Skip to content

Commit 2a6b00d

Browse files
build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1 (#1092)
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.8.0 to 5.9.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jackc/pgx/blob/master/CHANGELOG.md">github.com/jackc/pgx/v5's changelog</a>.</em></p> <blockquote> <h1>5.9.1 (March 22, 2026)</h1> <ul> <li>Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)</li> </ul> <h1>5.9.0 (March 21, 2026)</h1> <p>This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.</p> <p>It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.</p> <p>It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.</p> <ul> <li>Require Go 1.25+</li> <li>Add SCRAM-SHA-256-PLUS support (Adam Brightwell)</li> <li>Add OAuth authentication support for PostgreSQL 18 (David Schneider)</li> <li>Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)</li> <li>Add tsvector type support (Adam Brightwell)</li> <li>Skip Describe Portal for cached prepared statements reducing network round trips</li> <li>Make LoadTypes query easier to support on &quot;postgres-like&quot; servers (Jelte Fennema-Nio)</li> <li>Default empty user to current OS user matching libpq behavior (ShivangSrivastava)</li> <li>Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)</li> <li>Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)</li> <li>Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)</li> <li>Make RowsAffected faster (Abhishek Chanda)</li> <li>Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)</li> <li>Fix: ContextWatcher goroutine leak (Hank Donnay)</li> <li>Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)</li> <li>Fix: pipelineBatchResults.Exec silently swallowing lastRows error</li> <li>Fix: ColumnTypeLength using BPCharArrayOID instead of BPCharOID</li> <li>Fix: TSVector text encoding returning nil for valid empty tsvector</li> <li>Fix: wrong error messages for Int2 and Int4 underflow</li> <li>Fix: Numeric nil Int pointer dereference with Valid: true</li> <li>Fix: reversed strings.ContainsAny arguments in Numeric.ScanScientific</li> <li>Fix: message length parsing on 32-bit platforms</li> <li>Fix: FunctionCallResponse.Decode mishandling of signed result size</li> <li>Fix: returning wrong error in configTLS when DecryptPEMBlock fails (Maxim Motyshen)</li> <li>Fix: misleading ParseConfig error when default_query_exec_mode is invalid (Skarm)</li> <li>Fix: missed Unwatch in Pipeline error paths</li> <li>Clarify too many failed acquire attempts error message</li> <li>Better error wrapping with context and SQL statement (Aneesh Makala)</li> <li>Enable govet and ineffassign linters (Federico Guerinoni)</li> <li>Guard against various malformed binary messages (arrays, hstore, multirange, protocol messages)</li> <li>Fix various godoc comments (ferhat elmas)</li> <li>Fix typos in comments (Oleksandr Redko)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046"><code>4e4eaed</code></a> Release v5.9.1</li> <li><a href="https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de"><code>6273188</code></a> Fix batch result format corruption when using cached prepared statements</li> <li><a href="https://github.com/jackc/pgx/commit/f7b90c2f1ac099f00e67d6d4d0fee6deb330bc94"><code>f7b90c2</code></a> Merge pull request <a href="https://redirect.github.com/jackc/pgx/issues/2524">#2524</a> from dbussink/pipeline-result-format-reuse</li> <li><a href="https://github.com/jackc/pgx/commit/3ce6d75be4baa8d1e4b4f880da5f9ad68ab14e7f"><code>3ce6d75</code></a> Add failing test: batch scan corrupted in cache_statement mode</li> <li><a href="https://github.com/jackc/pgx/commit/b4d8e62b6616d0c09c5021500363de0c56e01631"><code>b4d8e62</code></a> Release v5.9.0</li> <li><a href="https://github.com/jackc/pgx/commit/c227cd4f76fa2b1a47c0156621e05c076f4cf5c9"><code>c227cd4</code></a> Bump minimum Go version from 1.24 to 1.25</li> <li><a href="https://github.com/jackc/pgx/commit/f492c14836d7d442e8103b09f2c0c74a80c56347"><code>f492c14</code></a> Use reflect.TypeFor instead of reflect.TypeOf for static types</li> <li><a href="https://github.com/jackc/pgx/commit/ad8fb08d3f1a36c0e475c9f80dc9bb19d075d8e2"><code>ad8fb08</code></a> Use sync.WaitGroup.Go to simplify goroutine spawning</li> <li><a href="https://github.com/jackc/pgx/commit/303377376df43ba3d1a99728eaa9f9a6bcaab767"><code>3033773</code></a> Remove go1.26 build tag from synctest test</li> <li><a href="https://github.com/jackc/pgx/commit/83ffb3c2220737cf11c7dd88c80be9166753102f"><code>83ffb3c</code></a> Validate multirange element count against source length before allocating</li> <li>Additional commits viewable in <a href="https://github.com/jackc/pgx/compare/v5.8.0...v5.9.1">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent fff1664 commit 2a6b00d

2 files changed

Lines changed: 3 additions & 3 deletions

File tree

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ require (
1111
github.com/danielgtaylor/huma/v2 v2.37.3
1212
github.com/golang-jwt/jwt/v5 v5.3.1
1313
github.com/google/go-containerregistry v0.21.3
14-
github.com/jackc/pgx/v5 v5.8.0
14+
github.com/jackc/pgx/v5 v5.9.1
1515
github.com/prometheus/client_golang v1.23.2
1616
github.com/rs/cors v1.11.1
1717
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1

go.sum

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -87,8 +87,8 @@ github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsI
8787
github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
8888
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo=
8989
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM=
90-
github.com/jackc/pgx/v5 v5.8.0 h1:TYPDoleBBme0xGSAX3/+NujXXtpZn9HBONkQC7IEZSo=
91-
github.com/jackc/pgx/v5 v5.8.0/go.mod h1:QVeDInX2m9VyzvNeiCJVjCkNFqzsNb43204HshNSZKw=
90+
github.com/jackc/pgx/v5 v5.9.1 h1:uwrxJXBnx76nyISkhr33kQLlUqjv7et7b9FjCen/tdc=
91+
github.com/jackc/pgx/v5 v5.9.1/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4=
9292
github.com/jackc/puddle/v2 v2.2.2 h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo=
9393
github.com/jackc/puddle/v2 v2.2.2/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4=
9494
github.com/keybase/go-keychain v0.0.1 h1:way+bWYa6lDppZoZcgMbYsvC7GxljxrskdNInRtuthU=

0 commit comments

Comments
 (0)