Skip to content
This repository was archived by the owner on Jan 16, 2026. It is now read-only.

chore(deps): bump reth-db from v1.6.0 to v1.9.3#3178

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/reth-db-v1.9.3
Closed

chore(deps): bump reth-db from v1.6.0 to v1.9.3#3178
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/reth-db-v1.9.3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 9, 2025

Bumps reth-db from v1.6.0 to v1.9.3.

Release notes

Sourced from reth-db's releases.

Reth v1.9.3

image

This is on opstack patch release on top of v1.9.2 that contains fix for rollup boost that includes the new jovian fields in the payload id (paradigmxyz/reth#19726) Also updates the superchan registry with updated timestamps for jovian and isthmus (e.g. worldchain isthmus: ethereum-optimism/superchain-registry#1149) This release is recommended for opstack sepolia where jovian activates Wed 19 Nov 2025 16:00:01 UTC

For fusaka support info see also v1.9.0

Summary

Add a summary, including:

  • Critical bug fixes
  • New features
  • Any breaking changes (and what to expect)

Update Priority

This table provides priorities for which classes of users should update particular components.

User Class Priority
Payload Builders low
Non-Payload Builders low

See Update Priorities for more information about this table.

All Changes

  • chore: bump version v1.9.3 (#19831)
  • chore(op-reth/scr): update superchain-registry (#19806)
  • fix: add minbasefee for jovian attributes (#19726)

Binaries

See pre-built binaries documentation.

The binaries are signed with the PGP key: 50FB 7CC5 5B2E 8AFA 59FE 03B7 AA5E D56A 7FBF 253E

Reth

System Architecture Binary PGP Signature
x86_64 reth-v1.9.3-x86_64-unknown-linux-gnu.tar.gz PGP Signature
aarch64 reth-v1.9.3-aarch64-unknown-linux-gnu.tar.gz PGP Signature
x86_64 reth-v1.9.3-x86_64-pc-windows-gnu.tar.gz PGP Signature
x86_64 reth-v1.9.3-x86_64-apple-darwin.tar.gz PGP Signature
aarch64 reth-v1.9.3-aarch64-apple-darwin.tar.gz PGP Signature
Docker paradigmxyz/reth -

... (truncated)

Changelog

Sourced from reth-db's changelog.

Releases

Release cadence

reth does not currently have a regular release cadence while it is still experimental software.

For maintainers

This section outlines how to cut a new release.

It is assumed that the commit that is being considered for release has been marked as stable, i.e. that there is an expectation of no major bugs.

Release PR

  • Create a new branch (e.g. release/vx.y.z) and open a pull request for it
  • Ensure all tests and lints pass for the chosen commit
  • Version bump
    • Update the version in all Cargo.toml's
  • Commit the changes
    • The message format should be release: vx.y.z, substituting x.y.z for the semver.
  • The PR should be reviewed to see if anything was missed
  • Once reviewed, merge the PR

Releasing

  • Tag the new commit on main with vx.y.z (git tag vx.y.z SHA)
  • Push the tag (git push origin vx.y.z)[^1]
  • Update Homebrew Tap
  • Run the release commit on the testing infrastructure for 1-3 days to check for inconsistencies and bugs
    • This testing infrastructure is going to sync and keep up with a live testnet, and includes monitoring of bandwidth, CPU, disk space etc.

Note

The v prefix for the tag is important! If it is missing, the release workflow will not run.

When the tag is pushed, the artifacts are built automatically and a draft release is added to the repository. This draft release includes a template that must be filled out, including:

  • A summary of the release (highlights etc.)
  • The update priority (see below)
  • An auto-generated changelog

The release artifacts are automatically added to the draft release. Once ready, simply publish the release.

Release summaries

The release summary should include general notes on what the release contains that are important to operators. These changes can be found using the https://github.com/paradigmxyz/reth/labels/M-changelog label.

[^1]: It is possible to use git push --tags, but this is discouraged since it can be very difficult to get rid of bad tags.

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the F-deps Flag: Updates dependencies label Dec 9, 2025
@dependabot dependabot bot added the F-deps Flag: Updates dependencies label Dec 9, 2025
@wiz-b4c72f16a4
Copy link

wiz-b4c72f16a4 bot commented Dec 9, 2025

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 1 Low
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Supply Chain Finding Software Supply Chain Findings -
Total 1 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@codecov
Copy link

codecov bot commented Dec 9, 2025

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

Bumps [reth-db](https://github.com/paradigmxyz/reth) from v1.6.0 to v1.9.3.
- [Release notes](https://github.com/paradigmxyz/reth/releases)
- [Changelog](https://github.com/paradigmxyz/reth/blob/main/docs/release.md)
- [Commits](paradigmxyz/reth@d8451e5...27a8c0f)

---
updated-dependencies:
- dependency-name: reth-db
  dependency-version: 27a8c0f5a6dfb27dea84c5751776ecabdd069646
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/reth-db-v1.9.3 branch from 8971562 to be44adb Compare December 18, 2025 17:58
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 15, 2026

Superseded by #3259.

@dependabot dependabot bot closed this Jan 15, 2026
@dependabot dependabot bot deleted the dependabot/cargo/reth-db-v1.9.3 branch January 15, 2026 21:50
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

F-deps Flag: Updates dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants