deps: Bump vgi from 0.24.0 to 0.34.0

[dependabot]

Bumps vgi from 0.24.0 to 0.34.0.

Release notes

Sourced from vgi's releases.

v0.34.0 — the wire name is now vgi.v2

Breaking: the wire protocol name is now vgi.v2

The transports require a vgi_rpc.protocol routing key, and this port never called SetServiceName — so it hosted the framework's default literal Service and answered ProtocolNotSupportedError to any client sending a real name. Six implementations had four different answers. The canonical name is now vgi.v2, declared here as the exported constant vgi.ProtocolName and passed to SetServiceName on every transport the worker builds.

POST /Service/bind   -> does not host protocol "Service". Hosted: [vgi.v2]
POST /bogus.v1/bind  -> does not host protocol "bogus.v1". Hosted: [vgi.v2]
POST /vgi.v2/bind    -> routes

The major is in the name deliberately. An incompatible major becomes a different name, so a mismatched client gets a routing 404 that any proxy, gateway or log already understands, rather than a mysterious deserialization failure deep in a stream. It also means vgi.v2 can be served beside a future vgi.v3 while clients migrate.

What you must do to upgrade. Nothing in your worker code — the name is set by the SDK. But the client has to send it: the DuckDB extension must be new enough to send the vgi_rpc.protocol routing key (Query-farm/vgi 5d45bb4 and later). A build carrying that is published to the community channel, so FORCE INSTALL vgi FROM community; is the upgrade path. An older extension paired with this release — or this release's predecessor paired with a current extension — fails at bind, not at first data.

This port does not host the secret protocol (vgi.secret.v1); secrets travel as fields inside the vgi protocol's own requests.

Transport: vgi-rpc-go v0.28.0

go.mod moves from vgi-rpc-go v0.27.0 to v0.28.0, which carries wire-breaking transport changes of its own: __describe__ is retired in favour of the vgi_rpc.Reflection.v1 protocol, raw transports now require the vgi_rpc.protocol routing key at construction, and the protocol hash is redefined. An implementation still built against v0.27.0 cannot talk to a v0.28.0 peer, so the bump is not optional. None of those surfaces are touched directly by this SDK — the bump needed no call-site edits here.

Performance: the FINALIZE flush is no longer carried whole in every continuation token

The headline for anyone running table-in-out functions over HTTP.

A flush is drained one batch per turn, and over HTTP every turn is a separate request that rebuilds producer state from a continuation token. FinalizeProducerState.BatchIPC held all N batches and was never truncated as

... (truncated)

Commits

• c3bbc03 release: v0.34.0 — vgi.v2 wire name, published vgi-rpc 0.25.0, O(1) finaliz...
• ca2f484 perf: the FINALIZE flush was decoded whole on every HTTP continuation (#10)
• 778a7e3 protocol: declare the wire name vgi.v2
• 2499210 deps: move the transport to the published vgi-rpc 0.25.0
• 1beeba7 release: v0.33.0 — VGI 2.0 write result modes (#9)
• 8367355 feat: adopt VGI 2.0 write result modes (#8)
• 70e2821 Add argument monotonicity protocol metadata
• 3a65243 Run worker coverage only on demand (#7)
• 0bb5eef Use the published VGI extension in integration CI (#6)
• db6108b ci: route packaged database worker to Rust fixture (#5)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)