Skip to content

build(deps): bump the go-deps group across 1 directory with 8 updates#4493

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-deps-31b642e9b5
Open

build(deps): bump the go-deps group across 1 directory with 8 updates#4493
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-deps-31b642e9b5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 16, 2026

Bumps the go-deps group with 6 updates in the / directory:

Package From To
github.com/brianvoe/gofakeit/v7 7.14.1 7.15.0
github.com/nyaruka/phonenumbers 1.7.2 1.7.4
github.com/riverqueue/river 0.35.1 0.37.1
github.com/riverqueue/river/riverdriver/riverdatabasesql 0.35.1 0.37.1
golang.org/x/crypto 0.50.0 0.51.0
google.golang.org/grpc 1.81.0 1.81.1

Updates github.com/brianvoe/gofakeit/v7 from 7.14.1 to 7.15.0

Commits
  • 010dc54 email - better email generation with weighted mix and testing valid email gen...
  • 794efc9 password - space usage adjustment
  • See full diff in compare view

Updates github.com/nyaruka/phonenumbers from 1.7.2 to 1.7.4

Changelog

Sourced from github.com/nyaruka/phonenumbers's changelog.

v1.7.4 (2026-05-11)

  • Fix stale Ahmedabad geocoding test after upstream data update
  • Updated metadata

v1.7.3 (2026-05-11)

  • Update metadata
Commits
  • 41fa9ca Update CHANGELOG.md for v1.7.4
  • 8fcae48 Merge pull request #226 from nyaruka/fix/geocoding-test-stale-prefix
  • af6e82e Fix stale Ahmedabad geocoding test after upstream data update
  • e2f67fe Update CHANGELOG.md for v1.7.3
  • 12a1da9 Updated metadata
  • See full diff in compare view

Updates github.com/riverqueue/river from 0.35.1 to 0.37.1

Release notes

Sourced from github.com/riverqueue/river's releases.

v0.37.1

Fixed

  • Wrap PeriodicJobEnqueuer.insertBatch database calls in a 30-second timeout. Previously, a stalled pgx Begin/Insert/Commit could hang the periodic enqueuer indefinitely, halting all periodic job insertion until the process was restarted or leader re-elected. [PR #1251](riverqueue/river#1251)

v0.37.0

Added

  • Added "resumable jobs" that can be broken down into multiple steps and with a step persisted after it finishes that lets them skip work that's already been done. This is particularly useful for long running jobs that may experience a cancellation (like in the event of a deploy) during the span of their run. [PR #1226](riverqueue/river#1226).

v0.36.0

Added

Fixed

  • Fix unsafe concurrent producer map access in client. [PR #1236](riverqueue/river#1236).
  • Mark schema replacements as Stable in sqlc templates, preventing query SQL from having to be reallocated over and over again.. [PR #1242](riverqueue/river#1242).
  • Fix bug in sqltemplate cached path in order in which named args are passed to a query (previously, the order was unstable). [PR #1243](riverqueue/river#1243).
Changelog

Sourced from github.com/riverqueue/river's changelog.

[0.37.1] - 2026-05-15

Fixed

  • Wrap PeriodicJobEnqueuer.insertBatch database calls in a 30-second timeout. Previously, a stalled pgx Begin/Insert/Commit could hang the periodic enqueuer indefinitely, halting all periodic job insertion until the process was restarted or leader re-elected. [PR #1251](riverqueue/river#1251)

[0.37.0] - 2026-05-11

Added

  • Added "resumable jobs" that can be broken down into multiple steps and with a step persisted after it finishes that lets them skip work that's already been done. This is particularly useful for long running jobs that may experience a cancellation (like in the event of a deploy) during the span of their run. [PR #1226](riverqueue/river#1226).

[0.36.0] - 2026-05-09

Added

Fixed

  • Fix unsafe concurrent producer map access in client. [PR #1236](riverqueue/river#1236).
  • Mark schema replacements as Stable in sqlc templates, preventing query SQL from having to be reallocated over and over again.. [PR #1242](riverqueue/river#1242).
  • Fix bug in sqltemplate cached path in order in which named args are passed to a query (previously, the order was unstable). [PR #1243](riverqueue/river#1243).
Commits
  • 6e9d05c Prepare release 0.37.1 (#1252)
  • df28c1c Add 30s timeout to PeriodicJobEnqueuer insertBatch (#1251)
  • 0da4e6a Remove insert-only client section in the README (#1237)
  • 51699f5 Prepare version 0.37.0 (#1250)
  • 017f408 Implement resumable jobs (#1226)
  • 11ebb22 Fix intermittently failing test `Test_Client_JobCompletion/JobThatReturnsErrI...
  • 4a75e68 Add initTestConfig helper for more succinct example tests (#1249)
  • 374ca2e Bump the go-dependencies group across 4 directories with 3 updates (#1246)
  • 86f0c84 Prepare release 0.36.0 (#1244)
  • 82c968a A few tweaks to QueueBundle.Remove implementation (#1240)
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river/riverdriver/riverdatabasesql from 0.35.1 to 0.37.1

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riverdatabasesql's releases.

v0.37.1

Fixed

  • Wrap PeriodicJobEnqueuer.insertBatch database calls in a 30-second timeout. Previously, a stalled pgx Begin/Insert/Commit could hang the periodic enqueuer indefinitely, halting all periodic job insertion until the process was restarted or leader re-elected. [PR #1251](riverqueue/river#1251)

v0.37.0

Added

  • Added "resumable jobs" that can be broken down into multiple steps and with a step persisted after it finishes that lets them skip work that's already been done. This is particularly useful for long running jobs that may experience a cancellation (like in the event of a deploy) during the span of their run. [PR #1226](riverqueue/river#1226).

v0.36.0

Added

Fixed

  • Fix unsafe concurrent producer map access in client. [PR #1236](riverqueue/river#1236).
  • Mark schema replacements as Stable in sqlc templates, preventing query SQL from having to be reallocated over and over again.. [PR #1242](riverqueue/river#1242).
  • Fix bug in sqltemplate cached path in order in which named args are passed to a query (previously, the order was unstable). [PR #1243](riverqueue/river#1243).
Changelog

Sourced from github.com/riverqueue/river/riverdriver/riverdatabasesql's changelog.

[0.37.1] - 2026-05-15

Fixed

  • Wrap PeriodicJobEnqueuer.insertBatch database calls in a 30-second timeout. Previously, a stalled pgx Begin/Insert/Commit could hang the periodic enqueuer indefinitely, halting all periodic job insertion until the process was restarted or leader re-elected. [PR #1251](riverqueue/river#1251)

[0.37.0] - 2026-05-11

Added

  • Added "resumable jobs" that can be broken down into multiple steps and with a step persisted after it finishes that lets them skip work that's already been done. This is particularly useful for long running jobs that may experience a cancellation (like in the event of a deploy) during the span of their run. [PR #1226](riverqueue/river#1226).

[0.36.0] - 2026-05-09

Added

Fixed

  • Fix unsafe concurrent producer map access in client. [PR #1236](riverqueue/river#1236).
  • Mark schema replacements as Stable in sqlc templates, preventing query SQL from having to be reallocated over and over again.. [PR #1242](riverqueue/river#1242).
  • Fix bug in sqltemplate cached path in order in which named args are passed to a query (previously, the order was unstable). [PR #1243](riverqueue/river#1243).
Commits
  • 6e9d05c Prepare release 0.37.1 (#1252)
  • df28c1c Add 30s timeout to PeriodicJobEnqueuer insertBatch (#1251)
  • 0da4e6a Remove insert-only client section in the README (#1237)
  • 51699f5 Prepare version 0.37.0 (#1250)
  • 017f408 Implement resumable jobs (#1226)
  • 11ebb22 Fix intermittently failing test `Test_Client_JobCompletion/JobThatReturnsErrI...
  • 4a75e68 Add initTestConfig helper for more succinct example tests (#1249)
  • 374ca2e Bump the go-dependencies group across 4 directories with 3 updates (#1246)
  • 86f0c84 Prepare release 0.36.0 (#1244)
  • 82c968a A few tweaks to QueueBundle.Remove implementation (#1240)
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river/riverdriver/riverpgxv5 from 0.35.1 to 0.37.1

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's releases.

v0.37.1

Fixed

  • Wrap PeriodicJobEnqueuer.insertBatch database calls in a 30-second timeout. Previously, a stalled pgx Begin/Insert/Commit could hang the periodic enqueuer indefinitely, halting all periodic job insertion until the process was restarted or leader re-elected. [PR #1251](riverqueue/river#1251)

v0.37.0

Added

  • Added "resumable jobs" that can be broken down into multiple steps and with a step persisted after it finishes that lets them skip work that's already been done. This is particularly useful for long running jobs that may experience a cancellation (like in the event of a deploy) during the span of their run. [PR #1226](riverqueue/river#1226).

v0.36.0

Added

Fixed

  • Fix unsafe concurrent producer map access in client. [PR #1236](riverqueue/river#1236).
  • Mark schema replacements as Stable in sqlc templates, preventing query SQL from having to be reallocated over and over again.. [PR #1242](riverqueue/river#1242).
  • Fix bug in sqltemplate cached path in order in which named args are passed to a query (previously, the order was unstable). [PR #1243](riverqueue/river#1243).
Changelog

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's changelog.

[0.37.1] - 2026-05-15

Fixed

  • Wrap PeriodicJobEnqueuer.insertBatch database calls in a 30-second timeout. Previously, a stalled pgx Begin/Insert/Commit could hang the periodic enqueuer indefinitely, halting all periodic job insertion until the process was restarted or leader re-elected. [PR #1251](riverqueue/river#1251)

[0.37.0] - 2026-05-11

Added

  • Added "resumable jobs" that can be broken down into multiple steps and with a step persisted after it finishes that lets them skip work that's already been done. This is particularly useful for long running jobs that may experience a cancellation (like in the event of a deploy) during the span of their run. [PR #1226](riverqueue/river#1226).

[0.36.0] - 2026-05-09

Added

Fixed

  • Fix unsafe concurrent producer map access in client. [PR #1236](riverqueue/river#1236).
  • Mark schema replacements as Stable in sqlc templates, preventing query SQL from having to be reallocated over and over again.. [PR #1242](riverqueue/river#1242).
  • Fix bug in sqltemplate cached path in order in which named args are passed to a query (previously, the order was unstable). [PR #1243](riverqueue/river#1243).
Commits
  • 6e9d05c Prepare release 0.37.1 (#1252)
  • df28c1c Add 30s timeout to PeriodicJobEnqueuer insertBatch (#1251)
  • 0da4e6a Remove insert-only client section in the README (#1237)
  • 51699f5 Prepare version 0.37.0 (#1250)
  • 017f408 Implement resumable jobs (#1226)
  • 11ebb22 Fix intermittently failing test `Test_Client_JobCompletion/JobThatReturnsErrI...
  • 4a75e68 Add initTestConfig helper for more succinct example tests (#1249)
  • 374ca2e Bump the go-dependencies group across 4 directories with 3 updates (#1246)
  • 86f0c84 Prepare release 0.36.0 (#1244)
  • 82c968a A few tweaks to QueueBundle.Remove implementation (#1240)
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river/rivertype from 0.35.1 to 0.37.1

Release notes

Sourced from github.com/riverqueue/river/rivertype's releases.

v0.37.1

Fixed

  • Wrap PeriodicJobEnqueuer.insertBatch database calls in a 30-second timeout. Previously, a stalled pgx Begin/Insert/Commit could hang the periodic enqueuer indefinitely, halting all periodic job insertion until the process was restarted or leader re-elected. [PR #1251](riverqueue/river#1251)

v0.37.0

Added

  • Added "resumable jobs" that can be broken down into multiple steps and with a step persisted after it finishes that lets them skip work that's already been done. This is particularly useful for long running jobs that may experience a cancellation (like in the event of a deploy) during the span of their run. [PR #1226](riverqueue/river#1226).

v0.36.0

Added

Fixed

  • Fix unsafe concurrent producer map access in client. [PR #1236](riverqueue/river#1236).
  • Mark schema replacements as Stable in sqlc templates, preventing query SQL from having to be reallocated over and over again.. [PR #1242](riverqueue/river#1242).
  • Fix bug in sqltemplate cached path in order in which named args are passed to a query (previously, the order was unstable). [PR #1243](riverqueue/river#1243).
Changelog

Sourced from github.com/riverqueue/river/rivertype's changelog.

[0.37.1] - 2026-05-15

Fixed

  • Wrap PeriodicJobEnqueuer.insertBatch database calls in a 30-second timeout. Previously, a stalled pgx Begin/Insert/Commit could hang the periodic enqueuer indefinitely, halting all periodic job insertion until the process was restarted or leader re-elected. [PR #1251](riverqueue/river#1251)

[0.37.0] - 2026-05-11

Added

  • Added "resumable jobs" that can be broken down into multiple steps and with a step persisted after it finishes that lets them skip work that's already been done. This is particularly useful for long running jobs that may experience a cancellation (like in the event of a deploy) during the span of their run. [PR #1226](riverqueue/river#1226).

[0.36.0] - 2026-05-09

Added

Fixed

  • Fix unsafe concurrent producer map access in client. [PR #1236](riverqueue/river#1236).
  • Mark schema replacements as Stable in sqlc templates, preventing query SQL from having to be reallocated over and over again.. [PR #1242](riverqueue/river#1242).
  • Fix bug in sqltemplate cached path in order in which named args are passed to a query (previously, the order was unstable). [PR #1243](riverqueue/river#1243).
Commits
  • 6e9d05c Prepare release 0.37.1 (#1252)
  • df28c1c Add 30s timeout to PeriodicJobEnqueuer insertBatch (#1251)
  • 0da4e6a Remove insert-only client section in the README (#1237)
  • 51699f5 Prepare version 0.37.0 (#1250)
  • 017f408 Implement resumable jobs (#1226)
  • 11ebb22 Fix intermittently failing test `Test_Client_JobCompletion/JobThatReturnsErrI...
  • 4a75e68 Add initTestConfig helper for more succinct example tests (#1249)
  • 374ca2e Bump the go-dependencies group across 4 directories with 3 updates (#1246)
  • 86f0c84 Prepare release 0.36.0 (#1244)
  • 82c968a A few tweaks to QueueBundle.Remove implementation (#1240)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.50.0 to 0.51.0

Commits
  • b8a14a8 go.mod: update golang.org/x dependencies
  • 9d9d507 x509roots/fallback/bundle: fix bundle test with Go 1.27+
  • fd0b90d acme: include Problem in OrderError.Error
  • b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2
  • cc0e4fc hkdf: forward Extract to the standard library
  • a8e9237 x509roots/fallback: update bundle
  • See full diff in compare view

Updates google.golang.org/grpc from 1.81.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the go-deps group across 1 directory with 8 updates
6c5b81c 
Bumps the go-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/brianvoe/gofakeit/v7](https://github.com/brianvoe/gofakeit) | `7.14.1` | `7.15.0` |
| [github.com/nyaruka/phonenumbers](https://github.com/nyaruka/phonenumbers) | `1.7.2` | `1.7.4` |
| [github.com/riverqueue/river](https://github.com/riverqueue/river) | `0.35.1` | `0.37.1` |
| [github.com/riverqueue/river/riverdriver/riverdatabasesql](https://github.com/riverqueue/river) | `0.35.1` | `0.37.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.0` | `1.81.1` |



Updates `github.com/brianvoe/gofakeit/v7` from 7.14.1 to 7.15.0
- [Release notes](https://github.com/brianvoe/gofakeit/releases)
- [Commits](brianvoe/gofakeit@v7.14.1...v7.15.0)

Updates `github.com/nyaruka/phonenumbers` from 1.7.2 to 1.7.4
- [Release notes](https://github.com/nyaruka/phonenumbers/releases)
- [Changelog](https://github.com/nyaruka/phonenumbers/blob/main/CHANGELOG.md)
- [Commits](nyaruka/phonenumbers@v1.7.2...v1.7.4)

Updates `github.com/riverqueue/river` from 0.35.1 to 0.37.1
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.35.1...v0.37.1)

Updates `github.com/riverqueue/river/riverdriver/riverdatabasesql` from 0.35.1 to 0.37.1
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.35.1...v0.37.1)

Updates `github.com/riverqueue/river/riverdriver/riverpgxv5` from 0.35.1 to 0.37.1
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.35.1...v0.37.1)

Updates `github.com/riverqueue/river/rivertype` from 0.35.1 to 0.37.1
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.35.1...v0.37.1)

Updates `golang.org/x/crypto` from 0.50.0 to 0.51.0
- [Commits](golang/crypto@v0.50.0...v0.51.0)

Updates `google.golang.org/grpc` from 1.81.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

---
updated-dependencies:
- dependency-name: github.com/brianvoe/gofakeit/v7
  dependency-version: 7.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/nyaruka/phonenumbers
  dependency-version: 1.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/riverqueue/river
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/riverqueue/river/riverdriver/riverdatabasesql
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/riverqueue/river/riverdriver/riverpgxv5
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/riverqueue/river/rivertype
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/xs

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants