Update gomod dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
github.com/go-mysql-org/go-mysql	require	digest	35ca5c6 → a57884f
go.temporal.io/api	require	patch	v1.63.0 → v1.63.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

temporalio/api-go (go.temporal.io/api)

v1.63.1

Compare Source

Full Changelog: temporalio/api-go@v1.63.0...v1.63.1

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • "after 5pm on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Code review

No bugs found in the diff. Checked for bugs and CLAUDE.md compliance.

Upstream dependency review (per REVIEW.md)

This PR bumps two dependencies:

1. github.com/go-mysql-org/go-mysql — digest update

• Old: v1.15.1-0.20260701093637-35ca5c6ee8c8
• New: v1.15.1-0.20260703124437-a57884f25cf0
• Pre-release pseudo-version bump spanning ~2 days of upstream commits (July 1–3, 2026). No tagged release or changelog available.
• Risk surface in PeerDB: This library powers the MySQL CDC connector (flow/connectors/mysql/) — binlog event parsing, GTID handling, replication streaming — and the MySQL switchboard upstream. Changes to replication/row_event.go, BinlogStreamer, or GTID types are highest risk.
• Upstream diff: go-mysql-org/go-mysql@35ca5c6...a57884f — reviewer should inspect before merging.

2. go.temporal.io/api — patch bump

• Old: v1.63.0
• New: v1.63.1
• Patch version bump of the Temporal workflow API (generated protobuf/gRPC layer). Patch releases in this library are typically proto regeneration, new additive fields, or minor fixes — low regression risk under SemVer.
• Upstream release: https://github.com/temporalio/api-go/releases/tag/v1.63.1 — reviewer should confirm no breaking changes.

Note: Automated review was unable to fetch upstream release notes/commit logs due to environment restrictions. A human reviewer should inspect the linked diffs above before approving.

[claude]

Dependency Bump Review

Reviewed the two dependency bumps in this PR. Both look clean — no regressions, no breaking API changes, no PII/secret logging concerns.

go-mysql-org/go-mysql (35ca5c6 → a57884f)

• #1163 — Add CLIENT_LOCAL_FILES to default server capabilities, with new SetCapability/UnsetCapability public methods. Server-side only; PeerDB uses this library as a MySQL client for CDC replication, so no impact.
• #1166 — Fix panic on out-of-range slice bounds when parsing authentication input missing null termination. Robustness improvement, no API change.

go.temporal.io/api (v1.63.0 → v1.63.1)

• #814 — Update system Nexus WIT generator annotations (DotNet/TypeScript metadata). Pure code-gen tooling change, no API or behavioral impact.

No findings to flag. LGTM.

[ilidemi]

Wonder if the config didn't get picked up