build(deps): bump the river group across 1 directory with 2 updates

[dependabot]

Bumps the river group with 1 update in the / directory: github.com/riverqueue/river.

Updates github.com/riverqueue/river from 0.35.0 to 0.40.0

Release notes

Sourced from github.com/riverqueue/river's releases.

v0.40.0

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

v0.39.0

⚠️ Breaking API change: rivermigrate.Migrator.Validate and rivermigrate.Migrator.ValidateTx now take a *rivermigrate.ValidateOpts parameter. Pass nil to preserve previous behavior. We normally endeavor not to make any breaking API changes, but this one will keep the API in a much nicer state, and is on an ancillary function that most installations won't be using. [PR #1259](riverqueue/river#1259)

Added

... (truncated)

Changelog

Sourced from github.com/riverqueue/river's changelog.

[0.40.0] - 2026-07-02

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

[0.39.0] - 2026-06-03

⚠️ Breaking API change: rivermigrate.Migrator.Validate and rivermigrate.Migrator.ValidateTx now take a *rivermigrate.ValidateOpts parameter. Pass nil to preserve previous behavior. We normally endeavor not to make any breaking API changes, but this one will keep the API in a much nicer state, and is on an ancillary function that most installations won't be using. [PR #1259](riverqueue/river#1259)

... (truncated)

Commits

• cd033be Prepare release 0.40.0 (#1295)
• 986ac94 reindex numbered concurrent artifacts (#1297)
• 78ae535 Add JobStuckHandler callback (#1291)
• 944f077 LLM-based optimizations for BatchCompleter (#1293)
• 3b4bcea Smoother completion: Earlier backpressure + possible early completion + fewer...
• 7a8e689 Fixes for SQLite version 007 migration (#1283)
• 857350a Bump the go-dependencies group across 3 directories with 1 update (#1294)
• f2512a7 Never rescue jobs that return a timeout of -1 (#1288)
• 4fa0562 Bump the go-dependencies group across 3 directories with 3 updates (#1286)
• d3b0ef7 Changelog fixes for v0.40.0 (#1282)
• Additional commits viewable in compare view

Updates github.com/riverqueue/river/riverdriver/riverpgxv5 from 0.35.0 to 0.40.0

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's releases.

v0.40.0

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

v0.39.0

⚠️ Breaking API change: rivermigrate.Migrator.Validate and rivermigrate.Migrator.ValidateTx now take a *rivermigrate.ValidateOpts parameter. Pass nil to preserve previous behavior. We normally endeavor not to make any breaking API changes, but this one will keep the API in a much nicer state, and is on an ancillary function that most installations won't be using. [PR #1259](riverqueue/river#1259)

Added

... (truncated)

Changelog

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's changelog.

[0.40.0] - 2026-07-02

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

[0.39.0] - 2026-06-03

⚠️ Breaking API change: rivermigrate.Migrator.Validate and rivermigrate.Migrator.ValidateTx now take a *rivermigrate.ValidateOpts parameter. Pass nil to preserve previous behavior. We normally endeavor not to make any breaking API changes, but this one will keep the API in a much nicer state, and is on an ancillary function that most installations won't be using. [PR #1259](riverqueue/river#1259)

... (truncated)

Commits

• cd033be Prepare release 0.40.0 (#1295)
• 986ac94 reindex numbered concurrent artifacts (#1297)
• 78ae535 Add JobStuckHandler callback (#1291)
• 944f077 LLM-based optimizations for BatchCompleter (#1293)
• 3b4bcea Smoother completion: Earlier backpressure + possible early completion + fewer...
• 7a8e689 Fixes for SQLite version 007 migration (#1283)
• 857350a Bump the go-dependencies group across 3 directories with 1 update (#1294)
• f2512a7 Never rescue jobs that return a timeout of -1 (#1288)
• 4fa0562 Bump the go-dependencies group across 3 directories with 3 updates (#1286)
• d3b0ef7 Changelog fixes for v0.40.0 (#1282)
• Additional commits viewable in compare view