Skip to content

Bump the dependencies group across 1 directory with 5 updates#11

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/dependencies-1fd764a164
Open

Bump the dependencies group across 1 directory with 5 updates#11
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/dependencies-1fd764a164

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the dependencies group with 4 updates in the / directory: github.com/ethereum/go-ethereum, github.com/pk910/dynamic-ssz, github.com/sirupsen/logrus and golang.org/x/crypto.

Updates github.com/ethereum/go-ethereum from 1.16.7 to 1.16.8

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Moisture Filters (v1.16.8)

This is a security fix release and is recommended for all users. It resolves two p2p vulnerabilities reported through the Ethereum Foundation bug bounty program.


As with all our previous releases, you can find the:

Commits
  • abeb78c Merge branch 'dos-fixes' into release/1.16
  • ce43eb9 version: release go-ethereum v1.16.8 stable
  • 638741b crypto/ecies: use aes blocksize
  • fdfd123 core/txpool: drop peers on invalid KZG proofs
  • 8ecb686 version: begin v1.16.8 release cycle
  • See full diff in compare view

Updates github.com/pk910/dynamic-ssz from 1.1.1 to 1.2.0

Release notes

Sourced from github.com/pk910/dynamic-ssz's releases.

v1.2.0 - streaming support

Major Changes

  • Streaming Support: Added memory-efficient streaming encoding/decoding to io.Reader/io.Writer for improved large data handling.
  • Performance Optimizations: Enhanced SSZ merkle proof verification and tree methods for faster and more memory-efficient operations.
  • Bug Fixes: Fixed heap allocation for bitlist HTR calculation and addressed potential out-of-memory errors in TreeFromNodes.
  • Refactored Codebase: Reorganized project structure into sub-packages (ssztypes and reflection) for better maintainability.
  • Improved Test Coverage: Refactored tests, removed dead code, and added comprehensive spec tests for streaming codepaths.

Full changelog

  • 3fae34e Merge pull request #76 from pk910/pk910/update-release-workflow
  • 2d2c14f Merge pull request #75 from pk910/pk910/spectests-with-streaming
  • 1224ce1 Merge pull request #74 from pk910/pk910/refactor-codebase
  • fe277b3 Merge pull request #73 from pk910/pk910/simplify-marshaling
  • 147a1c6 Merge pull request #72 from pk910/pk910/codegen-performance
  • e8e62c1 Merge pull request #71 from pk910/pk910/streaming-fixes
  • 55c3bec Merge pull request #69 from pk910/pk910/streaming4
  • e57d563 Merge pull request #67 from pk910/pk910/improve-test-coverage2
  • 09305ce Merge pull request #66 from pk910/pk910/codegen-perf-improvements
  • 1c1e61b Merge pull request #65 from Sahil-4555/optimize-tree-proof
  • d9f90f8 Merge pull request #64 from pk910/pk910/improve-test-coverage
  • 5967269 Merge pull request #63 from pk910/pk910/offchainlabs-bitlist
  • 590dac8 Merge pull request #62 from pk910/pk910/fix-dyn-byte-list-htr
  • c5ce8b2 Merge pull request #61 from pk910/pk910/fix-htr-bitlist-allocation
  • 6652877 Merge pull request #60 from Sahil-4555/optimize-tree-proof
  • 6c259a5 Merge pull request #59 from Sahil-4555/optimize-proof

v1.1.2

What's Changed

Full Changelog: pk910/dynamic-ssz@v1.1.1...v1.1.2

Commits
  • c20208b release 1.2.0
  • 3fae34e Merge pull request #76 from pk910/pk910/update-release-workflow
  • cc48617 update release workflow
  • 2d2c14f Merge pull request #75 from pk910/pk910/spectests-with-streaming
  • f9dcc44 update presets & fix fulu spec test
  • 19df7db add fulu spec tests & test streaming codepath too
  • 1224ce1 Merge pull request #74 from pk910/pk910/refactor-codebase
  • 9d0fc80 fix spectests
  • 2aad4de reorganize project code
  • fe277b3 Merge pull request #73 from pk910/pk910/simplify-marshaling
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.3 to 1.9.4

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.9.4

Notable changes

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

Commits
  • b61f268 Merge pull request #1472 from goldlinker/master
  • 15c29db refactor: replace the deprecated function in the ioutil package
  • cb253f3 Merge pull request #1464 from thaJeztah/touchup_godoc
  • 29b2337 Merge pull request #1468 from thaJeztah/touchup_readme
  • d916819 Merge pull request #1427 from dolmen/fix-testify-usage
  • 135e482 README: small touch-ups
  • 2c5fa36 Merge pull request #1467 from thaJeztah/rm_old_badge
  • 877ecec README: remove travis badge
  • 55cf256 Merge pull request #1393 from jsoref/grammar
  • 21bae50 Merge pull request #1426 from dolmen/testing-fix-use-of-math-rand
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.45.0 to 0.47.0

Commits
  • 506e022 go.mod: update golang.org/x dependencies
  • 7dacc38 chacha20poly1305: error out in fips140=only mode
  • 19acf81 go.mod: update golang.org/x dependencies
  • 3a1c6b4 x509roots/fallback: update bundle
  • f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory
  • See full diff in compare view

Updates golang.org/x/net from 0.47.0 to 0.48.0

Commits
  • 35e1306 go.mod: update golang.org/x dependencies
  • 7c36036 http2, webdav, websocket: fix %q verb uses with wrong type
  • ec11ecc trace: fix data race in RenderEvents
  • bff14c5 http2: don't PING a responsive server when resetting a stream
  • 88a6421 dns/dnsmessage: avoid use of "strings" and "math" in dns/dnsmessage
  • 123d099 http2: support net/http.Transport.NewClientConn
  • 346cc61 webdav: relax test to check for any redirect status, not just 301
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 19, 2026
@dependabot dependabot bot force-pushed the dependabot/go_modules/dependencies-1fd764a164 branch from 35a3da6 to 747c571 Compare February 9, 2026 18:27
Bumps the dependencies group with 4 updates in the / directory: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum), [github.com/pk910/dynamic-ssz](https://github.com/pk910/dynamic-ssz), [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) and [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `github.com/ethereum/go-ethereum` from 1.16.7 to 1.16.8
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.16.7...v1.16.8)

Updates `github.com/pk910/dynamic-ssz` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/pk910/dynamic-ssz/releases)
- [Commits](pk910/dynamic-ssz@v1.1.1...v1.2.0)

Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.3...v1.9.4)

Updates `golang.org/x/crypto` from 0.45.0 to 0.47.0
- [Commits](golang/crypto@v0.45.0...v0.47.0)

Updates `golang.org/x/net` from 0.47.0 to 0.48.0
- [Commits](golang/net@v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.16.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/pk910/dynamic-ssz
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/dependencies-1fd764a164 branch from 747c571 to 064ea37 Compare February 15, 2026 03:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants