fix(deps): update module github.com/moov-io/base to v0.62.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/moov-io/base	v0.61.3 → v0.62.0

---

Release Notes

moov-io/base (github.com/moov-io/base)

v0.62.0

Compare Source

What's Changed

Postgres/AlloyDB connection pooling and observability for the pgxpool path introduced in this line of work.

Database — Postgres / AlloyDB pool (#​490, #​506, #​507)

Failover-safe pooling (#​490)

• Switch Postgres/AlloyDB from sql.Open("pgx") to pgxpool under a *sql.DB wrapper (OpenDBFromPool).
• Acquire-time liveness via ShouldPing (idle > 200ms) so dead connections after AlloyDB switchover are not handed to the app. (HealthCheckPeriod only ages out conns; it does not ping.)
• Pool settings from PostgresConfig.Connections apply to pgxpool, not database/sql setters.
• db.Close() closes the underlying pool and AlloyDB dialer (fixes dialer leak).
• Library defaults when Connections fields are zero (behavior change vs unlimited database/sql zeros):
  • MaxOpen = 25 → pgxpool.MaxConns
  • MaxLifetime = 5m → MaxConnLifetime
  • MaxIdleTime = 2m → MaxConnIdleTime
  • MaxIdle ignored on Postgres (no pgxpool equivalent; logged when set)

Review follow-ups (#​506)

• Default PingTimeout 1s → 300ms so a full-pool dead-conn acquire burn (maxConns+1 retries) stays inside a more typical request budget.
• Set MaxConnLifetimeJitter when unset (pgxpool defaults jitter to 0; max of 30s and 10% of lifetime). Preserve DSN/config jitter when already set.
• Remove deprecated ApplyPostgresConnectionsConfig (footgun: tuned *sql.DB instead of pgxpool).
• Correct godoc that claimed pgxpool always adds lifetime jitter.

Observability hook (#​507)

• Export database.PoolDBStats(db) (sql.DBStats, bool) mapping pgxpool.Stat → sql.DBStats.
• Needed because db.Stats() is empty with MaxIdleConns=0 on the sql.DB handoff layer.
• Intended consumer: go-libs observability/sql.MeasureStats (OTel db-metrics spans).

Operator notes

Field	Old (database/sql + pgx)	New (pgxpool defaults)
MaxOpen unset	unlimited	25
MaxLifetime unset	no limit	5m (+ jitter from #​506)
MaxIdleTime unset	no limit	2m
MaxIdle	sql.DB idle cap	ignored on Postgres
db.Stats()	real pool	not meaningful — use PoolDBStats
PingTimeout	n/a	300ms default

Set PostgresConfig.Connections explicitly for larger pools or longer idle/lifetime (especially high-QPS or AlloyDB IAM). Do not call db.SetMaxIdleConns(n>0) on Postgres DBs from database.New.

Other

• chore(deps): bump actions/checkout and setup-go to v7 (#​501)
• fix(deps): update direct Go module dependencies (#​500)
• fix(deps): update opentelemetry-go monorepo to v1.44.0 (#​499)

Full Changelog: moov-io/base@v0.61.3...v0.62.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.0 -> 1.25.8
github.com/rickar/cal/v2	v2.1.27 -> v2.1.28