Skip to content

Update module github.com/lib/pq to v1.12.3#465

Open
red-hat-konflux[bot] wants to merge 1 commit intosecurity-compliancefrom
konflux/mintmaker/security-compliance/github.com-lib-pq-1.x
Open

Update module github.com/lib/pq to v1.12.3#465
red-hat-konflux[bot] wants to merge 1 commit intosecurity-compliancefrom
konflux/mintmaker/security-compliance/github.com-lib-pq-1.x

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

@red-hat-konflux red-hat-konflux Bot commented Jan 29, 2026

This PR contains the following updates:

Package Change Age Confidence
github.com/lib/pq v1.10.9v1.12.3 age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

lib/pq (github.com/lib/pq)

v1.12.3

Compare Source

  • Send datestyle startup parameter, improving compatbility with database engines
    that use a different default datestyle such as EnterpriseDB (#​1312).

v1.12.2

Compare Source

  • Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the
    connection. Since v1.12.0 this could result in permanently broken connections,
    especially with CockroachDB which frequently sends partial messages (#​1299).

v1.12.1

Compare Source

  • Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#​1300).

  • Don't clear password if directly set on pq.Config (#​1302).

v1.12.0

Compare Source

  • The next release may change the default sslmode from require to prefer.
    See #​1271 for details.

  • CopyIn() and CopyInToSchema() have been marked as deprecated. These are
    simple query builders and not needed for COPY [..] FROM STDIN support (which
    is not deprecated). (#​1279)

    // Old
    tx.Prepare(CopyIn("temp", "num", "text", "blob", "nothing"))
    
    // Replacement
    tx.Prepare(`copy temp (num, text, blob, nothing) from stdin`)
    
Features
  • Support protocol 3.2, and the min_protocol_version and
    max_protocol_version DSN parameters (#​1258).

  • Support sslmode=prefer and sslmode=allow (#​1270).

  • Support ssl_min_protocol_version and ssl_max_protocol_version (#​1277).

  • Support connection service file to load connection details (#​1285).

  • Support sslrootcert=system and use ~/.postgresql/root.crt as the default
    value of sslrootcert (#​1280, #​1281).

  • Add a new pqerror package with PostgreSQL error codes (#​1275).

    For example, to test if an error is a UNIQUE constraint violation:

    if pqErr, ok := errors.AsType[*pq.Error](err); ok && pqErr.Code == pqerror.UniqueViolation {
        log.Fatalf("email %q already exsts", email)
    }
    

    To make this a bit more convenient, it also adds a pq.As() function:

    pqErr := pq.As(err, pqerror.UniqueViolation)
    if pqErr != nil {
        log.Fatalf("email %q already exsts", email)
    }
    
Fixes
  • Fix SSL key permission check to allow modes stricter than 0600/0640#1265 (#​1265).

  • Fix Hstore to work with binary parameters (#​1278).

  • Clearer error when starting a new query while pq is still processing another
    query (#​1272).

  • Send intermediate CAs with client certificates, so they can be signed by an
    intermediate CA (#​1267).

  • Use time.UTC for UTC aliases such as Etc/UTC (#​1282).

v1.11.2

Compare Source

This fixes two regressions:

  • Don't send startup parameters if there is no value, improving compatibility
    with Supavisor (#​1260).

  • Don't send dbname as a startup parameter if database=[..] is used in the
    connection string. It's recommended to use dbname=, as database= is not a
    libpq option, and only worked by accident previously. (#​1261)

v1.11.1

Compare Source

This fixes two regressions present in the v1.11.0 release:

  • Fix build on 32bit systems, Windows, and Plan 9 (#​1253).

  • Named []byte types and pointers to []byte (e.g. *[]byte, json.RawMessage)
    would be treated as an array instead of bytea (#​1252).

v1.11.0

Compare Source

This version of pq requires Go 1.21 or newer.

pq now supports only maintained PostgreSQL releases, which is PostgreSQL 14 and
newer. Previously PostgreSQL 8.4 and newer were supported.

Features
  • The pq.Error.Error() text includes the position of the error (if reported
    by PostgreSQL) and SQLSTATE code (#​1219, #​1224):

    pq: column "columndoesntexist" does not exist at column 8 (42703)
    pq: syntax error at or near ")" at position 2:71 (42601)
    
  • The pq.Error.ErrorWithDetail() method prints a more detailed multiline
    message, with the Detail, Hint, and error position (if any) (#​1219):

    ERROR:   syntax error at or near ")" (42601)
    CONTEXT: line 12, column 1:
    
         10 |     name           varchar,
         11 |     version        varchar,
         12 | );
              ^
    
  • Add Config, NewConfig(), and NewConnectorConfig() to supply connection
    details in a more structured way (#​1240).

  • Support hostaddr and $PGHOSTADDR (#​1243).

  • Support multiple values in host, port, and hostaddr, which are each
    tried in order, or randomly if load_balance_hosts=random is set (#​1246).

  • Support target_session_attrs connection parameter (#​1246).

  • Support sslnegotiation to use SSL without negotiation (#​1180).

  • Allow using a custom tls.Config, for example for encrypted keys (#​1228).

  • Add PQGO_DEBUG=1 print the communication with PostgreSQL to stderr, to aid
    in debugging, testing, and bug reports (#​1223).

  • Add support for NamedValueChecker interface (#​1125, #​1238).

Fixes
  • Match HOME directory lookup logic with libpq: prefer $HOME over /etc/passwd,
    ignore ENOTDIR errors, and use APPDATA on Windows (#​1214).

  • Fix sslmode=verify-ca verifying the hostname anyway when connecting to a DNS
    name (rather than IP) (#​1226).

  • Correctly detect pre-protocol errors such as the server not being able to fork
    or running out of memory (#​1248).

  • Fix build with wasm (#​1184), appengine (#​745), and Plan 9 (#​1133).

  • Deprecate and type alias pq.NullTime to sql.NullTime (#​1211).

  • Enforce integer limits of the Postgres wire protocol (#​1161).

  • Accept the passfile connection parameter to override PGPASSFILE (#​1129).

  • Fix connecting to socket on Windows systems (#​1179).

  • Don't perform a permission check on the .pgpass file on Windows (#​595).

  • Warn about incorrect .pgpass permissions (#​595).

  • Don't set extra_float_digits (#​1212).

  • Decode bpchar into a string (#​949).

  • Fix panic in Ping() by not requiring CommandComplete or EmptyQueryResponse in
    simpleQuery() (#​1234)

  • Recognize bit/varbit (#​743) and float types (#​1166) in ColumnTypeScanType().

  • Accept PGGSSLIB and PGKRBSRVNAME environment variables (#​1143).

  • Handle ErrorResponse in readReadyForQuery and return proper error (#​1136).

  • Detect COPY even if the query starts with whitespace or comments (#​1198).

  • CopyIn() and CopyInSchema() now work if the list of columns is empty, in which
    case it will copy all columns (#​1239).

  • Treat nil []byte in query parameters as nil/NULL rather than "" (#​838).

  • Accept multiple authentication methods before checking AuthOk, which improves
    compatibility with PgPool-II (#​1188).


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch from 3520daa to 643dc73 Compare January 29, 2026 16:41
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.0 Update module github.com/lib/pq to v1.11.1 Jan 29, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.1 Update module github.com/lib/pq to v1.11.2 Feb 10, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch from 643dc73 to 0cb684c Compare February 10, 2026 20:46
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.2 Update module github.com/lib/pq to v1.11.2 - autoclosed Feb 21, 2026
@red-hat-konflux red-hat-konflux Bot closed this Feb 21, 2026
@red-hat-konflux red-hat-konflux Bot deleted the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch February 21, 2026 20:54
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.2 - autoclosed Update module github.com/lib/pq to v1.11.2 Feb 22, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Feb 22, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch from 0cb684c to 6a7e205 Compare February 22, 2026 00:47
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.2 Update module github.com/lib/pq to v1.11.2 - autoclosed Feb 23, 2026
@red-hat-konflux red-hat-konflux Bot closed this Feb 23, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.2 - autoclosed Update module github.com/lib/pq to v1.11.2 Feb 23, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Feb 23, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch 2 times, most recently from 6a7e205 to f16305c Compare February 23, 2026 08:47
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.2 Update module github.com/lib/pq to v1.11.2 - autoclosed Mar 11, 2026
@red-hat-konflux red-hat-konflux Bot closed this Mar 11, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.2 - autoclosed Update module github.com/lib/pq to v1.11.2 Mar 11, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Mar 11, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch 2 times, most recently from f16305c to 87a454f Compare March 11, 2026 14:29
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch from 87a454f to 815e947 Compare March 18, 2026 17:07
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.11.2 Update module github.com/lib/pq to v1.12.0 Mar 18, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.0 Update module github.com/lib/pq to v1.12.0 - autoclosed Mar 18, 2026
@red-hat-konflux red-hat-konflux Bot closed this Mar 18, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.0 - autoclosed Update module github.com/lib/pq to v1.12.0 Mar 19, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Mar 19, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch 2 times, most recently from 815e947 to d38df94 Compare March 19, 2026 01:01
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch from d38df94 to fec1d9c Compare March 30, 2026 17:25
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.1 Update module github.com/lib/pq to v1.12.2 Apr 2, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch 2 times, most recently from 7bbcd01 to 490accd Compare April 3, 2026 21:14
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.2 Update module github.com/lib/pq to v1.12.3 Apr 3, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.3 Update module github.com/lib/pq to v1.12.3 - autoclosed Apr 26, 2026
@red-hat-konflux red-hat-konflux Bot closed this Apr 26, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.3 - autoclosed Update module github.com/lib/pq to v1.12.3 Apr 26, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Apr 26, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch 2 times, most recently from 490accd to c775fbe Compare April 26, 2026 13:28
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.3 Update module github.com/lib/pq to v1.12.3 - autoclosed Apr 27, 2026
@red-hat-konflux red-hat-konflux Bot closed this Apr 27, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.3 - autoclosed Update module github.com/lib/pq to v1.12.3 Apr 27, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Apr 27, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch 2 times, most recently from c775fbe to 656edb1 Compare April 27, 2026 17:37
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.3 Update module github.com/lib/pq to v1.12.3 - autoclosed Apr 28, 2026
@red-hat-konflux red-hat-konflux Bot closed this Apr 28, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.3 - autoclosed Update module github.com/lib/pq to v1.12.3 Apr 28, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Apr 28, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch 2 times, most recently from 656edb1 to 2559a56 Compare April 28, 2026 21:32
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.3 Update module github.com/lib/pq to v1.12.3 - autoclosed May 2, 2026
@red-hat-konflux red-hat-konflux Bot closed this May 2, 2026
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/lib/pq to v1.12.3 - autoclosed Update module github.com/lib/pq to v1.12.3 May 2, 2026
@red-hat-konflux red-hat-konflux Bot reopened this May 2, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/security-compliance/github.com-lib-pq-1.x branch 2 times, most recently from 2559a56 to 2f7c253 Compare May 2, 2026 05:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants