fix(deps): update all non-major dependencies for go

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/Siroshun09/serrors	v1.4.0 → v1.4.1
github.com/go-chi/chi/v5	v5.2.3 → v5.2.5
github.com/golang-jwt/jwt/v5	v5.3.0 → v5.3.1
github.com/huandu/go-sqlbuilder	v1.38.1 → v1.39.1
github.com/oapi-codegen/oapi-codegen/v2	v2.5.1 → v2.6.0
github.com/oapi-codegen/runtime	v1.1.2 → v1.2.0
golang.org/x/oauth2	v0.33.0 → v0.35.0

---

Release Notes

Siroshun09/serrors (github.com/Siroshun09/serrors)

v1.4.1: Version 1.4.1

Compare Source

Improvements

• Use runtime.CallerFrames for generating the stack trace

go-chi/chi (github.com/go-chi/chi/v5)

v5.2.5

Compare Source

What's Changed

• Bump minimum Go to 1.22 and use new features by @​JRaspass in #​1017
• Refactor graceful shutdown example by @​mikereid1 in #​994
• Refactor to use atomic type by @​cuiweixie in #​1019
• update reverseMethodMap in RegisterMethod by @​cixel in #​1022
• Update comment about min Go version by @​JRaspass in #​1023
• middleware: harden RedirectSlashes handler by @​pkieltyka in #​1044
• Fix(middleware): Prevent double handler invocation in RouteHeaders with empty router by @​mahanadh in #​1045

New Contributors

• @​mikereid1 made their first contribution in #​994
• @​cuiweixie made their first contribution in #​1019
• @​cixel made their first contribution in #​1022
• @​mahanadh made their first contribution in #​1045

Full Changelog: go-chi/chi@v5.2.3...v5.2.5

v5.2.4

Compare Source

golang-jwt/jwt (github.com/golang-jwt/jwt/v5)

v5.3.1

Compare Source

What's Changed

🔐 Features

• Add spellcheck Github action to catch common spelling mistakes by @​equalsgibson in #​458
• Add WithNotBeforeRequired parser option and add test coverage by @​equalsgibson in #​456
• Update godoc example func to properly refer to NewWithClaims() by @​equalsgibson in #​459
• Update github workflows by @​mfridman in #​462
• Additional test for CustomClaims that validates unmarshalling behaviour by @​equalsgibson in #​457
• Fix early file close in jwt cli by @​mfridman in #​472
• Add TPM signature reference by @​salrashid123 in #​473
• Remove misleading ParserOptions documentation in #​484
• Save signature to Token struct after successful signing by @​EgorSheff in #​417
• Set token.Signature in ParseUnverified by @​slickwilli in #​414

👒 Dependencies

• Bump crate-ci/typos from 1.34.0 to 1.35.3 by @​dependabot[bot] in #​461
• Bump crate-ci/typos from 1.35.4 to 1.36.2 by @​dependabot[bot] in #​470
• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​478
• Bump crate-ci/typos from 1.36.2 to 1.39.0 by @​dependabot[bot] in #​480
• Bump golangci/golangci-lint-action from 8 to 9 by @​dependabot[bot] in #​481
• Bump actions/setup-go from 5 to 6 by @​dependabot[bot] in #​469
• Bump crate-ci/typos from 1.39.0 to 1.40.0 by @​dependabot[bot] in #​488
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​487
• Bump crate-ci/typos from 1.40.0 to 1.41.0 by @​dependabot[bot] in #​490
• Bump crate-ci/typos from 1.41.0 to 1.42.1 by @​dependabot[bot] in #​492

New Contributors

• @​equalsgibson made their first contribution in #​458
• @​salrashid123 made their first contribution in #​473
• @​EgorSheff made their first contribution in #​417
• @​slickwilli made their first contribution in #​414

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

huandu/go-sqlbuilder (github.com/huandu/go-sqlbuilder)

v1.39.1

Compare Source

v1.39.0

Compare Source

What's Changed

• [NEW] Add From support for UpdateBuilder by @​stvnkiss in #​230
• [FIX] Fix oracle limit bug by @​zhangyongding in #​222
• [FIX] Improve error-msg context for unsupported types during interpolation by @​shoriwe in #​226
• [FIX] Mark OrderBy as "not recommended" rather than deprecated by in #​223
• [FIX] Fix sqlite string interpolation incorrectly uses backslash escapes by @​shoriwe in #​228
• [FIX] Update doc on Where to avoid confusion in #​229

New Contributors

• @​zhangyongding made their first contribution in #​222
• @​shoriwe made their first contribution in #​226
• @​stvnkiss made their first contribution in #​230

Full Changelog: huandu/go-sqlbuilder@v1.38.0...v1.39.0

v1.38.2

Compare Source

oapi-codegen/oapi-codegen (github.com/oapi-codegen/oapi-codegen/v2)

v2.6.0: : 7th anniversary release 🎂

Compare Source

For those that aren't aware, 7 years ago to the day, oapi-codegen was born!

(Well, technically it's tonight at midnight UTC, but who's splitting hairs?)

There's nothing too special planned for today, but we thought it'd be the perfect time to cut a slice of cake a release!

🎉 Notable changes

New generated code requires oapi-codegen/runtime v1.2.0+

As part of #​2256, github.com/oapi-codegen/runtime v1.2.0 is needed alongside github.com/oapi-codegen/oapi-codegen, for new generated code.

This is providing a more future-proofed means to bind parameters.

See the release notes for the runtime package, and #​2256 for more information.

oapi-codegen was part of the GitHub Secure Open Source Fund

oapi-codegen was one of the projects taking part in the third GitHub Secure Open Source Fund session.

We've written up more about what we've learned, and have some more things to share with you over the coming months about lessons we've learned and improvements we've taken that we can share.

We were pretty chuffed to be selected, and it's already helped improve our security posture as a project, which is also very important for the wider ecosystem!

go directive bump in next release

Long-time users will be aware that we work very hard to try and keep our requirement for Go source compatibility, through the go directive, especially as we recommend folks use oapi-codegen as a source-tracked dependency.

For more details about this, see our Support Model docs.

In the next minor release, we'll be setting our minimum go directive to Go 1.24 (End-of-Life on 2026-02-11), as it's required for a number of dependencies of ours to be updated any higher, and a change to the module import path for Speakeasy's OpenAPI Overlay library requires us fix this centrally for our users to be able to continue updating their libraries.

[!NOTE]
Nothing is changing as part of v2.6.0, this is a pre-announcement for v2.7.0.

Behind the scenes cleanup

There's also been some work behind-the-scenes to try and clean up outstanding issues (of which we know there are many!) that have been fixed, as well as Marcin's work on trying to do some more significant rework of the internals with help from Claude.

There's still, as ever, work to go with this - as we've mentioned before, sponsoring our work would be greatly appreciated, so we can continue to put in the work, considering this is a widely used and depended on project.

🚀 New features and improvements

• feat: Pass schema type/formats to runtime v1.2.0 to allow better parameter serialization (#​2256) @​mromaszewicz
• feat: add Valid() method to generated enum types (#​2227) @​mromaszewicz
• Support nullable slice elements and map values (#​2185) @​iamtakingiteasy
• feat: add configurable type mapping for OpenAPI primitive types (#​2223) @​mromaszewicz
• Support unions with multiple mappings pointing to a single underlying type (#​2071) @​tobio
• feat: add support for custom package alias for external ref imports (#​2211) @​InventivetalentDev
• feat(output-options): add resolve-type-name-collisions to avoid name collisions (#​200) @​mgurevin
• Adopt fiber middleware template for updated GetReqHeaders() method signature (#​1419) @​getBolted

🐛 Bug fixes

• fix: qualify external ref schema types in default response codes (#​2241) @​mromaszewicz
• fix: add omitempty to optional nullable fields (#​2221) @​mromaszewicz
• fix(codegen): generate nullable.Nullable in arrays (#​2242) @​jamietanna
• fix: support x-oapi-codegen-extra-tags on parameter schemas (#​2232) (#​2235) @​mromaszewicz
• fix(templates/client): correctly nil check query parameters (#​2237) @​jamietanna
• fix(server-urls): restore generation of constants (#​2239) @​jamietanna
• fix(server-urls): use URL in GoDoc if description is empty (#​2226) @​jamietanna
• fix: set indentation to 2 when marshalling spec for overlay (#​2172) @​wndhydrnt
• fix: handle optional request bodies in strict server mode (#​2222) @​mromaszewicz
• fix(strict-server): generate correct type for $ref text responses (#​2225) @​mromaszewicz
• Fix schema gathering oversight (#​2219) @​mromaszewicz
• fix: handle duplicate path parameters in OpenAPI specs (#​2220) @​mromaszewicz
• fix: escape quoted media type directives (#​2217) @​brahmlower
• Fix Iris strict server for no content case (#​1411) @​ShouheiNishi
• Fixes type collision for enum values that start with _ (underscore) (#​1438) @​ula

📝 Documentation updates

• chore: readme update (#​2209) @​mromaszewicz
• docs: fix link to example (#​1884) @​rkosegi
• docs(extensions): correct links to examples (#​1836) @​yuro241
• docs(sponsors): update section (#​2195) @​jamietanna
• docs(sponsors): remove Elastic as a sponsor (#​2083) @​jamietanna

👻 Maintenance

• chore(renovate): add module path to security updates + override test-only dependencies' label (#​2249) @​jamietanna
• Configure Greptile code review (#​2236) @​mromaszewicz
• style(gofix): Apply go fix (#​2229) @​gaiaz-iusipov
• Run golangci-lint on a supported Go version (#​2215) @​mromaszewicz
• refactor(internal): move Fiber tests into their own modules (#​2212) @​mromaszewicz
• build: use a re-usable, single, workflow for running CI (#​2205) @​jamietanna
• fix(renovate): only run make tidy after Go module updates (#​2159) @​jamietanna
• chore(renovate): run make tidy after dependency updates to go.mod (#​2150) @​jamietanna

📦 Dependency updates

8 changes

• chore(deps): update module github.com/golangci/golangci-lint to v2.10.1 (makefile) (#​2153) @​renovate[bot]
• chore(deps): update github/codeql-action action to v4.32.4 (.github/workflows) (#​2157) @​renovate[bot]
• chore(deps): update actions/setup-go action to v6.3.0 (.github/workflows) (#​2164) @​renovate[bot]
• chore(deps): update actions/checkout action to v6 (.github/workflows) - autoclosed (#​2165) @​renovate[bot]
• chore(deps): update release-drafter/release-drafter action to v6.2.0 (.github/workflows) (#​2253) @​renovate[bot]
• chore(deps): update actions/upload-artifact action to v7 (.github/workflows) (#​2254) @​renovate[bot]
• chore(deps): update dessant/label-actions action to v5 (.github/workflows) (#​2255) @​renovate[bot]
• chore(deps): update release-drafter/release-drafter action to v6.1.0 (.github/workflows) (#​2132) @​renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

oapi-codegen/runtime (github.com/oapi-codegen/runtime)

v1.2.0: Parameter binding extensions, bug fixes, dependency updates

Compare Source

Notable Changes

The main change in this release is the addition of new Parameter binding and styling functions, which allow the code generator to pass in the type and format from the spec. Previously, we inferred what we wanted to do based on the destination type, however, it's not always possible to decide this without information about the specification.

🚀 New features and improvements

• feat: add BindRawQueryParameter for correct comma handling (#​92) @​mromaszewicz
• fix: add TypeHint-aware parameter binding and styling for []byte (#​97) (#​98) @​mromaszewicz
• Support array of objects parameters (#​40) @​danicc097
• Allow BindStyledParameterWithOptions to fill maps (#​72) @​JoZie

🐛 Bug fixes

• fix: bind Date and Time query params as scalar values (#​21) (#​93) @​mromaszewicz
• fix: support non-indexed deepObject array unmarshaling (#​22) (#​96) @​mromaszewicz
• fix: correct time.Time date-only fallback parsing in deepObject (#​95) @​mromaszewicz
• Refactor date parsing error handling (#​88) @​jsnfwlr
• fix: improve email validation using net/mail package (#​60) @​sniperwolf
• Fix deepObject marshalling losing json number format/precision (#​29) @​mgabeler-lee-6rs
• Fix issue 55 (#​56) @​mikhalytch
• fix(deepobject): support nested objects in deepObject arrays (#​84) @​adrianbrad

👻 Maintenance

• feat(fix): bump gin version (#​51) @​Gamawn
• Update golang.org/x/crypto to v0.32.0 (#​59) @​kojustin
• Updated Golang reference to address security vulnerability (#​57) @​ivan-manzhulin
• Fix linter errors (#​85) @​mromaszewicz
• build: capture govulncheck results as Code Scanning alerts (#​80) @​jamietanna

📦 Dependency updates

• chore(deps): update release-drafter/release-drafter action to v6 (#​31) @​renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: app/tools/oapi-codegen/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/tools	v0.25.1 -> v0.30.0