chore(deps): bump the go-deps group with 8 updates

[dependabot]

Bumps the go-deps group with 8 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	1.45.1	1.46.0
github.com/aws/aws-sdk-go-v2/config	1.33.1	1.33.3
github.com/aws/aws-sdk-go-v2/service/kms	1.57.1	1.59.0
github.com/pressly/goose/v3	3.27.3	3.28.0
github.com/riverqueue/river	0.46.0	0.47.0
github.com/riverqueue/river/riverdriver/riverpgxv5	0.46.0	0.47.0
github.com/riverqueue/river/rivertype	0.46.0	0.47.0
golang.org/x/crypto	0.55.0	0.56.0

Updates github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.46.0

Commits

• afdc89f Release 2026-09-04
• 5875f61 Regenerated Clients
• 9d20eaa Update API model
• 08c63d9 Remove span retry loop middleware (#3543)
• 99b223d Release 2026-09-03
• 2d2fdf6 Regenerated Clients
• 093c165 Update API model
• 5b4cd6f Release 2026-09-02
• 9e02039 Regenerated Clients
• b785dd9 Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.1 to 1.33.3

Commits

• afdc89f Release 2026-09-04
• 5875f61 Regenerated Clients
• 9d20eaa Update API model
• 08c63d9 Remove span retry loop middleware (#3543)
• 99b223d Release 2026-09-03
• 2d2fdf6 Regenerated Clients
• 093c165 Update API model
• 5b4cd6f Release 2026-09-02
• 9e02039 Regenerated Clients
• b785dd9 Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.57.1 to 1.59.0

Commits

• 1d44177 Release 2024-08-15
• bab4916 Regenerated Clients
• 2d4ecf5 Update endpoints model
• df4f4e1 Update API model
• 51ca5b5 bump smithy-go and go version (#2750)
• 39ddd61 Release 2024-08-14
• ffaf282 Regenerated Clients
• 6beafa8 Update API model
• 57f6f2d Release 2024-08-13
• cdeb8a6 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/pressly/goose/v3 from 3.27.3 to 3.28.0

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.28.0

Added

• CLI: azuresql driver for Azure SQL with Microsoft Entra ID (Azure AD) authentication via fedauth connection string parameters, e.g. goose azuresql "sqlserver://host?database=mydb&fedauth=ActiveDirectoryDefault" status. Excluded when building with the no_mssql or no_azuresql tags (#1109)
• MySQL/MariaDB table-based Locker via lock.NewMySQLTableLocker, the MySQL counterpart to the Postgres table locker from #993, accepting the same TableLockerOption set (#1075)

Changed

• Minimum Go version is now 1.26
• ClickHouse: new goose_db_version tables are created with ORDER BY (version_id) instead of ORDER BY (date). Existing tables are unchanged (#1085)
• MySQL/TiDB: the tstamp column is now DATETIME instead of TIMESTAMP, which is capped at 2038-01-19 (#1053). Only newly created tables are affected; existing tables can be updated with:

  ALTER TABLE goose_db_version MODIFY tstamp datetime NULL DEFAULT CURRENT_TIMESTAMP;

• Various dependency upgrades

Fixed

• goose create returns a clear "file exists" error, including the path, instead of %!w(<nil>) when the migration file already exists (#1104)

Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.28.0] - 2026-09-02

Added

• CLI: azuresql driver for Azure SQL with Microsoft Entra ID (Azure AD) authentication via fedauth connection string parameters, e.g. goose azuresql "sqlserver://host?database=mydb&fedauth=ActiveDirectoryDefault" status. Excluded when building with the no_mssql or no_azuresql tags (#1109)
• MySQL/MariaDB table-based Locker via lock.NewMySQLTableLocker, the MySQL counterpart to the Postgres table locker from #993, accepting the same TableLockerOption set (#1075)

Changed

• Minimum Go version is now 1.26

• ClickHouse: new goose_db_version tables are created with ORDER BY (version_id) instead of ORDER BY (date). Existing tables are unchanged (#1085)

• MySQL/TiDB: the tstamp column is now DATETIME instead of TIMESTAMP, which is capped at 2038-01-19 (#1053). Only newly created tables are affected; existing tables can be updated with:

  ALTER TABLE goose_db_version MODIFY tstamp datetime NULL DEFAULT CURRENT_TIMESTAMP;

• Various dependency upgrades

Fixed

• goose create returns a clear "file exists" error, including the path, instead of %!w(<nil>) when the migration file already exists (#1104)

Commits

• 43d2d9c release: v3.28.0
• c65c559 docs: update changelog
• 674e150 fix: use DATETIME instead of TIMESTAMP for MySQL/TiDB tstamp column (Y2K38) (...
• f604e88 fix: include path in duplicate migration file error and use 0666 mode
• 5f12f79 fix: return clear error when migration file already exists (#1104)
• 4766566 fix: use version_id instead of date as ordering key (#1085)
• 751ff94 docs: add Go 1.26.0 bump and dependency upgrades to changelog
• 34124ac fix: wait for an alive StarRocks backend in tests (#1114)
• f5caf10 chore: bump dependencies and go to 1.26.0 (#1113)
• 2e8e87a Add azuresql driver with EntraID auth (#1109)
• Additional commits viewable in compare view

Updates github.com/riverqueue/river from 0.46.0 to 0.47.0

Release notes

Sourced from github.com/riverqueue/river's releases.

v0.47.0

Added

• Added hook for River's CLI command framework that can be used to inject custom SQLite initialization. Used by River Pro. [PR #1369](riverqueue/river#1369).

Changelog

Sourced from github.com/riverqueue/river's changelog.

[0.47.0] - 2026-09-01

Added

• Added hook for River's CLI command framework that can be used to inject custom SQLite initialization. Used by River Pro. [PR #1369](riverqueue/river#1369).

Commits

• 48c0036 Prepare release v0.47.0 (#1370)
• a65e40d Add hook to support Pro SQLite driver (#1369)
• See full diff in compare view

Updates github.com/riverqueue/river/riverdriver/riverpgxv5 from 0.46.0 to 0.47.0

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's releases.

v0.47.0

Added

• Added hook for River's CLI command framework that can be used to inject custom SQLite initialization. Used by River Pro. [PR #1369](riverqueue/river#1369).

Changelog

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's changelog.

[0.47.0] - 2026-09-01

Added

• Added hook for River's CLI command framework that can be used to inject custom SQLite initialization. Used by River Pro. [PR #1369](riverqueue/river#1369).

Commits

• 48c0036 Prepare release v0.47.0 (#1370)
• a65e40d Add hook to support Pro SQLite driver (#1369)
• See full diff in compare view

Updates github.com/riverqueue/river/rivertype from 0.46.0 to 0.47.0

Release notes

Sourced from github.com/riverqueue/river/rivertype's releases.

v0.47.0

Added

• Added hook for River's CLI command framework that can be used to inject custom SQLite initialization. Used by River Pro. [PR #1369](riverqueue/river#1369).

Changelog

Sourced from github.com/riverqueue/river/rivertype's changelog.

[0.47.0] - 2026-09-01

Added

• Added hook for River's CLI command framework that can be used to inject custom SQLite initialization. Used by River Pro. [PR #1369](riverqueue/river#1369).

Commits

• 48c0036 Prepare release v0.47.0 (#1370)
• a65e40d Add hook to support Pro SQLite driver (#1369)
• See full diff in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.56.0

Commits

• 86efde5 ssh: reject unexpected message types on established channels
• a6cdac6 ssh: drop traffic on undecided channels
• 39dc44e ssh: don't skip the source-address critical option in CheckCert
• afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
• 89f4e9b x509roots/fallback: update bundle
• 71488c4 ssh/knownhosts: compare only public key portions for revocation
• 82adefa ssh: synchronize unexpected response test
• c757c98 all: upgrade go directive to at least 1.26.0 [generated]
• 593c81a ssh: correctly ignore pre-banner lines
• 46efc8b acme: add crypto.SignMessage test coverage
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions