fix(deps): update x/text and grpc to fix CVE-2026-56852 and GHSA-hrxh…

…-6v49-42gf (#161)

Update golang.org/x/text to v0.39.0 to fix CVE-2026-56852
(infinite loop in norm.Iter) and google.golang.org/grpc to
v1.82.1 to fix GHSA-hrxh-6v49-42gf (xDS RBAC / HTTP/2).

fix: upgrade x/net and x/crypto to patch security vulnerabilities (#160)

Upgrades indirect dependencies to fix known CVEs:
- golang.org/x/net v0.48.0 -> v0.55.0 (GO-2026-4918: HTTP/2 infinite loop)
- golang.org/x/crypto v0.46.0 -> v0.52.0 (security patch)

Also pulls in compatible updates for x/sync, x/sys, x/text.

fix: update vulnerable dependencies and Go patch version (#158)

* Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4

Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.3...v4.1.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit b203609)

* Bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0

Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 6570f96)

* fix(go): bump Go to 1.25.9 for stdlib CVEs

Update the module Go version to 1.25.9 to pick up fixes for CVE-2025-68121, CVE-2025-58183, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2026-25679, CVE-2026-32280, and CVE-2026-32282.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix(deps): update grpc and otel/sdk to fix CVE-2026-33186 and CVE-202…

…6-24051 (#155)

- google.golang.org/grpc v1.70.0 -> v1.79.3 (CVE-2026-33186, CRITICAL)
- go.opentelemetry.io/otel/sdk v1.34.0 -> v1.42.0 (CVE-2026-24051, HIGH)

chore(go.mod): go get golang.org/x/oauth2 && go mod tidy (#148)

support migration with proto descriptors file (#145)

* Add proto descriptor file support to DDL operations

* Add proto descriptor support to load command

* Add proto_descriptor_file flag to specific commands using shared helper function

* Add test for proto descriptor functionality

Add priority option on migrate up command (#146)

Fix bug: use os.ReadFile/ReadDir instead of os.DirFS for support abso…

…lute path (#144)

Rollback flag (#142)

* Revert "Fix required argument handling (#141)"

This reverts commit 3b4b3f9.

* Revert "make directory flag required (#137)"

This reverts commit 3c0e8bf.

Fix required argument handling (#141)