build(deps): bump github.com/microsoft/go-mssqldb from 1.10.0 to 1.11.0

[dependabot]

Bumps github.com/microsoft/go-mssqldb from 1.10.0 to 1.11.0.

Release notes

Sourced from github.com/microsoft/go-mssqldb's releases.

v1.11.0

1.11.0 (2026-08-23)

Features

• add ADO.Net connection string synonyms (#374) (d72f750)

Bug Fixes

• clarify NTLM URL encoding for URL DSNs (#378) (551d622)
• close TCP connection on all connect() error paths (#367) (0e13fee)
• isProc: add REVERT builtin command (#393) (31a9659)
• prevent NTLM challenge out-of-bounds panic (DoS) (#411) (81df983)
• prevent panic on overflowing PRELOGIN option offset and length (#415) (802d9f1)
• prevent SQL Browser DAC response parsing panic (DoS) (#414) (bc4cbf2)
• quote table name and ORDER columns in bulk copy (#416) (f925c53)
• replace deprecated reflect.SliceHeader with unsafe.Slice (#366) (836048a), closes #272
• return float64 for REAL columns in readFixedType (#381) (abddba8)
• strip port from AKV URLs for AllowedLocations and endpoint (#369) (7fab98a)
• types: cap initial PLP buffer allocation (#409) (f088291)

Performance Improvements

• add comprehensive benchmark suite with CI regression detection (#376) (b935441)
• fast path for pure ASCII decoding in CharsetToUTF8 (#431) (db51796)

Changelog

Sourced from github.com/microsoft/go-mssqldb's changelog.

1.11.0 (2026-08-23)

Features

• add ADO.Net connection string synonyms (#374) (d72f750)

Bug Fixes

• clarify NTLM URL encoding for URL DSNs (#378) (551d622)
• close TCP connection on all connect() error paths (#367) (0e13fee)
• isProc: add REVERT builtin command (#393) (31a9659)
• prevent NTLM challenge out-of-bounds panic (DoS) (#411) (81df983)
• prevent panic on overflowing PRELOGIN option offset and length (#415) (802d9f1)
• prevent SQL Browser DAC response parsing panic (DoS) (#414) (bc4cbf2)
• quote table name and ORDER columns in bulk copy (#416) (f925c53)
• replace deprecated reflect.SliceHeader with unsafe.Slice (#366) (836048a), closes #272
• return float64 for REAL columns in readFixedType (#381) (abddba8)
• strip port from AKV URLs for AllowedLocations and endpoint (#369) (7fab98a)
• types: cap initial PLP buffer allocation (#409) (f088291)

Performance Improvements

• add comprehensive benchmark suite with CI regression detection (#376) (b935441)
• fast path for pure ASCII decoding in CharsetToUTF8 (#431) (db51796)

Commits

• ecf8560 chore(main): release 1.11.0 (#380)
• 68c1f28 test: add TDS response fuzz harness and end-to-end target (layer 1/4) (#419)
• 46b5c6a chore(deps): bump the golang-x group across 1 directory with 2 updates (#433)
• 5e6cedb ci: run appveyor on SQL Server 2025 and drop the duplicate job (#436)
• ae25ae5 ci: test the supported Go releases and drop the EOL toolchain pin (#439)
• 6f21949 chore(deps): bump github.com/stretchr/testify in the testing group (#434)
• 8bb55ef chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#432)
• db51796 perf: fast path for pure ASCII decoding in CharsetToUTF8 (#431)
• f925c53 fix: quote table name and ORDER columns in bulk copy (#416)
• bc4cbf2 fix: prevent SQL Browser DAC response parsing panic (DoS) (#414)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 GitHub comments

Just comment with:

• run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)
• /test : Run the Buildkite pipeline.

[mergify]

This pull request does not have a backport label.
If this is a bug or security fix, could you label this PR @dependabot[bot]? 🙏.
For such, you'll need to label your PR with:

• The upcoming major version of the Elastic Stack
• The upcoming minor version of the Elastic Stack (if you're not pushing a breaking change)

To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-8./d is the label to automatically backport to the 8./d branch. /d is the digit
• backport-active-all is the label that automatically backports to all active branches.
• backport-active-8 is the label that automatically backports to all active minor branches for the 8 major.
• backport-active-9 is the label that automatically backports to all active minor branches for the 9 major.

[github-actions]

@Mergifyio backport 9.5 9.4 8.19

[mergify]

backport 9.5 9.4 8.19

✅ Backports have been created

Details

• #52933 [9.5](backport #52897) build(deps): bump github.com/microsoft/go-mssqldb from 1.10.0 to 1.11.0 has been created for branch 9.5
• #52934 [9.4](backport #52897) build(deps): bump github.com/microsoft/go-mssqldb from 1.10.0 to 1.11.0 has been created for branch 9.4
• #52935 [8.19](backport #52897) build(deps): bump github.com/microsoft/go-mssqldb from 1.10.0 to 1.11.0 has been created for branch 8.19