Skip to content

build(deps): Bump the go-dependencies group across 1 directory with 3 updates - #4809

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-5daeb7f494
Open

build(deps): Bump the go-dependencies group across 1 directory with 3 updates#4809
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-5daeb7f494

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 3 updates in the / directory: github.com/attestantio/go-builder-client, github.com/ethereum/go-ethereum and github.com/bufbuild/buf.

Updates github.com/attestantio/go-builder-client from 0.8.0 to 0.9.1

Changelog

Sourced from github.com/attestantio/go-builder-client's changelog.

0.9.1:

  • regenerate ssz code with dynamic-ssz v1.4.0, matching the version required by go-eth2-client v0.30.2

0.9.0:

  • import gloas changes from go-eth2-client
  • add gloas api support for builderpreferences, builderrequest and signed builderrequest
Commits
  • 51f5468 Merge pull request #67 from attestantio/regen-dynssz-v1.4.0
  • 7360e18 Bump version.
  • 1d4d258 Pin dynssz-gen install to v1.4.0 and tidy modules
  • 91f098b Regenerate SSZ code with dynamic-ssz v1.4.0
  • b2ccc6a Merge pull request #66 from attestantio/gloas
  • d9995d2 Fix failing test too.
  • e5b3113 Pull in latest go-eth2-client.
  • 1fbedf1 Gloas builder api types (#63)
  • e5767e8 Merge pull request #64 from attestantio/bump_eth2_gloas
  • 6703ff0 Import gloas changes from go-eth2-client.
  • See full diff in compare view

Updates github.com/ethereum/go-ethereum from 1.17.8 to 1.17.10

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Soil Reducer (v1.17.10)

This is a quick release that postpones the Amsterdam fork on the Hoodi testnet, previously scheduled for Oct 26, 2026, 17:42:48 UTC. Hoodi node operators running v1.17.9 must upgrade before then. A new date will be set in a future release; other networks are unaffected.

Snap sync now switches to snap/2 automatically once Amsterdam is active. Use --snap.v2=false or --snap.v2=true to force a protocol.

Changes

  • Cancel the Amsterdam activation on Hoodi (#36001)
  • Use snap/2 automatically once Amsterdam is active (#35989)
  • Optimize DUP/SWAP dispatch in the interpreter (#35959)

For a full rundown of the changes please consult the Geth 1.17.10 release milestone.

As with all our previous releases, you can find the:

Universal Semiconductor (v1.17.9)

This release enables the Amsterdam fork 🦩 on the Hoodi testnet at block timestamp 1793036568 (Mon, 26 Oct 2026 17:42:48 UTC).

It also contains changes to the EVM to improve the performance significantly.

This release is recommended for all users running their nodes on the Hoodi testnet.

Geth

  • Blsync now supports the Gloas beacon chain fork and had some bug fixes (#35956, #35385, #35957)
  • When running an archive node, you can now configure the transaction index history using --history.transactions flag. (#35907)

Core

  • Amsterdam fork is set to activate at block timestamp 1793036568. (#35974)
  • EVM interpreter opcode dispatching became 16% faster due to a new inlined switch implementation. (#35638)
  • Several fixes for database corruption on power failure (#35939, #35936)
  • Bug fix in trie database related to concurrent state reading (#35978)
  • RPC call concurrent with block processing could result in BAL corruption. (#35905)
  • State history committing is moved to the background, making newPayload 2% faster. (#35949)
  • Key-value database settings changed for improved write performance (#35691)
  • Fixed log index under history pruning beyond the checkpoint (#35875)

Networking

  • Fixed snap/2 restart issue by checking for pivot block reorg in the header chain (#35930, #35982)

... (truncated)

Commits

Updates github.com/bufbuild/buf from 1.74.0 to 1.75.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.75.0

  • Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
  • Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
  • Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
  • Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
  • Add support for Protobuf edition 2026.
  • Update built-in Well-Known Types to Protobuf v36.2.
  • Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
  • Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.
Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.75.0] - 2026-10-21

  • Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
  • Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
  • Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
  • Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
  • Add support for Protobuf edition 2026.
  • Update built-in Well-Known Types to Protobuf v36.2.
  • Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
  • Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/bufbuild/buf [>= 1.73.a, < 1.74]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the go-dependencies group across 1 directory with 3…
7c58a30 
… updates

Bumps the go-dependencies group with 3 updates in the / directory: [github.com/attestantio/go-builder-client](https://github.com/attestantio/go-builder-client), [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) and [github.com/bufbuild/buf](https://github.com/bufbuild/buf).


Updates `github.com/attestantio/go-builder-client` from 0.8.0 to 0.9.1
- [Changelog](https://github.com/attestantio/go-builder-client/blob/master/CHANGELOG.md)
- [Commits](attestantio/go-builder-client@v0.8.0...v0.9.1)

Updates `github.com/ethereum/go-ethereum` from 1.17.8 to 1.17.10
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.8...v1.17.10)

Updates `github.com/bufbuild/buf` from 1.74.0 to 1.75.0
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.74.0...v1.75.0)

---
updated-dependencies:
- dependency-name: github.com/attestantio/go-builder-client
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.75.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 26, 2026
@sonarqubecloud

sonarqubecloud Bot commented Oct 26, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants