chore(deps): Update go minor and patch

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/aws/aws-sdk-go-v2/service/s3	v1.79.2 -> v1.79.3
github.com/hypermodeinc/modus/sdk/go	v0.17.3 -> v0.17.4
github.com/lestrrat-go/jwx/v3	v3.0.0 -> v3.0.1
github.com/neo4j/neo4j-go-driver/v5	v5.28.0 -> v5.28.1
github.com/puzpuzpuz/xsync/v4	v4.0.0 -> v4.1.0
github.com/spf13/cast	v1.7.1 -> v1.8.0
github.com/wundergraph/graphql-go-tools/v2	v2.0.0-rc.173 -> v2.0.0-rc.176
golang.org/x/sys	v0.32.0 -> v0.33.0

---

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

v3.0.1

Compare Source

What's Changed

Please read the Changes file and upgrade accordingly, especially if you are using the following combinations for JWE:

• DIRECT mode content encryption
• Using A256CBC_HS512
• With an erroneously created CEK of exactly 32-bytes.

---

• Bump actions/cache from 4.2.1 to 4.2.3 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1336
• Bump actions/checkout from 4.1.7 to 4.2.2 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1337
• Bump actions/setup-go from 5.0.2 to 5.4.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1338
• Update 02-jws.md by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1341
• Bump golang.org/x/crypto from 0.36.0 to 0.37.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1342
• Add the claim name to error messages produced by ClaimValueIs() by @​jmalloc in https://github.com/lestrrat-go/jwx/pull/1347
• Tweak comments generated by genwa under jwa directory by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1348
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1349
• Disable funcorder by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1351
• Update .golangci.yml by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1353
• Update github.com/lestrrat-go/blackmagic by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1352
• disable dependabot for develop/v1 branch by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1358
• jws: improve performance for SplitCompact/SplitCompactString by @​drakkan in https://github.com/lestrrat-go/jwx/pull/1360
• jwe: use strings.Cut in parseCompact by @​drakkan in https://github.com/lestrrat-go/jwx/pull/1362
• Update httprc to v3.0.0-beta2 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1364
• Create SECURITY.md by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1365
• [v3] Explcitly check key sizes before passing to aes.NewCipher by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1367

New Contributors

• @​jmalloc made their first contribution in https://github.com/lestrrat-go/jwx/pull/1347

Full Changelog: lestrrat-go/jwx@v3.0.0...v3.0.1

neo4j/neo4j-go-driver (github.com/neo4j/neo4j-go-driver/v5)

v5.28.1

Compare Source

See https://github.com/neo4j/neo4j-go-driver/wiki/5.x-changelog for more information.

puzpuzpuz/xsync (github.com/puzpuzpuz/xsync/v4)

v4.1.0

Compare Source

• New data structure: UMPSCQueue #​168
• Speed up LoadAndDelete and Delete in case of non-existing Map key #​167
• Parallel Map resize #​170

UMPSCQueue is meant to serve as a replacement for a channel. However, crucially, it has infinite capacity. This is a very bad idea in many cases as it means that it never exhibits backpressure. In other words, if nothing is consuming elements from the queue, it will eventually consume all available memory and crash the process. However, there are also cases where this is desired behavior as it means the queue will dynamically allocate more memory to store temporary bursts, allowing producers to never block while the consumer catches up.

From now on, Map spawns additional goroutines to speed up resizing the hash table. This can be disabled when creating a Map with the new WithSerialResize setting:

m := xsync.NewMap[int, int](xsync.WithSerialResize())
// resize will take place on the current goroutine only
for i := 0; i < 10000; i++ {
	m.Store(i, i)
}

Thanks @​PapaCharlie and @​llxisdsh for the contributions!

spf13/cast (github.com/spf13/cast)

v1.8.0

Compare Source

What's Changed

• Updates by @​sagikazarmark in https://github.com/spf13/cast/pull/237
• Bump actions/setup-go from 4.0.1 to 4.1.0 by @​dependabot in https://github.com/spf13/cast/pull/193
• Generic by @​sagikazarmark in https://github.com/spf13/cast/pull/238
• Add unsigned integer support in ToStringSliceE function by @​nicklaus-dev in https://github.com/spf13/cast/pull/200
• Add function to cast interface{} to []float64 by @​ste93cry in https://github.com/spf13/cast/pull/179
• Add cast methods ToUintSlice by @​nmvalera in https://github.com/spf13/cast/pull/236
• build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @​dependabot in https://github.com/spf13/cast/pull/240
• build(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by @​dependabot in https://github.com/spf13/cast/pull/239
• build(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by @​dependabot in https://github.com/spf13/cast/pull/242
• Add ToInt64Slice() and ToInt64SliceE() by @​arui1628 in https://github.com/spf13/cast/pull/234

New Contributors

• @​nicklaus-dev made their first contribution in https://github.com/spf13/cast/pull/200
• @​ste93cry made their first contribution in https://github.com/spf13/cast/pull/179
• @​nmvalera made their first contribution in https://github.com/spf13/cast/pull/236
• @​arui1628 made their first contribution in https://github.com/spf13/cast/pull/234

Full Changelog: spf13/cast@v1.7.1...v1.8.0

wundergraph/graphql-go-tools (github.com/wundergraph/graphql-go-tools/v2)

v2.0.0-rc.176

Compare Source

Bug Fixes

• evaluate keys using order of target subgraph (#​1139) (f358e9e)

v2.0.0-rc.175

Compare Source

Features

• remove intermediate buffer from ResolveGraphQLResponse (#​1137) (9f25e6f)

v2.0.0-rc.174

Compare Source

Features

• subscriptions: user proper frame timeout (#​1135) (d1fbd62)

---

Configuration

📅 Schedule: Branch creation - "on Wednesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: runtime/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/aws/aws-sdk-go-v2/service/internal/checksum	v1.7.0 -> v1.7.1
github.com/lestrrat-go/httprc/v3	v3.0.0-beta1 -> v3.0.0-beta2
golang.org/x/crypto	v0.36.0 -> v0.37.0
golang.org/x/term	v0.30.0 -> v0.31.0