deps: bump github.com/eclipse/paho.mqtt.golang from 1.4.3 to 1.5.1

[dependabot]

Bumps github.com/eclipse/paho.mqtt.golang from 1.4.3 to 1.5.1.

Release notes

Sourced from github.com/eclipse/paho.mqtt.golang's releases.

v1.5.1

This is a minor release incorporating changes made in the 14 months since v1.5.0 (including updating dependencies, and raising the Go version to 1.24). The changes are relatively minor but address a potential security issue (CVE-2025-10543), possible panic, enable users to better monitor the connection status, and incorporate a few optimisations.

Thanks to those who have provided fixes/enhancements included in this release!

Special thanks to Paul Gerste at Sonar for reporting issue #730 via the Eclipse security team (fix was implemented in PR #714 in May, github issue created just prior to this release). This issue arose where a topic > 65535 bytes was passed to the Publish function, due to the way the data was encoded the topic could leak into the message body. Please see issue #730 or CVE-2025-10543 for further details.

What's Changed

• Updating go dependencies from pub and sub into the containers before building by @​JefJrFigueiredo in eclipse-paho/paho.mqtt.golang#691
• Optimize TCP connection logic by @​geekeryy in eclipse-paho/paho.mqtt.golang#713
• Fields over 65535 bytes not encoded correctly by @​MattBrittan in eclipse-paho/paho.mqtt.golang#714
• Reduce slice allocations in route dispatch by @​alespour in eclipse-paho/paho.mqtt.golang#710
• Add a ConnectionNotificationHandler by @​RangelReale in eclipse-paho/paho.mqtt.golang#727
• Potential panic when using manual ACK by @​MattBrittan in eclipse-paho/paho.mqtt.golang#729

Full Changelog: eclipse-paho/paho.mqtt.golang@v1.5.0...v1.5.1

v1.5.0

In the year since the release of v1.4.3 the majority of changes have been small incremental improvements/fixes. One notable change is that Go v1.20+ is now required (due to PR #646).

What's Changed

• Wrap connection network errors by @​adriansmares in eclipse/paho.mqtt.golang#646
• Clarify use of token.WaitTimeout by @​MattBrittan in eclipse/paho.mqtt.golang#659
• fix (#661): Add NewClientOptionsReader for mocking purposes. by @​avmunm in eclipse/paho.mqtt.golang#662
• fix: fix keep-alive timeouts on small intervals by @​lefinal in eclipse/paho.mqtt.golang#667
• Replace the time.After with the timer for efficiency. by @​DVasselli in eclipse/paho.mqtt.golang#671
• fix: deprecation warnings for ioutil by @​vruge in eclipse/paho.mqtt.golang#665
• fix: issue 675：goroutine leak when connectionUp(true) return error by @​kiqi007 in eclipse/paho.mqtt.golang#678
• Update dependencies by @​MattBrittan in eclipse/paho.mqtt.golang#683

New Contributors

• @​adriansmares made their first contribution in eclipse/paho.mqtt.golang#646
• @​avmunm made their first contribution in eclipse/paho.mqtt.golang#662
• @​lefinal made their first contribution in eclipse/paho.mqtt.golang#667
• @​DVasselli made their first contribution in eclipse/paho.mqtt.golang#671
• @​vruge made their first contribution in eclipse/paho.mqtt.golang#665
• @​kiqi007 made their first contribution in eclipse/paho.mqtt.golang#678

Full Changelog: eclipse-paho/paho.mqtt.golang@v1.4.3...v1.5.0

Commits

• b305237 Update dependencies in docker examples
• 35ee03d Potential panic when using manual ACK
• 433bd22 address data race in test
• 4debe3a Potential panic when using manual ACK
• 601453b Resolve issues in fvt_client_test
• 439e2ab Dependency update (also rise Go version to 1.24)
• d276593 ConnectionNotificationHandler - generic callback for all types of connection ...
• 8a350a9 notifications
• 5620c5e notifications
• 45048cc notifications
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.