chore(deps): bump the dependencies group with 5 updates

[dependabot]

Bumps the dependencies group with 5 updates:

Package	From	To
github.com/googleapis/go-sql-spanner	1.24.1	1.25.0
github.com/mattn/go-shellwords	1.0.12	1.0.13
github.com/pb33f/libopenapi	0.36.0	0.36.1
github.com/pb33f/libopenapi-validator	0.13.3	0.13.4
modernc.org/sqlite	1.48.2	1.49.1

Updates github.com/googleapis/go-sql-spanner from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/googleapis/go-sql-spanner's releases.

v1.25.0

1.25.0 (2026-04-14)

Features

• Add database_dialect property (#794) (acb1f42)

Bug Fixes

• spannerdriver: Populate QueryStats in ResultSetStats (#778) (7e8b1fe)
• Update all dependencies (#765) (2016a5c)
• Update dependency com.google.errorprone:error_prone_annotations to v2.49.0 (#791) (e2a80fa)
• Update dependency io.grpc:grpc-bom to v1.80.0 (#767) (8d1d635)
• Update dependency io.netty:netty-transport-native-epoll to v4.2.12.final (#775) (f81fc98)
• Update module github.com/testcontainers/testcontainers-go to v0.42.0 (#768) (338cf58)
• Update protobuf monorepo (#774) (faab4ee)

Changelog

Sourced from github.com/googleapis/go-sql-spanner's changelog.

1.25.0 (2026-04-14)

Features

• Add database_dialect property (#794) (acb1f42)

Bug Fixes

• spannerdriver: Populate QueryStats in ResultSetStats (#778) (7e8b1fe)
• Update all dependencies (#765) (2016a5c)
• Update dependency com.google.errorprone:error_prone_annotations to v2.49.0 (#791) (e2a80fa)
• Update dependency io.grpc:grpc-bom to v1.80.0 (#767) (8d1d635)
• Update dependency io.netty:netty-transport-native-epoll to v4.2.12.final (#775) (f81fc98)
• Update module github.com/testcontainers/testcontainers-go to v0.42.0 (#768) (338cf58)
• Update protobuf monorepo (#774) (faab4ee)

Commits

• 62279ea chore(main): release 1.25.0 (#793)
• acb1f42 feat: add database_dialect property (#794)
• 338cf58 fix: update module github.com/testcontainers/testcontainers-go to v0.42.0 (#768)
• 7e8b1fe fix(spannerdriver): populate QueryStats in ResultSetStats (#778)
• 2016a5c fix: update all dependencies (#765)
• 7c4a7d8 build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 (#777)
• 13964a7 build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#783)
• 8d1d635 fix: update dependency io.grpc:grpc-bom to v1.80.0 (#767)
• 07ed853 build(deps): bump google.golang.org/grpc in /spannerlib (#770)
• a64cf88 build(deps): bump google.golang.org/grpc in /snippets (#773)
• Additional commits viewable in compare view

Updates github.com/mattn/go-shellwords from 1.0.12 to 1.0.13

Commits

• fd1aa6c Run gofmt: add missing //go:build directives and trailing newlines
• e73986e Treat bare ')' as syntax error regardless of ParseBacktick
• 9a78803 Merge pull request #60 from scumfrog/security-fix-cve
• b074fa0 fix: preserve parser compatibility for unmatched ')' handling
• 735b5e8 Implement tests for shellwords parser functionality
• e2951fc Fix dollarQuote state management in shellwords.go
• 551a1d0 Update CI: Go 1.25/1.26 and latest GitHub Actions
• f3bbb6f Merge pull request #53 from ndeloof/master
• f6737fe parse \t as TAB, not escaped t
• See full diff in compare view

Updates github.com/pb33f/libopenapi from 0.36.0 to 0.36.1

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.36.1

Fixes a number of issues in the new version of openapi-changes.

no new features, no breaking changes.

Commits

• e15ee6d bumped coverage on schema
• 635ab9f address coverage gaps and regressions introduced by fixes.
• 09cb805 Address pb33f/openapi-changes#235
• 5e9483b Address pb33f/openapi-changes#207
• 723eeeb Attempting to fix daveshanley/vacuum#850
• 7bbbf8e Addressing pb33f/openapi-changes#181
• ed47525 Address issue pb33f/openapi-changes#152
• bf3556a Address pb33f/openapi-changes#150
• 8bc2867 Address issue pb33f/openapi-changes#136
• dc43ca4 Address pb33f/openapi-changes#105
• Additional commits viewable in compare view

Updates github.com/pb33f/libopenapi-validator from 0.13.3 to 0.13.4

Release notes

Sourced from github.com/pb33f/libopenapi-validator's releases.

v0.13.4

Add opt-in readOnly/writeOnly rejection to strict mode

When StrictRejectReadOnly is enabled, readOnly properties in requests are reported as validation errors instead of being silently skipped. When StrictRejectWriteOnly is enabled, writeOnly properties in responses are reported similarly.

Addresses #90

@​byted

Commits

• 1d13412 Add coverage tests for readOnly/writeOnly rejection paths
• 3bca3df Add tests for opt-in readOnly/writeOnly rejection in strict mode
• d6a52f6 Add opt-in readOnly/writeOnly rejection to strict mode
• 4934fdd Bump github.com/pb33f/libopenapi from 0.34.3 to 0.36.0
• 8828f82 Bump github.com/pb33f/jsonpath from 0.8.1 to 0.8.2
• See full diff in compare view

Updates modernc.org/sqlite from 1.48.2 to 1.49.1

Commits

• fe575e4 doc.go: update SQLite version
• 3ccb9ca upgrade to SQLite 3.53.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore will remove all of the ignore conditions of the specified dependency
• @dependabot unignore will remove the ignore condition of the specified dependency and ignore conditions