chore(deps): bump the go-minor-patch group across 1 directory with 17 updates by dependabot[bot] · Pull Request #38 · anviod/edgeCore

dependabot · 2026-11-02T02:15:35Z

Bumps the go-minor-patch group with 17 updates in the / directory:

Package	From	To
github.com/anviod/bacnet	`0.0.9`	`0.0.10`
github.com/anviod/ethernet-ip	`0.0.6`	`0.0.8`
github.com/anviod/gos7	`0.0.1`	`0.0.3`
github.com/expr-lang/expr	`1.17.7`	`1.17.8`
github.com/go-ldap/ldap/v3	`3.4.12`	`3.4.15`
github.com/golang-jwt/jwt/v5	`5.3.0`	`5.3.1`
github.com/gopcua/opcua	`0.8.0`	`0.9.1`
github.com/gosnmp/gosnmp	`1.38.0`	`1.47.0`
github.com/miekg/dns	`1.1.72`	`1.1.73`
github.com/nats-io/nats.go	`1.31.0`	`1.55.0`
github.com/shirou/gopsutil/v4	`4.26.3`	`4.26.10`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
github.com/thinkgos/go-iecp5	`1.0.0`	`1.2.1`
golang.org/x/net	`0.59.0`	`0.62.0`
golang.org/x/sync	`0.23.0`	`0.24.0`
golang.org/x/time	`0.14.0`	`0.16.0`
modernc.org/sqlite	`1.60.1`	`1.61.0`

Updates github.com/anviod/bacnet from 0.0.9 to 0.0.10

Commits

a4b0a21 fix(race): 修复多处数据竞态、隔离硬件测试并加入 CI 竞态检测
9a488a6 Merge pull request #1 from bert1020/main
43d5bbe ci: 扩展 7 目标跨平台矩阵并加入全平台 go vet
ae733ac 移除RPM诊断日志
b809a2e 增加展开属性列表
5260218 增加服务端钩子
See full diff in compare view

Updates github.com/anviod/ethernet-ip from 0.0.6 to 0.0.8

Commits

1bec6c8 feat: 性能优化 - 零拷贝解码/批量操作/内存映射/向量化/多架构支持
0096e6c fix(ForwardClose): 修复转发关闭时错误返回值问题
1179393 feat: 完成v0.0.6版本大更新，新增多项功能并修复bug
See full diff in compare view

Updates github.com/anviod/gos7 from 0.0.1 to 0.0.3

Changelog

Sourced from github.com/anviod/gos7's changelog.

Changelog

All notable changes to this project will be documented in this file.

Commits

24051a3 feat(tcpclient): 为TCP连接添加优雅关闭机制
ce024d4 update go 1.26
See full diff in compare view

Updates github.com/expr-lang/expr from 1.17.7 to 1.17.8

Release notes

Sourced from github.com/expr-lang/expr's releases.

v1.17.8

Expr is an expression language designed to deliver dynamic configurations with unparalleled accuracy, safety, and speed.
program, err := expr.Compile(`let foo = bar(); baz(foo, foo)`)
In this release:

New feature: added bytes literal syntax (#894)

Improved performance: count comparisons to any (#897)

Improved performance: added sum range optimization (#896)

Improved performance: added count threshold comparisons (#898)

Improved performance: optimize loop iteration with scope pool (#908)

Improved performance: added fast paths for min, max, mean, and median (#909)

Fixed: ctx into nested custom funcs and Env (#883)

Fixed: disable check for missing predicate during parseing (#924)

Fixed: detect $env() calls at compile time (#923)

Fixed: bounds check to get() (#918)

Fixed: validate sortBy order argument type (#912)

Fixed: reduce empty array without init val (#911)

Fixed: validate arg count before OpCall (#904)

Fixed: correct variadic method arg type (#889)

Commits

21f4f05 Fix impossible unsigned integer comparisons in Abs() function (#919)
3461fbb perf(vm): optimize loop iteration with scope pool (#908)
94ec86d fix(patcher): ctx into nested custom funcs and Env (#883)
40bda0b Disable check for missing predicate during parseing
552eb1b Disable check for missing predicate during parseing
75a31bc fix(fuzz): skip json unsupported type errors (#928)
391930f chore(ci): add Go 1.26 to test matrix (#929)
f0176e7 Update README.md: Added GlassFlow.dev in the list of companies using expr (#927)
2aaa9aa fix(checker): detect $env() calls at compile time (#923)
0785f19 fix(fuzz): skip reflect err for variadic calls (#921)
Additional commits viewable in compare view

Updates github.com/go-ldap/ldap/v3 from 3.4.12 to 3.4.15

Release notes

Sourced from github.com/go-ldap/ldap/v3's releases.

v3.4.15

What's Changed

guard malformed attribute in unpackAttributes by @netliomax25-code in go-ldap/ldap#612

bump Go to 1.26/1.27 in CI and update GitHub Actions to latest major versions by @t2y in go-ldap/ldap#624

fix: identify RFC 4533 sync control members by tag, not by count by @youdie006 in go-ldap/ldap#625

chore: resolve staticcheck findings and repair the make targets by @t2y in go-ldap/ldap#631

extended: wrap requestValue as RFC 4511 [1] OCTET STRING by @team-humaki in go-ldap/ldap#628

fix: validate closing parenthesis in compound and grouped filters (#633) by @littfed in go-ldap/ldap#635

fix: reject malformed packets via shared child-count and bounds checks by @cpuschma in go-ldap/ldap#632

Expose ResultCode and DiagnosticMessage on SearchResult by @Pujathacker2210 in go-ldap/ldap#626

fix: navigate LDAPMessage envelope in parseLDAPResult by @cpuschma in go-ldap/ldap#636

fix: reject out-of-range resultCode in GetLDAPError by @netliomax25-code in go-ldap/ldap#640

fix: return error for unexpected response in ModifyWithResult by @netliomax25-code in go-ldap/ldap#639

New Contributors

@youdie006 made their first contribution in go-ldap/ldap#625

@team-humaki made their first contribution in go-ldap/ldap#628

@littfed made their first contribution in go-ldap/ldap#635

@Pujathacker2210 made their first contribution in go-ldap/ldap#626

Full Changelog: go-ldap/ldap@v3.4.14...v3.4.15

v3.4.14

I want to thank everyone who contributed in the recents months. Compared to last year, the number of activities and PRs (including open ones) has increased dramatically. I would like to thank everyone who contributed to the project.

Personal note: Please keep in mind that this project is not funded or supported by a large company or similar organization. We work on the library in our free time after work. I appreciate your support, but please keep this in mind (including with other open-source projects).

What's Changed

make stop-local-server fails with Docker due to unsupported -t option by @t2y in go-ldap/ldap#584

Fix panic on malformed LDAP responses by @Bahtya in go-ldap/ldap#586

chore(deps): bump github.com/Azure/go-ntlmssp from 0.1.0 to 0.1.1 in /v3 by @dependabot[bot] in go-ldap/ldap#587

Reject unescaped special characters in DN values per RFC 4514 by @t2y in go-ldap/ldap#588

v3/control: replace unchecked type asserts in DecodeControl with comma-ok by @c-tonneslan in go-ldap/ldap#589

fix(conn): parse ldapi:// URLs per RFC 4516 by @c-tonneslan in go-ldap/ldap#590

fix: decode Server Side Sorting controlValue as BER-encoded OCTET STRING per RFC 2891 by @ahanwhite in go-ldap/ldap#593

fix: generate digest-md5 cnonce with crypto/rand by @netliomax25-code in go-ldap/ldap#594

fix: escape quoted-string metacharacters in digest-md5 response by @netliomax25-code in go-ldap/ldap#595

fix: escape attribute and matching rule in DecompileFilter by @netliomax25-code in go-ldap/ldap#596

fix: set Result code when decoding ServerSideSortingResult control by @netliomax25-code in go-ldap/ldap#597

fix: reject trailing bytes in hex-encoded DN attribute value by @netliomax25-code in go-ldap/ldap#598

fix: synchronize writes to Conn.err with GetLastError by @netliomax25-code in go-ldap/ldap#601

unescape quoted-pair sequences in digest-md5 challenge parser by @netliomax25-code in go-ldap/ldap#600

fix: avoid uint16 overflow in gssapi UnmarshalWrapToken offset by @netliomax25-code in go-ldap/ldap#602

fix(conn): finish Unbind message context to prevent Close deadlock by @efd6 in go-ldap/ldap#599

fix: compare multi-valued RDN attributes as a multiset by @netliomax25-code in go-ldap/ldap#604

fix: respect backslash parity for escaped trailing space in DN value by @netliomax25-code in go-ldap/ldap#603

fix: skip empty referral sequence in getReferral by @netliomax25-code in go-ldap/ldap#610

fix: guard malformed paging control in DecodeControl by @netliomax25-code in go-ldap/ldap#611

handle linear whitespace in digest-md5 challenge parser by @netliomax25-code in go-ldap/ldap#607

chore: crypto update by @CameronJHall in go-ldap/ldap#613

... (truncated)

Commits

e614cf9 fix: return error for unexpected response in ModifyWithResult (#639)
f3f0153 fix: reject out-of-range resultCode before narrowing to uint16 (#640)
f8db69e Modify README for testing and server commands
05f305f fix: navigate LDAPMessage envelope in parseLDAPResult (#636)
ca8bcfa feat: expose ResultCode and DiagnosticMessage on SearchResult (#626)
f3d2070 fix: export ErrMalformedPacket sentinel
0c9a799 fix: address review feedback on malformed-packet hardening
b73a2ec fix: reject malformed packets via shared child-count and bounds checks
e4851f6 fix: validate closing parenthesis in compound and grouped filters (#633) (#635)
90c6466 extended: wrap requestValue as RFC 4511 [1] OCTET STRING (#628)
Additional commits viewable in compare view

Updates github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.1

What's Changed

🔐 Features

Add spellcheck Github action to catch common spelling mistakes by @equalsgibson in golang-jwt/jwt#458

Add WithNotBeforeRequired parser option and add test coverage by @equalsgibson in golang-jwt/jwt#456

Update godoc example func to properly refer to NewWithClaims() by @equalsgibson in golang-jwt/jwt#459

Update github workflows by @mfridman in golang-jwt/jwt#462

Additional test for CustomClaims that validates unmarshalling behaviour by @equalsgibson in golang-jwt/jwt#457

Fix early file close in jwt cli by @mfridman in golang-jwt/jwt#472

Add TPM signature reference by @salrashid123 in golang-jwt/jwt#473

Remove misleading ParserOptions documentation in golang-jwt/jwt#484

Save signature to Token struct after successful signing by @EgorSheff in golang-jwt/jwt#417

Set token.Signature in ParseUnverified by @slickwilli in golang-jwt/jwt#414

👒 Dependencies

Bump crate-ci/typos from 1.34.0 to 1.35.3 by @dependabot[bot] in golang-jwt/jwt#461

Bump crate-ci/typos from 1.35.4 to 1.36.2 by @dependabot[bot] in golang-jwt/jwt#470

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in golang-jwt/jwt#478

Bump crate-ci/typos from 1.36.2 to 1.39.0 by @dependabot[bot] in golang-jwt/jwt#480

Bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in golang-jwt/jwt#481

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in golang-jwt/jwt#469

Bump crate-ci/typos from 1.39.0 to 1.40.0 by @dependabot[bot] in golang-jwt/jwt#488

Bump actions/checkout from 5 to 6 by @dependabot[bot] in golang-jwt/jwt#487

Bump crate-ci/typos from 1.40.0 to 1.41.0 by @dependabot[bot] in golang-jwt/jwt#490

Bump crate-ci/typos from 1.41.0 to 1.42.1 by @dependabot[bot] in golang-jwt/jwt#492

New Contributors

@equalsgibson made their first contribution in golang-jwt/jwt#458

@salrashid123 made their first contribution in golang-jwt/jwt#473

@EgorSheff made their first contribution in golang-jwt/jwt#417

@slickwilli made their first contribution in golang-jwt/jwt#414

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

Commits

7ceae61 Add release.yml for changelog configuration
dce8e4d Set token.Signature in ParseUnverified (#414)
8889e20 Save signature to Token struct after successful signing (#417)
d237f82 ci: update github-actions schedule interval to monthly
d8dce95 Bump crate-ci/typos from 1.41.0 to 1.42.1 (#492)
e931803 Bump crate-ci/typos from 1.40.0 to 1.41.0 (#490)
e6a0afa Bump actions/checkout from 5 to 6 (#487)
9f85c9e Bump crate-ci/typos from 1.39.0 to 1.40.0 (#488)
60a8669 Bump actions/setup-go from 5 to 6 (#469)
76f5828 Remove misleading ParserOptions documentation (#484)
Additional commits viewable in compare view

Updates github.com/gopcua/opcua from 0.8.0 to 0.9.1

Release notes

Sourced from github.com/gopcua/opcua's releases.

v0.9.1

Thank you to the contributors in this release: @stefan-kolb, @arpitjain099, @istyf, @jackchenjc, @skartikey, @mschm, and @jminardi.
go get github.com/gopcua/opcua@v0.9.1
gopcua ships both a client and a server. Each item is tagged (client) or (server) for which side it affects, and items that only matter to developers building against the library API carry API. If you consume gopcua through Telegraf or benthos-umh, the plain (client) items are the runtime behavior you get automatically; (server) items only matter if you build a server on gopcua.

No breaking changes in this release.

Security

A malformed message can no longer make the decoder allocate far more memory than the message itself. The declared element count of an array is now checked against the bytes actually remaining before the slice is allocated, so a 4-byte body claiming 100 million elements fails immediately instead of allocating roughly 800 MB first; counts near MaxInt32 could push a process into multi-GB allocation and out-of-memory. Reachable on both sides, by a server decoding a client request and by a client decoding a server or man-in-the-middle response (#884) (client + server)

New

PKCS#8 private keys (BEGIN PRIVATE KEY) are now accepted wherever a private key is loaded. These are the default output of OpenSSL 3.x, Java and .NET, and previously failed with Failed to decode PEM block with private key; only PKCS#1 (BEGIN RSA PRIVATE KEY) worked (#871) (client + server)

1/PKCS#8#872) (client + server)

A gopcua server now supports Browse continuation points and BrowseNext, so a client can page through a node that has more references than fit in one response instead of silently receiving a truncated list (#865) (server)

Fixes

Subscriptions now recover after a reconnect when one of them cannot be restored. Previously the client reported itself Connected with no live subscription and a dead publish loop, delivered no data again, and never retried; it now rebuilds the session and retries, waiting between attempts instead of hammering the server (#877) (client)

A subscription being restored after a reconnect no longer loses every monitored item because the server rejected one of them. A node that disappeared during the outage is dropped on its own and logged, and the items the server accepted keep delivering data (#887) (client)

Monitoring a batch of nodes no longer gives every item in the batch the same client handle, which could deliver a node's values under the wrong node's identity (#881) (client)

A server node that denies current-read is browsable again. AccessLevel governs the Value attribute only, so BrowseName, NodeClass, DisplayName and the rest are readable; previously such a node answered Bad_UserAccessDenied for every attribute and could not be described at all (#878) (server)

A server no longer panics when a client writes the DataType attribute in the ordinary NodeId form. The attribute is spec-typed NodeId, but the server asserted ExpandedNodeId without checking, so a conformant write crashed the process on the next browse that resolved a reference to that node (#867) (server)

RegisterNodes now returns the node IDs it was given, which is the required behaviour for a server that performs no node-access optimization, and UnregisterNodes ignores IDs it does not know instead of failing (#867) (server)

The UserAccessLevel attribute is stored with the type the read path expects, so reading it works (#875) (server)

Full Changelog: gopcua/opcua@v0.9.0...v0.9.1

v0.9.0

Thank you to all the contributors in this release: @jminardi, @diericd, @istyf, @semihbkgr, @skartikey, @sruehl, @mvandergrift, @oliverpool, @skaldesh, @bostroemc, @kung-foo, @mschm, and @led0nk for reviews. It was a difficult year since we switched the core maintainer, and it took us some time to get into a good working mode. This release is our summarized work from the past year.
go get github.com/gopcua/opcua@v0.9.0
gopcua ships both a client and a server. Each item is tagged (client) or (server) for which side it affects, and items that only matter to developers building against the library API carry API. If you consume gopcua through Telegraf or benthos-umh, the plain (client) items are the runtime behavior you get automatically; (client, API) items only matter if you write Go code against gopcua; (server) items only matter if you build a server on gopcua.

Breaking change (API): Node operations now run against a Client interface instead of the concrete *Client type (#847). If you construct nodes against the concrete client type, update those call sites. See the "List of Breaking Changes" in the README.

New

Basic256Sha256 channels now complete a handshake end to end in both Sign and SignAndEncrypt mode between a gopcua client and server, so you can run signed and encrypted connections (client + server)

A StateChangedFunc callback lets a client run your own code on every connection-state change (Connected, Connecting, Disconnected, Reconnecting), for example to log drops, update health, or trigger reconnect-aware logic (client, API)

Improvements

... (truncated)

Changelog

Sourced from github.com/gopcua/opcua's changelog.

Changelog

Commits

79bc0dc Merge pull request #865 from jminardi/server-browse-continuation-points
dd9facf Merge branch 'main' into server-browse-continuation-points
7ae1871 Merge pull request #867 from jminardi/server-usability-fixes
53ae73d Merge branch 'main' into server-browse-continuation-points
cac264a Merge branch 'main' into server-usability-fixes
5e0f026 Merge pull request #878 from cybusio/topic/server-accesslevel-value-only
435f281 Merge branch 'main' into topic/server-accesslevel-value-only
70a7042 Merge pull request #889 from gopcua/maintainer/part4-clause-fixes
8f41fbf server, subscription: renumber MonitoredItem service clauses to v1.05 and fix...
db8fedc Merge pull request #887 from skartikey/fix/recreate-monitored-items-per-item-...
Additional commits viewable in compare view

Updates github.com/gosnmp/gosnmp from 1.38.0 to 1.47.0

Release notes

Sourced from github.com/gosnmp/gosnmp's releases.

v1.47.0

Security

Fixes SNMPv3 authentication bypasses and remote panics, see GHSA-w96x-5v55-24xx. All users of SNMPv3, and especially of the trap listener, should upgrade.

Behaviour changes

v3 traps: a user in a trap security parameters table that requires authentication no longer accepts unauthenticated traps

v3 traps: only a reportable GetRequest with no varbinds is treated as an engine discovery request, and discovery requests are never passed to OnNewTrap

UnmarshalTrap(buf, true) with a single SecurityParameters rejects traps whose user name differs from the configured one

v3 client: engine discovery fails if the REPORT's engine ID is empty or not 5-32 bytes

Full Changelog: gosnmp/gosnmp@v1.46.0...v1.47.0

v1.46.0

What's Changed

build(deps): bump the codeql group with 3 updates by @dependabot[bot] in gosnmp/gosnmp#621

build(deps): bump actions/checkout from 6.0.3 to 7.0.1 by @dependabot[bot] in gosnmp/gosnmp#623

build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 by @dependabot[bot] in gosnmp/gosnmp#622

Bump golangci-lint by @SuperQ in gosnmp/gosnmp#628

Test: Add a scripted SNMPv3 agent and REPORT fixtures by @lukeod in gosnmp/gosnmp#602

Frame SNMP messages over TCP using the BER length by @anyingiit in gosnmp/gosnmp#624

Add ErrMaxRetriesExceeded sentinel error by @NikkeTryHard in gosnmp/gosnmp#574

Validate AES and DES privacy parameters length before decrypting by @sollniss in gosnmp/gosnmp#626

Make trap security tables safe to replace at runtime by @kajtzu in gosnmp/gosnmp#629

New Contributors

@anyingiit made their first contribution in gosnmp/gosnmp#624

@NikkeTryHard made their first contribution in gosnmp/gosnmp#574

@sollniss made their first contribution in gosnmp/gosnmp#626

@kajtzu made their first contribution in gosnmp/gosnmp#629

Full Changelog: gosnmp/gosnmp@v1.45.0...v1.46.0

v1.45.0

What's Changed

fix: decode zero-length encoded OID as .0.0 like net-snmp by @SAY-5 in gosnmp/gosnmp#583

Update linting by @SuperQ in gosnmp/gosnmp#598

Group codeql updates by @SuperQ in gosnmp/gosnmp#597

build(deps): bump the codeql group with 3 updates by @dependabot[bot] in gosnmp/gosnmp#616

build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 by @dependabot[bot] in gosnmp/gosnmp#612

Update linting by @SuperQ in gosnmp/gosnmp#617

build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in gosnmp/gosnmp#607

Tolerate one-byte overdeclared OctetString lengths by @lukeod in gosnmp/gosnmp#599

Migrate more CI to GitHub Actions by @SuperQ in gosnmp/gosnmp#596

Migrate remaining CI to GitHub Actions by @SuperQ in gosnmp/gosnmp#618

Fix first OID sub-identifier to use base-128 encoding by @lukeod in gosnmp/gosnmp#600

Cleanup CI by @SuperQ in gosnmp/gosnmp#619

A common graceful closer for both UDP and TCP trap listeners by @sdghchj in gosnmp/gosnmp#615

... (truncated)

Changelog

Sourced from github.com/gosnmp/gosnmp's changelog.

v1.47.0

[CHANGE] v3 traps: a user in a trap security parameters table that requires authentication no longer accepts unauthenticated traps GHSA-w96x-5v55-24xx

[CHANGE] v3 traps: only a reportable GetRequest with no varbinds is treated as an engine discovery request, and discovery requests are never passed to OnNewTrap GHSA-w96x-5v55-24xx

[CHANGE] UnmarshalTrap(buf, true) with a single SecurityParameters rejects traps whose user name differs from the configured one GHSA-w96x-5v55-24xx

[CHANGE] v3 client: engine discovery fails if the REPORT's engine ID is empty or not 5-32 bytes GHSA-w96x-5v55-24xx

[BUGFIX] Security: fix SNMPv3 authentication bypasses in the trap listener and client, and remote panics on malformed msgAuthenticationParameters or a table-only UDP trap listener GHSA-w96x-5v55-24xx

v1.46.0

[FEATURE] Add ErrMaxRetriesExceeded sentinel error for errors.Is() support #523

Commits

dd424be Merge commit from fork
0f2b959 Fix SNMPv3 authentication bypasses and remote panics (GHSA-w96x-5v55-24xx)
c42a562 Make trap security tables safe to replace at runtime (#629)
8531844 Validate AES and DES privacy parameters length before decrypting (#626)
056497b Add ErrMaxRetriesExceeded sentinel error (#574)
7229a0a Frame SNMP messages over TCP using the BER length (#624)
e59c1a7 test: add a scripted SNMPv3 agent and REPORT fixtures (#602)
0dc7eb2 Bump golangci-lint (#628)
29e14ce build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (#622)
0411515 build(deps): bump actions/checkout from 6.0.3 to 7.0.1 (#623)
Additional commits viewable in compare view

Updates github.com/miekg/dns from 1.1.72 to 1.1.73

Commits

d854399 Release 1.1.73
aed10f4 go.mod: add tool directive to replace tools.go
76c682a Fix gogen diff
000bd62 Bump the all group with 4 updates (#1726)
24ce5ef Bump the all group with 4 updates (#1725)
fa041ee Bump the all group with 3 updates (#1723)
3124152 MD5: remove keytag calculation (#1724)
d1539a7 Bump the all group with 4 updates (#1713)
cd05317 Shorter v2 announcement
ce76cb6 Bump the all group with 3 updates (#1703)
Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.31.0 to 1.55.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.55.0

Changelog

This is the biggest nats.go release in a long time: 47 changes with more than half of them coming from 18 external contributors - thank you all!

Most of this release is a robustness effort. Nearly 30 bug fixes address deadlocks, goroutine and timer leaks, data races and stalls in reconnect and drain handling, pull and ordered consumers, async publish and service API. It also adds the FetchMaxBytes() option and Conn.RemoteAccount().

ADDED

Core NATS:

Conn.RemoteAccount() and ServerInfo.RemoteAccount exposing the account the client is bound to (#2156)

JetStream:

FetchMaxBytes() option to limit both the number of messages and total bytes in a single Fetch() request. Thanks @manenim for the contribution (#2198)

StreamInfo.Domain, StreamInfo.Alternates, StreamState.Lost, StreamSourceInfo.External and StreamSourceInfo.Error in stream info (#2168)

ErrStreamMessageExceedsMaximum for JetStream error code 10054, returned when a message exceeds the stream's MaxMsgSize. Thanks @matehsan for the contribution (#2110)

FIXED

Core NATS:

ForceReconnect() called while already reconnecting disabling ReconnectWait and custom reconnect delays, so the client dialed in a tight loop. Thanks @Arsen302 for the contribution and @MokiMeow for the diagnosis and test (#2179)

Connection closing for good instead of reconnecting after a partial write left a truncated message on the wire (#2169)

Connection status listeners losing an unread event and being unregistered when the next status was sent (#2193)

Message headers not counted against subscription pending byte limits, so header-heavy subscriptions could exceed the limit without reporting a slow consumer. Thanks @Grivn for the contribution (#2200)

Requests interrupted by a reconnect returning ErrConnectionClosed instead of ErrDisconnected. Thanks @AshSgDe29071999 for the contribution (#2129)

Default port added to the path instead of the host for server URLs with a path and no port, e.g. ws://host/nats. Thanks @dannyshafer for the contribution (#2177)

Close() during Drain() flipping the closed connection back to DRAINING_PUBS and flushing on it. Thanks @Kshot3000 for the contribution (#2163)

Drain() waiting for the full DrainTimeout when the connection was closed mid-drain (#2171)

IsSystemAccount() reset to false by async INFO updates, such as cluster topology changes or lame duck mode (#2156)

JetStream:

Pull consumer Consume() and Messages() deadlocking on Stop() or Drain() while buffered messages were still being delivered. Thanks @clwluvw for the contribution (#2165)

Messages() iterator goroutines leaking after the connection is closed. Thanks @clwluvw for the contribution (#2166)

Heartbeat timer and status listener left running when Consume() ends because the connection was closed. Thanks @clwluvw for the contribution (#2164)

Messages() iterator returning ErrMsgIteratorClosed instead of the remaining buffered messages when Next() raced with Drain() (#2188)

Pull consumer with StopAfter stalling until the missed heartbeat check (30s by default) after a pull expired. Thanks @huynguyen7 for the contribution (#2208)

Ordered consumer with StopAfter hanging on Stop()/Drain(), delivering too many or too few messages, or panicking after a consumer reset. Thanks @clwluvw for the contribution (#2167)

Ordered consumer Fetch(), Next() and FetchBytes() blocking forever after returning ErrOrderedConsumerConcurrentRequests, and FetchNoWait() restarting from the beginning of the stream (#2211)

Ordered consumer Consume() and Messages() using the 15s pull consumer heartbeat instead of the 5s ordered default, so a stalled consumer was reset after ~30s instead of ~10s. Thanks @arminazimi for the contribution (#2182)

PublishAsync() exceeding WithPublishAsyncMaxPending() under concurrent calls. Thanks @ShravanthReddy for the contribution (#2126)

Async publish error callbacks for messages pending during a reconnect delayed until the publisher shut down. Thanks @H-XX-D for the contribution (#2150)

Data race between Info() and CachedInfo() on streams and consumers. Thanks @vulragrag-star for the contribution (#2152)

Reusing the same KeyValueConfig.Sources for several KeyValue buckets carrying the first bucket's subject transform into the next ones, so their reads returned ErrKeyNotFound. Thanks @zhechen-cs for the contribution (#2190)

Object Store GetFile() leaving trailing bytes of an existing destination file when downloading a shorter object. Thanks @zhechen-cs for the contribution (#2197)

Legacy JetStream:

Async publish error callbacks for messages pending during a reconnect delayed until the publisher shut down. Thanks @H-XX-D for the contribution (#2150)

KeyValue Create() and Update() on a cross-domain mirrored bucket failing with nats: no response from stream. Thanks @spicysharkco for the contribution (#2203)

Object Store GetFile() leaving trailing bytes of an existing destination file when downloading a shorter object. Thanks @zhechen-cs for the contribution (#2197)

Service API:

Panic in AddService() on a closed connection (#2154)

Panic with send on closed channel when callbacks were queued during Stop() (#2173)

Service stopping on async errors from unrelated subscriptions with overlapping subjects. Async errors are now matched by subscription, recorded in endpoint stats and passed to ErrorHandler, and only a closed connection stops the service (#2174)

... (truncated)

Commits

6068694 Release v1.55.0 (#2214)
063b4ad [FIXED] Honor ReconnectWait after ForceReconnect during reconnect (#2179)
0a4cfc1 [ADDED] JetStream: stream alternates, lost data, source external/error (#2168)
c3830a0 [IMPROVED] Document default MaxAckPending for legacy JetStream subscriptions ...
2560ee4 [IMPROVED] Avoid per-message metadata allocations in JetStream consumers...
Description has been truncated

… updates Bumps the go-minor-patch group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/anviod/bacnet](https://github.com/anviod/bacnet) | `0.0.9` | `0.0.10` | | [github.com/anviod/ethernet-ip](https://github.com/anviod/ethernet-ip) | `0.0.6` | `0.0.8` | | [github.com/anviod/gos7](https://github.com/anviod/gos7) | `0.0.1` | `0.0.3` | | [github.com/expr-lang/expr](https://github.com/expr-lang/expr) | `1.17.7` | `1.17.8` | | [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) | `3.4.12` | `3.4.15` | | [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.3.0` | `5.3.1` | | [github.com/gopcua/opcua](https://github.com/gopcua/opcua) | `0.8.0` | `0.9.1` | | [github.com/gosnmp/gosnmp](https://github.com/gosnmp/gosnmp) | `1.38.0` | `1.47.0` | | [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.72` | `1.1.73` | | [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.31.0` | `1.55.0` | | [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.3` | `4.26.10` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [github.com/thinkgos/go-iecp5](https://github.com/thinkgos/go-iecp5) | `1.0.0` | `1.2.1` | | [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.62.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.14.0` | `0.16.0` | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.60.1` | `1.61.0` | Updates `github.com/anviod/bacnet` from 0.0.9 to 0.0.10 - [Commits](anviod/bacnet@v0.0.9...v0.0.10) Updates `github.com/anviod/ethernet-ip` from 0.0.6 to 0.0.8 - [Commits](anviod/ethernet-ip@v0.0.6...v0.0.8) Updates `github.com/anviod/gos7` from 0.0.1 to 0.0.3 - [Changelog](https://github.com/anviod/gos7/blob/master/CHANGELOG.md) - [Commits](anviod/gos7@v0.0.1...v0.0.3) Updates `github.com/expr-lang/expr` from 1.17.7 to 1.17.8 - [Release notes](https://github.com/expr-lang/expr/releases) - [Commits](expr-lang/expr@v1.17.7...v1.17.8) Updates `github.com/go-ldap/ldap/v3` from 3.4.12 to 3.4.15 - [Release notes](https://github.com/go-ldap/ldap/releases) - [Commits](go-ldap/ldap@v3.4.12...v3.4.15) Updates `github.com/golang-jwt/jwt/v5` from 5.3.0 to 5.3.1 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Commits](golang-jwt/jwt@v5.3.0...v5.3.1) Updates `github.com/gopcua/opcua` from 0.8.0 to 0.9.1 - [Release notes](https://github.com/gopcua/opcua/releases) - [Changelog](https://github.com/gopcua/opcua/blob/main/CHANGELOG.md) - [Commits](gopcua/opcua@v0.8.0...v0.9.1) Updates `github.com/gosnmp/gosnmp` from 1.38.0 to 1.47.0 - [Release notes](https://github.com/gosnmp/gosnmp/releases) - [Changelog](https://github.com/gosnmp/gosnmp/blob/master/CHANGELOG.md) - [Commits](gosnmp/gosnmp@v1.38.0...v1.47.0) Updates `github.com/miekg/dns` from 1.1.72 to 1.1.73 - [Commits](miekg/dns@v1.1.72...v1.1.73) Updates `github.com/nats-io/nats.go` from 1.31.0 to 1.55.0 - [Release notes](https://github.com/nats-io/nats.go/releases) - [Commits](nats-io/nats.go@v1.31.0...v1.55.0) Updates `github.com/shirou/gopsutil/v4` from 4.26.3 to 4.26.10 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v4.26.3...v4.26.10) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `github.com/thinkgos/go-iecp5` from 1.0.0 to 1.2.1 - [Release notes](https://github.com/thinkgos/go-iecp5/releases) - [Commits](thinkgos/go-iecp5@v1.0.0...v1.2.1) Updates `golang.org/x/net` from 0.59.0 to 0.62.0 - [Commits](golang/net@v0.59.0...v0.62.0) Updates `golang.org/x/sync` from 0.23.0 to 0.24.0 - [Commits](golang/sync@v0.23.0...v0.24.0) Updates `golang.org/x/time` from 0.14.0 to 0.16.0 - [Commits](golang/time@v0.14.0...v0.16.0) Updates `modernc.org/sqlite` from 1.60.1 to 1.61.0 - [Release notes](https://gitlab.com/cznic/sqlite/tags) - [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.60.1...v1.61.0) --- updated-dependencies: - dependency-name: github.com/anviod/bacnet dependency-version: 0.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/anviod/ethernet-ip dependency-version: 0.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/anviod/gos7 dependency-version: 0.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/expr-lang/expr dependency-version: 1.17.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/go-ldap/ldap/v3 dependency-version: 3.4.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/gopcua/opcua dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/gosnmp/gosnmp dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/miekg/dns dependency-version: 1.1.73 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/nats-io/nats.go dependency-version: 1.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/shirou/gopsutil/v4 dependency-version: 4.26.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/thinkgos/go-iecp5 dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/net dependency-version: 0.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/sync dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/time dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: modernc.org/sqlite dependency-version: 1.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-02T02:15:38Z

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

anviod closed this Nov 2, 2026

Navigation Menu

Repository navigation

chore(deps): bump the go-minor-patch group across 1 directory with 17 updates - #38

chore(deps): bump the go-minor-patch group across 1 directory with 17 updates#38
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/go_modules/go-minor-patch-1b91b472d9

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

Changelog

v1.17.8

v3.4.15

What's Changed

New Contributors

v3.4.14

What's Changed

v5.3.1

What's Changed

🔐 Features

👒 Dependencies

New Contributors

v0.9.1

Security

New

Fixes

v0.9.0

New

Improvements

Changelog

v1.47.0

Security

Behaviour changes

v1.46.0

What's Changed

New Contributors

v1.45.0

What's Changed

v1.47.0

v1.46.0

Release v1.55.0

Changelog

ADDED

FIXED

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Labels

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant