Skip to content

Bump github.com/nats-io/nats-server/v2 from 2.10.27 to 2.11.12 in /providers/nats - #400

Merged
knadh merged 1 commit into
masterfrom
dependabot/go_modules/providers/nats/github.com/nats-io/nats-server/v2-2.11.12
Mar 4, 2026
Merged

Bump github.com/nats-io/nats-server/v2 from 2.10.27 to 2.11.12 in /providers/nats#400
knadh merged 1 commit into
masterfrom
dependabot/go_modules/providers/nats/github.com/nats-io/nats-server/v2-2.11.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 24, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/nats-io/nats-server/v2 from 2.10.27 to 2.11.12.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.11.12

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

Go Version

Dependencies

  • github.com/nats-io/nkeys v0.4.12 (#7578)
  • github.com/antithesishq/antithesis-sdk-go v0.5.0-default-no-op (#7604)
  • github.com/klauspost/compress v1.18.3 (#7736)
  • golang.org/x/crypto v0.47.0 (#7736)
  • golang.org/x/sys v0.40.0 (#7736)
  • github.com/google/go-tpm v0.9.8 (#7696)
  • github.com/nats-io/nats.go v1.48.0 (#7696)

Added

General

  • Added WebSocket-specific ping interval configuration with ping_internal in the websocket block (#7614)

Monitoring

  • Added tls_cert_not_after to the varz monitoring endpoint for showing when TLS certificates are due to expire (#7709)

Improved

JetStream

  • The scan for the last sourced message sequence when setting up a subject-filtered source is now considerably faster (#7553)
  • Consumer interest checks on interest-based streams are now significantly faster when there are large gaps in interest (#7656)
  • Creating consumer file stores no longer contends on the stream lock, improving consumer create performance on heavily loaded streams (#7700)
  • Recalculating num pending with updated filter subjects no longer gathers and sorts the subject filter list twice (#7772)
  • Switching to interest-based retention will now remove no-interest messages from the head of the stream (#7766)

MQTT

  • Retained messages will now work correctly even when sourced from a different account and has a subject transform (#7636)

Fixed

General

  • WebSocket connections will now correctly limit the buffer size during decompression (#7625, thanks to Pavel Kokout at Aisle Research)
  • The config parser now correctly detects and errors on self-referencing environment variables (#7737)
  • Internal functions for handling headers should no longer corrupt message bodies if appended (#7752)

... (truncated)

Commits
  • 2d97cb7 Release v2.11.12
  • ea9680a Cherry-picks for 2.11.12 (#7776)
  • eb53e0d [IMPROVED] Remove no interest messages from head of stream
  • dc0d365 [FIXED] Many concurrent checkInterestState goroutines
  • 360db02 [FIXED] Interest stream desync after consumer filter update
  • 74802ff [IMPROVED] Simplify recalculate pending with updated filter subject(s)
  • 6f77800 Release v2.11.12-RC.7
  • 134ebc2 Revert "Perform _writeFullState under read lock only"
  • ddd1442 Release v2.11.12-RC.6
  • 59b2eb8 Cherry-picks for 2.11.12-RC.6 (#7768)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Feb 24, 2026
@knadh
knadh merged commit cf589f4 into master Mar 4, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/providers/nats/github.com/nats-io/nats-server/v2-2.11.12 branch March 4, 2026 19:13
Maks1mS pushed a commit to stplr-dev/stplr that referenced this pull request Mar 22, 2026
This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [github.com/knadh/koanf/v2](https://github.com/knadh/koanf) | require | patch | `v2.3.3` → `v2.3.4` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/knadh/koanf/badge)](https://securityscorecards.dev/viewer/?uri=github.com/knadh/koanf) |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/23) for more information.

---

### Release Notes

<details>
<summary>knadh/koanf (github.com/knadh/koanf/v2)</summary>

### [`v2.3.4`](https://github.com/knadh/koanf/releases/tag/v2.3.4)

[Compare Source](knadh/koanf@v2.3.3...v2.3.4)

#### What's Changed

- Bump github.com/nats-io/nats-server/v2 from 2.10.27 to 2.11.12 in /providers/nats by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;400](knadh/koanf#400)
- Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 in /providers/kiln by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;399](knadh/koanf#399)
- Bump google.golang.org/grpc from 1.71.1 to 1.79.3 in /providers/etcd by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;405](knadh/koanf#405)
- fix: hold RLock during copy in Get to prevent concurrent map access by [@&#8203;alexchenai](https://github.com/alexchenai) in [#&#8203;406](knadh/koanf#406)
- Add ability to check for prior values in `cliflagv3.ProviderWithConfig()` just like `posflag` by [@&#8203;knadh](https://github.com/knadh) in [#&#8203;403](knadh/koanf#403)

#### New Contributors

- [@&#8203;alexchenai](https://github.com/alexchenai) made their first contribution in [#&#8203;406](knadh/koanf#406)

**Full Changelog**: <knadh/koanf@v2.3.3...v2.3.4>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ni4zIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiS2luZC9EZXBlbmRlbmNpZXMiXX0=-->

Reviewed-on: https://altlinux.space/stapler/stplr/pulls/370
Co-authored-by: Renovate Bot <[email protected]>
Co-committed-by: Renovate Bot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant