Skip to content

chore(deps): bump github.com/blinklabs-io/gouroboros from 0.158.3 to 0.159.2#422

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.159.2
Closed

chore(deps): bump github.com/blinklabs-io/gouroboros from 0.158.3 to 0.159.2#422
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.159.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps github.com/blinklabs-io/gouroboros from 0.158.3 to 0.159.2.

Release notes

Sourced from github.com/blinklabs-io/gouroboros's releases.

v0.159.2

What's Changed

Full Changelog: blinklabs-io/gouroboros@v0.159.1...v0.159.2

v0.159.1

What's Changed

Full Changelog: blinklabs-io/gouroboros@v0.159.0...v0.159.1

v0.159.0

What's Changed

Full Changelog: blinklabs-io/gouroboros@v0.158.4...v0.159.0

v0.158.4

What's Changed

Full Changelog: blinklabs-io/gouroboros@v0.158.3...v0.158.4

Changelog

Sourced from github.com/blinklabs-io/gouroboros's changelog.

v0.159.2 - transaction validation updates

  • Date: 2026-02-27
  • Version: 0.159.2

Summary

This release includes Conway Plutus transaction validation updates, strict CBOR metadata decoding, and developer documentation refinements.

Breaking Changes

  • Updated Conway Plutus transaction validation to require ScriptDataHash only when redeemers or witness datums are present (script references are treated as inert) and to return a typed input-resolution error when a UTxO lookup fails.
  • Updated callers to omit ScriptDataHash unless a transaction includes Plutus redeemers or witness datums.

Bug Fixes

  • Fixed metadata decoding for generic CBOR maps to fail fast on any key or value decode error by using *cbor.Value map keys.

Additional Changes

  • Updated AGENTS.md to clarify delegation behavior, document TransactionBuilder and MockTransaction usage, and expand validation and review guidelines.

v0.159.1 - transaction handling and CBOR conformance

  • Date: 2026-02-26
  • Version: 0.159.1

Summary

This release includes updates to transaction preparation and CBOR serialization conformance.

New Features

  • Updated transaction preparation to export input sorting for redeemer mapping and apply consistent datum handling across validation paths.

Bug Fixes

  • Fixed certificate amount CBOR encoding and script context serialization in test vectors to match expected on-chain representation.

v0.159.0 - asynchronous Leios notifications

  • Date: 2026-02-25
  • Version: 0.159.0

Summary

This release adds asynchronous Leios notifications so applications can receive updates without blocking other work.

New Features

... (truncated)

Commits
  • 7267538 fix(ledger): script refs are inert unless triggered (#1601)
  • fa79e51 fix(ledger): use *cbor.Value in metadata decoding (#1599)
  • 73a95e7 docs(agents): updated by the robot from its own learnings (#1594)
  • 8654398 fix(ledger): validation fixes found during testing (#1598)
  • 18610ef feat: async operation for LeiosNotify (#1596)
  • f1abc35 fix: queue state transitions for pipelined messages (#1593)
  • 0b3b5bc fix(ledger): fill validation gaps (#1591)
  • ecf4946 docs: inform agents of new mock ledger state requirements (#1592)
  • a330eff chore(deps): bump filippo.io/edwards25519 from 1.1.1 to 1.2.0 (#1590)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade gouroboros to v0.159.2 to improve Conway Plutus transaction validation and strict CBOR metadata decoding. Includes async Leios notifications and fixes that may require small transaction-building adjustments.

  • Dependencies

    • github.com/blinklabs-io/gouroboros → 0.159.2
    • filippo.io/edwards25519 → 1.2.0 (indirect)
    • Includes: inert script refs unless triggered, strict CBOR map decoding, pipelined message queue fixes, async Leios notifications.
  • Migration

    • Only set ScriptDataHash when a transaction has redeemers or witness datums.
    • Handle typed UTxO lookup errors returned during input resolution.
    • Verify any metadata map decoding against stricter CBOR behavior.

Written for commit 1f101f1. Summary will update on new commits.

Bumps [github.com/blinklabs-io/gouroboros](https://github.com/blinklabs-io/gouroboros) from 0.158.3 to 0.159.2.
- [Release notes](https://github.com/blinklabs-io/gouroboros/releases)
- [Changelog](https://github.com/blinklabs-io/gouroboros/blob/main/RELEASE_NOTES.md)
- [Commits](blinklabs-io/gouroboros@v0.158.3...v0.159.2)

---
updated-dependencies:
- dependency-name: github.com/blinklabs-io/gouroboros
  dependency-version: 0.159.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 2, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 2, 2026 03:04
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 2, 2026
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 9, 2026

Superseded by #425.

@dependabot dependabot bot closed this Mar 9, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.159.2 branch March 9, 2026 03:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants