Skip to content

chore(deps): bump github.com/anyproto/any-store from 1.0.1 to 1.0.2 - #246

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/anyproto/any-store-1.0.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/anyproto/any-store-1.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/anyproto/any-store from 1.0.1 to 1.0.2.

Release notes

Sourced from github.com/anyproto/any-store's releases.

Release v1.0.2

Rebuilt against any-store v1.0.2.

Fixed: sparse indexes silently dropped matching documents

The planner never read IndexInfo.Sparse, so a predicate that can match an absent or null field was answered from the sparse index — which holds only the documents that do carry the field, the complement of what such a predicate matches.

{"isUninstalled":{"$ne":true}} returned 2 rows instead of 22; 0 instead of 24 when no document carried the field. Delete/Update plan through the same path, so Find({"f":{"$ne":true}}).Delete(ctx) removed 0 of 2 matching documents.

A sparse index is now used only when the query guarantees every indexed field is present and non-null. Equal-weight index ties also resolve on the index name, so a plan no longer depends on whether the collection was freshly created or reopened.

Behaviour changes

These no longer use a sparse index and fall back to a scan: $exists:true, one-sided $lt/$lte, $ne, $nin, $exists:false, $not, $in containing null, equality to null, top-level $or/$nor, and any sort without a presence-guaranteeing filter.

If you used $exists:true on a sparse-indexed field, switch to $ne: null — it means "present and non-null", which is exactly what the index holds, and is served at full speed including the sort.

IndexHint can no longer re-enable a blocked sparse index. Explain().Indexes is now ordered by (-weight, name) and reports Weight: 0 for blocked indexes.

Upgrading

Planner-only: no format change, no migration, no reindex. Verified both directions on one database file.

What's Changed

Full Changelog: anyproto/any-store@cmd/any-store-cli/v1.0.1...cmd/any-store-cli/v1.0.2

Commits
  • 0a56f1b Merge pull request #197 from anyproto/fix/go-7510-sparse-planner-v1
  • 9e6d049 test: fold the sparse planner cases into index_test.go
  • c1040bd fix(query): never answer a query from an incomplete sparse index
  • d71c61c Merge pull request #172 from anyproto/chore/cli-v1.0.1
  • 6ca9b6f chore(cli): bump any-store to v1.0.1
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/anyproto/any-store](https://github.com/anyproto/any-store) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/anyproto/any-store/releases)
- [Commits](anyproto/any-store@v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: github.com/anyproto/any-store
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 21, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​anyproto/​any-store@​v1.0.1 ⏵ v1.0.2100 +1100100100100

View full report

1 similar comment
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​anyproto/​any-store@​v1.0.1 ⏵ v1.0.2100 +1100100100100

View full report

@github-actions

Copy link
Copy Markdown

New Coverage 51.6% of statements
Patch Coverage 0.0% of changed statements (0/0)

Coverage provided by https://github.com/seriousben/go-patch-cover-action

@dependabot @github

dependabot Bot commented on behalf of github Sep 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like github.com/anyproto/any-store is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 30, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/anyproto/any-store-1.0.2 branch September 30, 2026 15:34
@github-actions github-actions Bot locked and limited conversation to collaborators Sep 30, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants