Skip to content

build(deps): bump the go-dependencies group across 1 directory with 8 updates - #160

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-f9dbf3a551
Open

build(deps): bump the go-dependencies group across 1 directory with 8 updates#160
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-f9dbf3a551

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 8 updates in the / directory:

Package From To
github.com/ethereum/go-ethereum 1.17.5 1.17.8
github.com/ethpandaops/beacon 0.69.0 0.72.0
github.com/ethpandaops/go-eth2-client 0.1.6 0.1.7
github.com/kurtosis-tech/kurtosis/api/golang 1.20.0 1.22.1
github.com/libp2p/go-libp2p-pubsub 0.15.0 0.18.0
github.com/prometheus/client_golang 1.24.1 1.25.0
github.com/sirupsen/logrus 1.9.4 1.10.2
github.com/stretchr/testify 1.11.1 1.12.1

Updates github.com/ethereum/go-ethereum from 1.17.5 to 1.17.8

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Protein Sludge Pack (v1.17.8)

This is a security-focused release, fixing several DoS risk issues ❤️‍🩹 . Note most of the the fixes related to bugs which only become possible after the activation of the Amsterdam fork. There are also some general correctness improvements.

This release is recommended for all users.

All Changes

Security

  • In the eth and snap p2p protocol handler, DoS resistance has been improved for multiple packet handlers (#35862, #35883, #35859, #35857, #35904, #35856)
  • JUMPDEST analysis caching has been hardened for attack cases after Amsterdam fork (#35881)
  • The IP address predictor now requires IP verification before accepting statements (#35861)
  • A post-Amsterdam DoS vector related to BAL accounts is resolved (#35865)
  • A rogue STUN server could crash the node with an invalid response (#35863)

RPC

  • eth_createAccessList now works when the sender account has no balance (#35397)
  • eth_simulateV1 has been fixed to correctly report ETH transfer logs post-Amsterdam (#35617)
  • eth_simulateV1 virtual blocks are now aligned with the Amsterdam spec (#35668)
  • eth_capabilities reports the availability of receipts bounded by the transaction hash index (#35878)
  • For eth_call and related operations, the transaction gas limit is no longer applied (after Amsterdam fork) (#35845)
  • A post-Amsterdam crash in journaled live tracers core/tracing: handle creator nonce change without an open frame (#35896)
  • An edge case in processing beacon chain head updates after unclean shutdown is resolved (#35804)
  • abigen will now use sequential nonces when deploying library dependencies of a contract (#35888)

Core Library

  • The hard-coded Hoodi testnet beacon chain genesis time was incorrect (#35876)
  • blsync could get stuck if the server was unresponsive or overloaded (#35872)

P2P

  • A correctness issue in the EIP-8070 Sparse Blobpool (Amsterdam fork) implementation is fixed (#35860)
  • The dial scheduler now handles IPv4 <> IPv6 transitions for DNS-resolved static nodes (#35880)

Build

  • The PPA now publishes for Ubuntu 26.04 "Resolute Raccoon" (#35854)

For a full rundown of the changes please consult the Geth 1.17.8 release milestone.

As with all our previous releases, you can find the:

... (truncated)

Commits
  • a579077 version: go-ethereum v1.17.8 stable
  • b10c4ec eth/protocols/eth: add size checks for receipts (#35904)
  • acdb0c6 eth/catalyst: don't treat a forward canonical update as a reorg (#35804)
  • 21f1eb2 node: fix flaky jwt too new auth test (#35889)
  • 0ef7a39 accounts/abi/abigen: chain nonces when deploying library dependencies (#35888)
  • eedeb03 core/tracing: handle creator nonce change without an open frame (#35896)
  • 0b468a8 eth/protocols/eth: verify block shape before hashing (#35862)
  • fd37587 eth/protocols/eth: limit getCells lookup (#35883)
  • 4f9ca6d eth: fix cells response to use index major (#35860)
  • defbdf7 internal/ethapi, core: align eth_simulateV1 blocks with the Amsterdam spec (#...
  • Additional commits viewable in compare view

Updates github.com/ethpandaops/beacon from 0.69.0 to 0.72.0

Release notes

Sourced from github.com/ethpandaops/beacon's releases.

v0.72.0

What's Changed

Full Changelog: ethpandaops/beacon@v0.71.0...v0.72.0

v0.71.0

What's Changed

New Contributors

Full Changelog: ethpandaops/beacon@v0.70.0...v0.71.0

v0.70.0

What's Changed

Full Changelog: ethpandaops/beacon@v0.69.0...v0.70.0

Commits
  • 4de9ae5 Merge pull request #97 from ethpandaops/feat/gloas-block-metrics
  • cd331b6 feat(metrics): read Gloas block transactions and withdrawals from the payload...
  • 3268990 Merge pull request #95 from ethpandaops/feat/gloas-to-master
  • 2d6a067 chore(deps): move gloas support onto released dependencies
  • 77db92c Merge pull request #82 from ethpandaops/feat/raw-streaming-reland
  • 882506c feat(beacon): add streaming raw API responses
  • 8d66ce6 Revert "Merge pull request #81 from ethpandaops/feat/raw-streaming"
  • 9f32aa9 Merge pull request #81 from ethpandaops/feat/raw-streaming
  • 116daa7 feat(beacon): stream raw API responses
  • b274ec0 Merge pull request #80 from ethpandaops/feat/raw-execution-payload-envelope
  • Additional commits viewable in compare view

Updates github.com/ethpandaops/go-eth2-client from 0.1.6 to 0.1.7

Release notes

Sourced from github.com/ethpandaops/go-eth2-client's releases.

v0.1.7

consensus-specs v1.7.0-alpha.14

What's Changed

New Contributors

Full Changelog: ethpandaops/go-eth2-client@v0.1.6...v0.1.7

Commits
  • 15ed59a Merge pull request #41 from ethpandaops/feat/head-v2-sse
  • 690bfec fix merge conflict
  • 28fe488 Merge branch 'master' into feat/head-v2-sse
  • 5c907ec Merge pull request #52 from ethpandaops/pk910/heze-alpha.14
  • 38c12e3 Merge pull request #53 from ethpandaops/bbusa/heze-il-event-dependent-root
  • 36d49bf Rename inclusion_list_committee_root to dependent_root in the inclusion list ...
  • 849ac87 chore(spec): drop conversions of values already uint64
  • 8573c7e test: take the spec vectors from the consensus-specs releases
  • 2d0c751 fix(spec): render YAML the way the spec vectors write it
  • 32c453f feat(heze): add the Heze containers (EIP-7805)
  • Additional commits viewable in compare view

Updates github.com/kurtosis-tech/kurtosis/api/golang from 1.20.0 to 1.22.1

Release notes

Sourced from github.com/kurtosis-tech/kurtosis/api/golang's releases.

v1.22.1

1.22.1 (2026-10-16)

Bug Fixes

  • regenerate enumer code and catch a dirty CLI release build in CI (#3277) (f4730c9)

v1.22.0

1.22.0 (2026-10-15)

Features

  • logs/k8s: emit kurtosis_service_name + kurtosis_enclave_name on collected logs (#3156) (b2a1d81)

Bug Fixes

  • restore npm package publishing after setup-node v7 dropped the placeholder auth token (#3264) (e8a5ecf)

v1.21.0

1.21.0 (2026-10-14)

Features

  • cli: make otel the default backend log collector on Docker (#3257) (1bac65d)
  • KURTOSIS_IMAGE_ORG env var to override the org prefix of Kurtosis' own images (#3157) (581a902)

Bug Fixes

  • keep the logs aggregator running across engine restarts on Docker (#3261) (7665abd)
  • patch vulnerable Go toolchain, dependencies and base images (#3262) (0d5547d)
  • retry pinned host port bind collisions on Docker (#3240) (416757e)
  • tidy Go modules and patch vulnerable dependencies (#3241) (51c13b6)
Changelog

Sourced from github.com/kurtosis-tech/kurtosis/api/golang's changelog.

1.22.1 (2026-10-16)

Bug Fixes

  • regenerate enumer code and catch a dirty CLI release build in CI (#3277) (f4730c9)

1.22.0 (2026-10-15)

Features

  • logs/k8s: emit kurtosis_service_name + kurtosis_enclave_name on collected logs (#3156) (b2a1d81)

Bug Fixes

  • restore npm package publishing after setup-node v7 dropped the placeholder auth token (#3264) (e8a5ecf)

1.21.0 (2026-10-14)

Features

  • cli: make otel the default backend log collector on Docker (#3257) (1bac65d)
  • KURTOSIS_IMAGE_ORG env var to override the org prefix of Kurtosis' own images (#3157) (581a902)

Bug Fixes

  • keep the logs aggregator running across engine restarts on Docker (#3261) (7665abd)
  • patch vulnerable Go toolchain, dependencies and base images (#3262) (0d5547d)
  • retry pinned host port bind collisions on Docker (#3240) (416757e)
  • tidy Go modules and patch vulnerable dependencies (#3241) (51c13b6)
Commits
  • d56294f chore(main): release 1.22.1 (#3278)
  • f4730c9 fix: regenerate enumer code and catch a dirty CLI release build in CI (#3277)
  • bd898f9 chore(main): release 1.22.0 (#3275)
  • 5162694 chore: tidy Go modules and verify tidiness in CI (#3276)
  • b2a1d81 feat(logs/k8s): emit kurtosis_service_name + kurtosis_enclave_name on collect...
  • cb0e018 ci: bundle all dependabot updates into one weekly PR (#3274)
  • 49a7805 build(deps): Bump k8s.io/api, apimachinery and client-go to v0.37.1 in /conta...
  • 8db4308 ci: make golangci-lint resilient to network flakes (#3263)
  • fe2affa build(deps): Bump github.com/dmarkham/enumer in /container-engine-lib (#3270)
  • c014899 build(deps): Bump github.com/docker/go-connections in /container-engine-lib (...
  • Additional commits viewable in compare view

Updates github.com/libp2p/go-libp2p-pubsub from 0.15.0 to 0.18.0

Release notes

Sourced from github.com/libp2p/go-libp2p-pubsub's releases.

v0.18.0

What's Changed

Full Changelog: libp2p/go-libp2p-pubsub@v0.17.0...v0.18.0

v0.17.0

What's Changed

Full Changelog: libp2p/go-libp2p-pubsub@v0.16.0...v0.17.0

v0.16.0

What's Changed

... (truncated)

Commits

Updates github.com/prometheus/client_golang from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135
Commits

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

1.10.1

Fixes:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed implementations of error as field values.

1.10.0

Fixes:

  • Fix reentrant logging deadlocks in formatter paths.
  • Fix race conditions in formatter and entry handling.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
  • Improve concurrency safety around formatter and hook access.

Features:

  • Add slog hook for forwarding Logrus entries to log/slog.
  • Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
  • Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
  • Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

  • Raise minimum supported Go version to 1.23.
  • TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
  • TextFormatter now uses distinct dimmed colors for debug and trace output.
  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
  • Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
  • Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used
Description has been truncated

@dependabot
build(deps): bump the go-dependencies group across 1 directory with 8…
349f5a4 
… updates

Bumps the go-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.17.5` | `1.17.8` |
| [github.com/ethpandaops/beacon](https://github.com/ethpandaops/beacon) | `0.69.0` | `0.72.0` |
| [github.com/ethpandaops/go-eth2-client](https://github.com/ethpandaops/go-eth2-client) | `0.1.6` | `0.1.7` |
| [github.com/kurtosis-tech/kurtosis/api/golang](https://github.com/kurtosis-tech/kurtosis) | `1.20.0` | `1.22.1` |
| [github.com/libp2p/go-libp2p-pubsub](https://github.com/libp2p/go-libp2p-pubsub) | `0.15.0` | `0.18.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.2` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` |



Updates `github.com/ethereum/go-ethereum` from 1.17.5 to 1.17.8
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.5...v1.17.8)

Updates `github.com/ethpandaops/beacon` from 0.69.0 to 0.72.0
- [Release notes](https://github.com/ethpandaops/beacon/releases)
- [Commits](ethpandaops/beacon@v0.69.0...v0.72.0)

Updates `github.com/ethpandaops/go-eth2-client` from 0.1.6 to 0.1.7
- [Release notes](https://github.com/ethpandaops/go-eth2-client/releases)
- [Changelog](https://github.com/ethpandaops/go-eth2-client/blob/master/CHANGELOG.md)
- [Commits](ethpandaops/go-eth2-client@v0.1.6...v0.1.7)

Updates `github.com/kurtosis-tech/kurtosis/api/golang` from 1.20.0 to 1.22.1
- [Release notes](https://github.com/kurtosis-tech/kurtosis/releases)
- [Changelog](https://github.com/kurtosis-tech/kurtosis/blob/main/CHANGELOG.md)
- [Commits](kurtosis-tech/kurtosis@1.20.0...1.22.1)

Updates `github.com/libp2p/go-libp2p-pubsub` from 0.15.0 to 0.18.0
- [Release notes](https://github.com/libp2p/go-libp2p-pubsub/releases)
- [Commits](libp2p/go-libp2p-pubsub@v0.15.0...v0.18.0)

Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.1...v1.25.0)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.2)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/ethpandaops/beacon
  dependency-version: 0.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/ethpandaops/go-eth2-client
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/kurtosis-tech/kurtosis/api/golang
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/libp2p/go-libp2p-pubsub
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot requested a review from mattevans as a code owner October 19, 2026 09:42
@dependabot dependabot Bot added dependencies go Pull requests that update go code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mattevans mattevans Awaiting requested review from mattevans mattevans is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants