fix(deps): update go modules by posthog-renovate[bot] · Pull Request #1269 · PostHog/duckgres

posthog-renovate · 2026-10-26T05:44:48Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
github.com/agnivade/levenshtein	`v1.2.1` → `v1.2.2`	indirect	patch
github.com/apache/arrow-go/v18	`v18.5.1` → `v18.8.0`	require	minor
github.com/aws/aws-sdk-go-v2	`v1.45.1` → `v1.47.5`	require	minor	`v1.47.7` (+1)
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	`v1.7.14` → `v1.7.25`	indirect	patch	`v1.7.26`
github.com/aws/aws-sdk-go-v2/config	`v1.32.29` → `v1.33.13`	require	minor	`v1.33.15` (+1)
github.com/aws/aws-sdk-go-v2/credentials	`v1.19.28` → `v1.20.13`	require	minor	`v1.20.15` (+1)
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	`v1.18.30` → `v1.20.5`	indirect	minor	`v1.20.7` (+1)
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`v1.22.32` → `v1.23.19`	require	minor	`v1.23.21` (+1)
github.com/aws/aws-sdk-go-v2/internal/configsources	`v1.5.1` → `v1.5.8`	indirect	patch	`v1.5.10` (+1)
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	`v2.8.1` → `v2.8.8`	indirect	patch	`v2.8.10` (+1)
github.com/aws/aws-sdk-go-v2/internal/v4a	`v1.4.31` → `v1.5.8`	indirect	minor	`v1.5.10` (+1)
github.com/aws/aws-sdk-go-v2/service/athena	`v1.64.0` → `v1.66.8`	require	minor	`v1.66.10` (+1)
github.com/aws/aws-sdk-go-v2/service/glue	`v1.155.0` → `v1.172.2`	require	minor	`v1.173.0` (+1)
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	`v1.13.13` → `v1.13.23`	indirect	patch	`v1.13.24`
github.com/aws/aws-sdk-go-v2/service/internal/checksum	`v1.9.23` → `v1.11.9`	indirect	minor	`v1.11.11` (+1)
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	`v1.13.30` → `v1.14.8`	indirect	minor	`v1.14.10` (+1)
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	`v1.19.31` → `v1.20.8`	indirect	minor	`v1.20.10` (+1)
github.com/aws/aws-sdk-go-v2/service/route53	`v1.62.3` → `v1.70.6`	require	minor	`v1.70.8` (+1)
github.com/aws/aws-sdk-go-v2/service/s3	`v1.105.0` → `v1.114.6`	require	minor	`v1.114.8` (+1)
github.com/aws/aws-sdk-go-v2/service/signin	`v1.4.0` → `v1.12.1`	indirect	minor	`v1.12.3` (+1)
github.com/aws/aws-sdk-go-v2/service/sso	`v1.32.0` → `v1.39.1`	indirect	minor	`v1.39.3` (+1)
github.com/aws/aws-sdk-go-v2/service/ssooidc	`v1.37.0` → `v1.44.1`	indirect	minor	`v1.44.3` (+1)
github.com/aws/aws-sdk-go-v2/service/sts	`v1.44.0` → `v1.51.6`	require	minor	`v1.51.8` (+1)
github.com/aws/smithy-go	`v1.28.1` → `v1.28.7`	indirect	patch	`v1.28.8`
github.com/bytedance/gopkg	`v0.1.3` → `v0.1.4`	indirect	patch
github.com/bytedance/sonic	`v1.15.0` → `v1.15.5`	indirect	patch
github.com/bytedance/sonic/loader	`v0.5.0` → `v0.5.3`	indirect	patch
github.com/cloudwego/base64x	`v0.1.6` → `v0.1.7`	indirect	patch
github.com/duckdb/duckdb-go-bindings	`v0.10505.0` → `v0.20000.0`	require	minor
github.com/duckdb/duckdb-go-bindings/lib/darwin-amd64	`v0.10505.0` → `v0.10506.0`	indirect	minor
github.com/duckdb/duckdb-go-bindings/lib/darwin-arm64	`v0.10505.0` → `v0.10506.0`	indirect	minor
github.com/duckdb/duckdb-go-bindings/lib/linux-amd64	`v0.10505.0` → `v0.10506.0`	indirect	minor
github.com/duckdb/duckdb-go-bindings/lib/linux-arm64	`v0.10505.0` → `v0.10506.0`	indirect	minor
github.com/duckdb/duckdb-go-bindings/lib/windows-amd64	`v0.10505.0` → `v0.10506.0`	indirect	minor
github.com/duckdb/duckdb-go/v2	`v2.10505.0` → `v2.20000.0`	require	minor
github.com/emicklei/go-restful/v3	`v3.13.0` → `v3.14.0`	indirect	minor
github.com/fxamacker/cbor/v2	`v2.9.0` → `v2.10.0`	indirect	minor
github.com/gabriel-vasile/mimetype	`v1.4.12` → `v1.4.16`	indirect	patch
github.com/gin-contrib/gzip	`v1.2.6` → `v1.2.9`	require	patch
github.com/gin-contrib/sse	`v1.1.0` → `v1.2.0`	indirect	minor
github.com/go-openapi/jsonpointer	`v1.0.0` → `v1.0.2`	indirect	patch
github.com/go-openapi/jsonreference	`v1.0.0` → `v1.0.3`	indirect	patch
github.com/go-openapi/swag	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/cmdutils	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/conv	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/fileutils	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/jsonutils	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/loading	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/mangling	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/netutils	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/pools	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/stringutils	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/typeutils	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-openapi/swag/yamlutils	`v0.28.0` → `v0.29.2`	indirect	minor
github.com/go-playground/locales	`v0.14.1` → `v0.14.2`	indirect	patch
github.com/go-playground/universal-translator	`v0.18.1` → `v0.18.2`	indirect	patch
github.com/go-playground/validator/v10	`v10.30.1` → `v10.30.6`	indirect	patch
github.com/goccy/go-json	`v0.10.6` → `v0.12.0`	indirect	minor
github.com/google/gnostic-models	`v0.7.0` → `v0.7.1`	indirect	patch
github.com/grpc-ecosystem/grpc-gateway/v2	`v2.30.0` → `v2.33.0`	indirect	minor
github.com/hashicorp/go-uuid	`v1.0.3` → `v1.0.4`	indirect	patch
github.com/jackc/pgx/v5	`v5.9.2` → `v5.12.0`	require	minor
github.com/jackc/puddle/v2	`v2.2.2` → `v2.2.3`	indirect	patch
github.com/klauspost/cpuid/v2	`v2.3.0` → `v2.4.2`	indirect	minor
github.com/leodido/go-urn	`v1.4.0` → `v1.5.0`	indirect	minor
github.com/lestrrat-go/dsig	`v1.2.1` → `v1.4.0`	indirect	minor
github.com/lestrrat-go/httprc/v3	`v3.0.5` → `v3.0.6`	indirect	patch
github.com/lestrrat-go/jwx/v3	`v3.1.0` → `v3.4.0`	indirect	minor
github.com/lib/pq	`v1.10.9` → `v1.12.3`	require	minor
github.com/mattn/go-isatty	`v0.0.20` → `v0.0.24`	indirect	patch
github.com/open-policy-agent/opa	`v1.16.2` → `v1.22.0`	require	minor	`v1.22.2` (+1)
github.com/pelletier/go-toml/v2	`v2.2.4` → `v2.4.3`	indirect	minor
github.com/pganalyze/pg_query_go/v6	`v6.1.0` → `v6.2.5`	require	minor
github.com/pierrec/lz4/v4	`v4.1.25` → `v4.1.33`	indirect	patch
github.com/posthog/posthog-go	`v1.16.1` → `v1.39.0`	require	minor	`v1.40.1` (+1)
github.com/pressly/goose/v3	`v3.26.0` → `v3.29.0`	require	minor
github.com/prometheus/client_golang	`v1.23.2` → `v1.25.0`	require	minor
github.com/prometheus/client_model	`v0.6.2` → `v0.6.3`	require	patch
github.com/prometheus/common	`v0.67.5` → `v0.73.1`	require	minor
github.com/prometheus/procfs	`v0.20.1` → `v0.23.0`	indirect	minor
github.com/quic-go/quic-go	`v0.59.1` → `v0.65.0`	indirect	minor
github.com/sethvargo/go-retry	`v0.3.0` → `v0.5.0`	indirect	minor
github.com/sirupsen/logrus	`v1.9.4` → `v1.10.2`	indirect	minor
github.com/trinodb/trino-go-client	`v0.333.0` → `v0.338.0`	require	minor
github.com/ugorji/go/codec	`v1.3.1` → `v1.3.2`	indirect	patch
github.com/vektah/gqlparser/v2	`v2.5.32` → `v2.5.64`	indirect	patch
go.mongodb.org/mongo-driver/v2	`v2.5.0` → `v2.9.2`	indirect	minor	`v2.9.3`
go.opentelemetry.io/contrib/bridges/otelslog	`v0.20.1` → `v0.21.0`	require	minor
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`v0.71.0` → `v0.72.0`	require	minor
go.opentelemetry.io/otel	`v1.46.0` → `v1.47.0`	require	minor
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp	`v0.22.0` → `v0.23.0`	require	minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`v1.46.0` → `v1.47.0`	indirect	minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	`v1.46.0` → `v1.47.0`	require	minor
go.opentelemetry.io/otel/metric	`v1.46.0` → `v1.47.0`	indirect	minor
go.opentelemetry.io/otel/sdk	`v1.46.0` → `v1.47.0`	require	minor
go.opentelemetry.io/otel/trace	`v1.46.0` → `v1.47.0`	require	minor
go.opentelemetry.io/proto/otlp	`v1.11.0` → `v1.11.1`	indirect	patch
go.yaml.in/yaml/v2	`v2.4.4` → `v2.4.5`	indirect	patch
go.yaml.in/yaml/v3	`v3.0.5` → `v3.0.6`	indirect	patch
golang.org/x/arch	`v0.22.0` → `v0.32.0`	indirect	minor
golang.org/x/exp	`716be56` → `f0251eb`	indirect	digest
golang.org/x/mod	`v0.41.0` → `v0.42.0`	indirect	minor
golang.org/x/oauth2	`v0.36.0` → `v0.37.0`	indirect	minor
golang.org/x/sync	`v0.23.0` → `v0.24.0`	require	minor
golang.org/x/sys	`v0.48.0` → `v0.49.0`	indirect	minor
golang.org/x/telemetry	`a038080` → `6cd571d`	indirect	digest
golang.org/x/term	`v0.46.0` → `v0.47.0`	indirect	minor
golang.org/x/text	`v0.42.0` → `v0.43.0`	indirect	minor
golang.org/x/time	`v0.15.0` → `v0.16.0`	indirect	minor
golang.org/x/tools	`v0.49.0` → `v0.52.0`	indirect	minor
google.golang.org/grpc	`v1.84.0` → `v1.85.0`	require	minor
gorm.io/driver/postgres	`v1.6.0` → `v1.6.3`	require	patch
gorm.io/gorm	`v1.31.1` → `v1.31.2`	require	patch
k8s.io/api	`v0.35.2` → `v0.37.2`	require	minor
k8s.io/apimachinery	`v0.35.2` → `v0.37.2`	require	minor
k8s.io/client-go	`v0.35.2` → `v0.37.2`	require	minor
k8s.io/klog/v2	`v2.130.1` → `v2.140.0`	indirect	minor
k8s.io/utils	`bc988d5` → `ca04ba5`	indirect	digest
sigs.k8s.io/json	`2d32026` → `11ed52e`	indirect	digest
sigs.k8s.io/structured-merge-diff/v6	`v6.3.0` → `v6.4.2`	indirect	minor

Release Notes

agnivade/levenshtein (github.com/agnivade/levenshtein)

`v1.2.2`

Compare Source

apache/arrow-go (github.com/apache/arrow-go/v18)

`v18.8.0`: Apache Arrow Go 18.8.0

Compare Source

What's Changed

feat(parquet/schema): Wire up logical type functionality for writing geo types by @C-Loftus in #960
chore: Bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #961
chore: Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #963
chore(dev/release): filter out non numeric go releases (rc's and beta's) when finding latest go by @raulcd in #968
ci: fix release workflow discussions by @zeroshade in #980
chore: Bump modernc.org/sqlite from 1.53.0 to 1.54.0 by @dependabot[bot] in #964
chore: Bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #965
chore: Bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by @dependabot[bot] in #966
chore: Bump actions/setup-python from 6.3.0 to 7.0.0 by @dependabot[bot] in #962
ci: fix lint on release workflow by @zeroshade in #982
fix: remove superfluous struct field index compare by @Willem-J-an in #970
fix(ipc): reject truncated message frames by @fallintoplace in #991
fix(internal/utils): handle reader reset and short peeks by @fallintoplace in #987
fix(arrow/ipc): propagate CLI stream errors by @fallintoplace in #986
fix(arrow/flight): avoid blocking after stream cancellation by @fallintoplace in #989
fix(parquet/variant): handle empty metadata keys by @fallintoplace in #985
fix(flight/flightsql/example): propagate row iteration errors by @fallintoplace in #990
fix(parquet): reject truncated scalar bit reads by @fallintoplace in #944
fix: Fix arm64 assembly stack frame manipulation by @nsrip-dd in #984
fix(arrow/array): support zero-column tables by @fallintoplace in #988
docs(parquet): Add thrift generation contribution info by @C-Loftus in #971
fix(array): reject mismatched known null counts during full validation by @fallintoplace in #993
fix(arrow/array): Resize(0) on non-empty builder causes memory leak by @serramatutu in #995
feat(parquet/pqarrow): Read support for extension types / geo by @C-Loftus in #969
fix(array): validate run-end encoded invariants by @fallintoplace in #992
fix(array): validate binary_view and string_view payloads by @fallintoplace in #994
fix(parquet): wrap DELTA_BINARY_PACKED deltas at the physical type width by @tom-eon in #1027
fix(arrow/compute): use is_null/is_not_null in expressions by @fallintoplace in #997
fix(arrow/ipc): reject NaN minSpaceSavings values by @fallintoplace in #998
fix(arrow/tensor): default nil dimension names to empty strings by @fallintoplace in #999
fix(arrow/scalar): allow null extension scalars to keep null storage by @fallintoplace in #1000
fix(arrow/scalar): handle nil child values in run-end scalars by @fallintoplace in #1001
fix(arrow/array): ignore zero-count union appends by @fallintoplace in #1026
fix(arrow/csv): preserve decimal precision by @fallintoplace in #1022
fix(parquet/metadata): compare bloom filter caps in bits by @fallintoplace in #996
fix(parquet/pqarrow): reject timestamp coercion overflow by @fallintoplace in #1008
fix(parquet/file): reject records starting with nonzero repetition levels by @fallintoplace in #1009
fix(parquet/variant): reject truncated scalar values by @fallintoplace in #1017
fix(parquet/encoding): reject invalid delta byte prefixes by @fallintoplace in #1014
fix(parquet/metadata): preserve infinite floating-point statistics by @fallintoplace in #1007
fix(parquet/encoding): bound lazy dictionary growth by @fallintoplace in #1011
fix(parquet/encoding): respect declared RLE payload lengths by @fallintoplace in #1015
fix(parquet/encoding): validate delta binary packed headers by @fallintoplace in #1012
fix(parquet/encoding): reject invalid delta length payloads by @fallintoplace in #1013
fix(parquet/pqarrow): preserve INT96 timestamps across units by [@

Configuration

📅 Schedule: Branch creation - "before 9am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

posthog-renovate · 2026-10-26T05:44:49Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

7 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.26.0` -> `1.26.10`
`go.opentelemetry.io/otel/sdk/log`	`v0.22.0` -> `v1.47.0`
`golang.org/x/crypto`	`v0.57.0` -> `v0.58.0`
`github.com/gobwas/glob`	`v0.2.3` -> `v1.0.0`
`github.com/klauspost/compress`	`v1.18.5` -> `v1.20.1`
`go.opentelemetry.io/otel/log`	`v0.22.0` -> `v1.47.0`
`golang.org/x/net`	`v0.60.0` -> `v0.61.0`
`k8s.io/kube-openapi`	`v0.0.0-20250910181357-589584f1c912` -> `v0.0.0-20260721132016-d427ff9ee9ad`

github-actions · 2026-10-26T05:45:13Z

Test Impact Plan

Deterministic summary of how this PR changes tests, CI runners, and coverage-risk signals.

Summary

Area	Added	Changed	Deleted
Test files	0	0	0
E2E/journey files	0	0	0
Workflow files	0	0	0

Signals

Test cases: +0 / -0
Assertions: +0 / -0
Skips or known failures added: 0
Workflow continue-on-error added: 0
Workflow path filters added: 0
Test commands removed from justfile: 0
E2E/journey retry lines added: 0

Coverage risk: neutral or increased

No coverage-reduction warnings detected.

posthog-renovate Bot force-pushed the renovate/go-modules branch 6 times, most recently from 64b1d72 to a34eb0f Compare November 3, 2026 05:28

posthog-renovate Bot force-pushed the renovate/go-modules branch 2 times, most recently from 5655791 to 0c83c9c Compare November 5, 2026 05:27

fix(deps): update go modules

e216e06

posthog-renovate Bot force-pushed the renovate/go-modules branch from 0c83c9c to e216e06 Compare November 6, 2026 05:26

Navigation Menu

Repository navigation

fix(deps): update go modules - #1269

fix(deps): update go modules#1269
posthog-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-modules

posthog-renovate Bot commented Oct 26, 2026 •

edited

Loading

Uh oh!

posthog-renovate Bot commented Oct 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 26, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

posthog-renovate Bot commented Oct 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.2.2

v18.8.0: Apache Arrow Go 18.8.0

What's Changed

Configuration

Uh oh!

posthog-renovate Bot commented Oct 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

github-actions Bot commented Oct 26, 2026

Test Impact Plan

Summary

Signals

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

posthog-renovate Bot commented Oct 26, 2026 •

edited

Loading

`v1.2.2`

`v18.8.0`: Apache Arrow Go 18.8.0

posthog-renovate Bot commented Oct 26, 2026 •

edited

Loading