feat(deps): bump the gomod-deps group with 9 updates

[dependabot]

Bumps the gomod-deps group with 9 updates:

Package	From	To
google.golang.org/grpc	1.62.0	1.63.2
google.golang.org/protobuf	1.32.0	1.33.0
gorm.io/driver/mysql	1.5.1	1.5.6
gorm.io/gorm	1.25.4	1.25.7
github.com/alibabacloud-go/tea	1.2.1	1.2.2
github.com/go-sql-driver/mysql	1.7.1	1.8.1
github.com/livekit/protocol	1.10.1	1.12.0
github.com/xuri/excelize/v2	2.8.0	2.8.1
go.mongodb.org/mongo-driver	1.12.0	1.14.0

Updates google.golang.org/grpc from 1.62.0 to 1.63.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.63.2

Bugs

• Fix the user agent string

Release 1.63.1

Bugs

• grpc: fixed subchannel log messages to properly reference the parent channel (#7101)
  • Special thanks: @​daniel-weisse

API Changes

• grpc: remove Deprecated tag from Dial and DialContext; these will be deprecated in v1.64 instead (#7103)

Release 1.63.0

Behavior Changes

• grpc: Return canonical target string from resolver.Address.String() (experimental) (#6923)
• client & server: when using write buffer pooling, use input value for buffer size instead of size*2 (#6983)
  • Special Thanks: @​raghav-stripe

New Features

• grpc: add ClientConn.CanonicalTarget() to return the canonical target string. (#7006)
• xds: implement LRS named metrics support (gRFC A64) (#7027)
  • Special Thanks: @​danielzhaotongliu
• grpc: introduce grpc.NewClient to allow users to create new clients in idle mode and with "dns" as the default resolver (#7010)
  • Special Thanks: @​bruuuuuuuce

API Changes

• grpc: stabilize experimental method ClientConn.Target() (#7006)

Bug Fixes

• xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server (#7026)
• server: Fix some errors returned by a server when using a grpc.Server as an http.Handler with the Go stdlib HTTP server (#6989)
• resolver/dns: add SetResolvingTimeout to allow configuring the DNS resolver's global timeout (#6917)
  • Special Thanks: @​and1truong
• Set the security level of Windows named pipes to NoSecurity (#6956)
  • Special Thanks: @​irsl

Release 1.62.2

Dependencies

• Update http2 library to address vulnerability CVE-2023-45288

Release 1.62.1

Bug Fixes

• xds: fix a bug that results in no matching virtual host found RPC errors due to a difference between the target and LDS resource names (#6997)
• server: fixed stats handler data InPayload.Length for unary RPC calls (#6766)

... (truncated)

Commits

• d32e66c Change version to 1.63.2 (#7104)
• 92f6dd0 channelz: pass parent pointer instead of parent ID to RegisterSubChannel (#7101)
• 0f6ef0f grpc: un-deprecate Dial and DialContext
• 58dc749 Change version to 1.63.1-dev (#7051)
• c68f456 Change version to 1.63.0 (#7050)
• 6369167 *: update http2 dependency (#7082)
• 8854761 cherry-pick: channelz: fix race accessing channelMap without lock (#7079) (#7...
• e62770d channelz: add LocalAddr to listen sockets and test (#7062) (#7063)
• 4ffccf1 googlec2p: use xdstp style template for client LDS resource name (#7048)
• faf9964 gracefulswitch: add ParseConfig and make UpdateClientConnState call SwitchTo ...
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.32.0 to 1.33.0

Updates gorm.io/driver/mysql from 1.5.1 to 1.5.6

Commits

• 9d1b8d6 Fix insert id order for mariadb
• d848c69 Fix set time field's precision to 0
• e724f92 only trim paired single-quotes for column.DefaultValue (#143)
• 739f97b feat: map mysql error 1451 to gorm error (#145)
• b87f024 fix: migrator for mysql 5.6 (#141)
• e05761b refactor: distinguish between Unique and UniqueIndex (#123)
• 7cfeac9 ci: update go testing versions (#140)
• a6570f0 fix: tidb error log (#136)
• 2a61ba0 When adding a new column to a table, include a primary key if the field is ei...
• 386f545 Update README.md (#126)
• Additional commits viewable in compare view

Updates gorm.io/gorm from 1.25.4 to 1.25.7

Commits

• 8fb9a31 refactor: part 2 of distinguish between Unique and UniqueIndex (#6822)
• 9514d5f let limit and offset use bind parameter (#6806)
• 46816ad refactor: distinguish between Unique and UniqueIndex (#6386)
• 418ee3f fix: preload shouldn't overwrite the value of join (#6771)
• e043924 chore(deps): bump actions/cache from 3 to 4 (#6802)
• 0123dd4 fix: ignore .gen.go suffix in logger to get the real caller when using gen #6...
• 940358e Fix tests doesn't follow https://gorm.io/docs/method_chaining.html convention
• 87decce fix: ExplainSQL using consecutive pairs of escaper in SQL string represents a...
• 436cca7 fix: join and select mytable.* not working (#6761)
• a2cac75 feature: bring custom type and id column name to polymorphism (#6716)
• Additional commits viewable in compare view

Updates github.com/alibabacloud-go/tea from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/alibabacloud-go/tea's releases.

Release version v1.2.2

What's Changed

• fix: unescape unicode in sdk error by @​yndu13 in alibabacloud-go/tea#103
• Bump golang.org/x/net from 0.11.0 to 0.20.0 by @​dependabot in alibabacloud-go/tea#104
• Bump github.com/alibabacloud-go/debug from 0.0.0-20190504072949-9472017b5c68 to 1.0.0 by @​dependabot in alibabacloud-go/tea#93
• Update go.yml by @​JacksonTian in alibabacloud-go/tea#78

Full Changelog: alibabacloud-go/tea@v1.2.1...v1.2.2

Commits

• bb7ae5f disable fail-fast
• c1f8e32 Bump github.com/alibabacloud-go/debug
• d755295 Bump golang.org/x/net from 0.11.0 to 0.20.0
• b81493c fix: unescape unicode in sdk error
• See full diff in compare view

Updates github.com/go-sql-driver/mysql from 1.7.1 to 1.8.1

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.8.1

What's Changed

Bugfixes:

• fix race condition when context is canceled in #1562 and #1570

Full Changelog: go-sql-driver/mysql@v1.8.0...v1.8.1

v1.8.0

What's Changed

Major changes

• Use SET NAMES charset COLLATE collation. by @​methane in go-sql-driver/mysql#1437

  • Older go-mysql-driver used collation_id in the handshake packet. But it caused collation mismatch in some situation.
  • If you don't specify charset nor collation, go-mysql-driver sends SET NAMES utf8mb4 for new connection. This uses server's default collation for utf8mb4.
  • If you specify charset, go-mysql-driver sends SET NAMES <charset>. This uses the server's default collation for <charset>.
  • If you specify collation and/or charset, go-mysql-driver sends SET NAMES charset COLLATE collation.

• PathEscape dbname in DSN. by @​methane in go-sql-driver/mysql#1432

  • This is backward incompatible in rare case. Check your DSN.

• Drop Go 1.13-17 support by @​methane in go-sql-driver/mysql#1420

  • Use Go 1.18+

• Parse numbers on text protocol too by @​methane in go-sql-driver/mysql#1452

  • When text protocol is used, go-mysql-driver passed bare []byte to database/sql for avoid unnecessary allocation and conversion.
  • If user specified *any to Scan(), database/sql passed the []byte into the target variabe.
  • This confused users because most user doesn't know when text/binary protocol used.
  • go-mysql-driver 1.8 converts integer/float values into int64/double even in text protocol. This doesn't increase allocation compared to []byte and conversion cost is negilible.

• New options start using the Functional Option Pattern to avoid increasing technical debt in the Config object. Future version may introduce Functional Option for existing options, but not for now.

  • Make TimeTruncate functional option by @​methane in go-sql-driver/mysql#1552
  • Add BeforeConnect callback to configuration object by @​ItalyPaleAle in go-sql-driver/mysql#1469

Other changes

• Adding DeregisterDialContext to prevent memory leaks with dialers we don't need anymore by @​jypelle in go-sql-driver/mysql#1422
• Make logger configurable per connection by @​frozenbonito in go-sql-driver/mysql#1408
• Fix ColumnType.DatabaseTypeName for mediumint unsigned by @​evanelias in go-sql-driver/mysql#1428
• Add connection attributes by @​Daemonxiao in go-sql-driver/mysql#1389
• Stop ColumnTypeScanType() from returning sql.RawBytes by @​methane in go-sql-driver/mysql#1424
• Exec() now provides access to status of multiple statements. by @​mherr-google in go-sql-driver/mysql#1309
• Allow to change (or disable) the default driver name for registration by @​dolmen in go-sql-driver/mysql#1499

... (truncated)

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

Version 1.8.1 (2024-03-26)

Bugfixes:

• fix race condition when context is canceled in #1562 and #1570

Version 1.8.0 (2024-03-09)

Major Changes:

• Use SET NAMES charset COLLATE collation. by @​methane in #1437
  • Older go-mysql-driver used collation_id in the handshake packet. But it caused collation mismatch in some situation.
  • If you don't specify charset nor collation, go-mysql-driver sends SET NAMES utf8mb4 for new connection. This uses server's default collation for utf8mb4.
  • If you specify charset, go-mysql-driver sends SET NAMES <charset>. This uses the server's default collation for <charset>.
  • If you specify collation and/or charset, go-mysql-driver sends SET NAMES charset COLLATE collation.
• PathEscape dbname in DSN. by @​methane in #1432
  • This is backward incompatible in rare case. Check your DSN.
• Drop Go 1.13-17 support by @​methane in #1420
  • Use Go 1.18+
• Parse numbers on text protocol too by @​methane in #1452
  • When text protocol is used, go-mysql-driver passed bare []byte to database/sql for avoid unnecessary allocation and conversion.
  • If user specified *any to Scan(), database/sql passed the []byte into the target variable.
  • This confused users because most user doesn't know when text/binary protocol used.
  • go-mysql-driver 1.8 converts integer/float values into int64/double even in text protocol. This doesn't increase allocation compared to []byte and conversion cost is negatable.
• New options start using the Functional Option Pattern to avoid increasing technical debt in the Config object. Future version may introduce Functional Option for existing options, but not for now.
  • Make TimeTruncate functional option by @​methane in 1552
  • Add BeforeConnect callback to configuration object by @​ItalyPaleAle in #1469

Other changes:

• Adding DeregisterDialContext to prevent memory leaks with dialers we don't need anymore by @​jypelle in go-sql-driver/mysql#1422
• Make logger configurable per connection by @​frozenbonito in go-sql-driver/mysql#1408
• Fix ColumnType.DatabaseTypeName for mediumint unsigned by @​evanelias in go-sql-driver/mysql#1428
• Add connection attributes by @​Daemonxiao in go-sql-driver/mysql#1389
• Stop ColumnTypeScanType() from returning sql.RawBytes by @​methane in go-sql-driver/mysql#1424
• Exec() now provides access to status of multiple statements. by @​mherr-google in go-sql-driver/mysql#1309
• Allow to change (or disable) the default driver name for registration by @​dolmen in go-sql-driver/mysql#1499
• Add default connection attribute '_server_host' by @​oblitorum in go-sql-driver/mysql#1506
• QueryUnescape DSN ConnectionAttribute value by @​zhangyangyu in go-sql-driver/mysql#1470
• Add client_ed25519 authentication by @​Gusted in go-sql-driver/mysql#1518

Commits

• 4395c45 update changelog for releasing v1.8.1 (#1576)
• 7eeaba6 Fix issue 1567 (#1570) (#1571)
• 65395d8 fix race condition when context is canceled (#1565)
• 1e75613 add wrapper method to call mc.cfg.Logger (#1564)
• 33fa6e5 replace interface{} with any (#1561)
• 33b7747 Add BeforeConnect callback to configuration object (#1469)
• 6964272 Make TimeTruncate functional option (#1552)
• 097fe6e Update workflows (#1547)
• f019727 add TiDB support in README.md (#1333)
• 743e263 Introduce timeTruncate parameter for time.Time arguments (#1541)
• Additional commits viewable in compare view

Updates github.com/livekit/protocol from 1.10.1 to 1.12.0

Release notes

Sourced from github.com/livekit/protocol's releases.

@​livekit/protocol@​1.12.0

Patch Changes

• Fixed bounds check when masking short SIP numbers. - #650 (@​dennwc)

• Add signal requests for local track updates - #651 (@​lukasIO)

• Allow sending DTMF when creating SIP participant. - #658 (@​dennwc)

github.com/livekit/protocol@v1.12.0

No release notes provided.

@​livekit/protocol@​1.11.0

Minor Changes

• Align package version with manually tagged golang module - #646 (@​lukasIO)

@​livekit/protocol@​1.10.4

Patch Changes

• Fix granular export paths - #642 (@​lukasIO)

@​livekit/protocol@​1.10.3

Patch Changes

• Export room stubs from package - #640 (@​lukasIO)

@​livekit/protocol@​1.10.2

Patch Changes

• Fix import paths - #635 (@​lukasIO)

Changelog

Sourced from github.com/livekit/protocol's changelog.

1.12.0

Minor Changes

• Moved CPU stats to a separate hwstats package, removing cgo dependency. - #660 (@​dennwc)

Patch Changes

• Fixed bounds check when masking short SIP numbers. - #650 (@​dennwc)

• Add signal requests for local track updates - #651 (@​lukasIO)

• Allow sending DTMF when creating SIP participant. - #658 (@​dennwc)

1.11.0

Minor Changes

• Align package version with manually tagged golang module - #646 (@​lukasIO)

1.10.4

1.10.3

1.10.2

Commits

• 62e1809 Version Packages (#654)
• 981fefb Add signal requests for local track updates (#651)
• 44e9dc3 Allow sending DTMF when creating SIP participant (#658)
• 4d22b4c Move CPU stats to a separate hwstats package. Fixes #659. (#660)
• feb177f call config observers synchronously (#657)
• a9939bc fix(deps): update module google.golang.org/protobuf to v1.33.0 [security] (#656)
• 8d755b4 add emit config update helper (#655)
• 912f0cf Add bounds check when trimming the number. (#650)
• d676388 Fix tag name string formatting (#653)
• b4eb83d Version Packages (#652)
• Additional commits viewable in compare view

Updates github.com/xuri/excelize/v2 from 2.8.0 to 2.8.1

Release notes

Sourced from github.com/xuri/excelize/v2's releases.

v2.8.1

We are pleased to announce the release of version 2.8.1. Featured are a handful of new areas of functionality and numerous bug fixes.

A summary of changes is available in the Release Notes. A full list of changes is available in the changelog.

Release Notes

The most notable changes in this release are:

Breaking Change

• Upgrade requirements Go language version is 1.18 or later, for upgrade of dependency package golang.org/x/net
• Change the data type for the HeaderFooterOptions structure fields AlignWithMargins and ScaleWithDoc as a pointer, resolve issue #1645
• Remove unused exported data structure ShapeColor

Notable Features

• Add new exported function SetCellUint, related issue #1681
• Add new exported function GetPictureCells for get all picture cells, related issue #1218
• Add new exported function GetConditionalStyle for get the conditional format style definition, related issue #1690
• Add new exported function GetHeaderFooter for get the worksheet header and footer
• Add new exported function AddSlicer for adding table and pivot table slicers
• Add new exported function GetPivotTables for get pivot tables
• Add new exported function DeletePivotTable for delete pivot table
• Add a new Name field in the PivotTableOptions to support specify pivot table name
• New support 7 formula functions: DBCS, SEARCH, SEARCHB, TEXT, TEXTAFTER, TEXTBEFORE and xlfn.ANCHORARRAY
• Add export ChartLineType enumeration to specify the chart line type, related issue #1706
• Add new Border field in the Chart data type to set the chart area border
• Add new Type field in the ChartLine type to set the line type
• Add new exported source relationship and namespace NameSpaceSpreadSheetXR10, ContentTypeSlicer, ContentTypeSlicerCache, and SourceRelationshipSlicer
• Add new exported extended URI ExtURIPivotCacheDefinition
• Allow dot character in the defined name, table name, or pivot table name
• Keep all cells value in the table range when deleting table
• Support format cell value with fraction number format code
• Support delete image files from the workbook internally when deleting pictures to reduce generated workbook size and resolve potential security issues
• Support set the height and width for the comment box, related issue #1688
• Support update conditional formatting, data validations, defined names, drawing objects, formula reference and volatile dependencies on inserting/deleting columns/rows, related issues #1306 and #1615
• Support 6 new kinds of conditional formatting types: text, blanks, no blanks, errors, no errors and time period
• Support calculate formula with multiple dash arithmetic symbol
• Support copy conditional format and data validation on duplicate row, related issue #1729
• Support unset custom row height if the height value is -1 when using the SetRowHeight function
• The SetRowHeight function will return an error if given an invalid row height value
• The AddChart function support set the data labels position for the chart, related issue #1704
• The AddChart function support set solid color or transparent fill for chart area, plot area, and maker, add a new field Fill in Chart, ChartPlotArea, and ChartMarker data type, related issue #1786
• The AddChart function support set chart axis font family, size and strike style, related issue #1809
• Add new field DataLabelPosition in the ChartSeries data type, support to sets the position of the chart series data label
• Add new field BubbleSize in the Chart data type, support set the bubble size in all data series for the bubble chart or 3D bubble chart
• Add new exported ChartDataLabelPositionType data type
• The GetPictureCells and GetPictures function support get embedded cell images created by Kingsoft WPS™ Office, related issue #664
• The SetConditionalFormat function support set conditional formatting with multiple cell ranges, related issue #1783

... (truncated)

Commits

• 688808b This closes #1819, formula calculation engine support array formulas
• 02b84a9 This closes #1820, converted styleFillVariants from slice to func (#1821)
• ee2ef15 This closes #1815, cell value reading functions inherit the Options settings ...
• 9cbe3b6 This closes #1807, calculation engine support date and formula type cell (#1810)
• bba155e This closes #1805, support set chart axis font family, size and strike style ...
• a258e3d Fix CalcCellValue does not return raw value when enable RawCellValue (#1803)
• 99e91e1 This closes #1794, add new GetBaseColor function (#1798)
• 9a68553 This closes #1792, support to update defined names reference when rename work...
• e4497c4 ref #65, new formula function: DBCS (#1791)
• 9b07898 This closes #1789, delete VML shape on delete comment (#1790)
• Additional commits viewable in compare view

Updates go.mongodb.org/mongo-driver from 1.12.0 to 1.14.0

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.14.0

The MongoDB Go Driver Team is pleased to release version 1.14.0 of the official Go driver.

Release Notes

This release bumps the minimum Go version from 1.13 to 1.18. It also brings several additional changes and improvements.

Notable Changes

• In case of a heartbeat timeout, in-progress operations are preemptively canceled.
• Support connecting with a "mongodb+srv://" URI that contains capital letters in the SRV hostname.

---

For a full list of tickets included in this release, please see the links below:

• Improvements
• Tasks

Full Changelog: v1.13.2...1.14.0

Documentation for the Go driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go driver is greatly appreciated!

MongoDB Go Driver 1.13.2

The MongoDB Go Driver Team is pleased to release version 1.13.2 of the official Go driver.

Release Notes

This release restores the behavior that an empty map or slice is decoded as nil, and fixes a bug of connecting via UNIX sockets like mongodb://%2Ftmp%2Fmongodb-27017.sock.

This release also stops propagating passwords in error messages.

---

For a full list of tickets included in this release, please see the links below:

• Improvements

• Bugs

• Tasks

Full Changelog: v1.13.1...1.13.2

Documentation for the Go driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go driver is greatly appreciated!

MongoDB Go Driver 1.13.1

The MongoDB Go Driver Team is pleased to release version 1.13.1 of the official Go driver.

Release Notes

... (truncated)

Commits

• 1c38449 Update version to v1.14.0
• 9c6603d GODRIVER-2335 Preemptively cancel in progress operations when SDAM heartbeats...
• 556e2f2 GODRIVER-3046 Fix FaaS Test Configuration (#1558)
• 9afea90 GODRIVER-2886 Provide more detailed deprecation notes for BSON codecs. (#1551)
• 414aa9f GODRIVER-3082 go mod tidy compilecheck package (#1557)
• 5bd7ffb Bump golang.org/x/crypto from 0.0.0-20220622213112-05595931fe9d to 0.17.0 in ...
• 0026f0f Bump golang.org/x/crypto from 0.0.0-20220622213112-05595931fe9d to 0.17.0 in ...
• 2b1c4c7 Bump golang.org/x/crypto from 0.0.0-20220622213112-05595931fe9d to 0.17.0 in ...
• 6e971fa Bump golang.org/x/crypto from 0.0.0-20220622213112-05595931fe9d to 0.17.0 in ...
• 63ef4ad Bump golang.org/x/crypto from 0.0.0-20220622213112-05595931fe9d to 0.17.0 in ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #491.