Skip to content

deps: bump the go-minor-patch group with 9 updates - #928

Merged
jiashuoz merged 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-bcea86c53a
Aug 23, 2026
Merged

deps: bump the go-minor-patch group with 9 updates#928
jiashuoz merged 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-bcea86c53a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 9 updates:

Package From To
github.com/aws/aws-sdk-go-v2/config 1.32.36 1.32.37
github.com/aws/aws-sdk-go-v2/service/sesv2 1.66.5 1.66.6
github.com/aws/aws-sdk-go-v2/service/sts 1.45.5 1.45.6
github.com/aws/smithy-go 1.27.7 1.27.8
github.com/emersion/go-smtp 0.24.0 0.25.0
github.com/riverqueue/river 0.43.0 0.44.0
github.com/riverqueue/river/riverdriver/riverpgxv5 0.43.0 0.44.0
github.com/riverqueue/river/rivertype 0.43.0 0.44.0
golang.org/x/net 0.57.0 0.58.0

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.36 to 1.32.37

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.66.5 to 1.66.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.5 to 1.45.6

Commits

Updates github.com/aws/smithy-go from 1.27.7 to 1.27.8

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.7
    • Bug Fix: Don't serialize unset JSON documents as nil in structure members.
    • Bug Fix: Fix a deserialization panic around collection members in recursive shape configs.

Release (2026-07-31)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.6
    • Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.
    • Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.5
    • Bug Fix: Fix a performance issue in awsQuery with large response payloads.

... (truncated)

Commits

Updates github.com/emersion/go-smtp from 0.24.0 to 0.25.0

Commits
  • 642c374 server: restore line limit when a BDAT transaction is reset
  • 6a37d8b Fix typo in comment
  • f02fdf9 client: pass authentication commands as data
  • 24034bd client: Autodetect need for SMTPUTF8, and use it
  • See full diff in compare view

Updates github.com/riverqueue/river from 0.43.0 to 0.44.0

Release notes

Sourced from github.com/riverqueue/river's releases.

v0.44.0

Added

  • Added EventKindJobInterrupted, emitted when a running job is interrupted because its client is shutting down, the job was cancelled, and has been made immediately available to be worked again. [PR #1290](riverqueue/river#1290).

Changed

  • Jobs that didn't finish in time organically while a client was stopping and had to have their context cancelled no longer have this cancellation counted as an error. attempt is reset to the number it was before the job started working, errors is left unchanged, and state is made available so jobs are eligible to be retried immediately. [PR #1290](riverqueue/river#1290)

Fixed

  • Write timestamps in SQLite to always include three digits after the second like .000. Previously, they may have been truncated down to just .0 in the case of trailing zeroes. [PR #1349](riverqueue/river#1349)
  • Job completion events now reflect the job's persisted outcome when it differs from the transition requested by the worker. For example, a job completed with JobCompleteTx before its worker returns an error emits job_completed, and a remotely cancelled job whose worker errors or snoozes emits job_cancelled. Applications subscribed only to job_failed or job_snoozed should note that these events may instead be delivered to job_completed or job_cancelled subscribers. [PR #1350](riverqueue/river#1350)
Changelog

Sourced from github.com/riverqueue/river's changelog.

[0.44.0] - 2026-08-18

Added

  • Added EventKindJobInterrupted, emitted when a running job is interrupted because its client is shutting down, the job was cancelled, and has been made immediately available to be worked again. [PR #1290](riverqueue/river#1290).

Changed

  • Jobs that didn't finish in time organically while a client was stopping and had to have their context cancelled no longer have this cancellation counted as an error. attempt is reset to the number it was before the job started working, errors is left unchanged, and state is made available so jobs are eligible to be retried immediately. [PR #1290](riverqueue/river#1290)

Fixed

  • Write timestamps in SQLite to always include three digits after the second like .000. Previously, they may have been truncated down to just .0 in the case of trailing zeroes. [PR #1349](riverqueue/river#1349)
  • Job completion events now reflect the job's persisted outcome when it differs from the transition requested by the worker. For example, a job completed with JobCompleteTx before its worker returns an error emits job_completed, and a remotely cancelled job whose worker errors or snoozes emits job_cancelled. Applications subscribed only to job_failed or job_snoozed should note that these events may instead be delivered to job_completed or job_cancelled subscribers. [PR #1350](riverqueue/river#1350)
Commits
  • d675f7d Prepare version 0.44.0 (#1352)
  • 0b7bcc7 Remove post-persist ambiguity and have events match emitted state (#1350)
  • 7054a22 Bump the go-dependencies group across 3 directories with 2 updates (#1351)
  • a29542b Fix SQLite timestamp millisecond formatting to always include 3 digits (#1349)
  • 7ac5a2c Bump the go-dependencies group across 3 directories with 1 update (#1345)
  • fdf6cdf Make jobs cancelled due to a soft stop immediately available (#1290)
  • 238776f Don't allow testsignal to pick up non-stdlib dependencies (#1343)
  • See full diff in compare view

Updates github.com/riverqueue/river/riverdriver/riverpgxv5 from 0.43.0 to 0.44.0

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's releases.

v0.44.0

Added

  • Added EventKindJobInterrupted, emitted when a running job is interrupted because its client is shutting down, the job was cancelled, and has been made immediately available to be worked again. [PR #1290](riverqueue/river#1290).

Changed

  • Jobs that didn't finish in time organically while a client was stopping and had to have their context cancelled no longer have this cancellation counted as an error. attempt is reset to the number it was before the job started working, errors is left unchanged, and state is made available so jobs are eligible to be retried immediately. [PR #1290](riverqueue/river#1290)

Fixed

  • Write timestamps in SQLite to always include three digits after the second like .000. Previously, they may have been truncated down to just .0 in the case of trailing zeroes. [PR #1349](riverqueue/river#1349)
  • Job completion events now reflect the job's persisted outcome when it differs from the transition requested by the worker. For example, a job completed with JobCompleteTx before its worker returns an error emits job_completed, and a remotely cancelled job whose worker errors or snoozes emits job_cancelled. Applications subscribed only to job_failed or job_snoozed should note that these events may instead be delivered to job_completed or job_cancelled subscribers. [PR #1350](riverqueue/river#1350)
Changelog

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's changelog.

[0.44.0] - 2026-08-18

Added

  • Added EventKindJobInterrupted, emitted when a running job is interrupted because its client is shutting down, the job was cancelled, and has been made immediately available to be worked again. [PR #1290](riverqueue/river#1290).

Changed

  • Jobs that didn't finish in time organically while a client was stopping and had to have their context cancelled no longer have this cancellation counted as an error. attempt is reset to the number it was before the job started working, errors is left unchanged, and state is made available so jobs are eligible to be retried immediately. [PR #1290](riverqueue/river#1290)

Fixed

  • Write timestamps in SQLite to always include three digits after the second like .000. Previously, they may have been truncated down to just .0 in the case of trailing zeroes. [PR #1349](riverqueue/river#1349)
  • Job completion events now reflect the job's persisted outcome when it differs from the transition requested by the worker. For example, a job completed with JobCompleteTx before its worker returns an error emits job_completed, and a remotely cancelled job whose worker errors or snoozes emits job_cancelled. Applications subscribed only to job_failed or job_snoozed should note that these events may instead be delivered to job_completed or job_cancelled subscribers. [PR #1350](riverqueue/river#1350)
Commits
  • d675f7d Prepare version 0.44.0 (#1352)
  • 0b7bcc7 Remove post-persist ambiguity and have events match emitted state (#1350)
  • 7054a22 Bump the go-dependencies group across 3 directories with 2 updates (#1351)
  • a29542b Fix SQLite timestamp millisecond formatting to always include 3 digits (#1349)
  • 7ac5a2c Bump the go-dependencies group across 3 directories with 1 update (#1345)
  • fdf6cdf Make jobs cancelled due to a soft stop immediately available (#1290)
  • 238776f Don't allow testsignal to pick up non-stdlib dependencies (#1343)
  • See full diff in compare view

Updates github.com/riverqueue/river/rivertype from 0.43.0 to 0.44.0

Release notes

Sourced from github.com/riverqueue/river/rivertype's releases.

v0.44.0

Added

  • Added EventKindJobInterrupted, emitted when a running job is interrupted because its client is shutting down, the job was cancelled, and has been made immediately available to be worked again. [PR #1290](riverqueue/river#1290).

Changed

  • Jobs that didn't finish in time organically while a client was stopping and had to have their context cancelled no longer have this cancellation counted as an error. attempt is reset to the number it was before the job started working, errors is left unchanged, and state is made available so jobs are eligible to be retried immediately. [PR #1290](riverqueue/river#1290)

Fixed

  • Write timestamps in SQLite to always include three digits after the second like .000. Previously, they may have been truncated down to just .0 in the case of trailing zeroes. [PR #1349](riverqueue/river#1349)
  • Job completion events now reflect the job's persisted outcome when it differs from the transition requested by the worker. For example, a job completed with JobCompleteTx before its worker returns an error emits job_completed, and a remotely cancelled job whose worker errors or snoozes emits job_cancelled. Applications subscribed only to job_failed or job_snoozed should note that these events may instead be delivered to job_completed or job_cancelled subscribers. [PR #1350](riverqueue/river#1350)
Changelog

Sourced from github.com/riverqueue/river/rivertype's changelog.

[0.44.0] - 2026-08-18

Added

  • Added EventKindJobInterrupted, emitted when a running job is interrupted because its client is shutting down, the job was cancelled, and has been made immediately available to be worked again. [PR #1290](riverqueue/river#1290).

Changed

  • Jobs that didn't finish in time organically while a client was stopping and had to have their context cancelled no longer have this cancellation counted as an error. attempt is reset to the number it was before the job started working, errors is left unchanged, and state is made available so jobs are eligible to be retried immediately. [PR #1290](riverqueue/river#1290)

Fixed

  • Write timestamps in SQLite to always include three digits after the second like .000. Previously, they may have been truncated down to just .0 in the case of trailing zeroes. [PR #1349](riverqueue/river#1349)
  • Job completion events now reflect the job's persisted outcome when it differs from the transition requested by the worker. For example, a job completed with JobCompleteTx before its worker returns an error emits job_completed, and a remotely cancelled job whose worker errors or snoozes emits job_cancelled. Applications subscribed only to job_failed or job_snoozed should note that these events may instead be delivered to job_completed or job_cancelled subscribers. [PR #1350](riverqueue/river#1350)
Commits
  • d675f7d Prepare version 0.44.0 (#1352)
  • 0b7bcc7 Remove post-persist ambiguity and have events match emitted state (#1350)
  • 7054a22 Bump the go-dependencies group across 3 directories with 2 updates (#1351)
  • a29542b Fix SQLite timestamp millisecond formatting to always include 3 digits (#1349)
  • 7ac5a2c Bump the go-dependencies group across 3 directories with 1 update (#1345)
  • fdf6cdf Make jobs cancelled due to a soft stop immediately available (#1290)
  • 238776f Don't allow testsignal to pick up non-stdlib dependencies (#1343)
  • See full diff in compare view

Updates golang.org/x/net from 0.57.0 to 0.58.0

Commits
  • acc78e0 go.mod: update golang.org/x dependencies
  • 90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
  • 08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
  • 8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
  • 99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
  • 5a920b1 http3: rework registration to allow using a fake network
  • 7fd2842 quic: return an error from Accept after PacketConn reader exits
  • 825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
  • a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
  • 574e5eb quic: halt conn goroutines on close when listener exits early
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the go-minor-patch group with 9 updates
a0ab5f4 
Bumps the go-minor-patch group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.36` | `1.32.37` |
| [github.com/aws/aws-sdk-go-v2/service/sesv2](https://github.com/aws/aws-sdk-go-v2) | `1.66.5` | `1.66.6` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.45.5` | `1.45.6` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.7` | `1.27.8` |
| [github.com/emersion/go-smtp](https://github.com/emersion/go-smtp) | `0.24.0` | `0.25.0` |
| [github.com/riverqueue/river](https://github.com/riverqueue/river) | `0.43.0` | `0.44.0` |
| [github.com/riverqueue/river/riverdriver/riverpgxv5](https://github.com/riverqueue/river) | `0.43.0` | `0.44.0` |
| [github.com/riverqueue/river/rivertype](https://github.com/riverqueue/river) | `0.43.0` | `0.44.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.57.0` | `0.58.0` |


Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.36 to 1.32.37
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.36...config/v1.32.37)

Updates `github.com/aws/aws-sdk-go-v2/service/sesv2` from 1.66.5 to 1.66.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/fsx/v1.66.5...service/fsx/v1.66.6)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.45.5 to 1.45.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sts/v1.45.5...service/sts/v1.45.6)

Updates `github.com/aws/smithy-go` from 1.27.7 to 1.27.8
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.7...v1.27.8)

Updates `github.com/emersion/go-smtp` from 0.24.0 to 0.25.0
- [Release notes](https://github.com/emersion/go-smtp/releases)
- [Commits](emersion/go-smtp@v0.24.0...v0.25.0)

Updates `github.com/riverqueue/river` from 0.43.0 to 0.44.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.43.0...v0.44.0)

Updates `github.com/riverqueue/river/riverdriver/riverpgxv5` from 0.43.0 to 0.44.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.43.0...v0.44.0)

Updates `github.com/riverqueue/river/rivertype` from 0.43.0 to 0.44.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.43.0...v0.44.0)

Updates `golang.org/x/net` from 0.57.0 to 0.58.0
- [Commits](golang/net@v0.57.0...v0.58.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sesv2
  dependency-version: 1.66.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.45.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.27.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/emersion/go-smtp
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/riverqueue/river
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/riverqueue/river/riverdriver/riverpgxv5
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/riverqueue/river/rivertype
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 22, 2026
@dependabot
dependabot Bot requested a review from jiashuoz as a code owner August 22, 2026 10:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 22, 2026
jiashuoz
jiashuoz approved these changes Aug 23, 2026
View reviewed changes

@jiashuoz jiashuoz left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: verified go-smtp v0.25.0 (auth format-string fix, SendMail-only SMTPUTF8 autodetect not used by e2a, BDAT line-limit restore) and river v0.44.0 (interrupted-job semantics benign, no event subscriptions in internal/jobs). CI green.

@jiashuoz
jiashuoz merged commit 66100e6 into main Aug 23, 2026
29 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-minor-patch-bcea86c53a branch August 23, 2026 19:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jiashuoz jiashuoz jiashuoz approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jiashuoz