[dependabot]

Bumps the all-deps group with 2 updates: github.com/nats-io/nats-server/v2 and golang.org/x/crypto.

Updates github.com/nats-io/nats-server/v2 from 2.15.0 to 2.15.1

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.15.1

Changelog

Refer to the 2.15 Upgrade Guide for backwards compatibility notes with 2.14.x.

Go Version

• 1.27.2 (#8740)

Dependencies

• github.com/klauspost/compress v1.20.1 (#8737)
• github.com/nats-io/nats.go v1.53.1 (#8737)

Changed

JetStream

• The max_ha_assets limit is now enforced consistently by the metalayer leader during stream and consumer placement, scaling and moves (#8639)

Gateways

• Support for sending and handling the legacy $GR. reply prefix, used by servers prior to v2.1.2, has been removed (#8615)

Improved

JetStream

• Stalled source and mirror flow control is now reported in stream info and warning logs, making missing $JS.FC.> imports or exports easier to diagnose (#8633)
• Stream and consumer placement now prefers peers that have caught up with the metalayer, reducing delays in API responses (#8643)
• Improved the performance of deleting entries from and encoding AVL sequence sets (#8646)
• Fast batch publish now reports backward sequence gaps as well as forward gaps (#8699)
• Stream pending message calculations avoid unnecessary filestore cache access and handle deleted sequence ranges more efficiently (#8680, #8681)
• Stream restore format detection now stops after the first S2 chunk (#8693)
• Stream restore waits for the preferred node to become leader, avoiding an incorrect create response during clustered restore (#8690)
• Memory backed streams avoid copying message headers and bodies twice when storing messages (#8652, contributed by @​randomizedcoder)

Monitoring

• Leafz now reports whether a leafnode connection uses WebSockets (#8683)

MQTT

• QoS2 PUBLISH and PUBREL processing is now pipelined for increased throughput (#8416, contributed by @​levb)
• Reduced allocations and buffer copying when processing QoS1 and QoS2 messages and issuing JetStream store and delete requests (#8624, #8625, contributed by @​levb)
• Partial packets are no longer copied in full on every read, reducing allocations and buffer copying (#8692)

Fixed

General

... (truncated)

Commits

• b2fd3ef Release v2.15.1
• 5502536 Update to Go 1.27.2/1.26.9
• 2f50d04 Cherry-picks for 2.15.1 (#164)
• ff5047c Fix TestJetStreamClusterKeyValueLastSeqMismatch
• bd33432 Update GHA dependencies
• 86bf9f1 Update Go dependencies
• c4aea1c [FIXED] Leafnode interest and request/reply across account imports
• 04869d4 [FIXED] Recovered ephemeral pull consumer never deleted
• 51d0113 De-flake TestJetStreamAtomicBatchPublishRejectPartialBatchOnLeaderChange
• 21344fd NRG: Re-send vote request of preferred candidate
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.57.0 to 0.58.0

Commits

• 8fdf07b go.mod: update golang.org/x dependencies
• 2437861 salsa20: fix keystream reuse in LoongArch LSX tail
• c3db4df acme: prefer test log helpers in test contexts
• 4e01a84 acme: adds support for profiles draft
• 8f0f111 ssh: check that no Unicode-aware string function is used
• b39ff6d ssh: add certificate algorithms for ML-DSA keys
• 4465db3 ssh: add the ML-DSA public key algorithms
• 83e695b ssh: implement ETM mode for CBC ciphers
• 946083a ssh: only drop a trailing carriage return
• 543dde9 ssh: accept known_hosts entries with a multi-word comment
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions