Update all minor and patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/redis/go-redis/v9	v9.17.2 → v9.18.0
go.mongodb.org/mongo-driver/v2	v2.4.1 → v2.5.0

---

Release Notes

redis/go-redis (github.com/redis/go-redis/v9)

v9.18.0: 9.18.0

Compare Source

Redis 8.6 Support

Added support for Redis 8.6, including new commands and features for streams idempotent production and HOTKEYS.

Smart Client Handoff (Maintenance Notifications) for Cluster

note: Pending RS version release

This release introduces comprehensive support for Redis Enterprise Cluster maintenance notifications via SMIGRATING/SMIGRATED push notifications. The client now automatically handles slot migrations by:

• Relaxing timeouts during migration (SMIGRATING) to prevent false failures
• Triggering lazy cluster state reloads upon completion (SMIGRATED)
• Enabling seamless operations during Redis Enterprise maintenance windows

(#​3643) by @​ndyakov

OpenTelemetry Native Metrics Support

Added comprehensive OpenTelemetry metrics support following the OpenTelemetry Database Client Semantic Conventions. The implementation uses a Bridge Pattern to keep the core library dependency-free while providing optional metrics instrumentation through the new extra/redisotel-native package.

Metric groups include:

• Command metrics: Operation duration with retry tracking
• Connection basic: Connection count and creation time
• Resiliency: Errors, handoffs, timeout relaxation
• Connection advanced: Wait time and use time
• Pubsub metrics: Published and received messages
• Stream metrics: Processing duration and maintenance notifications

(#​3637) by @​ofekshenawa

✨ New Features

• HOTKEYS Commands: Added support for Redis HOTKEYS feature for identifying hot keys based on CPU consumption and network utilization (#​3695) by @​ofekshenawa
• Streams Idempotent Production: Added support for Redis 8.6+ Streams Idempotent Production with ProducerID, IdempotentID, IdempotentAuto in XAddArgs and new XCFGSET command (#​3693) by @​ofekshenawa
• NaN Values for TimeSeries: Added support for NaN (Not a Number) values in Redis time series commands (#​3687) by @​ofekshenawa
• DialerRetries Options: Added DialerRetries and DialerRetryTimeout to ClusterOptions, RingOptions, and FailoverOptions (#​3686) by @​naveenchander30
• ConnMaxLifetimeJitter: Added jitter configuration to distribute connection expiration times and prevent thundering herd (#​3666) by @​cyningsun
• Digest Helper Functions: Added DigestString and DigestBytes helper functions for client-side xxh3 hashing compatible with Redis DIGEST command (#​3679) by @​ofekshenawa
• SMIGRATED New Format: Updated SMIGRATED parser to support new format and remember original host:port (#​3697) by @​ndyakov
• Cluster State Reload Interval: Added cluster state reload interval option for maintenance notifications (#​3663) by @​ndyakov

🐛 Bug Fixes

• PubSub nil pointer dereference: Fixed nil pointer dereference in PubSub after WithTimeout() - pubSubPool is now properly cloned (#​3710) by @​Copilot
• MaintNotificationsConfig nil check: Guard against nil MaintNotificationsConfig in initConn (#​3707) by @​veeceey
• wantConnQueue zombie elements: Fixed zombie wantConn elements accumulation in wantConnQueue (#​3680) by @​cyningsun
• XADD/XTRIM approx flag: Fixed XADD and XTRIM to use = when approx is false (#​3684) by @​ndyakov
• Sentinel timeout retry: When connection to a sentinel times out, attempt to connect to other sentinels (#​3654) by @​cxljs

⚡ Performance

• Fuzz test optimization: Eliminated repeated string conversions, used functional approach for cleaner operation selection (#​3692) by @​feiguoL
• Pre-allocate capacity: Pre-allocate slice capacity to prevent multiple capacity expansions (#​3689) by @​feelshu

🧪 Testing

• Comprehensive TLS tests: Added comprehensive TLS tests and example for standalone, cluster, and certificate authentication (#​3681) by @​ndyakov
• Redis 8.6: Updated CI to use Redis 8.6-pre (#​3685) by @​ndyakov

🧰 Maintenance

• Deprecation warnings: Added deprecation warnings for commands based on Redis documentation (#​3673) by @​ndyakov
• Use errors.Join(): Replaced custom error join function with standard library errors.Join() (#​3653) by @​cxljs
• Use Go 1.21 min/max: Use Go 1.21's built-in min/max functions (#​3656) by @​cxljs
• Proper formatting: Code formatting improvements (#​3670) by @​12ya
• Set commands documentation: Added comprehensive documentation to all set command methods (#​3642) by @​iamamirsalehi
• MaxActiveConns docs: Added default value documentation for MaxActiveConns (#​3674) by @​codykaup
• README example update: Updated README example (#​3657) by @​cxljs
• Cluster maintnotif example: Added example application for cluster maintenance notifications (#​3651) by @​ndyakov

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​12ya, @​Copilot, @​codykaup, @​cxljs, @​cyningsun, @​feelshu, @​feiguoL, @​iamamirsalehi, @​naveenchander30, @​ndyakov, @​ofekshenawa, @​veeceey

v9.17.3: 9.17.3

Compare Source

🐛 Bug Fixes

• Connection Pool: Fixed zombie wantConn elements accumulation in wantConnQueue that could cause resource leaks in high concurrency scenarios with dial failures (#​3680) by @​cyningsun
• Stream Commands: Fixed XADD and XTRIM commands to use exact threshold (=) when Approx is false, ensuring precise stream trimming behavior (#​3684) by @​ndyakov
• Connection Pool: Added ConnMaxLifetimeJitter configuration to distribute connection expiration times and prevent the thundering herd problem when many connections expire simultaneously (#​3666) by @​cyningsun
• Client Options: Added DialerRetries and DialerRetryTimeout fields to ClusterOptions, RingOptions, and FailoverOptions to allow configuring connection retry behavior for cluster, ring, and sentinel clients (#​3686) by @​naveenchander30

Contributors

We'd like to thank all the contributors who worked on this release!

@​cyningsun, @​naveenchander30, and @​ndyakov

---

Full Changelog: redis/go-redis@v9.17.2...v9.17.3

mongodb/mongo-go-driver (go.mongodb.org/mongo-driver/v2)

v2.5.0: MongoDB Go Driver 2.5.0

Compare Source

The MongoDB Go Driver Team is pleased to release version 2.5.0 of the official MongoDB Go Driver.

Release Highlights

This release adds a preview of CRUD support for prefix/suffix/substring indexes. Prefix, suffix and substring search are in preview and should be used for experimental workloads only. These features are unstable and their security is not guaranteed until released as Generally Available (GA). The GA version of these features may not be backwards compatible with the preview version.

Also, this release adds AsFloat64(), AsFloat64OK() to bson.RawValue, and DefaultDocumentMap() to bson.Decoder in the BSON package.

Additionally, this release adds ErrorCodes() to parse server error codes from an arbitrary Go error, and exposes atClusterTime in snapshot sessions.

Moreover, this release fixes several bugs, including potential heap out-of-bounds read in GSSAPI error handling.

What's Changed

✨ New Features

• GODRIVER-3594 Add AsFloat64() and AsFloat64OK() conversion functions by @​RafaelCenzano in #​2253
• GODRIVER-3690 Add ErrorCodesFrom to the mongo package by @​prestonvasquez in #​2241
• GODRIVER-3663 Expose atClusterTime parameter in snapshot sessions by @​prestonvasquez in #​2271
• GODRIVER-3540 Support Prefix/Suffix/Substring Indexes. by @​qingyang-hu in #​2267
• GODRIVER-3697 Add DefaultDocumentMap as Decoder Method by @​prestonvasquez in #​2238

🐛 Fixed

• GODRIVER-3698 Support command logging for transactions by @​prestonvasquez in #​2288
• GODRIVER-3793 Fix variable shadowing and deferred cancel in rttMonitor.start() by @​Nepomuk5665 in #​2308
• GODRIVER-3770 Fix buffer handling in GSSAPI error description and use… by @​prestonvasquez in #​2304

📦 Dependency Updates

• Bump github.com/xdg-go/scram from 1.1.2 to 1.2.0 by @​dependabot[bot] in #​2252
• Bump github.com/klauspost/compress from 1.16.7 to 1.17.6 by @​dependabot[bot] in #​2229
• GODRIVER-3715 fix: replace golang/snappy with klauspost/compress/snappy by @​oikarinen in #​2248
• Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1 in /examples/_logger/logrus by @​dependabot[bot] in #​2256
• Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in /internal/test/compilecheck by @​dependabot[bot] in #​2281
• Bump golang.org/x/crypto from 0.33.0 to 0.45.0 in /internal/cmd/faas/awslambda/mongodb by @​dependabot[bot] in #​2282
• Bump golang.org/x/crypto from 0.33.0 to 0.45.0 in /examples/_logger/zap by @​dependabot[bot] in #​2280
• Bump golang.org/x/crypto from 0.33.0 to 0.45.0 in /internal/cmd/benchmark by @​dependabot[bot] in #​2279
• Bump golang.org/x/crypto from 0.33.0 to 0.45.0 in /examples/_logger/logrus by @​dependabot[bot] in #​2307
• Bump golang.org/x/crypto from 0.33.0 to 0.45.0 in /examples/_logger/zerolog by @​dependabot[bot] in #​2311

📝 Other Changes

• GODRIVER-3659 Add optin setting to await MinPoolSize population by @​prestonvasquez in #​2258
• correct spelling by @​God-Jay in #​2276
• GODRIVER-3502 Refactor and remove builder pattern for MongoCryptOptions by @​RafaelCenzano in #​2278
• GODRIVER-3517 Convert OIDC prose test to go test by @​RafaelCenzano in #​2283
• GODRIVER-3702 Add *.mongo.com to OIDC allowed list by @​RafaelCenzano in #​2284

New Contributors

• @​oikarinen made their first contribution in #​2248
• @​RafaelCenzano made their first contribution in #​2253
• @​God-Jay made their first contribution in #​2276
• @​Nepomuk5665 made their first contribution in #​2308

Full Changelog: mongodb/mongo-go-driver@v2.4.2...v2.5.0

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

v2.4.2: MongoDB Go Driver 2.4.2

Compare Source

The MongoDB Go Driver Team is pleased to release version 2.4.2 of the official MongoDB Go Driver.

Release Highlights

This release fixes buffer handling in GSSAPI error description and username functions.

What's Changed

🐛 Fixed

• GODRIVER-3770 Fix buffer handling in GSSAPI error description and username functions by @​prestonvasquez in #​2297

Full Changelog: mongodb/mongo-go-driver@v2.4.1...v2.4.2

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

---

Configuration

📅 Schedule: Branch creation - Between 10:00 AM and 06:59 PM ( * 10-18 * * * ) in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/klauspost/compress	v1.16.7 -> v1.17.6
github.com/xdg-go/scram	v1.1.2 -> v1.2.0