build(deps): bump github.com/pressly/goose/v3 from 3.22.1 to 3.28.0

[dependabot]

Bumps github.com/pressly/goose/v3 from 3.22.1 to 3.28.0.

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.28.0

Added

• CLI: azuresql driver for Azure SQL with Microsoft Entra ID (Azure AD) authentication via fedauth connection string parameters, e.g. goose azuresql "sqlserver://host?database=mydb&fedauth=ActiveDirectoryDefault" status. Excluded when building with the no_mssql or no_azuresql tags (#1109)
• MySQL/MariaDB table-based Locker via lock.NewMySQLTableLocker, the MySQL counterpart to the Postgres table locker from #993, accepting the same TableLockerOption set (#1075)

Changed

• Minimum Go version is now 1.26
• ClickHouse: new goose_db_version tables are created with ORDER BY (version_id) instead of ORDER BY (date). Existing tables are unchanged (#1085)
• MySQL/TiDB: the tstamp column is now DATETIME instead of TIMESTAMP, which is capped at 2038-01-19 (#1053). Only newly created tables are affected; existing tables can be updated with:

  ALTER TABLE goose_db_version MODIFY tstamp datetime NULL DEFAULT CURRENT_TIMESTAMP;

• Various dependency upgrades

Fixed

• goose create returns a clear "file exists" error, including the path, instead of %!w(<nil>) when the migration file already exists (#1104)

v3.27.3

Changed

• Various dependency upgrades

v3.27.2

Changed

• Upgrade golang.org/x/crypto and golang.org/x/net to address security advisories (CVE fixes)
• Various dependency upgrades

v3.27.1

What's Changed

• Dependency updates

Full Changelog: pressly/goose@v3.27.0...v3.27.1

v3.27.0

What's Changed

Added

• Preliminary Spanner dialect support (#966)

Changed

• Minimum Go version is now 1.25
• SQL migration templates no longer include StatementBegin and StatementEnd annotations. These are only needed for complex statements containing semicolons (e.g., stored procedures). See docs for details.
• Various dependency upgrades

... (truncated)

Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.28.0] - 2026-09-02

Added

• CLI: azuresql driver for Azure SQL with Microsoft Entra ID (Azure AD) authentication via fedauth connection string parameters, e.g. goose azuresql "sqlserver://host?database=mydb&fedauth=ActiveDirectoryDefault" status. Excluded when building with the no_mssql or no_azuresql tags (#1109)
• MySQL/MariaDB table-based Locker via lock.NewMySQLTableLocker, the MySQL counterpart to the Postgres table locker from #993, accepting the same TableLockerOption set (#1075)

Changed

• Minimum Go version is now 1.26

• ClickHouse: new goose_db_version tables are created with ORDER BY (version_id) instead of ORDER BY (date). Existing tables are unchanged (#1085)

• MySQL/TiDB: the tstamp column is now DATETIME instead of TIMESTAMP, which is capped at 2038-01-19 (#1053). Only newly created tables are affected; existing tables can be updated with:

  ALTER TABLE goose_db_version MODIFY tstamp datetime NULL DEFAULT CURRENT_TIMESTAMP;

• Various dependency upgrades

Fixed

• goose create returns a clear "file exists" error, including the path, instead of %!w(<nil>) when the migration file already exists (#1104)

[v3.27.3] - 2026-07-22

Changed

• Various dependency upgrades

[v3.27.2] - 2026-06-30

Changed

• Upgrade golang.org/x/crypto and golang.org/x/net to address security advisories (CVE fixes)
• Various dependency upgrades

[v3.27.1] - 2026-04-24

Changed

• Bump minimum Go version to 1.25.7
• Various dependency upgrades

... (truncated)

Commits

• 43d2d9c release: v3.28.0
• c65c559 docs: update changelog
• 674e150 fix: use DATETIME instead of TIMESTAMP for MySQL/TiDB tstamp column (Y2K38) (...
• f604e88 fix: include path in duplicate migration file error and use 0666 mode
• 5f12f79 fix: return clear error when migration file already exists (#1104)
• 4766566 fix: use version_id instead of date as ordering key (#1085)
• 751ff94 docs: add Go 1.26.0 bump and dependency upgrades to changelog
• 34124ac fix: wait for an alive StarRocks backend in tests (#1114)
• f5caf10 chore: bump dependencies and go to 1.26.0 (#1113)
• 2e8e87a Add azuresql driver with EntraID auth (#1109)
• Additional commits viewable in compare view

[reobin]

@dependabot rebase

[reobin]

Closing per maintainer direction: deferring this goose update (DB migration tool with behavior changes noted) for manual review. No auto-merge applied.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.