Skip to content

build(deps): Bump the go-dependencies group across 1 directory with 4 updates - #4817

Merged
aly-obol merged 3 commits into
mainfrom
dependabot/go_modules/go-dependencies-6befcfc228
Nov 5, 2026
Merged

build(deps): Bump the go-dependencies group across 1 directory with 4 updates#4817
aly-obol merged 3 commits into
mainfrom
dependabot/go_modules/go-dependencies-6befcfc228

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 4 updates in the / directory: github.com/attestantio/go-builder-client, github.com/ethereum/go-ethereum, golang.org/x/net and github.com/bufbuild/buf.

Updates github.com/attestantio/go-builder-client from 0.8.0 to 0.9.1

Changelog

Sourced from github.com/attestantio/go-builder-client's changelog.

0.9.1:

  • regenerate ssz code with dynamic-ssz v1.4.0, matching the version required by go-eth2-client v0.30.2

0.9.0:

  • import gloas changes from go-eth2-client
  • add gloas api support for builderpreferences, builderrequest and signed builderrequest
Commits
  • 51f5468 Merge pull request #67 from attestantio/regen-dynssz-v1.4.0
  • 7360e18 Bump version.
  • 1d4d258 Pin dynssz-gen install to v1.4.0 and tidy modules
  • 91f098b Regenerate SSZ code with dynamic-ssz v1.4.0
  • b2ccc6a Merge pull request #66 from attestantio/gloas
  • d9995d2 Fix failing test too.
  • e5b3113 Pull in latest go-eth2-client.
  • 1fbedf1 Gloas builder api types (#63)
  • e5767e8 Merge pull request #64 from attestantio/bump_eth2_gloas
  • 6703ff0 Import gloas changes from go-eth2-client.
  • See full diff in compare view

Updates github.com/ethereum/go-ethereum from 1.17.8 to 1.17.10

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Soil Reducer (v1.17.10)

This is a quick release that postpones the Amsterdam fork on the Hoodi testnet, previously scheduled for Oct 26, 2026, 17:42:48 UTC. Hoodi node operators running v1.17.9 must upgrade before then. A new date will be set in a future release; other networks are unaffected.

Snap sync now switches to snap/2 automatically once Amsterdam is active. Use --snap.v2=false or --snap.v2=true to force a protocol.

Changes

  • Cancel the Amsterdam activation on Hoodi (#36001)
  • Use snap/2 automatically once Amsterdam is active (#35989)
  • Optimize DUP/SWAP dispatch in the interpreter (#35959)

For a full rundown of the changes please consult the Geth 1.17.10 release milestone.

As with all our previous releases, you can find the:

Universal Semiconductor (v1.17.9)

This release enables the Amsterdam fork 🦩 on the Hoodi testnet at block timestamp 1793036568 (Mon, 26 Oct 2026 17:42:48 UTC).

It also contains changes to the EVM to improve the performance significantly.

This release is recommended for all users running their nodes on the Hoodi testnet.

Geth

  • Blsync now supports the Gloas beacon chain fork and had some bug fixes (#35956, #35385, #35957)
  • When running an archive node, you can now configure the transaction index history using --history.transactions flag. (#35907)

Core

  • Amsterdam fork is set to activate at block timestamp 1793036568. (#35974)
  • EVM interpreter opcode dispatching became 16% faster due to a new inlined switch implementation. (#35638)
  • Several fixes for database corruption on power failure (#35939, #35936)
  • Bug fix in trie database related to concurrent state reading (#35978)
  • RPC call concurrent with block processing could result in BAL corruption. (#35905)
  • State history committing is moved to the background, making newPayload 2% faster. (#35949)
  • Key-value database settings changed for improved write performance (#35691)
  • Fixed log index under history pruning beyond the checkpoint (#35875)

Networking

  • Fixed snap/2 restart issue by checking for pivot block reorg in the header chain (#35930, #35982)

... (truncated)

Commits

Updates golang.org/x/net from 0.61.0 to 0.62.0

Commits
  • 3de643d html: check all ancestor namespace transitions when rendering raw text
  • 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
  • dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
  • 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
  • 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
  • 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
  • afcf8cd ipv4: fix several missing bounds checks
  • 4af4fce html: avoid quadratic complexity when coalescing text nodes
  • 7e56200 quic: per-path connection ids
  • See full diff in compare view

Updates github.com/bufbuild/buf from 1.74.0 to 1.75.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.75.0

  • Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
  • Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
  • Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
  • Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
  • Add support for Protobuf edition 2026.
  • Update built-in Well-Known Types to Protobuf v36.2.
  • Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
  • Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.
Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.75.0] - 2026-10-21

  • Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
  • Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
  • Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
  • Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
  • Add support for Protobuf edition 2026.
  • Update built-in Well-Known Types to Protobuf v36.2.
  • Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
  • Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/bufbuild/buf [>= 1.73.a, < 1.74]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-6befcfc228 branch from 9f111cc to cb48558 Compare November 3, 2026 16:54
@dependabot
build(deps): Bump the go-dependencies group across 1 directory with 4…
4ca3fe5 
… updates

Bumps the go-dependencies group with 4 updates in the / directory: [github.com/attestantio/go-builder-client](https://github.com/attestantio/go-builder-client), [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum), [golang.org/x/net](https://github.com/golang/net) and [github.com/bufbuild/buf](https://github.com/bufbuild/buf).


Updates `github.com/attestantio/go-builder-client` from 0.8.0 to 0.9.1
- [Changelog](https://github.com/attestantio/go-builder-client/blob/master/CHANGELOG.md)
- [Commits](attestantio/go-builder-client@v0.8.0...v0.9.1)

Updates `github.com/ethereum/go-ethereum` from 1.17.8 to 1.17.10
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.8...v1.17.10)

Updates `golang.org/x/net` from 0.61.0 to 0.62.0
- [Commits](golang/net@v0.61.0...v0.62.0)

Updates `github.com/bufbuild/buf` from 1.74.0 to 1.75.0
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.74.0...v1.75.0)

---
updated-dependencies:
- dependency-name: github.com/attestantio/go-builder-client
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.75.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-6befcfc228 branch from cb48558 to 4ca3fe5 Compare November 4, 2026 16:53
@sonarqubecloud

sonarqubecloud Bot commented Nov 5, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@codecov

codecov Bot commented Nov 5, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.77%. Comparing base (774315a) to head (7a84b32).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #4817      +/-   ##
==========================================
+ Coverage   67.71%   67.77%   +0.05%     
==========================================
  Files         255      255              
  Lines       33711    33749      +38     
==========================================
+ Hits        22828    22873      +45     
+ Misses      10882    10875       -7     
  Partials        1        1

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@aly-obol
aly-obol merged commit beea8ba into main Nov 5, 2026
15 checks passed
@aly-obol
aly-obol deleted the dependabot/go_modules/go-dependencies-6befcfc228 branch November 5, 2026 18:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@OisinKyne OisinKyne OisinKyne approved these changes
@KaloyanTanev KaloyanTanev KaloyanTanev approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@OisinKyne @KaloyanTanev @aly-obol