Skip to content

build(deps): Bump the all-go group across 6 directories with 7 updates#3327

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/go_modules/all-go-1141c6fb4a
Open

build(deps): Bump the all-go group across 6 directories with 7 updates#3327
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/go_modules/all-go-1141c6fb4a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026 •
edited
Loading

Bumps the all-go group with 6 updates in the / directory:

Package From To
cloud.google.com/go/kms 1.30.0 1.31.0
github.com/libp2p/go-libp2p-kad-dht 0.39.1 0.39.2
golang.org/x/crypto 0.50.0 0.51.0
golang.org/x/net 0.53.0 0.54.0
google.golang.org/api 0.277.0 0.279.0
google.golang.org/grpc 1.81.0 1.81.1

Bumps the all-go group with 1 update in the /apps/evm directory: github.com/ethereum/go-ethereum.
Bumps the all-go group with 1 update in the /execution/evm directory: github.com/ethereum/go-ethereum.
Bumps the all-go group with 1 update in the /execution/grpc directory: golang.org/x/net.
Bumps the all-go group with 1 update in the /test/docker-e2e directory: github.com/ethereum/go-ethereum.
Bumps the all-go group with 1 update in the /test/e2e directory: github.com/ethereum/go-ethereum.

Updates cloud.google.com/go/kms from 1.30.0 to 1.31.0

Release notes

Sourced from cloud.google.com/go/kms's releases.

retail: v1.31.0

v1.31.0 (2026-05-07)

Changelog

Sourced from cloud.google.com/go/kms's changelog.

1.31.0 (2024-08-01)

Features

  • documentai: A new field imageless_mode is added to message .google.cloud.documentai.v1.ProcessRequest (#10615) (97fa560)

Documentation

  • documentai: Keep the API doc up-to-date with recent changes (97fa560)

1.30.5 (2024-07-24)

Bug Fixes

  • documentai: Update dependencies (257c40b)

1.30.4 (2024-07-10)

Bug Fixes

1.30.3 (2024-07-01)

Bug Fixes

1.30.2 (2024-06-26)

Bug Fixes

  • documentai: Enable new auth lib (b95805f)

1.30.1 (2024-06-20)

Documentation

  • documentai: Update the comment to add a note about documentai.processors.create permission (4fa4308)
Commits
  • 9a44b31 chore: librarian release pull request: 20260409T070606Z (#14406)
  • 18a3318 feat: Make AgentEngine APIs public
  • db45f2d feat(bigtable): enable bigtable conn pool by default (#14319)
  • 124ffd3 feat(vertexai): Add AgentEngine Memories Revisions module
  • e247d48 chore: onboard new library appoptimize (#14393)
  • ece84ab chore: update librarian to v0.10.1-0.20260408193841-095ea7e727aa (#14392)
  • ecf9783 chore: librarian release pull request: 20260408T191440Z (#14390)
  • 70b47d2 chore: librarian release pull request: 20260408T190447Z (#14389)
  • 95c53a6 chore(bigquery): bump api to v0.275.0 and unskip bq tracing tests (#14333)
  • df22e9e fix(storage): add retry logic for "http2: client connection lost" (#14385)
  • Additional commits viewable in compare view

Updates github.com/libp2p/go-libp2p-kad-dht from 0.39.1 to 0.39.2

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.39.2

[!NOTE] This release was brought to you by the Shipyard team.

What's Changed

Full Changelog: libp2p/go-libp2p-kad-dht@v0.39.1...v0.39.2

Commits

Updates golang.org/x/crypto from 0.50.0 to 0.51.0

Commits
  • b8a14a8 go.mod: update golang.org/x dependencies
  • 9d9d507 x509roots/fallback/bundle: fix bundle test with Go 1.27+
  • fd0b90d acme: include Problem in OrderError.Error
  • b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2
  • cc0e4fc hkdf: forward Extract to the standard library
  • a8e9237 x509roots/fallback: update bundle
  • See full diff in compare view

Updates golang.org/x/net from 0.53.0 to 0.54.0

Commits
  • b138e06 go.mod: update golang.org/x dependencies
  • 689f70a quic: fix wrong final size being used for RESET_STREAM frame
  • 208f306 http3: increase handshake timeout
  • 49810da http2: enable net/http wrapping when go >= 1.27
  • 5e11a5a quic: fix data race in streamForFrame
  • 8c63081 http2: use empty Transport rather than DefaultTransport in http2wrap
  • fc7b466 http2: add http2wrap test
  • 15c2cb1 http2: avoid overflowing 32-bit int when http2wrap enabled
  • 6465188 http2: add wrapped Server
  • 72f419a http2: add wrapped ClientConn
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.277.0 to 0.279.0

Release notes

Sourced from google.golang.org/api's releases.

v0.279.0

0.279.0 (2026-05-12)

Features

v0.278.0

0.278.0 (2026-05-05)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.279.0 (2026-05-12)

Features

0.278.0 (2026-05-05)

Features

Commits
  • e446d4c chore(main): release 0.279.0 (#3586)
  • d4241ea feat(all): auto-regenerate discovery clients (#3590)
  • 8452ed1 chore(all): update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (...
  • e87e376 feat(all): auto-regenerate discovery clients (#3587)
  • 09db0e3 feat(all): auto-regenerate discovery clients (#3585)
  • 07c758d chore(main): release 0.278.0 (#3583)
  • e36c883 feat(all): auto-regenerate discovery clients (#3584)
  • 76b1187 feat(all): auto-regenerate discovery clients (#3582)
  • See full diff in compare view

Updates google.golang.org/grpc from 1.81.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)
Commits

Updates golang.org/x/net from 0.53.0 to 0.54.0

Commits
  • b138e06 go.mod: update golang.org/x dependencies
  • 689f70a quic: fix wrong final size being used for RESET_STREAM frame
  • 208f306 http3: increase handshake timeout
  • 49810da http2: enable net/http wrapping when go >= 1.27
  • 5e11a5a quic: fix data race in streamForFrame
  • 8c63081 http2: use empty Transport rather than DefaultTransport in http2wrap
  • fc7b466 http2: add http2wrap test
  • 15c2cb1 http2: avoid overflowing 32-bit int when http2wrap enabled
  • 6465188 http2: add wrapped Server
  • 72f419a http2: add wrapped ClientConn
  • Additional commits viewable in compare view

Updates github.com/ethereum/go-ethereum from 1.17.2 to 1.17.3

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Enzymatic Injector (v1.17.3)

This is a maintenance release with continued progress on the Amsterdam fork implementation. It also introduces ETH/70, which is now live on the network.

ethereum/execution-apis#762reexec has been removed from the tracing config:

  • memory: words are 0x-prefixed and padded to 32 bytes
  • storage: keys and values are 0x-prefixed
  • error: omitted when empty (previously serialized as "")

Geth

  • Add retry mechanism for checkpoint init in blsync (#33966)
  • Add subcommand for offline binary tree conversion (#33740)
  • Add code exporter for db export (#34696)

Core

  • Amsterdam fork updates:
  • Implement stack arena (#33960)
  • Implement EIP-7975: eth/70 partial block receipt lists (#33153)
  • Prerequisites of snap/2 protocol (#34083, #34649, #34654, #34874)
  • Implement history index pruner for path-mode archive nodes (#33999)
  • Add Prague chain segment pruning point for Hoodi (#34714)
  • Allow reorging head to parent within 32 blocks under ePBS (#34767)
  • Stop serving chain segment requests when data is unavailable (#34787)
  • Drop peers sending invalid bodies or receipts (#34745, #34870)
  • Add kzg4844 cell-related functions (#34766)
  • State database refactoring (#33102, #34700, #34763, #34724)
  • Binary trie improvements (#34055, #34110, #34670, #34676, #34680, #34690, #34754, #34758, #34777, #34794)
  • Merge EIP-4762 access events for all system calls (#34637)
  • Reject duplicate layers in the path database (#34642)
  • Omit empty slotNumber and fix block value collection in pre-Amsterdam engine API payloads (#34704)
  • Include the operand in EIP-8024 error messages (#34635)
  • Fix vmodule downgrades and propagate verbosity changes to derived loggers (#33111)
  • Fix incorrect fsync ordering for index file truncation (#34728)
  • Fix file descriptor leak in freezer error paths (#34735)
  • Fix size calculation in path database (#34828)
  • Fix gapped queue size cap in blobpool (#34831)
  • Improve txpool pending concurrency by using read-only locking (#32924)
  • Replace deprecated TypeMux with Feed (#32585)
  • Continue blob retrieval when individual cell proof extraction fails (#34891)
  • Use uint256 in core Message for faster gas calculations (#34934)

... (truncated)

Commits

Updates github.com/ethereum/go-ethereum from 1.17.2 to 1.17.3

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Enzymatic Injector (v1.17.3)

This is a maintenance release with continued progress on the Amsterdam fork implementation. It also introduces ETH/70, which is now live on the network.

ethereum/execution-apis#762reexec has been removed from the tracing config:

  • memory: words are 0x-prefixed and padded to 32 bytes
  • storage: keys and values are 0x-prefixed
  • error: omitted when empty (previously serialized as "")

Geth

  • Add retry mechanism for checkpoint init in blsync (#33966)
  • Add subcommand for offline binary tree conversion (#33740)
  • Add code exporter for db export (#34696)

Core

  • Amsterdam fork updates:
  • Implement stack arena (#33960)
  • Implement EIP-7975: eth/70 partial block receipt lists (#33153)
  • Prerequisites of snap/2 protocol (#34083, #34649, #34654, #34874)
  • Implement history index pruner for path-mode archive nodes (#33999)
  • Add Prague chain segment pruning point for Hoodi (#34714)
  • Allow reorging head to parent within 32 blocks under ePBS (#34767)
  • Stop serving chain segment requests when data is unavailable (#34787)
  • Drop peers sending invalid bodies or receipts (#34745, #34870)
  • Add kzg4844 cell-related functions (#34766)
  • State database refactoring (#33102, #34700, #34763, #34724)
  • Binary trie improvements (#34055, #34110, #34670, #34676, #34680, #34690, #34754, #34758, #34777, #34794)
  • Merge EIP-4762 access events for all system calls (#34637)
  • Reject duplicate layers in the path database (#34642)
  • Omit empty slotNumber and fix block value collection in pre-Amsterdam engine API payloads (#34704)
  • Include the operand in EIP-8024 error messages (#34635)
  • Fix vmodule downgrades and propagate verbosity changes to derived loggers (#33111)
  • Fix incorrect fsync ordering for index file truncation (#34728)
  • Fix file descriptor leak in freezer error paths (#34735)
  • Fix size calculation in path database (#34828)
  • Fix gapped queue size cap in blobpool (#34831)
  • Improve txpool pending concurrency by using read-only locking (#32924)
  • Replace deprecated TypeMux with Feed (#32585)
  • Continue blob retrieval when individual cell proof extraction fails (#34891)
  • Use uint256 in core Message for faster gas calculations (#34934)

... (truncated)

Commits

Updates github.com/ethereum/go-ethereum from 1.17.2 to 1.17.3

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Enzymatic Injector (v1.17.3)

This is a maintenance release with continued progress on the Amsterdam fork implementation. It also introduces ETH/70, which is now live on the network.

ethereum/execution-apis#762reexec has been removed from the tracing config:

  • memory: words are 0x-prefixed and padded to 32 bytes
  • storage: keys and values are 0x-prefixed
  • error: omitted when empty (previously serialized as "")

Geth

  • Add retry mechanism for checkpoint init in blsync (#33966)
  • Add subcommand for offline binary tree conversion (#33740)
  • Add code exporter for db export (#34696)

Core

  • Amsterdam fork updates:
  • Implement stack arena (#33960)
  • Implement EIP-7975: eth/70 partial block receipt lists (#33153)
  • Prerequisites of snap/2 protocol (#34083, #34649, #34654, #34874)
  • Implement history index pruner for path-mode archive nodes (#33999)
  • Add Prague chain segment pruning point for Hoodi (#34714)
  • Allow reorging head to parent within 32 blocks under ePBS (#34767)
  • Stop serving chain segment requests when data is unavailable (#34787)
  • Drop peers sending invalid bodies or receipts (#34745, #34870)
  • Add kzg4844 cell-related functions (#34766)
  • State database refactoring (#33102, #34700, #34763, #34724)
  • Binary trie improvements (#34055, #34110, #34670, #34676, #34680, #34690, #34754, #34758, #34777, #34794)
  • Merge EIP-4762 access events for all system calls (#34637)
  • Reject duplicate layers in the path database (#34642)
  • Omit empty slotNumber and fix block value collection in pre-Amsterdam engine API payloads (#34704)
  • Include the operand in EIP-8024 error messages (#34635)
  • Fix vmodule downgrades and propagate verbosity changes to derived loggers (#33111)
  • Fix incorrect fsync ordering for index file truncation (#34728)
  • Fix file descriptor leak in freezer error paths (#34735)
  • Fix size calculation in path database (#34828)
  • Fix gapped queue size cap in blobpool (#34831)
  • Improve txpool pending concurrency by using read-only locking (#32924)
  • Replace deprecated TypeMux with Feed (#32585)
  • Continue blob retrieval when individual cell proof extraction fails (#34891)
  • Use uint256 in core Message for faster gas calculations (#34934)

... (truncated)

Commits

Updates github.com/ethereum/go-ethereum from 1.17.2 to 1.17.3

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Enzymatic Injector (v1.17.3)

This is a maintenance release with continued progress on the Amsterdam fork implementation. It also introduces ETH/70, which is now live on the network.

ethereum/execution-apis#762reexec has been removed from the tracing config:

  • memory: words are 0x-prefixed and padded to 32 bytes
  • storage: keys and values are 0x-prefixed
  • error: omitted when empty (previously serialized as "")

Geth

  • Add retry mechanism for checkpoint init in blsync (#33966)
  • Add subcommand for offline binary tree conversion (#33740)
  • Add code exporter for db export (#34696)

Core

  • Amsterdam fork updates:
  • Implement stack arena (#33960)
  • Implement EIP-7975: eth/70 partial block receipt lists (#33153)
  • Prerequisites of snap/2 protocol (#34083, #34649, #34654, #34874)
  • Implement history index pruner for path-mode archive nodes (#33999)
  • Add Prague chain segment pruning point for Hoodi (#34714)
  • Allow reorging head to parent within 32 blocks under ePBS (#34767)
  • Stop serving chain segment requests when data is unavailable (#34787)
  • Drop peers sending invalid bodies or receipts (#34745, #34870)
  • Add kzg4844 cell-related functions (#34766)
  • State database refactoring (#33102, #34700, #34763, #34724)
  • Binary trie improvements (#34055, #34110, #34670, #34676, #34680, #34690, #34754, #34758, #34777, #34794)
  • Merge EIP-4762 access events for all system calls (#34637)
  • Reject duplicate layers in the path database (#34642)
  • Omit empty slotNumber and fix block value collection in pre-Amsterdam engine API payloads (#34704)
  • Include the operand in EIP-8024 error messages (#34635)
  • Fix vmodule downgrades and propagate verbosity changes to derived loggers (#33111)
  • Fix incorrect fsync ordering for index file truncation (#34728)
  • Fix file descriptor leak in freezer error paths (#34735)
  • Fix size calculation in path database (#34828)
  • Fix gapped queue size cap in blobpool (#34831)
  • Improve txpool pending concurrency by using read-only locking (#32924)
  • Replace deprecated TypeMux with Feed (#32585)
  • Continue blob retrieval when individual cell proof extraction fails (#34891)
  • Use uint256 in core Message for faster gas calculations (#34934)

... (truncated)

Commits
  • 117e067 version: release go-ethereum v1.17.3 stable (#34937)
  • e1047b9 core: use uint256 in core.Message (#34934)
  • 2f11dcc cmd/geth: respect --dev=false (#34920)
  • 934a009 triedb/pathdb: fix layer 5 key range in storage iterator traversal test (#34883)
  • 18becee appveyor.yml: remove appveyor configuration (#34720)
  • f63c265 internal/download: close dst on io.Copy error (#34910)
  • 7facf9c core/txpool: use cmp.Compare instead of subtraction (#34918)
  • bcb68d2 p2p: handle return false from TCPEndpoint (#34916)
  • 8581125 crypto: add hash length check in nocgo VerifySignature (#33839)
  • 2ba9be9 build: upgrade -dlgo version to Go 1.25.10 (

@dependabot
build(deps): Bump the all-go group across 6 directories with 7 updates
4a3b4a6 
Bumps the all-go group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.30.0` | `1.31.0` |
| [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht) | `0.39.1` | `0.39.2` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.54.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.277.0` | `0.279.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.0` | `1.81.1` |

Bumps the all-go group with 1 update in the /apps/evm directory: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).
Bumps the all-go group with 1 update in the /execution/evm directory: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).
Bumps the all-go group with 1 update in the /execution/grpc directory: [golang.org/x/net](https://github.com/golang/net).
Bumps the all-go group with 1 update in the /test/docker-e2e directory: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).
Bumps the all-go group with 1 update in the /test/e2e directory: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).


Updates `cloud.google.com/go/kms` from 1.30.0 to 1.31.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.30.0...dlp/v1.31.0)

Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.39.1 to 0.39.2
- [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases)
- [Commits](libp2p/go-libp2p-kad-dht@v0.39.1...v0.39.2)

Updates `golang.org/x/crypto` from 0.50.0 to 0.51.0
- [Commits](golang/crypto@v0.50.0...v0.51.0)

Updates `golang.org/x/net` from 0.53.0 to 0.54.0
- [Commits](golang/net@v0.53.0...v0.54.0)

Updates `google.golang.org/api` from 0.277.0 to 0.279.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.277.0...v0.279.0)

Updates `google.golang.org/grpc` from 1.81.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

Updates `golang.org/x/net` from 0.53.0 to 0.54.0
- [Commits](golang/net@v0.53.0...v0.54.0)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `golang.org/x/net` from 0.53.0 to 0.54.0
- [Commits](golang/net@v0.53.0...v0.54.0)

Updates `golang.org/x/net` from 0.53.0 to 0.54.0
- [Commits](golang/net@v0.53.0...v0.54.0)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

Updates `github.com/ethereum/go-ethereum` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.2...v1.17.3)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/kms
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/libp2p/go-libp2p-kad-dht
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: google.golang.org/api
  dependency-version: 0.279.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
...

Signed-off-by: dependabot[bot] <[email protected]>
@tac0turtle tac0turtle enabled auto-merge May 18, 2026 11:24
@claude
Copy link
Copy Markdown
Contributor

claude Bot commented May 18, 2026 •
edited
Loading

Claude finished @julienrbrt's task in 1m 16s —— View job

Code Review

  • Gather context and read repo guidelines
  • Review dependency updates and changelogs
  • Check for breaking changes or compatibility issues
  • Security assessment
  • Final review summary

Summary

This is a routine Dependabot dependency bump across 6 Go module directories. All changes are confined to go.mod/go.sum files plus one README.md correction. No application source code was modified.

Security

google.golang.org/grpc 1.81.0 → 1.81.1 — This is the most important update in this PR.

Security fix: Resolves a potential authorization bypass in xds/rbac caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With the fix, only the first non-empty identity source is used, per gRFC A41.

This fix is relevant if the project uses xDS-based gRPC with RBAC policies. Even if ev-node doesn't use xDS RBAC directly today, picking up the patch is the right call. Recommend merging promptly for this reason alone.

Notable Changes

golang.org/x/net 0.53.0 → 0.54.0

  • Fixes a data race in QUIC streamForFrame — directly relevant given the project's concurrent networking architecture
  • Fixes wrong final size in RESET_STREAM frame
  • HTTP/2 improvements (wrapped server/client)

github.com/ethereum/go-ethereum 1.17.2 → 1.17.3

  • Maintenance release; introduces ETH/70 protocol (now live on mainnet)
  • Potential API change: reexec field removed from the tracing config. If any code in apps/evm, execution/evm, or test packages passes reexec in debug/trace calls, those fields will now be silently ignored or cause compile errors
  • Trace output format changes: memory words are now 0x-prefixed and padded to 32 bytes; error field is omitted when empty — callers that parse trace output by field name are unaffected, but any that parse by position or check for empty string on error should be reviewed

github.com/libp2p/go-libp2p-kad-dht 0.39.1 → 0.39.2

  • Adds WithReprovideInterval(0) burst-only mode; no breaking changes
  • Transitively bumps github.com/ipfs/boxo 0.37.0 → 0.39.0 and github.com/ipld/go-ipld-prime 0.22.0 → 0.23.0 — minor version bumps worth noting

README.md

  • Corrects the stated minimum Go requirement from >= 1.22 to >= 1.25, aligning with go 1.25.8 already in go.mod. This is a valid and necessary documentation fix.

Observations

  1. All direct and transitive dependency updates are consistent across the 6 module directories — no version skew visible.
  2. The go.sum changes are symmetric (equal additions and deletions), consistent with clean go mod tidy runs following the bumps.
  3. CI is in progress; no failures observed at review time.

Verdict

LGTM. The grpc security patch makes this a priority merge. The go-ethereum tracing API changes (reexec removal, output format) are worth a spot-check against any debug/trace call sites in apps/evm and execution/evm if those paths are exercised in tests.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 18, 2026

The latest Buf updates on your PR. Results from workflow CI / buf-check (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed⏩ skipped✅ passed✅ passedMay 18, 2026, 12:28 PM

@codecov
Copy link
Copy Markdown

codecov Bot commented May 18, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 60.84%. Comparing base (8904387) to head (aa09156).

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #3327      +/-   ##
==========================================
- Coverage   60.87%   60.84%   -0.03%     
==========================================
  Files         127      127              
  Lines       13762    13762              
==========================================
- Hits         8378     8374       -4     
- Misses       4473     4476       +3     
- Partials      911      912       +1
Flag Coverage Δ
combined 60.84% <ø> (-0.03%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 19, 2026

Dependabot can't resolve your Go dependency files. Because of this, Dependabot cannot update this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tac0turtle tac0turtle tac0turtle approved these changes

Assignees

No one assigned

Labels

T:dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@tac0turtle @julienrbrt