build(deps): bump the all-dependencies group with 4 updates

[dependabot]

Bumps the all-dependencies group with 4 updates: github.com/mattn/go-sqlite3, go.sia.tech/core, go.sia.tech/coreutils and golang.org/x/term.

Updates github.com/mattn/go-sqlite3 from 1.14.41 to 1.14.42

Commits

• 5df13a0 Merge pull request #1387 from mattn/codex/stmt-cache
• e302e5c document that _stmt_cache_size is per connection
• 867dcbf move reset/clear into putCachedStmt and always finalize on failure
• 0e58fa4 simplify prepareWithCache to call prepare instead of duplicating logic
• e9f47da do not bail out on finalize error in closeCachedStmtsLocked
• 325cb8d remove redundant stmtCacheSize check in putCachedStmt
• 061c2a5 check stmtCacheSize before acquiring mutex in takeCachedStmt
• efa9b1c add opt-in statement cache
• See full diff in compare view

Updates go.sia.tech/core from 0.19.0 to 0.19.1

Release notes

Sourced from go.sia.tech/core's releases.

0.19.1 (2026-04-10)

Features

• Adds a new error type for "host is shutting down"

Fixes

• Add contract not found error
• Added additional context in error message when the signing threshold of a spend policy wasn't reached.
• Increase maxLen for request and response types including RenterInputs or HostInputs.
• Update mux dependency to v1.5.0.

Changelog

Sourced from go.sia.tech/core's changelog.

0.19.1 (2026-04-10)

Features

• Adds a new error type for "host is shutting down"

Fixes

• Add contract not found error
• Added additional context in error message when the signing threshold of a spend policy wasn't reached.
• Increase maxLen for request and response types including RenterInputs or HostInputs.
• Update mux dependency to v1.5.0.

Commits

• a8a3def Merge pull request #389 from SiaFoundation/release
• e37dcca chore: prepare release 0.19.1
• c34d154 fix spelling
• 281a701 changeset
• 9e2dfd0 Consistent maxLen for requests and responses sending Inputs
• 5d9a23f update action to use newer Node
• bbeb92b changeset
• 0fe8339 update mux
• 1bfa3fa Merge pull request #392 from SiaFoundation/matt/graceful-shutdown
• 14c688b add changeset
• Additional commits viewable in compare view

Updates go.sia.tech/coreutils from 0.21.1 to 0.21.2

Release notes

Sourced from go.sia.tech/coreutils's releases.

0.21.2 (2026-04-10)

Features

• RHP4 graceful shutdown

Fixes

• Always cancel read side of QUIC stream when calling stream.Close.
• Fixed an edge case in RPCFreeSectors where the deletion logic would keep a sector root that was supposed to be deleted.
• Pass proper descriptions when closing QUIC connection.
• Fixed excessive "peer relayed a v2 header with unknown parent" log spam by only relaying headers after sync when the synced blocks became the new tip.
• Update Go version to 1.26.0.
• Update mux dependency to v1.5.0.
• Use DEBUG log level instead of ERROR for RPCs failing due to the peer closing the connection on their end.

Changelog

Sourced from go.sia.tech/coreutils's changelog.

0.21.2 (2026-04-10)

Features

• RHP4 graceful shutdown

Fixes

• Always cancel read side of QUIC stream when calling stream.Close.
• Fixed an edge case in RPCFreeSectors where the deletion logic would keep a sector root that was supposed to be deleted.
• Pass proper descriptions when closing QUIC connection.
• Fixed excessive "peer relayed a v2 header with unknown parent" log spam by only relaying headers after sync when the synced blocks became the new tip.
• Update Go version to 1.26.0.
• Update mux dependency to v1.5.0.
• Use DEBUG log level instead of ERROR for RPCs failing due to the peer closing the connection on their end.

Commits

• fb1c77f Merge pull request #407 from SiaFoundation/release
• 98e2605 chore: prepare release 0.21.2
• 1854dff build(deps): bump go.sia.tech/core
• f1d3eb5 build(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0
• b78943e update action to use newer Node
• 0c3739d fix test
• 05a7734 changeset
• 735858e update mux
• 8e1a1b8 Merge pull request #413 from SiaFoundation/matt/graceful-shutdown
• 87232af gofmt
• Additional commits viewable in compare view

Updates golang.org/x/term from 0.41.0 to 0.42.0

Commits

• 52b71d3 go.mod: update golang.org/x dependencies
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​mattn/​go-sqlite3@​v1.14.41 ⏵ v1.14.42	+1
	go.sia.tech/​coreutils@​v0.21.1 ⏵ v0.21.2	+1
	go.sia.tech/​core@​v0.19.0 ⏵ v0.19.1	+1
	golang.org/​x/​term@​v0.41.0 ⏵ v0.42.0

View full report