corruption bug, so the local super-journal patch v1.56.0 introduced is dropped; recovery behavior is unchanged. Also bumps the pinned <code>modernc.org/libc</code> to v1.75.6; as always, downstream modules must pin the same version this one does, see [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/177";>#177</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/177";>https://gitlab.com/cznic/sqlite/-/issues/177</a>).</li> <li>Add opt-in support for <strong>Linux Open File Description (OFD) locks</strong> on database files, <strong>off by default</strong>; without opting in, locking behavior is byte-for-byte that of previous releases. A POSIX record lock is owned by the (process, inode) pair, so any <code>Close</code> of any descriptor of the database file anywhere in the process silently strips SQLite's locks; OFD locks survive that. Enable it process-wide with <code>MODERNC_SQLITE_OFD_LOCK=1</code> in the environment, or with the new <code>OFDLocking(true)</code> before the first connection is opened; <code>OFDLockingEnabled</code> reports the mode in effect, and the new <code>ErrOFDLockingTooLate</code> and <code>ErrOFDLockingUnavailable</code> report a switch attempted too late and a platform or filesystem without the feature. Why it is process-wide rather than a DSN parameter, what WAL's <code>-shm</code> coordination still uses, and the <code>/proc/locks</code> measurements behind the design a re in [GitLab issue <a href="https://gitlab.com/cznic/sqlite/-/work_items/255";>#255</a>](<a href="https://gitlab.com/cznic/sqlite/-/issues/255";>https://gitlab.com/cznic/sqlite/-/issues/255</a>).</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://gitlab.com/cznic/sqlite/commit/4df1ebea0f1cf0cd6ec3245b26f5fec4234ce738";><code>4df1ebe</code></a> sqlite, conn, stmt, tx: end a busy_timeout wait when the call's context is done</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/44ae8d4c16b653a233472a999c0c1b629f6bfd3e";><code>44ae8d4</code></a> update dependencies, make vendor: SQLite 3.54.1, libc v1.79.0</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/570dc5646a295c08971c98cc243811845d1cc17d";><code>570dc56</code></a> CHANGELOG.md: context cancellation before a statement starts (GitHub PR <a href="https://gitlab.com/cznic/sqlite/-/work_items/9";>#9</a>)</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/4eacffe83778bd5f531b3271970b948efd34213f";><code>4eacffe</code></a> sqlite, conn: keep one cancellation flag per connection</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/4926b7ac8db61bd6c7386fe3e3abfc540125a087";><code>4926b7a</code></a> Merge GitHub pull request <a href="https://gitlab.com/cznic/sqlite/-/work_items/9";>#9</a> 'fix/context-cancellation'</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/3587a68abb50c99a24dbe828379f34dc575bcab0";><code>3587a68</code></a> fix: preserve cancellation before SQLite execution</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/fd378191a1c532df02e8b1c2a26270e0eaadd38f";><code>fd37819</code></a> Merge branch 'tx-shared-cache-wait' into 'master'</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/75b4e62f1e3b8f936292e769e3b6db31694e6985";><code>75b4e62</code></a> conn: watch the context only while waiting for a shared-cache lock</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/5856ee87a11b801001e845f392766ff5efe6e1eb";><code>5856ee8</code></a> tx, conn: wait for a shared-cache lock in BeginTx, Commit and Rollback, and e...</li> <li><a href="https://gitlab.com/cznic/sqlite/commit/0fc3f90d9e280a7356d8609520bc2ba081bfc248";><code>0fc3f90</code></a> conn: forget the pre-update, commit and rollback hooks on Close</li> <li>Additional commits viewable in <a href="https://gitlab.com/cznic/sqlite/compare/v1.60.1...v1.61.0";>compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | modernc.org/sqlite | [>= 1.34.a, < 1.35] | </details> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
