deps: bump the go-minor-patch group with 5 updates

[dependabot]

Bumps the go-minor-patch group with 5 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2/config	1.32.25	1.32.27
github.com/aws/aws-sdk-go-v2/service/sesv2	1.62.4	1.62.6
github.com/riverqueue/river	0.39.0	0.40.0
github.com/riverqueue/river/riverdriver/riverpgxv5	0.39.0	0.40.0
github.com/riverqueue/river/rivertype	0.39.0	0.40.0

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.25 to 1.32.27

Commits

• b4784c1 Release 2026-07-01
• 97c0201 Regenerated Clients
• 6687238 Update endpoints model
• 995297f Update API model
• c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
• fae66b8 Set transfer manager error as the first error seen, preventing race condition...
• cf0eabd Release 2026-06-30
• ad0c091 Regenerated Clients
• 196e961 Update endpoints model
• 1529ead Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.62.4 to 1.62.6

Commits

• c7c6865 Release 2025-01-30
• 70f736c Regenerated Clients
• 28731c2 Update endpoints model
• 3505e4b Update API model
• 0b4f636 don't sign transfer-encoding header (#2991)
• b820c57 Release 2025-01-29
• 40ddb76 Regenerated Clients
• 2b4adae Update API model
• 78c2be4 Revert "beta: feature/s3/transfermanager (S3 transfer manager v2) (#2988)"
• 5c9d67c beta: feature/s3/transfermanager (S3 transfer manager v2) (#2988)
• Additional commits viewable in compare view

Updates github.com/riverqueue/river from 0.39.0 to 0.40.0

Release notes

Sourced from github.com/riverqueue/river's releases.

v0.40.0

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

Changelog

Sourced from github.com/riverqueue/river's changelog.

[0.40.0] - 2026-07-02

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

Commits

• cd033be Prepare release 0.40.0 (#1295)
• 986ac94 reindex numbered concurrent artifacts (#1297)
• 78ae535 Add JobStuckHandler callback (#1291)
• 944f077 LLM-based optimizations for BatchCompleter (#1293)
• 3b4bcea Smoother completion: Earlier backpressure + possible early completion + fewer...
• 7a8e689 Fixes for SQLite version 007 migration (#1283)
• 857350a Bump the go-dependencies group across 3 directories with 1 update (#1294)
• f2512a7 Never rescue jobs that return a timeout of -1 (#1288)
• 4fa0562 Bump the go-dependencies group across 3 directories with 3 updates (#1286)
• d3b0ef7 Changelog fixes for v0.40.0 (#1282)
• Additional commits viewable in compare view

Updates github.com/riverqueue/river/riverdriver/riverpgxv5 from 0.39.0 to 0.40.0

Release notes

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's releases.

v0.40.0

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

Changelog

Sourced from github.com/riverqueue/river/riverdriver/riverpgxv5's changelog.

[0.40.0] - 2026-07-02

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

Commits

• cd033be Prepare release 0.40.0 (#1295)
• 986ac94 reindex numbered concurrent artifacts (#1297)
• 78ae535 Add JobStuckHandler callback (#1291)
• 944f077 LLM-based optimizations for BatchCompleter (#1293)
• 3b4bcea Smoother completion: Earlier backpressure + possible early completion + fewer...
• 7a8e689 Fixes for SQLite version 007 migration (#1283)
• 857350a Bump the go-dependencies group across 3 directories with 1 update (#1294)
• f2512a7 Never rescue jobs that return a timeout of -1 (#1288)
• 4fa0562 Bump the go-dependencies group across 3 directories with 3 updates (#1286)
• d3b0ef7 Changelog fixes for v0.40.0 (#1282)
• Additional commits viewable in compare view

Updates github.com/riverqueue/river/rivertype from 0.39.0 to 0.40.0

Release notes

Sourced from github.com/riverqueue/river/rivertype's releases.

v0.40.0

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

Changelog

Sourced from github.com/riverqueue/river/rivertype's changelog.

[0.40.0] - 2026-07-02

⚠️ Version 0.40.0 contains a new database migration, version 7, that rolls up some database cleanups and a few SQLite features:

• Drop tables river_client and river_client_queue. These were added prospectively, but in the end were never used for anything. [PR #1115](riverqueue/river#1115).
• Add a default value of 25 to river_job.max_attempts. Go code was previously injecting a max value, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• Add a default value of CURRENT_TIMESTAMP to river_queue.updated_at. Go code was previously injecting the current time, so this has no functional effect on existing behavior. [PR #1115](riverqueue/river#1115).
• SQLite only: Convert json columns to jsonb. [PR #1224](riverqueue/river#1224).
• SQLite only: Add pseudo listen/notify mechanism in a new river_notification table. [PR #1275](riverqueue/river#1275).

For SQLite, running River apps must be stopped briefly while the migration is run and their code upgrade to 0.40.0 so they start reading and inserting new values in jsonb instead of json.

See documentation on running River migrations. If migrating with the CLI, make sure to update it to its latest version:

go install github.com/riverqueue/river/cmd/river@latest
river migrate-up --database-url "$DATABASE_URL"

If not using River's internal migration system, the raw SQL can alternatively be dumped with (or change --database-url to a Postgres URI for Postgres versions):

go install github.com/riverqueue/river/cmd/river@latest
river migrate-get --database-url sqlite:// --version 7 --up > river7.up.sql
river migrate-get --database-url sqlite:// --version 7 --down > river7.down.sql

Added

• SQLite picks up a new river_notification table that allows River to provide listen/notify-like functionality despite these functions not being supported outside of Postgres. [PR #1275](riverqueue/river#1275).
• Added JobStuckHandler, giving clients a hook to handle "stuck" jobs (i.e. ones which are passed timeout and haven't responded to context cancellation) and potentially open a new worker slot if so desired. [PR #1291](riverqueue/river#1291).

Changed

• Convert SQLite JSON columns to JSONB (including migration). [PR #1224](riverqueue/river#1224).
• Change SQLite driver operations over to use bulk inserts where possible now that sqlc has better support for json_each. [PR #1276](riverqueue/river#1276)
• Detect duplicate step names across river.ResumableStep and return a validation error. [PR #1281](riverqueue/river#1281)
• Earlier backpressure from BatchCompleter when it's throughput is saturated with fewer warnings to console. [PR #1292](riverqueue/river#1292)
• Series of minor optimizations in BatchCompleter raising throughput ~20% when it's the bottleneck in job processing (e.g. in benchmarks). [PR #1293](riverqueue/river#1293)

Fixed

• Fix JobCancel having no effect on running jobs when using a poll-only driver (e.g. riverdatabasesql). The controlActionCancel event was silently dropped in fetchAndRunLoop's queueControlCh handler instead of being forwarded to maybeCancelJob. Note: this fix only works within a single process; cross-process cancels in poll-only setups must wait for the next poll cycle. [PR #1245](riverqueue/river#1245).
• Ensure jobs that return a custom timeout of -1 (no timeout) are never rescued. [PR #1288](riverqueue/river#1288).
• Detect numbered PostgreSQL REINDEX INDEX CONCURRENTLY artifacts like _ccnew1 and _ccold2 so the reindexer does not keep accumulating failed artifact indexes. Fixes #1296. [PR #1297](riverqueue/river#1297).

Commits

• cd033be Prepare release 0.40.0 (#1295)
• 986ac94 reindex numbered concurrent artifacts (#1297)
• 78ae535 Add JobStuckHandler callback (#1291)
• 944f077 LLM-based optimizations for BatchCompleter (#1293)
• 3b4bcea Smoother completion: Earlier backpressure + possible early completion + fewer...
• 7a8e689 Fixes for SQLite version 007 migration (#1283)
• 857350a Bump the go-dependencies group across 3 directories with 1 update (#1294)
• f2512a7 Never rescue jobs that return a timeout of -1 (#1288)
• 4fa0562 Bump the go-dependencies group across 3 directories with 3 updates (#1286)
• d3b0ef7 Changelog fixes for v0.40.0 (#1282)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions