build(deps): bump the other-dependencies group across 2 directories with 2 updates

[dependabot]

Bumps the other-dependencies group with 1 update in the /enable/mongodb directory: go.mongodb.org/mongo-driver/v2.
Bumps the other-dependencies group with 2 updates in the /internal/testintegration directory: go.mongodb.org/mongo-driver/v2 and github.com/jackc/pgx/v5.

Updates go.mongodb.org/mongo-driver/v2 from 2.5.0 to 2.5.1

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.5.1

The MongoDB Go Driver Team is pleased to release version 2.5.1 of the official MongoDB Go Driver.

Release Highlights

This release fixes two BSON unmarshaling edge cases.

What's Changed

🐛 Fixed

• GODRIVER-3768 Check unmatched type in Unmarshal(). by @​qingyang-hu in mongodb/mongo-go-driver#2318
• GODRIVER-3809 Fix *streamingByteSrc.readSlice(). by @​qingyang-hu in mongodb/mongo-go-driver#2326

Full Changelog: mongodb/mongo-go-driver@v2.5.0...v2.5.1

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

Commits

• 4782a98 BUMP v2.5.1
• 908a3ef Merge release/2.4 into release/2.5 (#2356)
• b2db9b5 Remove spaces from config.yml
• b1a4757 Merge branch 'release/2.5' into merge-release/2.4-into-release/2.5-1775787864909
• 65d61d4 GODRIVER-3854 Remove "backport pr" Evergreen task. (#2355)
• 09f572d Merge branch 'release/2.4' into release/2.5
• e9c841f BUMP v2.4.3
• fcfea70 GODRIVER-3809 Fix *streamingByteSrc.readSlice(). (#2326)
• 889822d GODRIVER-3768 Check unmatched type in Unmarshal(). (#2318)
• 484ea44 Merge branch 'release/1.17' into release/2.5
• Additional commits viewable in compare view

Updates go.mongodb.org/mongo-driver/v2 from 2.5.0 to 2.5.1

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.5.1

The MongoDB Go Driver Team is pleased to release version 2.5.1 of the official MongoDB Go Driver.

Release Highlights

This release fixes two BSON unmarshaling edge cases.

What's Changed

🐛 Fixed

• GODRIVER-3768 Check unmatched type in Unmarshal(). by @​qingyang-hu in mongodb/mongo-go-driver#2318
• GODRIVER-3809 Fix *streamingByteSrc.readSlice(). by @​qingyang-hu in mongodb/mongo-go-driver#2326

Full Changelog: mongodb/mongo-go-driver@v2.5.0...v2.5.1

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

Commits

• 4782a98 BUMP v2.5.1
• 908a3ef Merge release/2.4 into release/2.5 (#2356)
• b2db9b5 Remove spaces from config.yml
• b1a4757 Merge branch 'release/2.5' into merge-release/2.4-into-release/2.5-1775787864909
• 65d61d4 GODRIVER-3854 Remove "backport pr" Evergreen task. (#2355)
• 09f572d Merge branch 'release/2.4' into release/2.5
• e9c841f BUMP v2.4.3
• fcfea70 GODRIVER-3809 Fix *streamingByteSrc.readSlice(). (#2326)
• 889822d GODRIVER-3768 Check unmatched type in Unmarshal(). (#2318)
• 484ea44 Merge branch 'release/1.17' into release/2.5
• Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

1. The non-default simple protocol is used.
2. A dollar quoted string literal is used in the SQL query.
3. That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.
4. The value of that placeholder is controllable by the attacker.

e.g.

attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)

This is unlikely to occur outside of a contrived scenario.

Commits

• 0aeabbc Release v5.9.2
• 60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
• a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
• e34e452 doc: Add godoc links
• 08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
• 96b4dbd Remove unstable test
• acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
• 2f81f1f Update max_protocol_version and min_protocol_version defaults
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.13%. Comparing base (49afd07) to head (4336d56).
⚠️ Report is 3 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #245   +/-   ##
=======================================
  Coverage   86.13%   86.13%           
=======================================
  Files          18       18           
  Lines        2401     2401           
=======================================
  Hits         2068     2068           
  Misses        230      230           
  Partials      103      103           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.