What changed
v2.31.3 is a dependency-only maintenance release of the hardened awaken/avro fork.
github.com/go-viper/mapstructure/v2: v2.4.0 → v2.5.0github.com/klauspost/compress: v1.18.7 → v1.19.2github.com/stretchr/testify: v1.9.0 → v1.11.1- Refreshed all reachable transitive test dependencies, including
go-cmp,
check.v1,kr/pretty,kr/text, androgpeppe/go-internal.
There are no source-code or public-API changes in this release.
Validation
- Full tests and race tests on Go 1.25 and Go 1.26
- Linux/386 and big-endian Linux/s390x tests
- Cross-platform builds for both commands across all supported CI targets
- All six amd64/386 fuzz jobs
- staticcheck 2026.1
- govulncheck v1.7.0: no vulnerabilities found
Both the pull-request workflows and the independent main push workflows passed in full.
Upgrade
go get github.com/awaken/avro/v2@v2.31.3