Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 10 updates - #1906

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/develop/all-dependencies-1bb635fc74
Open

chore(deps): bump the all-dependencies group across 1 directory with 10 updates#1906
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/develop/all-dependencies-1bb635fc74

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 10 updates in the / directory:

Package From To
github.com/ethereum/go-ethereum 1.17.7 1.17.10
github.com/knadh/koanf/parsers/json 1.0.0 1.0.1
github.com/knadh/koanf/providers/rawbytes 1.0.0 1.0.1
github.com/knadh/koanf/v2 2.3.5 2.4.1
github.com/mattn/go-sqlite3 1.14.48 1.14.52
github.com/prometheus/client_golang 1.24.0 1.25.0
github.com/prometheus/client_model 0.6.2 0.6.3
github.com/rs/cors 1.11.0 1.11.1
golang.org/x/sync 0.23.0 0.24.0
google.golang.org/grpc 1.83.2 1.84.0

Updates github.com/ethereum/go-ethereum from 1.17.7 to 1.17.10

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Soil Reducer (v1.17.10)

This is a quick release that postpones the Amsterdam fork on the Hoodi testnet, previously scheduled for Oct 26, 2026, 17:42:48 UTC. Hoodi node operators running v1.17.9 must upgrade before then. A new date will be set in a future release; other networks are unaffected.

Snap sync now switches to snap/2 automatically once Amsterdam is active. Use --snap.v2=false or --snap.v2=true to force a protocol.

Changes

  • Cancel the Amsterdam activation on Hoodi (#36001)
  • Use snap/2 automatically once Amsterdam is active (#35989)
  • Optimize DUP/SWAP dispatch in the interpreter (#35959)

For a full rundown of the changes please consult the Geth 1.17.10 release milestone.

As with all our previous releases, you can find the:

Universal Semiconductor (v1.17.9)

This release enables the Amsterdam fork 🦩 on the Hoodi testnet at block timestamp 1793036568 (Mon, 26 Oct 2026 17:42:48 UTC).

It also contains changes to the EVM to improve the performance significantly.

This release is recommended for all users running their nodes on the Hoodi testnet.

Geth

  • Blsync now supports the Gloas beacon chain fork and had some bug fixes (#35956, #35385, #35957)
  • When running an archive node, you can now configure the transaction index history using --history.transactions flag. (#35907)

Core

  • Amsterdam fork is set to activate at block timestamp 1793036568. (#35974)
  • EVM interpreter opcode dispatching became 16% faster due to a new inlined switch implementation. (#35638)
  • Several fixes for database corruption on power failure (#35939, #35936)
  • Bug fix in trie database related to concurrent state reading (#35978)
  • RPC call concurrent with block processing could result in BAL corruption. (#35905)
  • State history committing is moved to the background, making newPayload 2% faster. (#35949)
  • Key-value database settings changed for improved write performance (#35691)
  • Fixed log index under history pruning beyond the checkpoint (#35875)

Networking

  • Fixed snap/2 restart issue by checking for pivot block reorg in the header chain (#35930, #35982)

... (truncated)

Commits

Updates github.com/knadh/koanf/parsers/json from 1.0.0 to 1.0.1

Commits
  • 75e13d9 Fix multiple large int64 handling issues.
  • b133504 skip disabled secret on azure kv read (#437)
  • 1aba4ed deps: upgrade go-toml to v2.4.3 (#419)
  • d2ffdaa Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /providers/kiln (#427)
  • 4f7edbb Bump google.golang.org/grpc from 1.56.3 to 1.82.1 in /examples (#430)
  • 31dd449 fix: error on scalar/map type mismatch in MergeStrict regardless of order (#424)
  • e09e4c8 fix: report full key var in MergeStrict type-mismatch error message (#418)
  • 7a28d59 Exclude nats, vault providers from global workspace and fix CI test commands.
  • d511690 Fix test action to use local Go toolchain for different versions.
  • 308274c Fix async file provider Watch() test that would race and fail randomly.
  • Additional commits viewable in compare view

Updates github.com/knadh/koanf/providers/rawbytes from 1.0.0 to 1.0.1

Commits
  • 75e13d9 Fix multiple large int64 handling issues.
  • b133504 skip disabled secret on azure kv read (#437)
  • 1aba4ed deps: upgrade go-toml to v2.4.3 (#419)
  • d2ffdaa Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /providers/kiln (#427)
  • 4f7edbb Bump google.golang.org/grpc from 1.56.3 to 1.82.1 in /examples (#430)
  • 31dd449 fix: error on scalar/map type mismatch in MergeStrict regardless of order (#424)
  • e09e4c8 fix: report full key var in MergeStrict type-mismatch error message (#418)
  • 7a28d59 Exclude nats, vault providers from global workspace and fix CI test commands.
  • d511690 Fix test action to use local Go toolchain for different versions.
  • 308274c Fix async file provider Watch() test that would race and fail randomly.
  • Additional commits viewable in compare view

Updates github.com/knadh/koanf/v2 from 2.3.5 to 2.4.1

Release notes

Sourced from github.com/knadh/koanf/v2's releases.

v2.4.1

What's Changed

New Contributors

Full Changelog: knadh/koanf@v2.4.0...v2.4.1

v2.4.0

What's Changed

New Contributors

Full Changelog: knadh/koanf@v2.3.8...v2.4.0

v2.3.8

What's Changed

New Contributors

Full Changelog: knadh/koanf@v2.3.7...v2.3.8

v2.3.7

What's Changed

New Contributors

... (truncated)

Commits
  • 05e9d6b Fix panic on unmarshalling duration strings on string types (#459)
  • 10d774d Fix k8smount dropping keys mounted at nested paths (#457)
  • 68aea49 Fix HCL flattenSlices skipping blocks inside repeated blocks (#458)
  • b7063d2 Add 'd' (day, 24 hours) suffix support to duration string parsing.
  • 2ebf824 dotenv: skip keys that the callback blanks, like env.Provider (#456)
  • 5e1fa7a Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /examples (#454)
  • 182a04e Fix UnmarshalWithConf ignoring a caller's DecoderConfig.TagName (#441)
  • 9232c82 cliflagv2: read each flag from the command that defines it (#453)
  • 05a17cc Fix IntfaceKeysToStrings missing maps inside nested slices (#442)
  • 2c35f37 Fix Cut(), Copy() and Slices() to retain Conf settings (#443)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.48 to 1.14.52

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.52

What's Changed

Full Changelog: mattn/go-sqlite3@v1.14.51...v1.14.52

1.14.51

What's Changed

New Contributors

Full Changelog: mattn/go-sqlite3@v1.14.50...v1.14.51

1.14.50

What's Changed

New Contributors

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

1.14.49

What's Changed

... (truncated)

Commits
  • b0be46f Merge pull request #1454 from mattn/fix-stmt-cache-probe-cost
  • c8212b8 Replace schema probe with eager first step for cached statements
  • d7f5da7 Merge pull request #1452 from mattn/fix-stmt-cache-schema-change
  • 6428cad Merge pull request #1444 from bradengroom/codex/efficient-query-cancellation
  • be93f7a Merge pull request #1453 from mattn/fix-handle-map-quadratic
  • 5b285a1 Merge branch 'master' into codex/efficient-query-cancellation
  • 2294cd9 Replace copy-on-write handle map with sync.Map
  • 5341cee Gate cache on runtime version and skip probing in transactions
  • c7ed68d Flush statement cache when the schema changes
  • 6507893 Merge pull request #1367 from kberov/typos
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.24.0 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

1.24.1 / 2026-07-23

  • [BUGFIX] promhttp: Fix panic on requests with nil URL. #2065
Commits

Updates github.com/prometheus/client_model from 0.6.2 to 0.6.3

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.3

What's Changed

New Contributors

Full Changelog: prometheus/client_model@v0.6.2...v0.6.3

What's Changed

... (truncated)

Commits

Updates github.com/rs/cors from 1.11.0 to 1.11.1

Commits
  • a814d79 Re-add support for multiple Access-Control-Request-Headers field (fixes #184)...
  • 1562b17 Removed redundant log nil checks (#178)
  • 3d336ea Update all dependencies to latest in examples (#175)
  • 85fc0ca Make Gin wrapper's status configurable and use 204 as default (fixes #145) (#...
  • See full diff in compare view

Updates golang.org/x/sync from 0.23.0 to 0.24.0

Commits
  • 36f2d70 errgroup: modernize the usage of closures in goroutines
  • See full diff in compare view

Updates google.golang.org/grpc from 1.83.2 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

  • stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)
    • ...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/develop/all-dependencies-1bb635fc74 branch from 611056b to 6aa903b Compare October 20, 2026 12:04
@dependabot
chore(deps): bump the all-dependencies group across 1 directory with …
1728bdb 
…10 updates

Bumps the all-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.17.7` | `1.17.10` |
| [github.com/knadh/koanf/parsers/json](https://github.com/knadh/koanf) | `1.0.0` | `1.0.1` |
| [github.com/knadh/koanf/providers/rawbytes](https://github.com/knadh/koanf) | `1.0.0` | `1.0.1` |
| [github.com/knadh/koanf/v2](https://github.com/knadh/koanf) | `2.3.5` | `2.4.1` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.48` | `1.14.52` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.0` | `1.25.0` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.2` | `0.6.3` |
| [github.com/rs/cors](https://github.com/rs/cors) | `1.11.0` | `1.11.1` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` |



Updates `github.com/ethereum/go-ethereum` from 1.17.7 to 1.17.10
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.7...v1.17.10)

Updates `github.com/knadh/koanf/parsers/json` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/knadh/koanf/releases)
- [Commits](knadh/koanf@v1.0.0...parsers/hcl/v1.0.1)

Updates `github.com/knadh/koanf/providers/rawbytes` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/knadh/koanf/releases)
- [Commits](knadh/koanf@v1.0.0...parsers/hcl/v1.0.1)

Updates `github.com/knadh/koanf/v2` from 2.3.5 to 2.4.1
- [Release notes](https://github.com/knadh/koanf/releases)
- [Commits](knadh/koanf@v2.3.5...v2.4.1)

Updates `github.com/mattn/go-sqlite3` from 1.14.48 to 1.14.52
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.48...v1.14.52)

Updates `github.com/prometheus/client_golang` from 1.24.0 to 1.25.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.0...v1.25.0)

Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.2...v0.6.3)

Updates `github.com/rs/cors` from 1.11.0 to 1.11.1
- [Commits](rs/cors@v1.11.0...v1.11.1)

Updates `golang.org/x/sync` from 0.23.0 to 0.24.0
- [Commits](golang/sync@v0.23.0...v0.24.0)

Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/knadh/koanf/parsers/json
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/knadh/koanf/providers/rawbytes
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/knadh/koanf/v2
  dependency-version: 2.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/rs/cors
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/develop/all-dependencies-1bb635fc74 branch from 6aa903b to 1728bdb Compare October 27, 2026 12:05

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants