Skip to content

build(deps): Bump the go-dependencies group across 1 directory with 4 updates - #4817

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-6befcfc228
Open

build(deps): Bump the go-dependencies group across 1 directory with 4 updates#4817
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-6befcfc228

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 4 updates in the / directory: github.com/attestantio/go-builder-client, github.com/ethereum/go-ethereum, golang.org/x/net and github.com/bufbuild/buf.

Updates github.com/attestantio/go-builder-client from 0.8.0 to 0.9.1

Changelog

Sourced from github.com/attestantio/go-builder-client's changelog.

0.9.1:

  • regenerate ssz code with dynamic-ssz v1.4.0, matching the version required by go-eth2-client v0.30.2

0.9.0:

  • import gloas changes from go-eth2-client
  • add gloas api support for builderpreferences, builderrequest and signed builderrequest
Commits
  • 51f5468 Merge pull request #67 from attestantio/regen-dynssz-v1.4.0
  • 7360e18 Bump version.
  • 1d4d258 Pin dynssz-gen install to v1.4.0 and tidy modules
  • 91f098b Regenerate SSZ code with dynamic-ssz v1.4.0
  • b2ccc6a Merge pull request #66 from attestantio/gloas
  • d9995d2 Fix failing test too.
  • e5b3113 Pull in latest go-eth2-client.
  • 1fbedf1 Gloas builder api types (#63)
  • e5767e8 Merge pull request #64 from attestantio/bump_eth2_gloas
  • 6703ff0 Import gloas changes from go-eth2-client.
  • See full diff in compare view

Updates github.com/ethereum/go-ethereum from 1.17.8 to 1.17.10

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Soil Reducer (v1.17.10)

This is a quick release that postpones the Amsterdam fork on the Hoodi testnet, previously scheduled for Oct 26, 2026, 17:42:48 UTC. Hoodi node operators running v1.17.9 must upgrade before then. A new date will be set in a future release; other networks are unaffected.

Snap sync now switches to snap/2 automatically once Amsterdam is active. Use --snap.v2=false or --snap.v2=true to force a protocol.

Changes

  • Cancel the Amsterdam activation on Hoodi (#36001)
  • Use snap/2 automatically once Amsterdam is active (#35989)
  • Optimize DUP/SWAP dispatch in the interpreter (#35959)

For a full rundown of the changes please consult the Geth 1.17.10 release milestone.

As with all our previous releases, you can find the:

Universal Semiconductor (v1.17.9)

This release enables the Amsterdam fork 🦩 on the Hoodi testnet at block timestamp 1793036568 (Mon, 26 Oct 2026 17:42:48 UTC).

It also contains changes to the EVM to improve the performance significantly.

This release is recommended for all users running their nodes on the Hoodi testnet.

Geth

  • Blsync now supports the Gloas beacon chain fork and had some bug fixes (#35956, #35385, #35957)
  • When running an archive node, you can now configure the transaction index history using --history.transactions flag. (#35907)

Core

  • Amsterdam fork is set to activate at block timestamp 1793036568. (#35974)
  • EVM interpreter opcode dispatching became 16% faster due to a new inlined switch implementation. (#35638)
  • Several fixes for database corruption on power failure (#35939, #35936)
  • Bug fix in trie database related to concurrent state reading (#35978)
  • RPC call concurrent with block processing could result in BAL corruption. (#35905)
  • State history committing is moved to the background, making newPayload 2% faster. (#35949)
  • Key-value database settings changed for improved write performance (#35691)
  • Fixed log index under history pruning beyond the checkpoint (#35875)

Networking

  • Fixed snap/2 restart issue by checking for pivot block reorg in the header chain (#35930, #35982)

... (truncated)

Commits

Updates golang.org/x/net from 0.61.0 to 0.62.0

Commits
  • 3de643d html: check all ancestor namespace transitions when rendering raw text
  • 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
  • dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
  • 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
  • 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
  • 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
  • afcf8cd ipv4: fix several missing bounds checks
  • 4af4fce html: avoid quadratic complexity when coalescing text nodes
  • 7e56200 quic: per-path connection ids
  • See full diff in compare view

Updates github.com/bufbuild/buf from 1.74.0 to 1.75.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.75.0

  • Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
  • Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
  • Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
  • Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
  • Add support for Protobuf edition 2026.
  • Update built-in Well-Known Types to Protobuf v36.2.
  • Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
  • Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.
Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.75.0] - 2026-10-21

  • Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
  • Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
  • Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
  • Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
  • Add support for Protobuf edition 2026.
  • Update built-in Well-Known Types to Protobuf v36.2.
  • Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
  • Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/bufbuild/buf [>= 1.73.a, < 1.74]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-6befcfc228 branch from 9f111cc to cb48558 Compare November 3, 2026 16:54
@dependabot
build(deps): Bump the go-dependencies group across 1 directory with 4…
4ca3fe5 
… updates

Bumps the go-dependencies group with 4 updates in the / directory: [github.com/attestantio/go-builder-client](https://github.com/attestantio/go-builder-client), [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum), [golang.org/x/net](https://github.com/golang/net) and [github.com/bufbuild/buf](https://github.com/bufbuild/buf).


Updates `github.com/attestantio/go-builder-client` from 0.8.0 to 0.9.1
- [Changelog](https://github.com/attestantio/go-builder-client/blob/master/CHANGELOG.md)
- [Commits](attestantio/go-builder-client@v0.8.0...v0.9.1)

Updates `github.com/ethereum/go-ethereum` from 1.17.8 to 1.17.10
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.8...v1.17.10)

Updates `golang.org/x/net` from 0.61.0 to 0.62.0
- [Commits](golang/net@v0.61.0...v0.62.0)

Updates `github.com/bufbuild/buf` from 1.74.0 to 1.75.0
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.74.0...v1.75.0)

---
updated-dependencies:
- dependency-name: github.com/attestantio/go-builder-client
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.75.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-6befcfc228 branch from cb48558 to 4ca3fe5 Compare November 4, 2026 16:53
@sonarqubecloud

sonarqubecloud Bot commented Nov 4, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants