Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 6, 2024

Bumps the go_modules group with 6 updates in the / directory:

Package From To
github.com/ethereum/go-ethereum 1.10.19 1.13.15
github.com/evmos/ethermint 0.6.1-0.20220919141022-34226aa7b1fa 0.18.0
google.golang.org/grpc 1.50.1 1.56.3
github.com/btcsuite/btcd 0.22.1 0.23.2
github.com/dvsekhvalnov/jose2go 1.5.0 1.6.0
github.com/hashicorp/go-getter 1.6.1 1.7.4

Updates github.com/ethereum/go-ethereum from 1.10.19 to 1.13.15

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Ontamalca (v1.13.15)

Geth v1.13.15 is a maintenance-release that contains some fixes mainly to avoid snapsync-related data-corruption.

We recommend all users to upgrade to v1.13.15 as soon as possible.


As with all our previous releases, you can find the:

Altaaya (v1.13.14)

Geth v1.13.14 is a small maintenance release with a handful of polishes to the blob pool:

  • Disallow blob transactions below the protocol minimum of 1 wei to enter the pool (#29081).
  • Reduce the blob pool's max capacity to 2.5GB for the rollout. (#29090).
  • Fix gas estimation for blob transactions (#29085).

This release is NOT critical for the Cancun fork, but recommended to make Geth lighter in anticipation to unknown blob load.

Other fixes:

  • Support overriding the basefee during tracing (#29051).
  • Fix call tracers missing top level logs in top-only mode (#29068).
  • Support unlimited gas for eth_createAccessList if --gascap=0 (#28846).

For a full rundown of the changes please consult the Geth 1.13.14 release milestone.


As with all our previous releases, you can find the:

Alsages (v1.13.13)

This is a minor release with fixes for several issues related to the upcoming Cancun mainnet fork. As such, it is recommended for all mainnet users.

Changes in this release:

  • Block-building performance with blob transactions has been improved a lot. (#29026, #29008, #29005)
  • A corner case in the EVM related to out-of-order fork scheduling has been fixed. (#29023)
  • eth_fillTransaction has seen some bug fixes related to blob transactions as well. (#28929, #29037)
  • A rare panic in the ethstats client related to chain reorgs is resolved. (#29020)
  • The blobpool database will now recover from disk corruption faults instead of crashing geth on startup. (#29001)

... (truncated)

Commits
  • c5ba367 params: release Geth v 1.13.15
  • 35e0525 core, eth/protocols/snap, trie: fix cause for snap-sync corruption, implement...
  • 7bcb553 eth/filters: enforce topic-limit early on filter criterias (#29535)
  • e343ddf core/rawdb: add sanity-limit to header accessor (#29534)
  • 5dcf503 eth/protocols/snap: skip retrieval for completed storages (#29378)
  • 2bd6bd0 Merge branch 'master' into release/1.13
  • 9038ba6 params: release Geth v1.13.14
  • 51b479e core/txpool: elevate the 'already reserved' error into a constant (#29095)
  • 5a0f468 eth/tracers: Fix callTracer logs on onlyTopCall == true (#29068)
  • 45a272c core/txpool: no need to log loud rotate if no local txs (#29083)
  • Additional commits viewable in compare view

Updates github.com/evmos/ethermint from 0.6.1-0.20220919141022-34226aa7b1fa to 0.18.0

Release notes

Sourced from github.com/evmos/ethermint's releases.

v0.18.0

v0.18.0

Changelog

State Machine Breaking

  • (evm) #1174 Don't allow eth txs with 0 in mempool.

Improvements

  • (ante) #1208 Change default MaxGasWanted value.

Full Diff: evmos/ethermint@v0.17.2...v0.18.0

v0.17.2

v0.17.2 - 2022-07-26

Changelog

  • (rpc) #1190 Fix UnmarshalJSON panic of breaking EVM and fee market Params.
  • (evm) #1187 Fix TxIndex value (expected 0, actual 1) when trace the first tx of a block via debug_traceTransaction API.

Full Diff: evmos/ethermint@v0.17.1...v0.17.2

v0.17.1

v0.17.1 - 2022-07-13

Improvements

  • (rpc) #1169 Remove unnecessary queries from getBlockNumber function

Full Diff: evmos/ethermint@v0.17.0...v0.17.1

v0.17.0

v0.17.0 - 2022-06-27

Release Notes

This release includes fixes to the fee market module as well as adding configuration to reject non-replay protected transactions. Additionally, the go module has been renamed to evmos/ethermint.

This release is state-breaking, meaning that it will require setting an upgrade handler to bump the EVM module consensus version.

Changelog

State Machine Breaking

  • (evm) #1128 Clear tx logs if tx failed in post processing hooks
  • (evm) #1124 Reject non-replay-protected tx in AnteHandler to prevent replay attack

... (truncated)

Changelog

Sourced from github.com/evmos/ethermint's changelog.

[v0.18.0] - 2022-08-04

State Machine Breaking

Improvements

  • (ante) #1208 Change default MaxGasWanted value.

[v0.17.2] - 2022-07-26

Bug Fixes

  • (rpc) #1190 Fix UnmarshalJSON panic of breaking EVM and fee market Params.
  • (evm) #1187 Fix TxIndex value (expected 0, actual 1) when trace the first tx of a block via debug_traceTransaction API.

[v0.17.1] - 2022-07-13

Improvements

  • (rpc) #1169 Remove unnecessary queries from getBlockNumber function

[v0.17.0] - 2022-06-27

State Machine Breaking

  • (evm) #1128 Clear tx logs if tx failed in post processing hooks
  • (evm) #1124 Reject non-replay-protected tx in AnteHandler to prevent replay attack

API Breaking

  • (rpc) #1126 Make some JSON-RPC APIS work for pruned nodes.
  • (rpc) #1143 Restrict unprotected txs on the node JSON-RPC configuration.
  • (all) #1137 Rename go module to evmos/ethermint

API Breaking

Improvements

  • (deps) #1147 Bump Go version to 1.18.
  • (feemarket) #1135 Set lower bound of base fee to min gas price param
  • (evm) #1142 Rename RejectUnprotectedTx to AllowUnprotectedTxs for consistency with go-ethereum.

Bug Fixes

  • (rpc) #1138 Fix GasPrice calculation with relation to MinGasPrice

... (truncated)

Commits

Updates google.golang.org/grpc from 1.50.1 to 1.56.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.56.3

Security

  • server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

    In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.56.2

  • status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.56.1

  • client: handle empty address lists correctly in addrConn.updateAddrs

Release 1.56.0

New Features

  • client: support channel idleness using WithIdleTimeout dial option (#6263)
    • This feature is currently disabled by default, but will be enabled with a 30 minute default in the future.
  • client: when using pickfirst, keep channel state in TRANSIENT_FAILURE until it becomes READY (gRFC A62) (#6306)
  • xds: Add support for Custom LB Policies (gRFC A52) (#6224)
  • xds: support pick_first Custom LB policy (gRFC A62) (#6314) (#6317)
  • client: add support for pickfirst address shuffling (gRFC A62) (#6311)
  • xds: Add support for String Matcher Header Matcher in RDS (#6313)
  • xds/outlierdetection: Add Channelz Logger to Outlier Detection LB (#6145)
  • xds: enable RLS in xDS by default (#6343)
  • orca: add support for application_utilization field and missing range checks on several metrics setters
  • balancer/weightedroundrobin: add new LB policy for balancing between backends based on their load reports (gRFC A58) (#6241)
  • authz: add conversion of json to RBAC Audit Logging config (#6192)
  • authz: add support for stdout logger (#6230 and #6298)
  • authz: support customizable audit functionality for authorization policy (#6192 #6230 #6298 #6158 #6304 and #6225)

Bug Fixes

  • orca: fix a race at startup of out-of-band metric subscriptions that would cause the report interval to request 0 (#6245)
  • xds/xdsresource: Fix Outlier Detection Config Handling and correctly set xDS Defaults (#6361)
  • xds/outlierdetection: Fix Outlier Detection Config Handling by setting defaults in ParseConfig() (#6361)

API Changes

  • orca: allow a ServerMetricsProvider to be passed to the ORCA service and ServerOption (#6223)

Release 1.55.1

  • status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.55.0

Behavior Changes

  • xds: enable federation support by default (#6151)
  • status: status.Code and status.FromError handle wrapped errors (#6031 and #6150)

... (truncated)

Commits
  • 1055b48 Update version.go to 1.56.3 (#6713)
  • 5efd7bd server: prohibit more than MaxConcurrentStreams handlers from running at once...
  • bd1f038 Upgrade version.go to 1.56.3-dev (#6434)
  • faab873 Update version.go to v1.56.2 (#6432)
  • 6b0b291 status: fix panic when servers return a wrapped error with status OK (#6374) ...
  • ed56401 [PSM interop] Don't fail target if sub-target already failed (#6390) (#6405)
  • cd6a794 Update version.go to v1.56.2-dev (#6387)
  • 5b67e5e Update version.go to v1.56.1 (#6386)
  • d0f5150 client: handle empty address lists correctly in addrConn.updateAddrs (#6354) ...
  • 997c1ea Change version to 1.56.1-dev (#6345)
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.28.1 to 1.30.0

Updates github.com/btcsuite/btcd from 0.22.1 to 0.23.2

Release notes

Sourced from github.com/btcsuite/btcd's releases.

btcd v0.23.2

What's Changed

New Contributors

Full Changelog: btcsuite/btcd@v0.23.1...v0.23.2

btcd v0.23.1-beta

What's Changed

... (truncated)

Commits
  • 6b5418d Merge pull request #1898 from Roasbeef/v0-23-2-branch
  • 1a4af39 build: bump version to v0.23.2
  • d0aa747 Merge pull request #1896 from Roasbeef/witness-wire-hot-fix
  • f523d4c wire: remove erroneous witness size check in wire parsing
  • 38ee9a4 build: bump golang base image version to 1.17
  • ef4a8d3 doc: fix Tor hidden service setup link
  • 0f49e10 Merge pull request #1866 from darioush/bump-btcutils-versions
  • da4b534 Merge pull request #1865 from sputn1ck/musig2_0.3.0
  • 06ce960 btcec/schnorr/musig2: add infinity testvectors
  • 44eb8c6 btcec/schnorr/musig2: Allow infinity nonces
  • Additional commits viewable in compare view

Updates github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0

Commits

Updates github.com/hashicorp/go-getter from 1.6.1 to 1.7.4

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.4

What's Changed

Full Changelog: hashicorp/go-getter@v1.7.3...v1.7.4

v1.7.3

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.7.2...v1.7.3

v1.7.2

What's Changed

Full Changelog: hashicorp/go-getter@v1.7.1...v1.7.2

v1.7.1

No release notes provided.

v1.7.0

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.6.2...v1.7.0

v1.6.2

What's Changed

  • Fix no getter available for X-Terraform-Get source protocol when using bare github or bitbucket hostnames: #370
Commits
  • 268c11c escape user provide string to git (#483)
  • 975961f Merge pull request #433 from adrian-bl/netrc-fix
  • 0298a22 Merge pull request #459 from hashicorp/jbardin/setup-git-env
  • c70d9c9 don't change GIT_SSH_COMMAND if there's no keyfile
  • 3d5770f Merge pull request #458 from hashicorp/tsccr-auto-pinning/trusted/2023-09-18
  • 0688979 Result of tsccr-helper -log-level=info -pin-all-workflows .
  • e66f244 Merge pull request #454 from hashicorp/tsccr-auto-pinning/trusted/2023-09-11
  • e80b3dc Result of tsccr-helper -log-level=info -pin-all-workflows .
  • 2d49e24 Merge pull request #432 from hashicorp/tsccr-auto-pinning/trusted/2023-04-21
  • 5ccb39a Make addAuthFromNetrc ignore ENOTDIR errors
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.0.0-20220926161630-eccd6366d1be to 0.17.0

Commits

Updates golang.org/x/net from 0.0.0-20220909164309-bea034e7d591 to 0.18.0

Commits

Updates golang.org/x/text from 0.3.7 to 0.14.0

Commits
  • 6c97a16 all: update go directive to 1.18
  • f488e19 unicode/norm: fix function name on comment
  • fb697c0 cmd/gotext: actually use -dir flag
  • f3e69ed cmd/gotext: fix misbehaviors
  • ab07ad1 all: remove repetitive words
  • e503480 encoding/japanese, language: shorten very long sub-test names
  • 2df65d7 all: regenerate for Unicode 15.0.0
  • e3c038a all: prepare for Unicode 15.0.0
  • 3a7a255 internal/export/idna: make more space for mapping index
  • d61dd50 go.mod: delete repeated "indirect"
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…ates

Bumps the go_modules group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.10.19` | `1.13.15` |
| [github.com/evmos/ethermint](https://github.com/evmos/ethermint) | `0.6.1-0.20220919141022-34226aa7b1fa` | `0.18.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.50.1` | `1.56.3` |
| [github.com/btcsuite/btcd](https://github.com/btcsuite/btcd) | `0.22.1` | `0.23.2` |
| [github.com/dvsekhvalnov/jose2go](https://github.com/dvsekhvalnov/jose2go) | `1.5.0` | `1.6.0` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.6.1` | `1.7.4` |



Updates `github.com/ethereum/go-ethereum` from 1.10.19 to 1.13.15
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.10.19...v1.13.15)

Updates `github.com/evmos/ethermint` from 0.6.1-0.20220919141022-34226aa7b1fa to 0.18.0
- [Release notes](https://github.com/evmos/ethermint/releases)
- [Changelog](https://github.com/evmos/ethermint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evmos/ethermint/commits/v0.18.0)

Updates `google.golang.org/grpc` from 1.50.1 to 1.56.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.50.1...v1.56.3)

Updates `google.golang.org/protobuf` from 1.28.1 to 1.30.0

Updates `github.com/btcsuite/btcd` from 0.22.1 to 0.23.2
- [Release notes](https://github.com/btcsuite/btcd/releases)
- [Changelog](https://github.com/btcsuite/btcd/blob/master/CHANGES)
- [Commits](btcsuite/btcd@v0.22.1...v0.23.2)

Updates `github.com/dvsekhvalnov/jose2go` from 1.5.0 to 1.6.0
- [Commits](dvsekhvalnov/jose2go@v1.5...v1.6.0)

Updates `github.com/hashicorp/go-getter` from 1.6.1 to 1.7.4
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](hashicorp/go-getter@v1.6.1...v1.7.4)

Updates `golang.org/x/crypto` from 0.0.0-20220926161630-eccd6366d1be to 0.17.0
- [Commits](https://github.com/golang/crypto/commits/v0.17.0)

Updates `golang.org/x/net` from 0.0.0-20220909164309-bea034e7d591 to 0.18.0
- [Commits](https://github.com/golang/net/commits/v0.18.0)

Updates `golang.org/x/text` from 0.3.7 to 0.14.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.3.7...v0.14.0)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/evmos/ethermint
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/btcsuite/btcd
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/dvsekhvalnov/jose2go
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/text
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 6, 2024
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github May 6, 2024

Superseded by #4.

@dependabot dependabot bot closed this May 6, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go_modules-99a6606f0f branch May 6, 2024 14:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants