Bump github.com/sethvargo/go-limiter from 1.1.0 to 1.2.0

[dependabot]

Bumps github.com/sethvargo/go-limiter from 1.1.0 to 1.2.0.

Release notes

Sourced from github.com/sethvargo/go-limiter's releases.

v1.2.0

Performance

memorystore now stores buckets in a sync.Map. Profiling showed the old global RWMutex read lock was the bottleneck under concurrency: every Take mutated one shared atomic counter, so all cores bounced that cache line. The concurrent, many-key Take path is up to ~6x faster, and go-limiter is now the fastest per-key rate limiter in the comparison suite.

Go 1.25

The module now requires Go 1.25. The separate tools/ module and the lint apparatus are gone in favor of plain go test.

Bug fixes

• memorystore.Set with a zero interval no longer panics (divide-by-zero in tick); it falls back to the store's configured interval.
• httplimit emits the rate-limit reset and Retry-After headers as valid RFC 9110 HTTP-dates in GMT (http.TimeFormat) instead of ... UTC.
• bucket burst is now a saturating add, so a large burst can't overflow a uint64 and wrap to a smaller value.

Notes

• memorystore.Config.InitialAlloc is now a no-op (retained for compatibility). sync.Map has no pre-sizing.

Full changelog: sethvargo/go-limiter@v1.1.0...v1.2.0

Commits

• 294f8d8 Scale Take across cores with a sync.Map bucket store (#62)
• 6121917 Modernize for Go 1.25 and fix latent bugs (#61)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)