Skip to content

Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 in the global group across 1 directory#263

Merged
Starttoaster merged 1 commit into
mainfrom
dependabot/go_modules/global-7ca3ae735e
May 28, 2026
Merged

Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 in the global group across 1 directory#263
Starttoaster merged 1 commit into
mainfrom
dependabot/go_modules/global-7ca3ae735e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the global group with 1 update in the / directory: github.com/go-sql-driver/mysql.

Updates github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.0

What's Changed

New Contributors

Full Changelog: go-sql-driver/mysql@v1.9.2...v1.10.0

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.0 (2026-04-28)

  • Fix getSystemVar("max_allowed_packet") potentially returned wrong value. (#1754) This affects only when maxAllowedPacket=0 is set.

  • Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0. (#1756) While older versions have reported CVEs, they do not affect go-mysql.

  • Update Go versions to 1.24-1.26. (#1763)

  • Enhance interpolateParams to correctly handle placeholders. (#1732) The question mark (?) within strings and comments will no longer be treated as a placeholder.

Commits


Note

Low Risk
Lockfile-only change with no edits to chia-exporter logic; risk is limited to upstream MySQL driver behavior if optional DB metrics are enabled.

Overview
Bumps github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 in go.mod and go.sum only; there are no application code changes in this repo.

The newer driver release includes fixes and behavior changes upstream (e.g. getSystemVar / max_allowed_packet when maxAllowedPacket=0, safer ? handling in interpolateParams, transaction commit/rollback error propagation, and MariaDB protocol tweaks). This project wires MySQL via CLI/config for optional DB-backed metrics, so runtime impact depends on whether those code paths and DSN settings are used in deployment.

Reviewed by Cursor Bugbot for commit 0c460e3. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 13, 2026
@socket-security

socket-security Bot commented May 13, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​go-sql-driver/​mysql@​v1.9.3 ⏵ v1.10.097 +110010010070

View full report

Bumps the global group with 1 update in the / directory: [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql).


Updates `github.com/go-sql-driver/mysql` from 1.9.3 to 1.10.0
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.9.3...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/go-sql-driver/mysql
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: global
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 in the global group Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 in the global group across 1 directory May 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/global-7ca3ae735e branch from 1cadd30 to 0c460e3 Compare May 27, 2026 02:10
@Starttoaster
Starttoaster merged commit 854b217 into main May 28, 2026
17 checks passed
@Starttoaster
Starttoaster deleted the dependabot/go_modules/global-7ca3ae735e branch May 28, 2026 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant