Bump the go-modules-updates group across 1 directory with 4 updates

[dependabot]

Bumps the go-modules-updates group with 4 updates in the /backend directory: github.com/go-pkgz/lgr, github.com/go-pkgz/rest, go.mongodb.org/mongo-driver and golang.org/x/net.

Updates github.com/go-pkgz/lgr from 0.12.1 to 0.12.2

Release notes

Sourced from github.com/go-pkgz/lgr's releases.

Version 0.12.2

Bug Fixes

• Fix FromSlogHandler ignoring AddSource option #28 @​paskal
• Fix CI workflow: checkout before setup-go for proper caching #27 @​paskal

Commits

• a780ed2 Merge pull request #28 from go-pkgz/fix-from-slog-handler-add-source
• 374a0c0 Fix FromSlogHandler ignoring AddSource option, closes #26
• de27555 Fix CI workflow: checkout before setup-go for proper caching (#27)
• See full diff in compare view

Updates github.com/go-pkgz/rest from 1.20.6 to 1.21.0

Release notes

Sourced from github.com/go-pkgz/rest's releases.

Version 1.21.0

• #43 Add security middlewares: Secure, CORS, CSRF, CleanPath, StripSlashes

Version 1.20.7

• #42 Add HEAD method support to Ping middleware

Commits

• 4e8fe40 docs: add documentation for new middlewares
• 090feef feat(rewrite): add CleanPath and StripSlashes middlewares
• f884b91 feat(csrf): add CSRF protection middleware
• 4bc2958 feat(cors): add CORS middleware
• 5916b1c feat(secure): add security headers middleware
• 321d021 improve test coverage and fix code review issues
• 0c9258a add HEAD method support to Ping middleware, modernize code
• See full diff in compare view

Updates go.mongodb.org/mongo-driver from 1.17.6 to 1.17.9

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.17.9

The MongoDB Go Driver Team is pleased to release version 1.17.9 of the official MongoDB Go Driver.

Release Highlights

This release fixes a bug caused by variable shadowing.

What's Changed

🐛 Fixed

• GODRIVER-3793 Fix variable shadowing in rtt monitor by @​prestonvasquez in mongodb/mongo-go-driver#2317

Full Changelog: mongodb/mongo-go-driver@v1.17.8...v1.17.9

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 1.17.8

The MongoDB Go Driver Team is pleased to release version 1.17.8 of the official MongoDB Go Driver.

Release Highlights

This release adds a deprecation notice to go.mongodb.org/mongo-driver, indicating users should migrate to go.mongodb.org/mongo-driver/v2. See the V2 migration guide for more information.

What's Changed

✨ New Features

• GODRIVER-3773 Deprecate v1 by @​prestonvasquez in mongodb/mongo-go-driver#2312

Full Changelog: mongodb/mongo-go-driver@v1.17.7...v1.17.8

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 1.17.7

The MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.

Release Highlights

This release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.

What's Changed

... (truncated)

Commits

• 3b10ae6 BUMP v1.17.9
• f490802 GODRIVER-3793 Fix variable shadowing in rtt monitor (#2317)
• 5ac5a1e BUMP v1.17.8
• f378649 Revert dry-run release bump
• 08c2b98 BUMP v1.17.8
• fafe527 GODRIVER-3773 Deprecate v1 (#2312)
• eb01e7e BUMP v1.17.7
• 3c55093 GODRIVER-3766 Remove deprecation notice for MergeClientOptions (#2294)
• f6163bf GODRIVER-3770 Remove libasan from gssapi tests in CI (#2293)
• 6798963 GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.48.0 to 0.51.0

Commits

• 60b3f6f internal/http3: prevent Server handler from writing longer body than declared
• b0ca456 internal/http3: fix Write in Server Handler returning the wrong value
• 1558ba7 publicsuffix: update to 2026-02-06
• 4e1c745 internal/http3: make Server response include headers that can be inferred
• 19f580f http2: fix nil panic in typeFrameParser for unassigned frame types
• 818aad7 internal/http3: add server to client trailer header support
• c1bbe1a internal/http3: add client to server trailer header support
• 29181b8 all: remove go1.25 and older build constraints
• 8109305 all: upgrade go directive to at least 1.25.0 [generated]
• 0b37bdf quic: don't run TestStreamsCreateConcurrency in synctest bubble
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions