Skip to content

Bump gorm.io/driver/mysql from 1.5.7 to 1.6.0#60

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/gorm.io/driver/mysql-1.6.0
Closed

Bump gorm.io/driver/mysql from 1.5.7 to 1.6.0#60
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/gorm.io/driver/mysql-1.6.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps gorm.io/driver/mysql from 1.5.7 to 1.6.0.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gorm.io/driver/mysql-1.6.0 branch from f71c09d to 1fb5e4b Compare May 19, 2026 02:02
Bumps [gorm.io/driver/mysql](https://github.com/go-gorm/mysql) from 1.5.7 to 1.6.0.
- [Commits](go-gorm/mysql@v1.5.7...v1.6.0)

---
updated-dependencies:
- dependency-name: gorm.io/driver/mysql
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gorm.io/driver/mysql-1.6.0 branch from 1fb5e4b to 15010e1 Compare May 19, 2026 23:58
SyniRon added a commit that referenced this pull request May 20, 2026
Bumps:
- gorm.io/driver/mysql v1.5.7 → v1.6.0
- gorm.io/gorm v1.25.12 → v1.30.0 (transitive via the driver bump)

Code fix needed for the bump:

FindProfileByKeycloakID and FindProfileByDiscordID built their WHERE
clauses with a map[string]interface{} keyed on
"xf_user_connected_account.provider" / ".provider_key". gorm 1.25
forwarded such dotted keys verbatim. gorm 1.26+ (so 1.30 here)
treats the entire map key as a column name and prefixes it with
the current model's table, producing nonsense like
`xf_nf_rosters_user`.`xf_user_connected_account`.`provider`
in the rendered SQL — a three-part qualifier MariaDB rejects with
"Unknown column ... in 'where clause'".

Effect on develop: discord/keycloak ID lookups returned 404
("no user found") for every input. Insomnia suite went 61/61 → 49/61.

Fix: replace the dotted-key map with raw placeholder SQL on both
functions so the joined-table column names stay unqualified through
gorm's escape pass.

Smoked locally against a fresh XF DB mirror — both lookups return
200 with the expected profile, and the canonical-jq diff of the
other 11 baseline endpoints (ranks / position-groups / awol /
profile by id+username / full + lite rosters / s1 uniforms /
tickets categories+list+single) shows byte-for-byte identical
JSON content vs the pre-bump develop responses.

Supersedes #60.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@SyniRon

SyniRon commented May 20, 2026

Copy link
Copy Markdown
Collaborator

Closing ref #75

@SyniRon SyniRon closed this May 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 20, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/go_modules/gorm.io/driver/mysql-1.6.0 branch May 20, 2026 00:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant