chore(deps): bump the go-dependencies group with 2 updates

[dependabot]

Bumps the go-dependencies group with 2 updates: github.com/nats-io/nats-server/v2 and gocloud.dev.

Updates github.com/nats-io/nats-server/v2 from 2.14.1 to 2.14.2

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.14.2

Changelog

Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.

Go Version

• 1.26.3

Dependencies

• golang.org/x/crypto v0.52.0
• golang.org/x/sys v0.45.0
• github.com/nats-io/jwt/v2 v2.8.2
• github.com/nats-io/nkeys v0.4.16

Improved

General

• The client ID is now available through the embedded ClientAuthentication API (#8217)

Fixed

General

• A race condition when handling subscription interest over routes has been fixed (#8235)
• Potential protocol-level corruption from rewriting $JS.ACK subjects has been fixed (#8242)
• Potential protocol-level corruption from buffer misuse in compressed WebSocket clients has been fixed (#8244)
• The /accstatz monitoring endpoint no longer omits accounts with only leaf connections (#8252)

JetStream

• Fixed a case where Raft peers were not correctly tracked after an inactivity stall during catchup (#8226)
• Quorum needed is now calculated correctly when bootstrapping the metalayer when gateway URLs resolve to multiple IP addresses (#8238)
• The filestore no longer performs a block skip check on streams with extremely high subject counts, as it could result in runaway CPU usage (#8227)
• Fixed a case where the filestore would not release a lock after handling a write error (#8232)
• Purge operations on both file and memory stores are now more consistent with each other (#8241)
• Fixed a case where the consumer lock would not release a lock after handling a start sequence error (#8230)
• Counter streams and message schedules now have configuration constraints applied to prevent incorrect usage patterns (#8240)
• Improved stream and consumer scale down behaviour consistency (#8253)
• Fixed an issue where the per-subject state last block was not stored correctly with a max messages per subject limit of 1 (#8254)
• Fixed a drift that could occur in the peer sets after a peer remove of an online node (#8258)

Complete Changes

nats-io/nats-server@v2.14.1...v2.14.2

Release v2.14.2-RC.1

Changelog

... (truncated)

Commits

• 1d06592 Release v2.14.2
• 4e1aefa Cherry-picks for v2.14.2 (#8256)
• ac092ff Update dependencies
• 01e589d [FIXED] Peer set desync/re-add after stream peer-remove
• 3d122e8 De-flake TestJetStreamConsumerPrioritized
• 3836d96 [FIXED] Initial MaxMsgsPerSubject update not enforced
• 92cf2e3 [FIXED] Filestore only stores last block when MaxMsgsPerSubject 1
• 3288b4f (2.14) [IMPROVED] Remove redundant error check in filestore
• 6ea46d5 [FIXED] Stream and consumer scale down consistency
• 5edd91c [FIXED] AccountStatz omits accounts with only leaf connections
• Additional commits viewable in compare view

Updates gocloud.dev from 0.45.0 to 0.46.0

Release notes

Sourced from gocloud.dev's releases.

v0.46.0

BREAKING_CHANGE:

• blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager by @​vangent in google/go-cloud#3717
  • Only breaking if you're using As to access specific AWS types from the old manager.

What's Changed

all

• all: support typed errors and errors.Is for error codes by @​vangent in google/go-cloud#3708
• aws/aws: add AWS IAM Role assumption support by @​troyready in google/go-cloud#3716

blob:

• blob/fileblob: Prevent escaping bucket root by @​vangent in google/go-cloud#3669
• blob/fileblob: Close the file in case of BeforeRead or Seek error by @​ganigeorgiev in google/go-cloud#3696
• blob/azureblob: eliminate Azure Autorest dependency and replace usage by @​gaganhr94 in google/go-cloud#3672
• blob/gcsblob: Handle grpc errors on gcsblob by @​dpulpeiro in google/go-cloud#3697

runtimevar:

• runtimevar/filevar: Support relative paths in URL openers via a host of "." by @​vangent in google/go-cloud#3666
• runtimevar/etcdvar: Replace go.etcd.io/etcd/etcdserver/api/v3rpc/rpctypes by @​aaronjheng in google/go-cloud#3676

pubsub

• pubsub/gcppubsub: decrease max batch buffer size from 9MB to 8MB by @​vangent in google/go-cloud#3698

docstore

• docstore: Support unwrapping action list errors by @​Megakuul in google/go-cloud#3705

secrets

• secrets/azurekeyvault: migrate from beta keyvault/azkeys to stable security/keyvault/azkeys by @​vangent in google/go-cloud#3689

postgres

• postgres/awspostgres: add IAM authentication support by @​giautm in google/go-cloud#3713

New Contributors

• @​gaganhr94 made their first contribution in google/go-cloud#3672
• @​aaronjheng made their first contribution in google/go-cloud#3676
• @​kchoy-sfdc made their first contribution in google/go-cloud#3681
• @​dpulpeiro made their first contribution in google/go-cloud#3697
• @​ganigeorgiev made their first contribution in google/go-cloud#3696
• @​Megakuul made their first contribution in google/go-cloud#3705
• @​XananasX7 made their first contribution in google/go-cloud#3711
• @​LeSingh1 made their first contribution in google/go-cloud#3714
• @​troyready made their first contribution in google/go-cloud#3716
• @​peczenyj made their first contribution in google/go-cloud#3717

Full Changelog: google/go-cloud@v0.45.0...v0.46.0

Commits

• 60f0d74 all: prerelease
• a1725f0 blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager (#3717)
• 7eadd65 aws: add AWS IAM Role assumption support (#3716)
• 054c82e postgres/awspostgres: add IAM authentication support (#3713)
• 2b85c85 docs: fix Pub/Sub subscribe wording (#3714)
• b9dee8d build: add top-level permissions restriction to tests workflow (#3711)
• 45a8cfc docstore: support unwrapping ActionListError for use with errors.Is (#3705)
• 78b5976 all: support typed errors and errors.Is for error codes (#3708)
• 595f8b6 all: update another otel dep (#3701)
• c903aef all: update otel deps (#3699)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions