update deps and add dependabot config

cool-mysql v0.0.2 -> v0.0.25, plus latest of everything else.
Ompluscator/dynamic-struct stays at v1.3.0; v1.4.0 declares its
module path with lowercase casing and is unfetchable.

main.go switches to bar.EwmaIncrement for mpb v8.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: BrianLeishman

.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      go-deps:
+        patterns:
+          - "*"
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.gitignore

@@ -1 +1,2 @@
 smg-live-alter
+.vscode/settings.json

go.mod

@@ -1,40 +1,45 @@
 module github.com/StirlingMarketingGroup/smg-live-alter/v2
 
-go 1.21
+go 1.25.0
 
 require (
 	github.com/Ompluscator/dynamic-struct v1.3.0
-	github.com/StirlingMarketingGroup/cool-mysql v0.0.0-20230825201905-be1f02aab9f2
-	github.com/fatih/color v1.13.0
-	github.com/go-sql-driver/mysql v1.7.1
+	github.com/StirlingMarketingGroup/cool-mysql v0.0.25
+	github.com/fatih/color v1.19.0
+	github.com/go-sql-driver/mysql v1.10.0
 	github.com/juliangruber/go-intersect/v2 v2.0.1
 	github.com/posener/cmd v1.3.4
-	github.com/vbauerster/mpb/v8 v8.0.2
+	github.com/vbauerster/mpb/v8 v8.12.0
 	gopkg.in/yaml.v2 v2.4.0
 )
 
 require (
+	cloud.google.com/go v0.123.0 // indirect
+	filippo.io/edwards25519 v1.2.0 // indirect
 	github.com/VividCortex/ewma v1.2.0 // indirect
 	github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect
-	github.com/cenkalti/backoff/v4 v4.2.1 // indirect
-	github.com/cespare/xxhash/v2 v2.2.0 // indirect
-	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
+	github.com/bradfitz/gomemcache v0.0.0-20260422231931-4d751bb6e37c // indirect
+	github.com/cenkalti/backoff/v5 v5.0.3 // indirect
+	github.com/cespare/xxhash/v2 v2.3.0 // indirect
+	github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
 	github.com/fatih/structtag v1.2.0 // indirect
-	github.com/go-redsync/redsync/v4 v4.8.1 // indirect
+	github.com/go-redsync/redsync/v4 v4.16.0 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
-	github.com/mattn/go-colorable v0.1.13 // indirect
-	github.com/mattn/go-isatty v0.0.16 // indirect
-	github.com/mattn/go-runewidth v0.0.13 // indirect
-	github.com/posener/complete/v2 v2.0.1-alpha.13 // indirect
+	github.com/mattn/go-colorable v0.1.14 // indirect
+	github.com/mattn/go-isatty v0.0.22 // indirect
+	github.com/mattn/go-runewidth v0.0.23 // indirect
+	github.com/posener/complete/v2 v2.1.0 // indirect
 	github.com/posener/formatter v1.0.0 // indirect
-	github.com/posener/script v1.1.5 // indirect
-	github.com/redis/go-redis/v9 v9.1.0 // indirect
-	github.com/rivo/uniseg v0.4.2 // indirect
-	github.com/vmihailenco/msgpack/v5 v5.3.5 // indirect
+	github.com/posener/script v1.2.0 // indirect
+	github.com/redis/go-redis/v9 v9.19.0 // indirect
+	github.com/shopspring/decimal v1.4.0 // indirect
+	github.com/vmihailenco/msgpack/v5 v5.4.1 // indirect
 	github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
+	go.uber.org/atomic v1.11.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	go.uber.org/zap v1.25.0 // indirect
-	golang.org/x/sync v0.3.0 // indirect
-	golang.org/x/sys v0.0.0-20220909162455-aba9fc2a8ff2 // indirect
+	go.uber.org/zap v1.28.0 // indirect
+	golang.org/x/crypto v0.50.0 // indirect
+	golang.org/x/sync v0.20.0 // indirect
+	golang.org/x/sys v0.43.0 // indirect
 )