build(deps): bump github.com/microsoft/go-mssqldb from 1.9.6 to 1.11.0

[dependabot]

Bumps github.com/microsoft/go-mssqldb from 1.9.6 to 1.11.0.

Release notes

Sourced from github.com/microsoft/go-mssqldb's releases.

v1.11.0

1.11.0 (2026-08-23)

Features

• add ADO.Net connection string synonyms (#374) (d72f750)

Bug Fixes

• clarify NTLM URL encoding for URL DSNs (#378) (551d622)
• close TCP connection on all connect() error paths (#367) (0e13fee)
• isProc: add REVERT builtin command (#393) (31a9659)
• prevent NTLM challenge out-of-bounds panic (DoS) (#411) (81df983)
• prevent panic on overflowing PRELOGIN option offset and length (#415) (802d9f1)
• prevent SQL Browser DAC response parsing panic (DoS) (#414) (bc4cbf2)
• quote table name and ORDER columns in bulk copy (#416) (f925c53)
• replace deprecated reflect.SliceHeader with unsafe.Slice (#366) (836048a), closes #272
• return float64 for REAL columns in readFixedType (#381) (abddba8)
• strip port from AKV URLs for AllowedLocations and endpoint (#369) (7fab98a)
• types: cap initial PLP buffer allocation (#409) (f088291)

Performance Improvements

• add comprehensive benchmark suite with CI regression detection (#376) (b935441)
• fast path for pure ASCII decoding in CharsetToUTF8 (#431) (db51796)

v1.10.0

1.10.0 (2026-04-25)

Features

• add devcontainer for VS Code and GitHub Codespaces (#317) (b55beeb)
• add FailoverPartnerSPN connection string parameter (#327) (ea77c2e)
• add NewConnectorWithProcessQueryText for mssql driver compatibility (#341) (2be611f)
• add nullable civil types for date/time parameters (#325) (c10fa99)

Bug Fixes

• allow named pipe protocol support for ARM64 Windows (#232) (a82c058)
• configure release-please with PAT and correct component mapping (#349) (23bac05)
• detect server-aborted transactions to prevent silent auto-commit (XACT_ABORT) (#370) (586ea53)
• expose TrustServerCertificate in msdsn.Config and URL round-trip (#312) (9937cfe)
• handle COLINFO (0xA5) and TABNAME (0xA4) TDS tokens returned by tables with triggers (#343) (7c905ad)
• implement driver.DriverContext interface (#365) (1b610a0), closes #236
• make readCancelConfirmation respect context cancellation (#359) (65e137f)

... (truncated)

Changelog

Sourced from github.com/microsoft/go-mssqldb's changelog.

1.11.0 (2026-08-23)

Features

• add ADO.Net connection string synonyms (#374) (d72f750)

Bug Fixes

• clarify NTLM URL encoding for URL DSNs (#378) (551d622)
• close TCP connection on all connect() error paths (#367) (0e13fee)
• isProc: add REVERT builtin command (#393) (31a9659)
• prevent NTLM challenge out-of-bounds panic (DoS) (#411) (81df983)
• prevent panic on overflowing PRELOGIN option offset and length (#415) (802d9f1)
• prevent SQL Browser DAC response parsing panic (DoS) (#414) (bc4cbf2)
• quote table name and ORDER columns in bulk copy (#416) (f925c53)
• replace deprecated reflect.SliceHeader with unsafe.Slice (#366) (836048a), closes #272
• return float64 for REAL columns in readFixedType (#381) (abddba8)
• strip port from AKV URLs for AllowedLocations and endpoint (#369) (7fab98a)
• types: cap initial PLP buffer allocation (#409) (f088291)

Performance Improvements

• add comprehensive benchmark suite with CI regression detection (#376) (b935441)
• fast path for pure ASCII decoding in CharsetToUTF8 (#431) (db51796)

1.10.0 (2026-04-25)

Features

• add devcontainer for VS Code and GitHub Codespaces (#317) (b55beeb)
• add FailoverPartnerSPN connection string parameter (#327) (ea77c2e)
• add NewConnectorWithProcessQueryText for mssql driver compatibility (#341) (2be611f)
• add nullable civil types for date/time parameters (#325) (c10fa99)

Bug Fixes

• allow named pipe protocol support for ARM64 Windows (#232) (a82c058)
• configure release-please with PAT and correct component mapping (#349) (23bac05)
• detect server-aborted transactions to prevent silent auto-commit (XACT_ABORT) (#370) (586ea53)
• expose TrustServerCertificate in msdsn.Config and URL round-trip (#312) (9937cfe)
• handle COLINFO (0xA5) and TABNAME (0xA4) TDS tokens returned by tables with triggers (#343) (7c905ad)
• implement driver.DriverContext interface (#365) (1b610a0), closes #236
• make readCancelConfirmation respect context cancellation (#359) (65e137f)
• replace broken AppVeyor badge with GitHub Actions badge (#334) (d3429f5)
• return interface{} scanType for sql_variant instead of nil (#362) (296a83a), closes #186

... (truncated)

Commits

• ecf8560 chore(main): release 1.11.0 (#380)
• 68c1f28 test: add TDS response fuzz harness and end-to-end target (layer 1/4) (#419)
• 46b5c6a chore(deps): bump the golang-x group across 1 directory with 2 updates (#433)
• 5e6cedb ci: run appveyor on SQL Server 2025 and drop the duplicate job (#436)
• ae25ae5 ci: test the supported Go releases and drop the EOL toolchain pin (#439)
• 6f21949 chore(deps): bump github.com/stretchr/testify in the testing group (#434)
• 8bb55ef chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#432)
• db51796 perf: fast path for pure ASCII decoding in CharsetToUTF8 (#431)
• f925c53 fix: quote table name and ORDER columns in bulk copy (#416)
• bc4cbf2 fix: prevent SQL Browser DAC response parsing panic (DoS) (#414)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #187.