Skip to content

chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.3#19838

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/lib/pq-1.12.3
Open

chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.3#19838
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/lib/pq-1.12.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps github.com/lib/pq from 1.12.1 to 1.12.3.

Release notes

Sourced from github.com/lib/pq's releases.

v1.12.3

  • Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2

  • Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

Changelog

Sourced from github.com/lib/pq's changelog.

v1.12.3 (2026-04-03)

  • Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2 (2026-04-02)

  • Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

Commits
  • 1f3e3d9 Send datestyle as a startup parameter (#1312)
  • 32ba56b Expand tests for multiple result sets
  • c2cfac1 Release v1.12.2
  • 859f104 Test CockroachDB
  • 12e464c Allow multiple matches and regexps in pqtest.ErrorContains()
  • 6d77ced Treat io.ErrUnexpectedEOF as driver.ErrBadConn in handleError
  • 71daecb Ensure transactions are closed in pqtest
  • 8f44823 Set PGAPPNAME for tests
  • 4af2196 Fix healthcheck
  • 38a54e4 Split out testdata/init a bit
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.12.1 to 1.12.3.
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](lib/pq@v1.12.1...v1.12.3)

---
updated-dependencies:
- dependency-name: github.com/lib/pq
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails ci-all-qa-tests Tells CI to run all API tests (not just BAT). dependencies Pull requests that update a dependency file labels Apr 6, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 6, 2026 05:52
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ci-all-qa-tests Tells CI to run all API tests (not just BAT). auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails labels Apr 6, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 6, 2026

🚀 Build Images Ready

Images are ready for commit fb44d0c. To use with deploy scripts:

export MAIN_IMAGE_TAG=4.11.x-561-gfb44d0cf6a

@sachaudh
Copy link
Copy Markdown
Contributor

sachaudh commented Apr 6, 2026

Risk: Low | Patch bump | CI passing (2 Prow failures are pod scheduling timeouts, unrelated)

What changed

  • v1.12.2: Treats io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql properly discards broken connections instead of reusing them. Fixes permanently broken connections since v1.12.0.
  • v1.12.3: Sends datestyle startup parameter for compatibility with non-default datestyle databases.

Our usage

  • ~30 files across pkg/postgres/schema/, migrator/migrations/, and pkg/postgres/pgtest/
  • Primarily pq.Array() for PostgreSQL array types and _ "github.com/lib/pq" driver registration
  • No changed APIs are directly called -- the ErrBadConn fix operates transparently at the database/sql driver level
  • No security advisories in either old or new version

Verdict

Looks safe from the my side. Only go.mod/go.sum changed, no breaking changes, and v1.12.2 is a nice reliability improvement. Leaving it to backend for a second look since lib/pq is core to the data layer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails ci-all-qa-tests Tells CI to run all API tests (not just BAT). dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant