Bump the go-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the go-dependencies group with 2 updates in the / directory: github.com/riverqueue/river/rivershared and github.com/stretchr/testify.

Updates github.com/riverqueue/river/rivershared from 0.43.0 to 0.44.0

Release notes

Sourced from github.com/riverqueue/river/rivershared's releases.

v0.44.0

Added

• Added EventKindJobInterrupted, emitted when a running job is interrupted because its client is shutting down, the job was cancelled, and has been made immediately available to be worked again. [PR #1290](riverqueue/river#1290).

Changed

• Jobs that didn't finish in time organically while a client was stopping and had to have their context cancelled no longer have this cancellation counted as an error. attempt is reset to the number it was before the job started working, errors is left unchanged, and state is made available so jobs are eligible to be retried immediately. [PR #1290](riverqueue/river#1290)

Fixed

• Write timestamps in SQLite to always include three digits after the second like .000. Previously, they may have been truncated down to just .0 in the case of trailing zeroes. [PR #1349](riverqueue/river#1349)
• Job completion events now reflect the job's persisted outcome when it differs from the transition requested by the worker. For example, a job completed with JobCompleteTx before its worker returns an error emits job_completed, and a remotely cancelled job whose worker errors or snoozes emits job_cancelled. Applications subscribed only to job_failed or job_snoozed should note that these events may instead be delivered to job_completed or job_cancelled subscribers. [PR #1350](riverqueue/river#1350)

Changelog

Sourced from github.com/riverqueue/river/rivershared's changelog.

[0.44.0] - 2026-08-18

Added

• Added EventKindJobInterrupted, emitted when a running job is interrupted because its client is shutting down, the job was cancelled, and has been made immediately available to be worked again. [PR #1290](riverqueue/river#1290).

Changed

• Jobs that didn't finish in time organically while a client was stopping and had to have their context cancelled no longer have this cancellation counted as an error. attempt is reset to the number it was before the job started working, errors is left unchanged, and state is made available so jobs are eligible to be retried immediately. [PR #1290](riverqueue/river#1290)

Fixed

• Write timestamps in SQLite to always include three digits after the second like .000. Previously, they may have been truncated down to just .0 in the case of trailing zeroes. [PR #1349](riverqueue/river#1349)
• Job completion events now reflect the job's persisted outcome when it differs from the transition requested by the worker. For example, a job completed with JobCompleteTx before its worker returns an error emits job_completed, and a remotely cancelled job whose worker errors or snoozes emits job_cancelled. Applications subscribed only to job_failed or job_snoozed should note that these events may instead be delivered to job_completed or job_cancelled subscribers. [PR #1350](riverqueue/river#1350)

Commits

• d675f7d Prepare version 0.44.0 (#1352)
• 0b7bcc7 Remove post-persist ambiguity and have events match emitted state (#1350)
• 7054a22 Bump the go-dependencies group across 3 directories with 2 updates (#1351)
• a29542b Fix SQLite timestamp millisecond formatting to always include 3 digits (#1349)
• 7ac5a2c Bump the go-dependencies group across 3 directories with 1 update (#1345)
• fdf6cdf Make jobs cancelled due to a soft stop immediately available (#1290)
• 238776f Don't allow testsignal to pick up non-stdlib dependencies (#1343)
• See full diff in compare view

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

• 959dbda Merge pull request #1935 from harryzcy/yaml-update
• 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
• 0358d0e change yaml library to go.yaml.in/yaml/v3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions