fix(deps): update module github.com/fclairamb/ftpserverlib to v0.27.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/fclairamb/ftpserverlib	v0.27.0 -> v0.27.1

---

Release Notes

fclairamb/ftpserverlib (github.com/fclairamb/ftpserverlib)

v0.27.1

Compare Source

What's Changed

Bug Fixes & Improvements

• fix: avoid logging error when server stop is requested by @​fclairamb in #​571
• fix: prevent IdleTimeout from closing control connection during active transfer by @​fclairamb in #​577

Dependency Updates

• chore(deps): update actions/checkout action to v5.0.1 by @​renovate[bot] in #​585
• chore(deps): update actions/setup-go action to v6.1.0 by @​renovate[bot] in #​586
• chore(deps): update dependency go to v1.25.5 by @​renovate[bot] in #​589
• chore(deps): update golangci/golangci-lint-action action to v9.2.0 by @​renovate[bot] in #​590
• chore(deps): update codecov/codecov-action action to v5.5.2 by @​renovate[bot] in #​592
• fix(deps): update module github.com/spf13/afero to v1.15.0 by @​renovate[bot] in #​576
• fix(deps): update module golang.org/x/sys to v0.39.0 by @​renovate[bot] in #​591

Full Changelog: fclairamb/ftpserverlib@v0.27.0...v0.27.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

PR Review: ftpserverlib v0.27.0 → v0.27.1

Summary

This is a dependency update from Renovate that upgrades the core FTP server library from v0.27.0 to v0.27.1. This is a patch version update that includes important bug fixes.

---

Code Quality: ✅ EXCELLENT

Strengths:

• Clean, minimal change - only updates the dependency version
• Proper semantic versioning (patch bump)
• Automated dependency management via Renovate
• Auto-merge is appropriately enabled for this low-risk change

Observations:

• Changes are limited to go.mod and go.sum as expected
• No code changes required in this repository

---

Bug Fixes Included: ✅ HIGH VALUE

The upstream v0.27.1 release includes two critical bug fixes:

1. fix: avoid logging error when server stop is requested (#571)

   • Eliminates spurious error logs during graceful shutdown
   • Improves log clarity and reduces noise

2. fix: prevent IdleTimeout from closing control connection during active transfer (#577)

   • Critical fix - prevents premature connection termination during file transfers
   • Addresses a potential data integrity/transfer reliability issue
   • Particularly important for long-running transfers

---

Potential Issues: ⚠️ NONE IDENTIFIED

No concerns detected:

• ✅ Patch version bump - low breaking change risk
• ✅ Backward compatible (no API changes indicated)
• ✅ Dependency graph appears clean (no conflicting versions in go.sum)
• ✅ Includes important bug fixes with no known regressions

---

Performance Considerations: ℹ️ NEUTRAL

• No performance-related changes in this patch
• Bug fix fix(deps): update module github.com/aws/aws-sdk-go to v1.42.49 #577 may slightly improve performance by preventing unnecessary connection resets during transfers

---

Security Concerns: 🔒 NONE

• No security-related changes in v0.27.1
• Standard dependency update security considerations apply
• Renovate's automated checks provide baseline security scanning

---

Test Coverage: ⚠️ RECOMMENDATION

Current state:

• This repository has minimal test coverage (only fs/utils/env_test.go)
• The upstream library likely has its own test coverage for the fixes

Recommendations:

1. ✅ Accept this PR - the bug fixes are valuable and low-risk
2. 💡 Consider adding integration tests in the future to catch issues like fix(deps): update module github.com/aws/aws-sdk-go to v1.42.49 #577 (IdleTimeout during transfers) at the application level
3. 💡 Verify behavior after deployment:
   • Test graceful shutdown to confirm cleaner logs (fix fix(deps): update module github.com/aws/aws-sdk-go to v1.42.45 #571)
   • Test long file transfers to ensure IdleTimeout doesn't interrupt them (fix fix(deps): update module github.com/aws/aws-sdk-go to v1.42.49 #577)

---

Additional Context

According to CLAUDE.md, the testing strategy relies on:

• Integration testing via Docker containers
• GitHub Actions with race detection (go test -race -v ./...)

Suggested manual verification after merge:

# Build and run with new version
go build -v ./...
go run main.go -conf ftpserver.json

# Test scenarios:
# 1. Start server, connect FTP client, initiate large file transfer, verify IdleTimeout doesn't kill it
# 2. Graceful shutdown (SIGTERM) - check logs for spurious errors

---

Recommendation: ✅ APPROVE & MERGE

Verdict: This is a low-risk, high-value dependency update that fixes two important bugs. The changes are minimal and well-scoped.

Action items:

• ✅ Merge this PR (auto-merge already enabled)
• 📋 Monitor deployment for any unexpected behavior
• 💡 Consider adding test coverage for idle timeout behavior in future

Risk level: 🟢 LOW - Patch version with bug fixes, no breaking changes expected.