Update dependency diesel-guard to v0.10.0

[renovate]

This PR contains the following updates:

Package	Update	Change
diesel-guard	minor	0.9.0 → 0.10.0

---

Release Notes

ayarotsky/diesel-guard (diesel-guard)

v0.10.0

Compare Source

Added

• RenameSchemaCheck — Detects ALTER SCHEMA ... RENAME TO. Renaming a schema invalidates every qualified reference (old_schema.table, old_schema.function, etc.) across the entire application. Acquires ACCESS EXCLUSIVE.
• RefreshMatViewCheck — Detects REFRESH MATERIALIZED VIEW without CONCURRENTLY. Without it the view holds an ACCESS EXCLUSIVE lock, blocking all reads for the duration of the refresh.
• AddDomainCheckConstraintCheck — Detects ALTER DOMAIN ADD CONSTRAINT without NOT VALID. Postgres validates all columns that use the domain across every table — potentially a slow full-scan under ACCESS EXCLUSIVE.
• AddExcludeConstraintCheck — Detects ADD EXCLUDE constraints. Unlike CHECK or FOREIGN KEY, exclusion constraints have no NOT VALID escape hatch and hold SHARE ROW EXCLUSIVE for the full validation scan.
• CreateTableWithoutPkCheck — Detects CREATE TABLE statements that define no primary key. Tables without a PK cannot participate in logical replication; TEMP tables and CREATE TABLE (LIKE ...) are exempt.
• MutationWithoutWhereCheck — Detects DELETE FROM table or UPDATE table SET ... with no WHERE clause. A missing WHERE affects every row, holding a ROW EXCLUSIVE lock for minutes on large tables.
• DropNotNullCheck — Detects ALTER COLUMN ... DROP NOT NULL. Removing a NOT NULL constraint silently changes a contract that application code may depend on.
• CreateTableSerialCheck — Detects SERIAL, BIGSERIAL, and SMALLSERIAL pseudo-types on CREATE TABLE. These PostgreSQL-specific types create separately-owned sequences that complicate permissions, dump/restore, and replication. Recommends SQL-standard GENERATED BY DEFAULT AS IDENTITY.
• Violation line numbers — Every violation now reports the source line number where the unsafe statement begins. Shown in human-readable output as (line N) and included in JSON output as a line field.
• GitHub Actions output format — New --format github flag emits ::error file=…,line=…:: workflow commands, enabling inline PR annotations on the diff when run in GitHub Actions.

Changed

• Script errors now surface as violations — Custom Rhai check runtime errors previously produced silent stderr warnings. They now appear as SCRIPT ERROR violations in the output, making failures visible in CI and in --format github annotations.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.