Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 11 updates - #1808

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/develop/all-dependencies-dd0231fcda
Closed

chore(deps): bump the all-dependencies group across 1 directory with 11 updates#1808
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/develop/all-dependencies-dd0231fcda

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 10 updates in the / directory:

Package From To
github.com/ethereum/go-ethereum 1.17.4 1.17.5
github.com/knadh/koanf/parsers/json 1.0.0 1.0.1
github.com/knadh/koanf/providers/rawbytes 1.0.0 1.0.1
github.com/knadh/koanf/v2 2.3.5 2.3.6
github.com/mattn/go-sqlite3 1.14.48 1.14.50
github.com/prometheus/client_golang 1.24.0 1.24.1
github.com/rs/cors 1.11.0 1.11.1
github.com/stretchr/testify 1.11.1 1.12.1
google.golang.org/grpc 1.82.1 1.83.2
google.golang.org/protobuf 1.36.11 1.36.12

Updates github.com/ethereum/go-ethereum from 1.17.4 to 1.17.5

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Grav-Torque Pad (v1.17.5)

This is a maintenance release with accumulated bug fixes and improvements, and is recommended for all users. It continues the implementation work for the upcoming Amsterdam hardfork.

A few things worth highlighting:

  • The default GOGC has changed from 20 to 50, trading a higher memory peak for less GC overhead. Set --gogc=20 to keep the old behavior.
  • Pebble v2 is now supported as a key-value store backend. Pebble v2 is used when Geth is bootstrapped from scratch, and falls back to Pebble v1 for a pre-existing database. Run geth db pebble-upgrade to explicitly upgrade a legacy Pebble v1 database to v2.

Fork Implementation

  • Several Amsterdam EIPs have been implemented or updated:
  • Improve Amsterdam fork test coverage (#35364)
  • Introduce the --override.amsterdam flag (#35213)
  • Remove named hardforks from the BPO schedule (#35029)
  • Introduce the Bogota fork in the chain configuration (#34057)

Core

  • Introduce a sparse blobpool to reduce blob transaction pool memory usage (#34047)
  • Migrate legacy blobpool limbo entries to the new cell-based sidecar format on startup (#35209)
  • Drop support for v0 blob sidecars in blobpool (#35191)
  • Inline gas deduction to fix a performance regression (#35203)
  • Fix eth/71 block-access-list empty marker decoding which wrongly disconnected peers (#35286)
  • Disable snap sync mode once the pivot block is committed (#35402, #35405)
  • Speed up debug_setHead and reject unrecoverable targets (#35252)
  • Fix snap sync failing to backfill blocks with missing canonical-hash mappings (#35190)
  • Reuse the chain's JUMPDEST cache in payload building (#35378)
  • Support Pebble v2 as the database backend (#34009)
  • Support .ere files in the era store (#34978)
  • Introduce the trie.UpdateBatch API (#32448)
  • Fix freezer truncation error on newly-added empty tables after unclean shutdown (#35258)
  • Improve state recoverability reporting by considering sync status (#35400)
  • Fix account prefetching for absent accounts (#35256)
  • Various snap v2 fixes (#35321, #35323)
  • Optimize block validation (#35403)
  • Various allocation improvements (#35234, #35237, #35232)
  • Continue binary trie development (#34772)
  • Fix tx size calculation (#35406)

Networking

... (truncated)

Commits

Updates github.com/knadh/koanf/parsers/json from 1.0.0 to 1.0.1

Commits
  • 75e13d9 Fix multiple large int64 handling issues.
  • b133504 skip disabled secret on azure kv read (#437)
  • 1aba4ed deps: upgrade go-toml to v2.4.3 (#419)
  • d2ffdaa Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /providers/kiln (#427)
  • 4f7edbb Bump google.golang.org/grpc from 1.56.3 to 1.82.1 in /examples (#430)
  • 31dd449 fix: error on scalar/map type mismatch in MergeStrict regardless of order (#424)
  • e09e4c8 fix: report full key var in MergeStrict type-mismatch error message (#418)
  • 7a28d59 Exclude nats, vault providers from global workspace and fix CI test commands.
  • d511690 Fix test action to use local Go toolchain for different versions.
  • 308274c Fix async file provider Watch() test that would race and fail randomly.
  • Additional commits viewable in compare view

Updates github.com/knadh/koanf/providers/rawbytes from 1.0.0 to 1.0.1

Commits
  • 75e13d9 Fix multiple large int64 handling issues.
  • b133504 skip disabled secret on azure kv read (#437)
  • 1aba4ed deps: upgrade go-toml to v2.4.3 (#419)
  • d2ffdaa Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /providers/kiln (#427)
  • 4f7edbb Bump google.golang.org/grpc from 1.56.3 to 1.82.1 in /examples (#430)
  • 31dd449 fix: error on scalar/map type mismatch in MergeStrict regardless of order (#424)
  • e09e4c8 fix: report full key var in MergeStrict type-mismatch error message (#418)
  • 7a28d59 Exclude nats, vault providers from global workspace and fix CI test commands.
  • d511690 Fix test action to use local Go toolchain for different versions.
  • 308274c Fix async file provider Watch() test that would race and fail randomly.
  • Additional commits viewable in compare view

Updates github.com/knadh/koanf/v2 from 2.3.5 to 2.3.6

Release notes

Sourced from github.com/knadh/koanf/v2's releases.

v2.3.6

What's Changed

New Contributors

Full Changelog: knadh/koanf@v2.3.5...v2.3.6

Commits
  • 75e13d9 Fix multiple large int64 handling issues.
  • b133504 skip disabled secret on azure kv read (#437)
  • 1aba4ed deps: upgrade go-toml to v2.4.3 (#419)
  • d2ffdaa Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /providers/kiln (#427)
  • 4f7edbb Bump google.golang.org/grpc from 1.56.3 to 1.82.1 in /examples (#430)
  • 31dd449 fix: error on scalar/map type mismatch in MergeStrict regardless of order (#424)
  • See full diff in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.48 to 1.14.50

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.50

What's Changed

New Contributors

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

1.14.49

What's Changed

Full Changelog: mattn/go-sqlite3@v1.14.48...v1.14.49

Commits
  • 58c8e14 Merge pull request #1446 from 0xCarbon/fix/vtable-destroy-handle
  • e27b5e9 fix: keep vtab handle registered when xDestroy fails
  • f9fc7aa Merge pull request #1443 from mattn/add-release-workflow
  • a93a209 Fail closed on release lookup errors and serialize runs per tag
  • 485f31f Add workflow to create releases on tag push
  • 9415230 Merge pull request #1441 from mattn/fix-json-example-scan
  • cc41b8c Merge pull request #1442 from mattn/sqlite-amalgamation-3053004
  • 18308a8 Upgrade SQLite to version 3053004
  • c1a1466 Merge pull request #1440 from mattn/fix-limit-example-stmt-leak
  • 18f2ec3 Assert the expected too many SQL variables error
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.24.0 to 1.24.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.1 / 2026-07-23

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.1 / 2026-07-23

  • [BUGFIX] promhttp: Fix panic on requests with nil URL. #2065
Commits

Updates github.com/rs/cors from 1.11.0 to 1.11.1

Commits
  • a814d79 Re-add support for multiple Access-Control-Request-Headers field (fixes #184)...
  • 1562b17 Removed redundant log nil checks (#178)
  • 3d336ea Update all dependencies to latest in examples (#175)
  • 85fc0ca Make Gin wrapper's status configurable and use 204 as default (fixes #145) (#...
  • See full diff in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

Updates google.golang.org/grpc from 1.82.1 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 20, 2026
@dependabot
chore(deps): bump the all-dependencies group across 1 directory with …
3856173 
…11 updates

Bumps the all-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.17.4` | `1.17.5` |
| [github.com/knadh/koanf/parsers/json](https://github.com/knadh/koanf) | `1.0.0` | `1.0.1` |
| [github.com/knadh/koanf/providers/rawbytes](https://github.com/knadh/koanf) | `1.0.0` | `1.0.1` |
| [github.com/knadh/koanf/v2](https://github.com/knadh/koanf) | `2.3.5` | `2.3.6` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.48` | `1.14.50` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.0` | `1.24.1` |
| [github.com/rs/cors](https://github.com/rs/cors) | `1.11.0` | `1.11.1` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.82.1` | `1.83.2` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |



Updates `github.com/ethereum/go-ethereum` from 1.17.4 to 1.17.5
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.4...v1.17.5)

Updates `github.com/knadh/koanf/parsers/json` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/knadh/koanf/releases)
- [Commits](knadh/koanf@v1.0.0...parsers/hcl/v1.0.1)

Updates `github.com/knadh/koanf/providers/rawbytes` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/knadh/koanf/releases)
- [Commits](knadh/koanf@v1.0.0...parsers/hcl/v1.0.1)

Updates `github.com/knadh/koanf/v2` from 2.3.5 to 2.3.6
- [Release notes](https://github.com/knadh/koanf/releases)
- [Commits](knadh/koanf@v2.3.5...v2.3.6)

Updates `github.com/mattn/go-sqlite3` from 1.14.48 to 1.14.50
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.48...v1.14.50)

Updates `github.com/prometheus/client_golang` from 1.24.0 to 1.24.1
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.0...v1.24.1)

Updates `github.com/rs/cors` from 1.11.0 to 1.11.1
- [Commits](rs/cors@v1.11.0...v1.11.1)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `golang.org/x/sync` from 0.21.0 to 0.22.0
- [Commits](golang/sync@v0.21.0...v0.22.0)

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.1...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/knadh/koanf/parsers/json
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/knadh/koanf/providers/rawbytes
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/knadh/koanf/v2
  dependency-version: 2.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/rs/cors
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/develop/all-dependencies-dd0231fcda branch from f62c8bf to 3856173 Compare September 1, 2026 12:06
@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 8, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/develop/all-dependencies-dd0231fcda branch September 8, 2026 12:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants