chore: bump github.com/golang-migrate/migrate/v4 from 4.18.1 to 4.19.0 (#19662)

dependabot[bot] · web-flow · commit a8f92cb5863c · 2025-09-01T19:08:03.000Z
Bumps [github.com/golang-migrate/migrate/v4](https://github.com/golang-migrate/migrate) from 4.18.1 to 4.19.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/golang-migrate/migrate/releases">github.com/golang-migrate/migrate/v4's releases</a>.</em></p> <blockquote> <h2>v4.19.0</h2> <h2>What's Changed</h2> <ul> <li>Fixed sqlserver not actually getting a lock if lock is already set by <a href="https://github.com/urbim"><code>@​urbim</code></a> in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1186">golang-migrate/migrate#1186</a></li> <li>Bump golang.org/x/oauth2 from 0.18.0 to 0.27.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1299">golang-migrate/migrate#1299</a></li> <li>Update apt-key to gpg by <a href="https://github.com/sandhilt"><code>@​sandhilt</code></a> in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1277">golang-migrate/migrate#1277</a></li> <li>Update dktest to v0.4.6 for docker vuln fix by <a href="https://github.com/dhui"><code>@​dhui</code></a> in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1309">golang-migrate/migrate#1309</a></li> <li>refactor: Remove go.uber.org/atomic in favor of std sync/atomic by <a href="https://github.com/romshark"><code>@​romshark</code></a> in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1303">golang-migrate/migrate#1303</a></li> <li>Ensure bufferWriter is always closed in Migration.Buffer and propagate close errors by <a href="https://github.com/ckantcs"><code>@​ckantcs</code></a> in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1308">golang-migrate/migrate#1308</a></li> <li>Add support for Go 1.25 and drop support for 1.23 by <a href="https://github.com/dhui"><code>@​dhui</code></a> in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1310">golang-migrate/migrate#1310</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/urbim"><code>@​urbim</code></a> made their first contribution in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1186">golang-migrate/migrate#1186</a></li> <li><a href="https://github.com/sandhilt"><code>@​sandhilt</code></a> made their first contribution in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1277">golang-migrate/migrate#1277</a></li> <li><a href="https://github.com/romshark"><code>@​romshark</code></a> made their first contribution in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1303">golang-migrate/migrate#1303</a></li> <li><a href="https://github.com/ckantcs"><code>@​ckantcs</code></a> made their first contribution in <a href="https://redirect.github.com/golang-migrate/migrate/pull/1308">golang-migrate/migrate#1308</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/golang-migrate/migrate/compare/v4.18.3...v4.19.0">https://github.com/golang-migrate/migrate/compare/v4.18.3...v4.19.0</a></p> <h2>v4.18.3</h2> <h2>Changelog</h2> <ul> <li>a4d0a1b Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2</li> <li>f37ef79 Bump golang.org/x/crypto from 0.31.0 to 0.35.0</li> <li>5b97c92 Bump golang.org/x/net from 0.33.0 to 0.38.0</li> <li>e6d84f6 Drop support for Go 1.22 and add support for Go 1.24</li> <li>fccd197 Mention CLI install instructions in main README</li> <li>34c2b4a Remove redundant build tags</li> <li>a868033 Update FAQ.md - typo</li> <li>7269490 Update golangci-lint version used in GitHub Actions</li> <li>c5137c4 Update migrate -help output for the readme file</li> <li>033835a Update to dktest v0.4.5</li> <li>8b09191 fix: typo limited not limitted</li> <li>60d73be refactor: replace github.com/pkg/errors with stdlib</li> <li>36d17ba tests: fix various tests (<a href="https://redirect.github.com/golang-migrate/migrate/issues/1209">#1209</a>)</li> </ul> <h2>v4.18.2</h2> <h2>Changelog</h2> <ul> <li>e145cde Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1</li> <li>e22d012 Don't output sensitive information on error</li> <li>e5a152b Drop support for Azure SQL Edge</li> <li>12c619e Fix CI (<a href="https://redirect.github.com/golang-migrate/migrate/issues/1222">#1222</a>)</li> <li>bc06922 Update dktest from v0.4.3 to v0.4.4</li> <li>7651c8a linter fixes</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang-migrate/migrate/commit/8b9c5f77128ef93d65a082208a2009a3911fe6d4"><code>8b9c5f7</code></a> Merge pull request <a href="https://redirect.github.com/golang-migrate/migrate/issues/1310">#1310</a> from dhui/update_go</li> <li><a href="https://github.com/golang-migrate/migrate/commit/b4ec9bccb14cd7b0eb0510ac9d3d01d4be79324f"><code>b4ec9bc</code></a> Add support for Go 1.25 and drop support for 1.23</li> <li><a href="https://github.com/golang-migrate/migrate/commit/ed4bdd4614e991ca8fba606b38a45f6409a9deb6"><code>ed4bdd4</code></a> Ensure bufferWriter is always closed in Migration.Buffer and propagate close ...</li> <li><a href="https://github.com/golang-migrate/migrate/commit/8945e853c4c84a92bfa42572ac4cfd7874e23108"><code>8945e85</code></a> Merge pull request <a href="https://redirect.github.com/golang-migrate/migrate/issues/1303">#1303</a> from romshark/master</li> <li><a href="https://github.com/golang-migrate/migrate/commit/7108d806dd50c1510510239a161887757f240122"><code>7108d80</code></a> Merge pull request <a href="https://redirect.github.com/golang-migrate/migrate/issues/1309">#1309</a> from dhui/dktest_v0.4.6</li> <li><a href="https://github.com/golang-migrate/migrate/commit/682016f04c2c0f8faa1d122fd22a62563876f71d"><code>682016f</code></a> Merge pull request <a href="https://redirect.github.com/golang-migrate/migrate/issues/1277">#1277</a> from sandhilt/doc/change-apt-key-to-gpg</li> <li><a href="https://github.com/golang-migrate/migrate/commit/f3e6b5a737de1b7c79aaf81168395d6f2eb1fbb0"><code>f3e6b5a</code></a> Replace usage of deprecated docker types</li> <li><a href="https://github.com/golang-migrate/migrate/commit/0a17402aa2359c8c5cd5a68a0e08a41c4460337f"><code>0a17402</code></a> Update dktest to v0.4.6 for docker vuln fix</li> <li><a href="https://github.com/golang-migrate/migrate/commit/5eee0c8030ca227bfd27a425988f9c7c4948e90a"><code>5eee0c8</code></a> Merge pull request <a href="https://redirect.github.com/golang-migrate/migrate/issues/1299">#1299</a> from golang-migrate/dependabot/go_modules/golang.org...</li> <li><a href="https://github.com/golang-migrate/migrate/commit/642a24d61bb0a870a15020adceeee3e85d5151c3"><code>642a24d</code></a> Bump golang.org/x/oauth2 from 0.18.0 to 0.27.0</li> <li>Additional commits viewable in <a href="https://github.com/golang-migrate/migrate/compare/v4.18.1...v4.19.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/golang-migrate/migrate/v4&package-manager=go_modules&previous-version=4.18.1&new-version=4.19.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/go.mod b/go.mod
@@ -129,7 +129,7 @@ require (
 	github.com/gofrs/flock v0.12.0
 	github.com/gohugoio/hugo v0.148.1
 	github.com/golang-jwt/jwt/v4 v4.5.2
-	github.com/golang-migrate/migrate/v4 v4.18.1
+	github.com/golang-migrate/migrate/v4 v4.19.0
 	github.com/gomarkdown/markdown v0.0.0-20240930133441-72d49d9543d8
 	github.com/google/go-cmp v0.7.0
 	github.com/google/go-github/v43 v43.0.1-0.20220414155304-00e42332e405
@@ -285,7 +285,7 @@ require (
 	github.com/coreos/go-iptables v0.6.0 // indirect
 	github.com/dlclark/regexp2 v1.11.5 // indirect
 	github.com/docker/cli v28.1.1+incompatible // indirect
-	github.com/docker/docker v28.1.1+incompatible // indirect
+	github.com/docker/docker v28.3.3+incompatible // indirect
 	github.com/docker/go-connections v0.5.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dop251/goja v0.0.0-20241024094426-79f3a7efcdbd // indirect
diff --git a/go.sum b/go.sum
@@ -944,6 +944,10 @@ github.com/coder/wireguard-go v0.0.0-20240522052547-769cdd7f7818 h1:bNhUTaKl3q0b
 github.com/coder/wireguard-go v0.0.0-20240522052547-769cdd7f7818/go.mod h1:fAlLM6hUgnf4Sagxn2Uy5Us0PBgOYWz+63HwHUVGEbw=
 github.com/containerd/continuity v0.4.5 h1:ZRoN1sXq9u7V6QoHMcVWGhOwDFqZ4B9i5H6un1Wh0x4=
 github.com/containerd/continuity v0.4.5/go.mod h1:/lNJvtJKUQStBzpVQ1+rasXO1LAWtUQssk28EZvJ3nE=
+github.com/containerd/errdefs v1.0.0 h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI=
+github.com/containerd/errdefs v1.0.0/go.mod h1:+YBYIdtsnF4Iw6nWZhJcqGSg/dwvV7tyJ/kCkyJ2k+M=
+github.com/containerd/errdefs/pkg v0.3.0 h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE=
+github.com/containerd/errdefs/pkg v0.3.0/go.mod h1:NJw6s9HwNuRhnjJhM7pylWwMyAkmCQvQ4GpJHEqRLVk=
 github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
 github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo=
 github.com/containerd/platforms v1.0.0-rc.1 h1:83KIq4yy1erSRgOVHNk1HYdPvzdJ5CnsWaRoJX4C41E=
@@ -980,8 +984,8 @@ github.com/dgryski/go-farm v0.0.0-20240924180020-3414d57e47da h1:aIftn67I1fkbMa5
 github.com/dgryski/go-farm v0.0.0-20240924180020-3414d57e47da/go.mod h1:SqUrOPUnsFjfmXRMNPybcSiG0BgUW2AuFH8PAnS2iTw=
 github.com/dgryski/trifles v0.0.0-20230903005119-f50d829f2e54 h1:SG7nF6SRlWhcT7cNTs5R6Hk4V2lcmLz2NsG2VnInyNo=
 github.com/dgryski/trifles v0.0.0-20230903005119-f50d829f2e54/go.mod h1:if7Fbed8SFyPtHLHbg49SI7NAdJiC5WIA09pe59rfAA=
-github.com/dhui/dktest v0.4.3 h1:wquqUxAFdcUgabAVLvSCOKOlag5cIZuaOjYIBOWdsR0=
-github.com/dhui/dktest v0.4.3/go.mod h1:zNK8IwktWzQRm6I/l2Wjp7MakiyaFWv4G1hjmodmMTs=
+github.com/dhui/dktest v0.4.6 h1:+DPKyScKSEp3VLtbMDHcUq6V5Lm5zfZZVb0Sk7Ahom4=
+github.com/dhui/dktest v0.4.6/go.mod h1:JHTSYDtKkvFNFHJKqCzVzqXecyv+tKt8EzceOmQOgbU=
 github.com/disintegration/gift v1.2.1 h1:Y005a1X4Z7Uc+0gLpSAsKhWi4qLtsdEcMIbbdvdZ6pc=
 github.com/disintegration/gift v1.2.1/go.mod h1:Jh2i7f7Q2BM7Ezno3PhfezbR1xpUg9dUg3/RlKGr4HI=
 github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk=
@@ -990,8 +994,8 @@ github.com/dlclark/regexp2 v1.11.5 h1:Q/sSnsKerHeCkc/jSTNq1oCm7KiVgUMZRDUoRu0JQZ
 github.com/dlclark/regexp2 v1.11.5/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8=
 github.com/docker/cli v28.1.1+incompatible h1:eyUemzeI45DY7eDPuwUcmDyDj1pM98oD5MdSpiItp8k=
 github.com/docker/cli v28.1.1+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
-github.com/docker/docker v28.1.1+incompatible h1:49M11BFLsVO1gxY9UX9p/zwkE/rswggs8AdFmXQw51I=
-github.com/docker/docker v28.1.1+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/docker v28.3.3+incompatible h1:Dypm25kh4rmk49v1eiVbsAtpAsYURjYkaKubwuBdxEI=
+github.com/docker/docker v28.3.3+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/go-connections v0.5.0 h1:USnMq7hx7gwdVZq1L49hLXaFtUdTADjXGp+uj1Br63c=
 github.com/docker/go-connections v0.5.0/go.mod h1:ov60Kzw0kKElRwhNs9UlUHAE/F9Fe6GLaXnqyDdmEXc=
 github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
@@ -1192,8 +1196,8 @@ github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w
 github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
 github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
-github.com/golang-migrate/migrate/v4 v4.18.1 h1:JML/k+t4tpHCpQTCAD62Nu43NUFzHY4CV3uAuvHGC+Y=
-github.com/golang-migrate/migrate/v4 v4.18.1/go.mod h1:HAX6m3sQgcdO81tdjn5exv20+3Kb13cmGli1hrD6hks=
+github.com/golang-migrate/migrate/v4 v4.19.0 h1:RcjOnCGz3Or6HQYEJ/EEVLfWnmw9KnoigPSjzhCuaSE=
+github.com/golang-migrate/migrate/v4 v4.19.0/go.mod h1:9dyEcu+hO+G9hPSw8AIg50yg622pXJsoHItQnDGZkI0=
 github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0/go.mod h1:E/TSTwGwJL78qG/PmXZO1EjYhfJinVAhrmmHX6Z8B9k=
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
