Skip to content

Bump the go-dependencies group across 1 directory with 4 updates - #31

Merged
Imesh7 merged 1 commit into
masterfrom
dependabot/go_modules/trading-system-go/go-dependencies-a06d0fe0bc
Jul 15, 2026
Merged

Bump the go-dependencies group across 1 directory with 4 updates#31
Imesh7 merged 1 commit into
masterfrom
dependabot/go_modules/trading-system-go/go-dependencies-a06d0fe0bc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 4 updates in the /trading-system-go directory: github.com/IBM/sarama, github.com/gofiber/fiber/v2, github.com/redis/go-redis/v9 and gorm.io/gorm.

Updates github.com/IBM/sarama from 1.49.0 to 1.50.3

Release notes

Sourced from github.com/IBM/sarama's releases.

Version 1.50.3 (2026-06-15)

What's Changed

🎉 New Features / Improvements

🐛 Fixes

📦 Dependency updates

🔧 Maintenance

Full Changelog: IBM/sarama@v1.50.2...v1.50.3

Version 1.50.2 (2026-06-05)

What's Changed

🎉 New Features / Improvements

🐛 Fixes

📦 Dependency updates

... (truncated)

Changelog

Sourced from github.com/IBM/sarama's changelog.

Changelog

Version 1.50.2 (2026-06-05)

What's Changed

🎉 New Features / Improvements

🐛 Fixes

📦 Dependency updates

Full Changelog: IBM/sarama@v1.50.1...v1.50.2

Version 1.50.1 (2026-05-27)

What's Changed

🐛 Fixes

  • fix: correct requiredVersion for V8 JoinGroup and add protocol version placeholders by @​dnwe in IBM/sarama#3585

Full Changelog: IBM/sarama@v1.50.0...v1.50.1

Version 1.50.0 (2026-05-27)

What's Changed

🎉 New Features / Improvements

🐛 Fixes

📦 Dependency updates

... (truncated)

Commits
  • ff2eaba feat: support ApiVersions V4
  • 0483979 test: discover upgradable features via ApiVersions
  • d39f8ea feat: add OnAssignmentBalanceStrategy, the onAssignment half of the assignor ...
  • 498dceb feat(admin): add ClusterAdmin UpdateFeatures
  • 5f48502 feat: support UpdateFeatures v0
  • 36c1c46 feat: expose broker features from ApiVersions v3 (#3633)
  • b7d6106 feat: support CreatePartitions v3 (#3631)
  • fdbaec7 feat: support Produce v9 (#3629)
  • 277248f fix(consumer): don't panic on requeue after unref (#3630)
  • ce73e81 fix(deps): update module golang.org/x/net to v0.56.0
  • Additional commits viewable in compare view

Updates github.com/gofiber/fiber/v2 from 2.52.13 to 2.52.14

Release notes

Sourced from github.com/gofiber/fiber/v2's releases.

v2.52.14

What's Changed

🐛 Bug Fixes

New Contributors

Full Changelog: gofiber/fiber@v2.52.13...v2.52.14

Commits
  • a74500f Update fiber package version to 2.52.14
  • 33c9501 Merge pull request #4495 from terraincognita07/backport-v2-balancer-forward-x...
  • 1b071e1 Merge branch 'v2' into backport-v2-balancer-forward-x-real-ip
  • 6772121 Merge pull request #4498 from gofiber/fix/v2-parser-decoder-global-leak
  • 396416e test(ctx): restore global parser decoder after SetParserDecoder tests
  • da6126b Merge branch 'v2' into backport-v2-balancer-forward-x-real-ip
  • 79d3444 Merge pull request #4497 from gofiber/ci/v2-gotestsum-rerun-fails
  • bd6da95 test(proxy): fix data race and flaky deadline test in v2 CI
  • 493b955 ci: set least-privilege GITHUB_TOKEN permissions on the test workflow
  • 2fbfa7d ci: drop redundant advanced CodeQL workflow (default setup covers it)
  • Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.19.0 to 9.21.0

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.21.0

This is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement.

🚀 Highlights

Zero-copy GetToBuffer / SetFromBuffer

Two new StringCmdable methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that Get/Set incur:

GetToBuffer(ctx, key, buf) *ZeroCopyStringCmd   // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) }
SetFromBuffer(ctx, key, buf) *StatusCmd

GetToBuffer decodes the bulk reply straight into the caller-owned buf (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. SetFromBuffer is provided for API symmetry — it dispatches to the same []byte writer path as Set(ctx, key, buf, 0) and produces byte-identical output on the wire. Available on *Client, *ClusterClient, *Ring, *Conn and Pipeliner.

(#3834) by @​ndyakov

Explicit LIMIT 0 for stream trimming

Redis treats XTRIM/XADD approximate-trim (~) LIMIT 0 as "disable the trimming effort cap entirely", which differs from omitting LIMIT (the implicit 100 * stream-node-max-entries default). The command builders previously only emitted LIMIT when limit > 0, so callers could never send an explicit LIMIT 0. Following the KeepTTL = -1 precedent, the new XTrimLimitDisabled = -1 sentinel now emits an explicit LIMIT 0; limit == 0 keeps the historical no-LIMIT behavior, so existing callers produce byte-identical commands.

(#3848) by @​TheRealMal

✨ New Features

  • Zero-copy buffer string commands: new GetToBuffer / SetFromBuffer on StringCmdable and the ZeroCopyStringCmd result type, reading/writing string values into caller-owned buffers without per-call payload allocation (#3834) by @​ndyakov
  • XTrimLimitDisabled sentinel: XTRIM/XADD approximate trimming can now send an explicit LIMIT 0 to disable the trim effort cap, via the new XTrimLimitDisabled = -1 sentinel (#3848) by @​TheRealMal
  • PubSub health-check timeouts: channel.initHealthCheck now bounds the Ping it issues with a fresh per-check timeout context (the exported pingTimeout / reconnectTimeout) instead of context.TODO(), so a stuck health-check Ping can no longer block indefinitely (#3819) by @​abdellani
  • Skip redundant UNWATCH in Tx.Close: a transaction now tracks whether a WATCH is still active (watchArmed) and only issues UNWATCH on Close when it is, removing an extra round trip on the common WATCH/.../EXEC and no-key Watch paths while never returning a connection to the pool with an active watch (#3854) by @​fcostaoliveira

🐛 Bug Fixes

  • maintnotifications ModeAuto fail-open: ModeAuto now stays fail-open when the server does not support maintenance notifications — connections are retired and tracking is guarded during downgrade so the client keeps working instead of erroring (#3853) by @​terrorobe

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​abdellani, @​fcostaoliveira, @​ndyakov, @​terrorobe, @​TheRealMal

9.20.1

This is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.

🚀 Highlights

RESP3 pub/sub message loss fixed

PeekPushNotificationName previously inspected only the bytes already buffered by bufio, so when a push frame header straddled a buffer fill boundary it could return a truncated notification name (e.g. "messa" instead of "message"). The push processor then mis-routed the frame and ReadReply silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes #3839.

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.21.0 (2026-06-18)

This is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement.

🚀 Highlights

Zero-copy GetToBuffer / SetFromBuffer

Two new StringCmdable methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that Get/Set incur:

GetToBuffer(ctx, key, buf) *ZeroCopyStringCmd   // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) }
SetFromBuffer(ctx, key, buf) *StatusCmd

GetToBuffer decodes the bulk reply straight into the caller-owned buf (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. SetFromBuffer is provided for API symmetry — it dispatches to the same []byte writer path as Set(ctx, key, buf, 0) and produces byte-identical output on the wire. Available on *Client, *ClusterClient, *Ring, *Conn and Pipeliner.

(#3834) by @​ndyakov

Explicit LIMIT 0 for stream trimming

Redis treats XTRIM/XADD approximate-trim (~) LIMIT 0 as "disable the trimming effort cap entirely", which differs from omitting LIMIT (the implicit 100 * stream-node-max-entries default). The command builders previously only emitted LIMIT when limit > 0, so callers could never send an explicit LIMIT 0. Following the KeepTTL = -1 precedent, the new XTrimLimitDisabled = -1 sentinel now emits an explicit LIMIT 0; limit == 0 keeps the historical no-LIMIT behavior, so existing callers produce byte-identical commands.

(#3848) by @​TheRealMal

✨ New Features

  • Zero-copy buffer string commands: new GetToBuffer / SetFromBuffer on StringCmdable and the ZeroCopyStringCmd result type, reading/writing string values into caller-owned buffers without per-call payload allocation (#3834) by @​ndyakov
  • XTrimLimitDisabled sentinel: XTRIM/XADD approximate trimming can now send an explicit LIMIT 0 to disable the trim effort cap, via the new XTrimLimitDisabled = -1 sentinel (#3848) by @​TheRealMal
  • PubSub health-check timeouts: channel.initHealthCheck now bounds the Ping it issues with a fresh per-check timeout context (the exported pingTimeout / reconnectTimeout) instead of context.TODO(), so a stuck health-check Ping can no longer block indefinitely (#3819) by @​abdellani
  • Skip redundant UNWATCH in Tx.Close: a transaction now tracks whether a WATCH is still active (watchArmed) and only issues UNWATCH on Close when it is, removing an extra round trip on the common WATCH/.../EXEC and no-key Watch paths while never returning a connection to the pool with an active watch (#3854) by @​fcostaoliveira

🐛 Bug Fixes

  • maintnotifications ModeAuto fail-open: ModeAuto now stays fail-open when the server does not support maintenance notifications — connections are retired and tracking is guarded during downgrade so the client keeps working instead of erroring (#3853) by @​terrorobe

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​abdellani, @​fcostaoliveira, @​ndyakov, @​terrorobe, @​TheRealMal

Full Changelog: redis/go-redis@v9.20.1...v9.21.0

9.20.1 (2026-06-11)

This is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.

... (truncated)

Commits
  • 1551837 chore(release): 9.21.0 (#3857)
  • 1cfa927 fix(maintnotifications): keep ModeAuto fail-open (#3853)
  • 1f0ea0e feat(pubsub): introduce timeouts for Ping on channel.initHealthCheck (#3819)
  • 5484b0b feat(tx): skip redundant UNWATCH in Tx.Close when no WATCH is active (#3854)
  • bf57a51 chore(deps): bump rojopolis/spellcheck-github-actions (#3852)
  • 641294c feat(streams): support explicit LIMIT 0 in XTRIM/XADD trimming via XTrimLimit...
  • 74d9bb0 feat(command): add zero-copy GetToBuffer and SetFromBuffer (#3834)
  • a13416b chore(release): 9.20.1 (#3847)
  • 10dc44f fix(push): fix peeking when push name is truncated (#3842)
  • e1a2d68 fix(ft.hybrid): Always generate vector param names if they are not provided b...
  • Additional commits viewable in compare view

Updates gorm.io/gorm from 1.31.1 to 1.31.2

Release notes

Sourced from gorm.io/gorm's releases.

Release v1.31.2

Changes

Commits
  • 1d6ce99 Fix potential rows leak on panic by deferring rows.Close() (#7798)
  • f648834 perf: replace fmt.Sprintf with strconv in ExplainSQL numeric formatting (#7796)
  • 49cd6b8 Document NowFunc timezone behavior (#7799)
  • d0ee5e2 correct typo and rename fileType to fieldType in AlterColumn (#7748)
  • 2a22022 fix: panic when using clause.Returning with CreateInBatches (#7768)
  • 3322929 fix(migrator): add nil guards to ColumnType methods to prevent panic (#7767)
  • 40cd2af ci: switch tests Go matrix to stable/oldstable and update setup-go (#7726)
  • ba38501 chore(ci): bump actions/stale to v9 (#7696)
  • c1f742d fix: don't override alterColumn when defaults match (#7728)
  • c14d3ac update github ci golang version
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-dependencies group across 1 directory with 4 updates
77b44fe 
Bumps the go-dependencies group with 4 updates in the /trading-system-go directory: [github.com/IBM/sarama](https://github.com/IBM/sarama), [github.com/gofiber/fiber/v2](https://github.com/gofiber/fiber), [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) and [gorm.io/gorm](https://github.com/go-gorm/gorm).


Updates `github.com/IBM/sarama` from 1.49.0 to 1.50.3
- [Release notes](https://github.com/IBM/sarama/releases)
- [Changelog](https://github.com/IBM/sarama/blob/main/CHANGELOG.md)
- [Commits](IBM/sarama@v1.49.0...v1.50.3)

Updates `github.com/gofiber/fiber/v2` from 2.52.13 to 2.52.14
- [Release notes](https://github.com/gofiber/fiber/releases)
- [Commits](gofiber/fiber@v2.52.13...v2.52.14)

Updates `github.com/redis/go-redis/v9` from 9.19.0 to 9.21.0
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.19.0...v9.21.0)

Updates `gorm.io/gorm` from 1.31.1 to 1.31.2
- [Release notes](https://github.com/go-gorm/gorm/releases)
- [Commits](go-gorm/gorm@v1.31.1...v1.31.2)

---
updated-dependencies:
- dependency-name: github.com/IBM/sarama
  dependency-version: 1.50.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/gofiber/fiber/v2
  dependency-version: 2.52.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: gorm.io/gorm
  dependency-version: 1.31.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 11, 2026
@Imesh7
Imesh7 merged commit d9e027b into master Jul 15, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/trading-system-go/go-dependencies-a06d0fe0bc branch July 15, 2026 03:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Imesh7