Skip to content

Bump the go-dependencies group across 2 directories with 12 updates - #738

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-8f5660b3fa
Open

Bump the go-dependencies group across 2 directories with 12 updates#738
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-8f5660b3fa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 8 updates in the / directory:

Package From To
github.com/jackc/pgx/v5 5.11.0 5.12.0
github.com/riverqueue/river 0.51.0 0.51.2
github.com/riverqueue/river/riverdriver 0.51.0 0.51.2
github.com/riverqueue/river/riverdriver/riverpgxv5 0.51.0 0.51.2
github.com/riverqueue/river/riverdriver/riversqlite 0.51.0 0.51.2
github.com/riverqueue/river/rivershared 0.51.0 0.51.2
github.com/riverqueue/river/rivertype 0.51.0 0.51.2
modernc.org/sqlite 1.61.0 1.61.1

Bumps the go-dependencies group with 10 updates in the /riverproui directory:

Package From To
github.com/jackc/pgx/v5 5.11.0 5.12.0
github.com/riverqueue/river 0.51.0 0.51.2
github.com/riverqueue/river/riverdriver 0.51.0 0.51.2
github.com/riverqueue/river/rivershared 0.51.0 0.51.2
github.com/riverqueue/river/rivertype 0.51.0 0.51.2
modernc.org/sqlite 1.61.0 1.61.1
riverqueue.com/riverpro 0.32.0 0.33.0
riverqueue.com/riverpro/driver 0.32.0 0.33.0
riverqueue.com/riverpro/driver/riverpropgxv5 0.32.0 0.33.0
riverqueue.com/riverpro/driver/riverprosqlite 0.32.0 0.33.0

Updates github.com/jackc/pgx/v5 from 5.11.0 to 5.12.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.12.0 (October 30, 2026)

This release fixes two security vulnerabilities with narrow triggering conditions but serious impact. Affected applications should upgrade to v5.12.0; see Security Fixes below.

It also adds batched transaction startup, client certificate policy controls, and per-query batch timing, and improves connection pool cancellation and type handling. Custom implementations of BatchResults, including mocks, must add the new Tx method.

Security Fixes

  • SQL injection in simple-protocol batches (GHSA-j38q-h3ph-jjpq, high severity). In pgx v5 before v5.12.0, SendBatch using the non-default simple protocol could allow arbitrary SQL execution with the application's database privileges when a queued query ends in a -- comment without a newline and the next query has an attacker-controlled string argument on its first line. Batched queries are now separated by a newline to end such comments. Extended-protocol modes are unaffected. Reported by Igor Kupczyński (@​igor-kupczynski).
  • Bypass of require_auth and channel_binding=require (GHSA-95fj-3fxw-g62g, high severity). In pgx v5.9.0 through v5.11.0, applications relying on these settings without verifying the server's identity with sslmode=verify-full (or equivalent TLS verification) could accept an impersonating server that skips authentication. The attacker could read queries and parameters and return fabricated results. pgx now enforces authentication completion and required channel binding before accepting the connection. This vulnerability does not bypass TLS server certificate verification. Reported by @​president-xd.

Features

  • Add Batch.BeginTx and BatchResults.Tx to begin a transaction as the first query of a batch, saving the round trip for BeginTx. Call Batch.BeginTx before queuing any queries, consume the begin query's result first, and close the batch before using the transaction. With pgxpool.Pool.SendBatch, the connection remains acquired until the transaction is committed or rolled back. Add FailedBatchResults for wrappers that fail before sending a batch (Timo Furrer)
  • Add TraceBatchQueryData.ReadStartTime and per-query durations to tracelog batch query entries. These measure result consumption, including application time spent reading rows, rather than server execution alone (Yasser-Ameur)
  • pgconn: support the sslcertmode connection parameter, PGSSLCERTMODE environment variable, and Config.SSLCertMode. The default, allow, sends an available client certificate when requested; disable prevents sending one and skips loading certificate/key files; require fails unless the server requests and receives a certificate. require does not guarantee server-side certificate validation, disables TLS session resumption, and stops further host or TLS fallbacks when the certificate requirement fails (k-zshiba)
  • pgtype: add support for PostgreSQL 19's oid8 and oid8[] (k-zshiba)

Changes

  • pgxpool: background attempts to satisfy MinConns and MinIdleConns now have a 60-second timeout, including connection hooks. Initial background connections preserve the constructor context's values but ignore its cancellation and deadline.
  • pgxpool: canceling Acquire during a health-check ping now returns promptly and lets a successful ping return

... (truncated)

Commits
  • b2ef08b Update changelog for v5.12.0
  • 8199015 Merge commit from fork
  • 5b1a6a0 Merge commit from fork
  • 65a4125 Merge pull request #2697 from b84330808/windows-default-servicefile
  • f2701a0 pgconn: only fall back when Windows service file is missing
  • db95468 Merge pull request #2696 from k-zshiba/support-oid8
  • fa2327d Start each query on a new line when joining a simple protocol batch
  • 2283b85 pgconn: read the default service file from %APPDATA%\postgresql on Windows
  • efc0b74 Merge upstream master into support-oid8
  • 5a17450 pgconn: require AuthenticationOk before ReadyForQuery
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river from 0.51.0 to 0.51.2

Release notes

Sourced from github.com/riverqueue/river's releases.

v0.51.2

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

v0.51.1

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Changelog

Sourced from github.com/riverqueue/river's changelog.

[0.51.2] - 2026-11-09

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

[0.51.1] - 2026-11-05

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Commits
  • 8468ff2 [go] Prepare v0.51.2 (#1590)
  • 60004e3 Align SQLite CLI URL forms across languages (#1588)
  • 6a1d035 [go] Stop JobListParams.Where from mutating caller named args (#1575)
  • 72ba253 [java] Prepare v0.4.0 (#1587)
  • 1b26d3b [java] Isolate batch peer decoding failures (#1586)
  • 03b193e [rust] Prepare v0.6.0 (#1585)
  • 7e514e0 [rust] Implement river migrate-get subcommand for Rust CLI (#1584)
  • 6c72392 [go, js, rust] Prepare v0.51.1, v0.3.1, and v0.5.1
  • 9db53b9 [go, js, rust] Fix context canceled problem in start when stopping (#1577)
  • 43e6f22 Poll queue settings as a fallback when a notifier is configured (#1582)
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river/riverdriver from 0.51.0 to 0.51.2

Release notes

Sourced from github.com/riverqueue/river/riverdriver's releases.

v0.51.2

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

v0.51.1

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Changelog

Sourced from github.com/riverqueue/river/riverdriver's changelog.

[0.51.2] - 2026-11-09

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

[0.51.1] - 2026-11-05

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Commits
  • 8468ff2 [go] Prepare v0.51.2 (#1590)
  • 60004e3 Align SQLite CLI URL forms across languages (#1588)
  • 6a1d035 [go] Stop JobListParams.Where from mutating caller named args (#1575)
  • 72ba253 [java] Prepare v0.4.0 (#1587)
  • 1b26d3b [java] Isolate batch peer decoding failures (#1586)
  • 03b193e [rust] Prepare v0.6.0 (#1585)
  • 7e514e0 [rust] Implement river migrate-get subcommand for Rust CLI (#1584)
  • 6c72392 [go, js, rust] Prepare v0.51.1, v0.3.1, and v0.5.1
  • 9db53b9 [go, js, rust] Fix context canceled problem in start when stopping (#1577)
  • 43e6f22 Poll queue settings as a fallback when a notifier is configured (#1582)
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river/riverdriver/riverpgxv5 from 0.51.0 to 0.51.2

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's releases.

v0.51.2

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

v0.51.1

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Changelog

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's changelog.

[0.51.2] - 2026-11-09

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

[0.51.1] - 2026-11-05

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Commits
  • 8468ff2 [go] Prepare v0.51.2 (#1590)
  • 60004e3 Align SQLite CLI URL forms across languages (#1588)
  • 6a1d035 [go] Stop JobListParams.Where from mutating caller named args (#1575)
  • 72ba253 [java] Prepare v0.4.0 (#1587)
  • 1b26d3b [java] Isolate batch peer decoding failures (#1586)
  • 03b193e [rust] Prepare v0.6.0 (#1585)
  • 7e514e0 [rust] Implement river migrate-get subcommand for Rust CLI (#1584)
  • 6c72392 [go, js, rust] Prepare v0.51.1, v0.3.1, and v0.5.1
  • 9db53b9 [go, js, rust] Fix context canceled problem in start when stopping (#1577)
  • 43e6f22 Poll queue settings as a fallback when a notifier is configured (#1582)
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river/riverdriver/riversqlite from 0.51.0 to 0.51.2

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riversqlite's releases.

v0.51.2

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

v0.51.1

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Changelog

Sourced from github.com/riverqueue/river/riverdriver/riversqlite's changelog.

[0.51.2] - 2026-11-09

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

[0.51.1] - 2026-11-05

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Commits
  • 8468ff2 [go] Prepare v0.51.2 (#1590)
  • 60004e3 Align SQLite CLI URL forms across languages (#1588)
  • 6a1d035 [go] Stop JobListParams.Where from mutating caller named args (#1575)
  • 72ba253 [java] Prepare v0.4.0 (#1587)
  • 1b26d3b [java] Isolate batch peer decoding failures (#1586)
  • 03b193e [rust] Prepare v0.6.0 (#1585)
  • 7e514e0 [rust] Implement river migrate-get subcommand for Rust CLI (#1584)
  • 6c72392 [go, js, rust] Prepare v0.51.1, v0.3.1, and v0.5.1
  • 9db53b9 [go, js, rust] Fix context canceled problem in start when stopping (#1577)
  • 43e6f22 Poll queue settings as a fallback when a notifier is configured (#1582)
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river/rivershared from 0.51.0 to 0.51.2

Release notes

Sourced from github.com/riverqueue/river/rivershared's releases.

v0.51.2

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

v0.51.1

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Changelog

Sourced from github.com/riverqueue/river/rivershared's changelog.

[0.51.2] - 2026-11-09

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

[0.51.1] - 2026-11-05

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Commits
  • 8468ff2 [go] Prepare v0.51.2 (#1590)
  • 60004e3 Align SQLite CLI URL forms across languages (#1588)
  • 6a1d035 [go] Stop JobListParams.Where from mutating caller named args (#1575)
  • 72ba253 [java] Prepare v0.4.0 (#1587)
  • 1b26d3b [java] Isolate batch peer decoding failures (#1586)
  • 03b193e [rust] Prepare v0.6.0 (#1585)
  • 7e514e0 [rust] Implement river migrate-get subcommand for Rust CLI (#1584)
  • 6c72392 [go, js, rust] Prepare v0.51.1, v0.3.1, and v0.5.1
  • 9db53b9 [go, js, rust] Fix context canceled problem in start when stopping (#1577)
  • 43e6f22 Poll queue settings as a fallback when a notifier is configured (#1582)
  • Additional commits viewable in compare view

Updates github.com/riverqueue/river/rivertype from 0.51.0 to 0.51.2

Release notes

Sourced from github.com/riverqueue/river/rivertype's releases.

v0.51.2

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

v0.51.1

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Changelog

Sourced from github.com/riverqueue/river/rivertype's changelog.

[0.51.2] - 2026-11-09

Fixed

  • Accept sqlite:path and sqlite::memory: in the CLI alongside the existing sqlite:// forms, including offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Reject empty SQLite paths in commands that connect to a database; bare prefixes remain valid for offline migration SQL export. [PR #1588](riverqueue/river#1588).
  • Fixed JobListParams.Where writing into the first NamedArgs it's given when merging multiple sets of named arguments, which could leak arguments into a map the caller reused for another query. It also no longer panics when the first set is nil. [PR #1575](riverqueue/river#1575).

[0.51.1] - 2026-11-05

Fixed

  • Fixed a client ignoring queue pause, resume, or metadata changes until it restarted when the queue control notification was lost, as happens if it's sent while the client's notifier is reconnecting. Clients with a notifier now also check their queues' settings once a minute. [Issue #1579](riverqueue/river#1579).
  • Fixed the notifier never reconnecting when its connection went silent without an error, like after a dropped network path, because its health check ping had no timeout. The ping now times out after 10 seconds. [Issue #1579](riverqueue/river#1579).
  • Fixed maintenance services logging errors during normal shutdown or leadership loss, including PeriodicJobEnqueuer reporting Error starting transaction: context canceled when stopped during staggered startup. Genuine query timeouts and database failures are still logged, and periodic job transactions now roll back even after cancellation. [PR #1577](riverqueue/river#1577).
Commits
  • 8468ff2 [go] Prepare v0.51.2 (#1590)
  • 60004e3 Align SQLite CLI URL forms across languages (#1588)
  • 6a1d035 [go] Stop JobListParams.Where from mutating caller named args (#1575)
  • 72ba253 [java] Prepare v0.4.0 (#1587)
  • 1b26d3b [java] Isolate batch peer decoding failures (#1586)
  • 03b193e [rust] Prepare v0.6.0 (#1585)
  • 7e514e0 [rust] Implement river migrate-get subcommand for Rust CLI (#1584)
  • 6c72392 [go, js, rust] Prepare v0.51.1, v0.3.1, and v0.5.1
  • 9db53b9 [go, js, rust] Fix context canceled problem in start when stopping (#1577)
  • 43e6f22 Poll queue settings as a fallback when a notifier is configured (#1582)
  • Additional commits viewable in compare view

Updates modernc.org/sqlite from 1.61.0 to 1.61.1

Release notes

Sourced from modernc.org/sqlite's releases.

v1.61.1

Signed provenance for this release: the two files below. VERIFYING.md in the repository says how to check them.

Changelog

Sourced from modernc.org/sqlite's changelog.

Changelog

Entries for v1.38.1 through v1.44.1 and for v1.49.1 were added on 2026-09-05, reconstructed from the git history and the merge requests they cite; they were missing at release time.

  • 2026-11-07 v1.62.0:

    • Add illumos/amd64, tested on an OmniOS builder. Resolves [GitLab issue #210](https://gitlab.com/cznic/sqlite/-/issues/210), thanks Jasper Siepkes (@​siepkes), who also started the modernc.org/libc port!
    • Re-vendor lib/ from modernc.org/libsqlite3 v1.16.0 and vec/ from modernc.org/libsqlite_vec v0.8.0; SQLite stays 3.54.1 and sqlite-vec v0.1.9. The pinned modernc.org/libc becomes v1.80.1; as always, downstream go.mod files must pin the same modernc.org/libc version this repository's go.mod does, see [GitLab issue #177](https://gitlab.com/cznic/sqlite/-/issues/177).
    • Add opt-in syncing with fdatasync(2), off by default: Fdatasync(true) makes commits sync with fdatasync instead of fsync, process-wide, which skips the timestamp update fsync forces and keeps a commit just as durable. FdatasyncEnabled reports the setting; on macOS and Windows Fdatasync returns ErrFdatasyncUnavailable. Resolves [GitHub issue #10](modernc-org/sqlite#10), thanks aibeshkov!
    • Limit now works on a connection handed out by a driver.Connector that wraps the ones NewConnector opens, provided the wrapper has an Unwrap() driver.Conn method; it used to fail with unexpected driverConn type. NewConnector now also says which optional interfaces such a wrapper must forward. Resolves [GitHub issue #11](modernc-org/sqlite#11), thanks Andres Morey (@​amorey)!

  • 2026-10-31 v1.61.1:

    • Prepared statements are no longer parsed and planned again on every execution. Since v1.61.0, SQLite 3.54 expired a cached statement that has a col = ? term in a join or an ORDER BY query whenever the driver cleared its bindings after a run, so a statement prepared with db.Prepare or tx.Prepare cost about twice what it did in v1.60.1. Integer bindings now stay in place between executions, so a parameter bound to 0 or 1 does not re-prepare it either. Resolves [GitLab issue #264](https://gitlab.com/cznic/sqlite/-/issues/264). See [GitLab merge request #147](https://gitlab.com/cznic/sqlite/-/merge_requests/147), thanks Roman Khafizianov (@​requilence)!
    • Fix a panic reachable from SQL through a VFS made by vfs.New. It reported its files as writable, so with PRAGMA journal_mode=OFF a write reached a write method the VFS does not have and the process panicked, as did closing a WAL database shipped with its -wal file; with the journal on, the write failed with a misleading SQLITE_NOMEM. Such files are now read-only to SQLite, and every write fails with SQLITE_READONLY. See [GitLab merge request #145](https://gitlab.com/cznic/sqlite/-/merge_requests/145), thanks Ian Chechin!
    • Fix a process abort reachable through a VFS made by vfs.New. SQLite's request to delete a journal, made when PRAGMA journal_mode leaves PERSIST or TRUNCATE and on the first read of a 0-byte database that has a -journal file next to it in the served file system, reached the transpiled xDelete, an unimplemented stub that aborted the process. It now fails with SQLITE_IOERR_DELETE, which SQLite tolerates, and nothing is deleted; the write methods the VFS lacked answer SQLITE_READONLY instead of being nil.
    • Tx.Commit now stops waiting for a lock once the context given to BeginTx is done, and Rows.Next and Rows.Close once the query's context is done, each returning the context's error; they used to wait the full busy_timeout when a reader's lock in rollback-journal mode blocked the COMMIT, or the commit of an autocommit INSERT ... RETURNING finished or closed after its first row. Only the wait watches the context; Rollback is unchanged. Resolves [GitLab issue Description has been truncated

@dependabot
Bump the go-dependencies group across 2 directories with 12 updates
bb8f809 
Bumps the go-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.11.0` | `5.12.0` |
| [github.com/riverqueue/river](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [github.com/riverqueue/river/riverdriver](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [github.com/riverqueue/river/riverdriver/riverpgxv5](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [github.com/riverqueue/river/riverdriver/riversqlite](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [github.com/riverqueue/river/rivershared](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [github.com/riverqueue/river/rivertype](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.61.0` | `1.61.1` |

Bumps the go-dependencies group with 10 updates in the /riverproui directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.11.0` | `5.12.0` |
| [github.com/riverqueue/river](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [github.com/riverqueue/river/riverdriver](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [github.com/riverqueue/river/rivershared](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [github.com/riverqueue/river/rivertype](https://github.com/riverqueue/river) | `0.51.0` | `0.51.2` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.61.0` | `1.61.1` |
| riverqueue.com/riverpro | `0.32.0` | `0.33.0` |
| riverqueue.com/riverpro/driver | `0.32.0` | `0.33.0` |
| riverqueue.com/riverpro/driver/riverpropgxv5 | `0.32.0` | `0.33.0` |
| riverqueue.com/riverpro/driver/riverprosqlite | `0.32.0` | `0.33.0` |



Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `github.com/riverqueue/river` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `github.com/riverqueue/river/riverdriver` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `github.com/riverqueue/river/riverdriver/riverpgxv5` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `github.com/riverqueue/river/riverdriver/riversqlite` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `github.com/riverqueue/river/rivershared` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `github.com/riverqueue/river/rivertype` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `modernc.org/sqlite` from 1.61.0 to 1.61.1
- [Release notes](https://gitlab.com/cznic/sqlite/tags)
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.61.0...v1.61.1)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `github.com/riverqueue/river` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `github.com/riverqueue/river/riverdriver` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `github.com/riverqueue/river/rivershared` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `github.com/riverqueue/river/rivertype` from 0.51.0 to 0.51.2
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.51.0...v0.51.2)

Updates `modernc.org/sqlite` from 1.61.0 to 1.61.1
- [Release notes](https://gitlab.com/cznic/sqlite/tags)
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.61.0...v1.61.1)

Updates `riverqueue.com/riverpro` from 0.32.0 to 0.33.0

Updates `riverqueue.com/riverpro/driver` from 0.32.0 to 0.33.0

Updates `riverqueue.com/riverpro/driver/riverpropgxv5` from 0.32.0 to 0.33.0

Updates `riverqueue.com/riverpro/driver/riverprosqlite` from 0.32.0 to 0.33.0

---
updated-dependencies:
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river/riverdriver
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river/riverdriver/riverpgxv5
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river/riverdriver/riversqlite
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river/rivershared
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river/rivertype
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: modernc.org/sqlite
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river/riverdriver
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river/rivershared
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/riverqueue/river/rivertype
  dependency-version: 0.51.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: modernc.org/sqlite
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: riverqueue.com/riverpro
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: riverqueue.com/riverpro/driver
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: riverqueue.com/riverpro/driver/riverpropgxv5
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: riverqueue.com/riverpro/driver/riverprosqlite
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants