Skip to content

Bump 0xCarbon/go-sqlite3 to v1.15.0 - #3

Merged
canesin merged 2 commits into
mainfrom
deps/go-sqlite3-v1.15.0
Aug 17, 2026
Merged

canesin merged 2 commits into
mainfrom
deps/go-sqlite3-v1.15.0

Conversation

@canesin

@canesin canesin commented Aug 17, 2026

Copy link
Copy Markdown

Move from the pseudo-version pin (d1c4d3294fa8) to the tagged release v1.15.0 (8 commits): security hardening (zeroized EncryptionKey statement buffer, reject SQLite-native key/hexkey/textkey URI params, case-insensitive _key matching), DSN hygiene guards, backup API nil-safety, encryption benchmarks + key-handling docs. Module path unchanged.

Gates (all exit 0): go build, go test ./..., -race, -tags vfs, staticcheck, vet. Diff is go.mod/go.sum only.

Tagged release: security hardening (zeroized EncryptionKey statement
buffer, rejection of SQLite-native key/hexkey/textkey URI parameters,
case-insensitive _key matching), DSN hygiene guards, backup API
nil-safety, encryption benchmarks and key-handling docs.
@github-actions

Copy link
Copy Markdown

PR Build Metrics

✅ All clear — no issues detected

Check Status Summary
Binary size ✅ 35.22 MB (+4.0 KB / +0.01%)
Dependencies ℹ️ 1 added, 1 removed
Vulnerabilities ✅ None detected
Go toolchain ✅ 1.25.13 (latest)
Module graph ✅ 1184 edges (0)

Binary Size

Size Change
Base (c47975a) 35.22 MB
PR (ff24c24) 35.22 MB +4.0 KB (+0.01%)

Dependency Changes

Added:

  • github.com/0xCarbon/go-sqlite3 v1.15.0

Removed:

  • github.com/0xCarbon/go-sqlite3 v1.14.38-0.20260817152354-d1c4d3294fa8

govulncheck Output

=== Symbol Results ===

No vulnerabilities found.

Your code is affected by 0 vulnerabilities.
This scan also found 1 vulnerability in packages you import and 3
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.

Build Info

Metric Value
Build time 63s
Go version go1.25.13
Commit ff24c24

🤖 Updated on each push.

@canesin
canesin merged commit 6e12556 into main Aug 17, 2026
31 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant