Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps the dependencies group with 6 updates in the / directory:

Package From To
github.com/attestantio/go-eth2-client 0.26.0 0.27.0
github.com/ethereum/go-ethereum 1.16.2 1.16.4
github.com/herumi/bls-eth-go-binary 1.36.4 1.37.0
github.com/pressly/goose/v3 3.24.3 3.25.0
github.com/prometheus/client_golang 1.23.0 1.23.2
github.com/spf13/cobra 1.9.1 1.10.1

Updates github.com/attestantio/go-eth2-client from 0.26.0 to 0.27.0

Changelog

Sourced from github.com/attestantio/go-eth2-client's changelog.

0.27.0:

  • support fulu
    • introduce data column sidecar event api and corresponding event handler
    • add blockcontents and signedblockcontents for fulu api
    • add beaconstate container updates as per spec
    • add fulu cases for all versioned spec, versioned api and http functions
Commits

Updates github.com/ethereum/go-ethereum from 1.16.2 to 1.16.4

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Bioelectric Infusers (v1.16.4)

This release enables the Osaka (Fusaka) fork on testnets. We also enable two blob-parameter only (BPO) forks for the testnets.

  • Holesky

    • Osaka at time 1759308480 (2025-10-01 08:48:00 UTC)
    • BPO1 at time 1759800000 (2025-10-07 01:20:00 UTC)
    • BPO2 at time 1760389824 (2025-10-13 21:10:24 UTC)
  • Sepolia

    • Osaka at time 1760427360 (2025-10-14 07:36:00 UTC)
    • BPO1 at time 1761017184 (2025-10-21 03:26:24 UTC)
    • BPO2 at time 1761607008 (2025-10-27 23:16:48 UTC)
  • Hoodi

    • Osaka at time 1761677592 (2025-10-28 18:53:12 UTC)
    • BPO1 at time 1762365720 (2025-11-05 18:02:00 UTC)
    • BPO2 at time 1762955544 (2025-11-12 13:52:24 UTC)

With BPO1 and BPO2, the blob capacity of these networks will increase as follows:

  • BPO1: max blobs/block: 15, target: 10
  • BPO2: max blobs/block: 21, target: 14

As of this release, the default block gas limit is set to 60M gas. This is the recommended limit that we, as client authors, feel comfortable with.

CLI commands

  • geth snapshot and related commands no longer fail due to not finding the trie journal file. (#32531)
  • A regression in geth snapshot dump and geth export-preimages is resolved. (#32650)
  • We have added an experimental zkVM 'guest program', keeper, to the source tree. (#32543, #32638, #32736)

RPC

  • eth_call and related operations were fixed to not apply the EIP-7825 per-transaction gas limit when executing under Osaka fork rules. (#32641)
  • For eth_getLogs and other log filtering operations, it is now possible to configure the number of addresses allowed in the filter using the --rpc.logquerylimit flag. (#32327)
  • Starting Geth with the --state.size-tracking option enables collection of precise state size numbers, which can be read using the debug_stateSize endpoint. (#32362)
  • The new debug_executionWitness and debug_executionWitnessByHash methods create a block witness for stateless execution. (#32216)

Tracing & ABIGEN

  • There is a new CodeChangeV2 hook, with a CodeChangeReason parameter. (#32525, #32535)
  • In certain corner-cases related to SELFDESTRUCT, OnBalanceChange was not invoked. (#32526)
  • BoundContract in accounts/abi/bind/v2 now exposes an Address method. (#32559)

Core

  • The EVM MODEXP precompiled account has seen some optimizations to improve performance for worst-case inputs. We are especially grateful for @​GottfriedHerold's work on improving the underlying math/big library. (#32527, #32553, #32568, #32576)

... (truncated)

Commits
  • 41714b4 Merge branch 'master' into release/1.16
  • b964b65 version: release go-ethereum v1.16.4 stable
  • 0977a02 params: schedule Osaka/BPO1/BPO2 for testnets (#32735)
  • 7d8ccdd all: refactor to use builtin max/min (#32694)
  • bacc150 core/txpool: add eip2681 check for incoming transactions (#32726)
  • ad484fc build: upgrade to execution-spec-tests v5.1.0 (#32742)
  • 89158aa core/txpool/blobpool: convert and add one-by-one (#32718)
  • 965ffff all: add bpo1 and bpo2 overrides (#32737)
  • 7611f35 accounts/abi/bind: fix data race in TestWaitDeployedCornerCases (#32740)
  • 1c706d1 accounts/keystore: use ticker to avoid timer allocations (#32732)
  • Additional commits viewable in compare view

Updates github.com/herumi/bls-eth-go-binary from 1.36.4 to 1.37.0

Commits
  • a88ff1e fix(release): added libs for windows
  • a129a40 fix(release): added libs for ios/ios simulator
  • a6acac4 fix(release): added libs for darwin
  • 4c102a0 fix(release): added libs for android
  • 7e220ee fix(release): added libs for linux(amd64/arm64)
  • 89a3d32 Merge remote-tracking branch 'origin/master' into release
  • 223271d update ubuntu version
  • 85e9d1e Merge remote-tracking branch 'origin/master' into release
  • 0a9873f Merge branch 'dev'
  • 850fa3a ar fails on GitHub action/windows, so use release binary
  • Additional commits viewable in compare view

Updates github.com/pressly/goose/v3 from 3.24.3 to 3.25.0

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.25.0

What's Changed

  • Upgrade go deps (#976)
  • Remove references/tests for vertica and add deprecation warnings (#978)
  • Add Aurora DSQL as a new database dialect to goose Provider (#971)
  • Add DDL isolation support for Aurora DSQL compatibility (#970)
  • Update Apply to respect no versioning option (#950)
  • Expose dialect Querier (#939)

New Contributors

Full Changelog: pressly/goose@v3.24.3...v3.25.0

Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.25.0] - 2025-08-24

  • Upgrade go deps (#976)
  • Remove references/tests for vertica and add deprecation warnings (#978)
  • Add Aurora DSQL as a new database dialect to goose Provider (#971)
  • Add DDL isolation support for Aurora DSQL compatibility (#970)
  • Update Apply to respect no versioning option (#950)
  • Expose dialect Querier (#939)
Commits
  • 35106f1 Release v3.25.0
  • 04019eb Upgrade go deps (#976)
  • 53080f4 Remove references to vertica and add deprecation warnings (#978)
  • bdac41f Add Aurora DSQL as a new database dialect (#971)
  • 435edbc Add DDL isolation support for Aurora DSQL compatibility (#970)
  • 2c9813a README.md: .go migrations package should be imported (#968)
  • f2b5a9d Update Apply to respect no versioning option (#950)
  • aca937c build(deps): bump golangci/golangci-lint-action from 7 to 8 (#943)
  • 002b5d0 build(deps): bump github.com/ClickHouse/clickhouse-go/v2 from 2.34.0 to 2.35....
  • 8e741fa Expose dialect Querier (#939)
  • See full diff in compare view

Updates github.com/prometheus/client_golang from 1.23.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Commits

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

... (truncated)

Commits
  • 7da941c chore: Bump pflag to v1.0.9 (#2305)
  • 51d6751 Bump pflag to 1.0.8 (#2303)
  • 3f3b818 Update README.md with new logo
  • dcaf42e Add Periscope to the list of projects using Cobra (#2299)
  • 6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
  • c8289c1 chore(golangci-lint): add some exclusion presets
  • 4af7b64 refactor: apply golangci-lint autofixes, work around false positives
  • 75790e4 chore(golangci-lint): upgrade to v2
  • db3ddb5 Adding sponsorship to README.md
  • 67171d6 putting sponsorship below header
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 29, 2025
Bumps the dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/attestantio/go-eth2-client](https://github.com/attestantio/go-eth2-client) | `0.26.0` | `0.27.0` |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.16.2` | `1.16.4` |
| [github.com/herumi/bls-eth-go-binary](https://github.com/herumi/bls-eth-go-binary) | `1.36.4` | `1.37.0` |
| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.24.3` | `3.25.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.0` | `1.23.2` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` |



Updates `github.com/attestantio/go-eth2-client` from 0.26.0 to 0.27.0
- [Changelog](https://github.com/attestantio/go-eth2-client/blob/master/CHANGELOG.md)
- [Commits](attestantio/go-eth2-client@v0.26.0...v0.27.0)

Updates `github.com/ethereum/go-ethereum` from 1.16.2 to 1.16.4
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.16.2...v1.16.4)

Updates `github.com/herumi/bls-eth-go-binary` from 1.36.4 to 1.37.0
- [Release notes](https://github.com/herumi/bls-eth-go-binary/releases)
- [Commits](herumi/bls-eth-go-binary@v1.36.4...v1.37.0)

Updates `github.com/pressly/goose/v3` from 3.24.3 to 3.25.0
- [Release notes](https://github.com/pressly/goose/releases)
- [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md)
- [Commits](pressly/goose@v3.24.3...v3.25.0)

Updates `github.com/prometheus/client_golang` from 1.23.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.23.0...v1.23.2)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.1)

---
updated-dependencies:
- dependency-name: github.com/attestantio/go-eth2-client
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/herumi/bls-eth-go-binary
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/pressly/goose/v3
  dependency-version: 3.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/dependencies-05777a1979 branch from cddf47c to 5348720 Compare October 1, 2025 09:50
@pk910 pk910 merged commit 6b02315 into master Oct 1, 2025
5 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/dependencies-05777a1979 branch October 1, 2025 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants