chore(deps): bump github.com/ncruces/go-sqlite3 from 0.20.0 to 0.35.2

[dependabot]

Bumps github.com/ncruces/go-sqlite3 from 0.20.0 to 0.35.2.

Release notes

Sourced from github.com/ncruces/go-sqlite3's releases.

v0.35.2

What's Changed

Updates:

• SQLite 3.53.3
• Gorm 1.31.2
• Vec1 0.7

Added O_TMPFILE support.

[!CAUTION] There is a know issue (#404) that may cause data corruption when using WAL mode on Windows under high concurrency. The bug has likely existed ever since WAL mode support was added to Windows in v0.20.2 2 years ago. Since this is not a regression, I decided not to block the release waiting for a fix.

Full Changelog: ncruces/go-sqlite3@v0.35.1...v0.35.2

Artifact attestations

v0.35.1

What's Changed

Fixed issue #401.

Full Changelog: ncruces/go-sqlite3@v0.35.0...v0.35.1

Artifact attestations

v0.35.0

What's Changed

In an effort to keep the code size small (and compile times relatively fast) while continuing to add more SQLite features, the FTS5 and R*Tree/Geopoly extensions are now compiled separately. This is a breaking change. Now, to use:

• FTS5, you need github.com/ncruces/go-sqlite3/ext/fts5
• R*Tree/Geopoly, you need github.com/ncruces/go-sqlite3/ext/rtree

In addition, support for the pre-update hook was added.

Also, Go 1.27 uses encoding/json/v2 for improved performance.

Full Changelog: ncruces/go-sqlite3@v0.34.4...v0.35.0

Artifact attestations

v0.34.4

What's Changed

Updates:

• SQLite 3.53.2
• Vec1 0.6

... (truncated)

Commits

• e0ae500 Docs, updates.
• 0499e6d Avoid vet warnings.
• d081bc7 SQLite 3.53.3.
• eea4bee Fix #380.
• 97310cb CI.
• 3fdcb0a Bump actions/checkout from 6 to 7 (#402)
• 2900c3e CI.
• d581398 Issue #401.
• f063720 Memory size.
• cc974a6 JSON 1.27.
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

This PR has been inactive for 30 days. Please rebase, update it, or leave a comment — otherwise it will be closed in 14 days.

[Rogercode97]

Closing as stale: this branch was opened in July and main has moved since. Dependabot will re-open a fresh PR against the current main. Note the open Dependabot alerts are in github.com/go-git/go-git/v5 and /v6, which this bump does not address.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.