Skip to content

deps: bump the go-minor-patch group with 9 updates - #965

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-1f5bce5dca
Open

deps: bump the go-minor-patch group with 9 updates#965
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-1f5bce5dca

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 9 updates:

Package From To
blitiri.com.ar/go/spf 1.5.1 1.6.0
github.com/aws/aws-sdk-go-v2/config 1.32.37 1.32.39
github.com/aws/aws-sdk-go-v2/service/sesv2 1.66.6 1.67.1
github.com/aws/aws-sdk-go-v2/service/sts 1.45.6 1.45.8
github.com/aws/smithy-go 1.27.8 1.27.10
github.com/go-chi/chi/v5 5.3.1 5.3.2
github.com/riverqueue/river 0.44.0 0.45.0
github.com/riverqueue/river/riverdriver/riverpgxv5 0.44.0 0.45.0
github.com/riverqueue/river/rivertype 0.44.0 0.45.0

Updates blitiri.com.ar/go/spf from 1.5.1 to 1.6.0

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.32.39

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.66.6 to 1.67.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.6 to 1.45.8

Commits

Updates github.com/aws/smithy-go from 1.27.8 to 1.27.10

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.0
    • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.10
    • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

... (truncated)

Commits

Updates github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.2

What's Changed

  • feat(middleware): add text/markdown, text/csv, text/vtt to default compressible types by @​VojtechVitek in go-chi/chi#1151
  • docs: deployment recipe for middleware.ClientIPFromXFFTrustedProxies() by @​VojtechVitek in go-chi/chi#1111
  • fix: don't drop handlers that collide with a Mount()/Route() pattern by @​VojtechVitek in go-chi/chi#1148
  • Don't duplicate methods in Allow: header for 405 responses by @​flimzy in go-chi/chi#1029
  • fix(middleware): reject catch-all compress wildcards by @​VojtechVitek in go-chi/chi#1156
    • middleware.NewCompressor(level, "/*") never worked and silently compressed nothing. Instead of turning it into a compress-everything catch-all (as proposed in go-chi/chi#868 and go-chi/chi#1121), we decided to reject both "/" and "/*" at construction and panic. Compressing every response wastes CPU on already-compressed types (zip, jpeg, png), which is why the middleware keeps a curated default list. Users should pass explicit content types.

Full Changelog: go-chi/chi@v5.3.1...v5.3.2

Commits
  • 3893906 fix(middleware): reject catch-all compress wildcards "/" and "/*" (#1156)
  • 9b6ddcd Don't duplicate methods in Allow: header for 405 responses (#1029)
  • 29164f0 fix: don't drop handlers that collide with a Mount()/Route() pattern (#1148)
  • bc02284 docs: deployment recipe + verify checklist for ClientIPFromXFFTrustedProxies ...
  • 60ecea5 feat(middleware): add text/markdown, text/csv, text/vtt to default compressib...
  • See full diff in compare view

Updates github.com/riverqueue/river from 0.44.0 to 0.45.0

Release notes

Sourced from github.com/riverqueue/river's releases.

v0.45.0

Changed

Fixed

  • Fixed periodic jobs advancing their durable next run time when job insertion fails. [PR #1359](riverqueue/river#1359).
  • Improved SQLite queue count performance on large job tables by limiting counts to available and running jobs so the existing state and queue index can be used. [PR #1360](riverqueue/river#1360).

v0.44.1

Fixed

  • SQLite job completion, rescue, and full-update paths now serialize timestamps using River's standard millisecond format instead of relying on database driver serialization, preventing inconsistent timestamp representations from being persisted. [PR #1353](riverqueue/river#1353)
  • SQLite drivers now return a non-nil empty JobRow.Errors slice for jobs without errors, matching the behavior of PostgreSQL drivers and ensuring the field serializes to [] instead of null. [PR #1354](riverqueue/river#1354).
Changelog

Sourced from github.com/riverqueue/river's changelog.

[0.45.0] - 2026-08-25

Changed

Fixed

  • Fixed periodic jobs advancing their durable next run time when job insertion fails. [PR #1359](riverqueue/river#1359).
  • Improved SQLite queue count performance on large job tables by limiting counts to available and running jobs so the existing state and queue index can be used. [PR #1360](riverqueue/river#1360).

[0.44.1] - 2026-08-21

Fixed

  • SQLite job completion, rescue, and full-update paths now serialize timestamps using River's standard millisecond format instead of relying on database driver serialization, preventing inconsistent timestamp representations from being persisted. [PR #1353](riverqueue/river#1353)
  • SQLite drivers now return a non-nil empty JobRow.Errors slice for jobs without errors, matching the behavior of PostgreSQL drivers and ensuring the field serializes to [] instead of null. [PR #1354](riverqueue/river#1354).
Commits

Updates github.com/riverqueue/river/riverdriver/riverpgxv5 from 0.44.0 to 0.45.0

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's releases.

v0.45.0

Changed

Fixed

  • Fixed periodic jobs advancing their durable next run time when job insertion fails. [PR #1359](riverqueue/river#1359).
  • Improved SQLite queue count performance on large job tables by limiting counts to available and running jobs so the existing state and queue index can be used. [PR #1360](riverqueue/river#1360).

v0.44.1

Fixed

  • SQLite job completion, rescue, and full-update paths now serialize timestamps using River's standard millisecond format instead of relying on database driver serialization, preventing inconsistent timestamp representations from being persisted. [PR #1353](riverqueue/river#1353)
  • SQLite drivers now return a non-nil empty JobRow.Errors slice for jobs without errors, matching the behavior of PostgreSQL drivers and ensuring the field serializes to [] instead of null. [PR #1354](riverqueue/river#1354).
Changelog

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's changelog.

[0.45.0] - 2026-08-25

Changed

Fixed

  • Fixed periodic jobs advancing their durable next run time when job insertion fails. [PR #1359](riverqueue/river#1359).
  • Improved SQLite queue count performance on large job tables by limiting counts to available and running jobs so the existing state and queue index can be used. [PR #1360](riverqueue/river#1360).

[0.44.1] - 2026-08-21

Fixed

  • SQLite job completion, rescue, and full-update paths now serialize timestamps using River's standard millisecond format instead of relying on database driver serialization, preventing inconsistent timestamp representations from being persisted. [PR #1353](riverqueue/river#1353)
  • SQLite drivers now return a non-nil empty JobRow.Errors slice for jobs without errors, matching the behavior of PostgreSQL drivers and ensuring the field serializes to [] instead of null. [PR #1354](riverqueue/river#1354).
Commits

Updates github.com/riverqueue/river/rivertype from 0.44.0 to 0.45.0

Release notes

Sourced from github.com/riverqueue/river/rivertype's releases.

v0.45.0

Changed

Fixed

  • Fixed periodic jobs advancing their durable next run time when job insertion fails. [PR #1359](riverqueue/river#1359).
  • Improved SQLite queue count performance on large job tables by limiting counts to available and running jobs so the existing state and queue index can be used. [PR #1360](riverqueue/river#1360).

v0.44.1

Fixed

  • SQLite job completion, rescue, and full-update paths now serialize timestamps using River's standard millisecond format instead of relying on database driver serialization, preventing inconsistent timestamp representations from being persisted. [PR #1353](riverqueue/river#1353)
  • SQLite drivers now return a non-nil empty JobRow.Errors slice for jobs without errors, matching the behavior of PostgreSQL drivers and ensuring the field serializes to [] instead of null. [PR #1354](riverqueue/river#1354).
Changelog

Sourced from github.com/riverqueue/river/rivertype's changelog.

[0.45.0] - 2026-08-25

Changed

Fixed

  • Fixed periodic jobs advancing their durable next run time when job insertion fails. [PR #1359](riverqueue/river#1359).
  • Improved SQLite queue count performance on large job tables by limiting counts to available and running jobs so the existing state and queue index can be used. [PR #1360](riverqueue/river#1360).

[0.44.1] - 2026-08-21

Fixed

  • SQLite job completion, rescue, and full-update paths now serialize timestamps using River's standard millisecond format instead of relying on database driver serialization, preventing inconsistent timestamp representations from being persisted. [PR #1353](riverqueue/river#1353)
  • SQLite drivers now return a non-nil empty JobRow.Errors slice for jobs without errors, matching the behavior of PostgreSQL drivers and ensuring the field serializes to [] instead of null. [PR #1354](riverqueue/river#1354).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the go-minor-patch group with 9 updates
19830a8 
Bumps the go-minor-patch group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| blitiri.com.ar/go/spf | `1.5.1` | `1.6.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.37` | `1.32.39` |
| [github.com/aws/aws-sdk-go-v2/service/sesv2](https://github.com/aws/aws-sdk-go-v2) | `1.66.6` | `1.67.1` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.45.6` | `1.45.8` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.8` | `1.27.10` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.1` | `5.3.2` |
| [github.com/riverqueue/river](https://github.com/riverqueue/river) | `0.44.0` | `0.45.0` |
| [github.com/riverqueue/river/riverdriver/riverpgxv5](https://github.com/riverqueue/river) | `0.44.0` | `0.45.0` |
| [github.com/riverqueue/river/rivertype](https://github.com/riverqueue/river) | `0.44.0` | `0.45.0` |


Updates `blitiri.com.ar/go/spf` from 1.5.1 to 1.6.0

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.37 to 1.32.39
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.37...config/v1.32.39)

Updates `github.com/aws/aws-sdk-go-v2/service/sesv2` from 1.66.6 to 1.67.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/fsx/v1.66.6...service/s3/v1.67.1)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.45.6 to 1.45.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sts/v1.45.6...service/sts/v1.45.8)

Updates `github.com/aws/smithy-go` from 1.27.8 to 1.27.10
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.8...v1.27.10)

Updates `github.com/go-chi/chi/v5` from 5.3.1 to 5.3.2
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.3.1...v5.3.2)

Updates `github.com/riverqueue/river` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.44.0...v0.45.0)

Updates `github.com/riverqueue/river/riverdriver/riverpgxv5` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.44.0...v0.45.0)

Updates `github.com/riverqueue/river/rivertype` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: blitiri.com.ar/go/spf
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sesv2
  dependency-version: 1.67.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.45.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.27.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/riverqueue/river
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/riverqueue/river/riverdriver/riverpgxv5
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/riverqueue/river/rivertype
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 29, 2026
@dependabot
dependabot Bot requested a review from jiashuoz as a code owner August 29, 2026 10:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jiashuoz jiashuoz Awaiting requested review from jiashuoz jiashuoz is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants