zeekay 46a5c3da3f fix(deps): patch the AWS SDK EventStream DoS (and the cascade it forced)
Panic-driven denial of service in the AWS SDK for Go v2 EventStream decoder:

    aws/protocol/eventstream  v1.4.8   -> v1.7.14
    service/s3                v1.27.11 -> v1.106.0

Bumping s3 alone does NOT compile here, and the reason is worth recording: the
S3 client changed ContentLength from int64 to *int64, and two pinned consumers
predate that change —

    feature/s3/manager v1.11.33  download.go:439
        invalid operation: resp.ContentLength > 0 (mismatched types *int64 and untyped int)
    snowflakedb/gosnowflake v1.6.19  s3_storage_client.go:107
        cannot use out.ContentLength (*int64) as int64 value in struct literal

So manager -> v1.22.35 and gosnowflake -> v1.19.1 are not incidental churn;
they are the rest of the same fix. That in turn exposed missing go.sum entries
under modernc.org (this fork carries ~20 database drivers), closed by tidy.

Verified against a measured baseline: go build ./... exit 0, and go test ./...
is 25 ok / 33 fail BOTH with and without this change — identical. Those tests
need live database servers and fail in a sandbox regardless; none of the 33 is
a regression from this commit.
2026-07-26 07:41:33 -07:00
2019-06-13 01:30:58 -07:00
2024-09-07 22:50:55 +02:00
2023-12-20 13:12:07 -08:00
2019-03-28 21:35:54 -07:00
2021-01-25 21:08:52 -08:00
2025-02-01 23:26:02 -08:00
2023-11-27 13:45:49 +08:00
2018-11-08 01:45:19 -08:00
2017-02-09 18:23:08 -08:00
2019-07-11 23:05:33 -07:00
2023-01-10 23:51:36 -08:00

migrate

GitHub Workflow Status (branch) GoDoc Coverage Status packagecloud.io Docker Pulls Supported Go Versions GitHub Release Go Report Card

migrate

Database migrations written in Go. Use as CLI or import as library.

  • Migrate reads migrations from sources and applies them in correct order to a database.
  • Drivers are "dumb", migrate glues everything together and makes sure the logic is bulletproof. (Keeps the drivers lightweight, too.)
  • Database drivers don't assume things or try to correct user input. When in doubt, fail.

Forked from mattes/migrate

Databases

Database drivers run migrations. Add a new database?

Database URLs

Database connection strings are specified via URLs. The URL format is driver dependent but generally has the form: dbdriver://username:password@host:port/dbname?param1=true&param2=false

Any reserved URL characters need to be escaped. Note, the % character also needs to be escaped

Explicitly, the following characters need to be escaped: !, #, $, %, &, ', (, ), *, +, ,, /, :, ;, =, ?, @, [, ]

It's easiest to always run the URL parts of your DB connection URL (e.g. username, password, etc) through an URL encoder. See the example Python snippets below:

$ python3 -c 'import urllib.parse; print(urllib.parse.quote(input("String to encode: "), ""))'
String to encode: FAKEpassword!#$%&'()*+,/:;=?@[]
FAKEpassword%21%23%24%25%26%27%28%29%2A%2B%2C%2F%3A%3B%3D%3F%40%5B%5D
$ python2 -c 'import urllib; print urllib.quote(raw_input("String to encode: "), "")'
String to encode: FAKEpassword!#$%&'()*+,/:;=?@[]
FAKEpassword%21%23%24%25%26%27%28%29%2A%2B%2C%2F%3A%3B%3D%3F%40%5B%5D
$

Migration Sources

Source drivers read migrations from local or remote sources. Add a new source?

CLI usage

  • Simple wrapper around this library.
  • Handles ctrl+c (SIGINT) gracefully.
  • No config search paths, no config files, no magic ENV var injections.

CLI Documentation (includes CLI install instructions)

Basic usage

$ migrate -source file://path/to/migrations -database postgres://localhost:5432/database up 2

Docker usage

$ docker run -v {{ migration dir }}:/migrations --network host migrate/migrate
    -path=/migrations/ -database postgres://localhost:5432/database up 2

Use in your Go project

  • API is stable and frozen for this release (v3 & v4).
  • Uses Go modules to manage dependencies.
  • To help prevent database corruptions, it supports graceful stops via GracefulStop chan bool.
  • Bring your own logger.
  • Uses io.Reader streams internally for low memory overhead.
  • Thread-safe and no goroutine leaks.

Go Documentation

import (
    "github.com/golang-migrate/migrate/v4"
    _ "github.com/golang-migrate/migrate/v4/database/postgres"
    _ "github.com/golang-migrate/migrate/v4/source/github"
)

func main() {
    m, err := migrate.New(
        "github://mattes:personal-access-token@mattes/migrate_test",
        "postgres://localhost:5432/database?sslmode=enable")
    m.Steps(2)
}

Want to use an existing database client?

import (
    "database/sql"
    _ "github.com/lib/pq"
    "github.com/golang-migrate/migrate/v4"
    "github.com/golang-migrate/migrate/v4/database/postgres"
    _ "github.com/golang-migrate/migrate/v4/source/file"
)

func main() {
    db, err := sql.Open("postgres", "postgres://localhost:5432/database?sslmode=enable")
    driver, err := postgres.WithInstance(db, &postgres.Config{})
    m, err := migrate.NewWithDatabaseInstance(
        "file:///migrations",
        "postgres", driver)
    m.Up() // or m.Steps(2) if you want to explicitly set the number of migrations to run
}

Getting started

Go to getting started

Tutorials

(more tutorials to come)

Migration files

Each migration has an up and down migration. Why?

1481574547_create_users_table.up.sql
1481574547_create_users_table.down.sql

Best practices: How to write migrations.

Coming from another db migration tool?

Check out migradaptor. Note: migradaptor is not affiliated or supported by this project

Versions

Version Supported? Import Notes
master ✅ import "github.com/golang-migrate/migrate/v4" New features and bug fixes arrive here first
v4 ✅ import "github.com/golang-migrate/migrate/v4" Used for stable releases
v3 ❌ import "github.com/golang-migrate/migrate" (with package manager) or import "gopkg.in/golang-migrate/migrate.v3" (not recommended) DO NOT USE - No longer supported

Development and Contributing

Yes, please! Makefile is your friend, read the development guide.

Also have a look at the FAQ.


Looking for alternatives? https://awesome-go.com/#database.

S
Description
Database migrations. CLI and Golang library.
Readme MIT
3.2 MiB
Languages
Go 98.9%
Makefile 0.8%
Dockerfile 0.2%