release: pin sub-modules to v0.5.0

[KARTIKrocks]

Second of the two release PRs. v0.5.0 is tagged and pushed (5b7e8f8), so
the eight satellites can now point at it.

Why it matters this release

They required v0.4.0, so a consumer building one without this repo's
go.work compiled it against the published 0.4 core — which analyzes a query
before the base driver answers. Every integration is built on
middleware.Guard, so all six still double-counted N+1 on MySQL: exactly the
bug v0.5.0 fixes. pgparser and mysqlparser also need the core's
row-inserting keyword support for their parity corpus, which otherwise skips
rows rather than asserting them.

Verification

GOWORK=off make test — the only run that resolves the satellites against the
real published tag instead of this working tree:

ok  github.com/KARTIKrocks/sqlguard/integrations/gormguard
ok  github.com/KARTIKrocks/sqlguard/integrations/sqlxguard
ok  github.com/KARTIKrocks/sqlguard/integrations/pgxguard
ok  github.com/KARTIKrocks/sqlguard/integrations/bunguard
ok  github.com/KARTIKrocks/sqlguard/integrations/xormguard
ok  github.com/KARTIKrocks/sqlguard/integrations/entguard
ok  github.com/KARTIKrocks/sqlguard/parsers/pgparser
ok  github.com/KARTIKrocks/sqlguard/parsers/mysqlparser

All 14 packages pass. The go.sum entries confirm the module proxy served
v0.5.0 rather than a cached 0.4:

github.com/KARTIKrocks/sqlguard v0.5.0 h1:qImdj4QU2dVHvGxRdFVSsfbvlVKuyeq7H79kTt6qr88=

After this merges

The eight <mod>/v0.5.0 tags, which is the last step of the release.

[codeant-ai]

Skipping CodeAnt AI review — this PR is a back-merge between long-lived branches (release/pin-satellites-0.5.0 → main). The diff here has already been reviewed when the underlying commits landed on the source branch, so re-running analysis would produce duplicate findings on already-reviewed code.

If you want to analyze this anyway (e.g. you resolved conflicts with new logic), comment @codeant-ai : review and CodeAnt will start a review.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Repository: KARTIKrocks/sqlguard/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: acde838b-0c4c-4924-9ab9-064a7193394a

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codeant-ai]

🏁 CodeAnt Quality Gate Results

Commit: 53a3b7cc
Scan Time: 2026-09-25 12:16:58 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality Gate	Status	Details
Secrets	✅ PASSED	0 secrets found
SAST	✅ PASSED	No security issues
SCA (Dependencies)	✅ PASSED	Rating S: No vulnerabilities

View Full Results