chore(deps): bump the all-dependencies group with 4 updates

[dependabot]

Bumps the all-dependencies group with 4 updates: github.com/go-sql-driver/mysql, github.com/montanaflynn/stats, go.sia.tech/jape and golang.org/x/crypto.

Updates github.com/go-sql-driver/mysql from 1.10.0 to 1.10.1

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.1

What's Changed

• dsn: default Net to tcp in NewConfig so Addr-only configs round-trip by @​c-tonneslan in go-sql-driver/mysql#1770
• Add LTS MariaDB 11.8 and 12.3 into the testing matrix by @​pgporada in go-sql-driver/mysql#1774
• Bump actions/checkout from 6 to 7 in the all-dependencies group by @​dependabot[bot] in go-sql-driver/mysql#1777
• ci: pin actions by @​methane in go-sql-driver/mysql#1778
• Bump the all-dependencies group with 3 updates by @​dependabot[bot] in go-sql-driver/mysql#1779
• Bump the all-dependencies group with 3 updates by @​dependabot[bot] in go-sql-driver/mysql#1780
• Interpolate typed-nil json.RawMessage as NULL by @​oha-4 in go-sql-driver/mysql#1782
• Bump actions/setup-go from 6.5.0 to 7.0.0 in the all-dependencies group by @​dependabot[bot] in go-sql-driver/mysql#1783
• Bump the all-dependencies group across 1 directory with 5 updates by @​dependabot[bot] in go-sql-driver/mysql#1791
• Bump the all-dependencies group with 3 updates by @​dependabot[bot] in go-sql-driver/mysql#1794
• Bump the all-dependencies group with 5 updates by @​dependabot[bot] in go-sql-driver/mysql#1795
• Bump the all-dependencies group with 3 updates by @​dependabot[bot] in go-sql-driver/mysql#1796
• codeql: remove custom workflow by @​methane in go-sql-driver/mysql#1799
• doc: clarify timeTruncate units and when to use it by @​milanobrtlik in go-sql-driver/mysql#1792
• release v1.10.1 by @​methane in go-sql-driver/mysql#1801

New Contributors

• @​c-tonneslan made their first contribution in go-sql-driver/mysql#1770
• @​oha-4 made their first contribution in go-sql-driver/mysql#1782
• @​milanobrtlik made their first contribution in go-sql-driver/mysql#1792

Full Changelog: go-sql-driver/mysql@v1.10.0...v1.10.1

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.1 (2026-09-02)

• Fix Config.FormatDSN() dropping Addr when Net is empty. It now uses the default tcp network so configs with only Addr round-trip correctly. (#1770)

• Fix typed-nil json.RawMessage with interpolateParams=true being interpolated as an empty string. It is now interpolated as SQL NULL, matching server-side prepared statements. (#1782)

• Add MariaDB 11.8 and 12.3 to the test matrix. (#1774)

Commits

• 7ca26e8 release v1.10.1 (#1801)
• 87dcb95 doc: clarify timeTruncate units and when to use it (#1792)
• 1d9c421 codeql: remove custom workflow (#1799)
• 532b8e5 Bump the all-dependencies group with 3 updates (#1796)
• fe209cc Bump the all-dependencies group with 5 updates (#1795)
• 03d76c7 Bump the all-dependencies group with 3 updates (#1794)
• c426bd9 Bump the all-dependencies group across 1 directory with 5 updates (#1791)
• 416cd99 Bump actions/setup-go from 6.5.0 to 7.0.0 in the all-dependencies group (#1783)
• b96d415 Interpolate typed-nil json.RawMessage as NULL (#1782)
• dec193d Bump the all-dependencies group with 3 updates (#1780)
• Additional commits viewable in compare view

Updates github.com/montanaflynn/stats from 0.12.4 to 0.12.5

Release notes

Sourced from github.com/montanaflynn/stats's releases.

v0.12.5

Changelog

Fix

• fe3d5e6b7704e376eb4c3663ccc113701a579ec6 fix: enforce percent bounds in Percentile for single-element input (#133)

Other

• 2d459cbf5c14533645dd40c854e869422a87b84c chore: update changelog for v0.12.5
• aa877fb3d1d2ba39efc54e57eb12dce38bda371a docs: document commit message and PR title conventions (#134)

Changelog

Sourced from github.com/montanaflynn/stats's changelog.

[v0.12.5] - 2026-08-28

Fix

• Enforce percent bounds in Percentile for single-element input (#133)

Commits

• 2d459cb chore: update changelog for v0.12.5
• fe3d5e6 fix: enforce percent bounds in Percentile for single-element input (#133)
• aa877fb docs: document commit message and PR title conventions (#134)
• See full diff in compare view

Updates go.sia.tech/jape from 0.14.2 to 0.14.3

Release notes

Sourced from go.sia.tech/jape's releases.

0.14.3 (2026-08-31)

Fixes

• Update sonic dependency to 1.15.3

Changelog

Sourced from go.sia.tech/jape's changelog.

0.14.3 (2026-08-31)

Fixes

• Update sonic dependency to 1.15.3

Commits

• e89e9db Merge pull request #52 from SiaFoundation/release
• ab0622e chore: prepare release 0.14.3
• c3ea5c0 changeset
• 1d8e81d Bump github.com/bytedance/sonic in the all-dependencies group
• 5983323 Bump golang.org/x/tools in the all-dependencies group
• See full diff in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.56.0

Commits

• 86efde5 ssh: reject unexpected message types on established channels
• a6cdac6 ssh: drop traffic on undecided channels
• 39dc44e ssh: don't skip the source-address critical option in CheckCert
• afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
• 89f4e9b x509roots/fallback: update bundle
• 71488c4 ssh/knownhosts: compare only public key portions for revocation
• 82adefa ssh: synchronize unexpected response test
• c757c98 all: upgrade go directive to at least 1.26.0 [generated]
• 593c81a ssh: correctly ignore pre-banner lines
• 46efc8b acme: add crypto.SignMessage test coverage
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude Code Review

Claude Code Review is paused for this repository. To reconnect it, an admin of this repository's GitHub organization (or the account owner, for personal repositories) who can also manage your Claude organization's Code Review settings needs to re-link GitHub in Code Review settings. This is a one-time step.

_{Tip: disable this comment in your organization's Code Review settings.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​go-sql-driver/​mysql@​v1.10.0 ⏵ v1.10.1	+1
	golang.org/​x/​crypto@​v0.55.0 ⏵ v0.56.0	+1
	github.com/​montanaflynn/​stats@​v0.12.4 ⏵ v0.12.5	+1
	go.sia.tech/​jape@​v0.14.2 ⏵ v0.14.3

View full report