Skip to content

chore(deps): bump the go_modules group across 1 directory with 3 updates #873

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 14, 2025

Bumps the go_modules group with 3 updates in the /prover directory: golang.org/x/crypto, golang.org/x/net and github.com/ethereum/go-ethereum.

Updates golang.org/x/crypto from 0.31.0 to 0.35.0

Commits
  • 7292932 ssh: limit the size of the internal packet queue while waiting for KEX
  • f66f74b acme/autocert: check host policy before probing the cache
  • b0784b7 x509roots/fallback: drop obsolete build constraint
  • 911360c all: bump golang.org/x/crypto dependencies of asm generators
  • 89ff08d all: upgrade go directive to at least 1.23.0 [generated]
  • e47973b all: update certs for go1.24
  • 9290511 go.mod: update golang.org/x dependencies
  • fa5273e x509roots/fallback: update bundle
  • a8ea4be ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface
  • 71d3a4c acme: support challenges that require the ACME client to send a non-empty JSO...
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.27.0 to 0.36.0

Commits
  • 85d1d54 go.mod: update golang.org/x dependencies
  • cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts
  • fe7f039 publicsuffix: spruce up code gen and speed up PublicSuffix
  • 459513d internal/http3: move more common stream processing to genericConn
  • aad0180 http2: fix flakiness from t.Log when GOOS=js
  • b73e574 http2: don't log expected errors from writing invalid trailers
  • 5f45c77 internal/http3: make read-data tests usable for server handlers
  • 43c2540 http2, internal/httpcommon: reject userinfo in :authority
  • 1d78a08 http2, internal/httpcommon: factor out server header logic for h2/h3
  • 0d7dc54 quic: add Conn.ConnectionState
  • Additional commits viewable in compare view

Updates github.com/ethereum/go-ethereum from 1.14.8 to 1.14.13

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Schwarzschild (v1.14.13)

This is a security release, fixing a vulnerability (CVE-2025-24883).

Please update your nodes ASAP.


As with all our previous releases, you can find the:

Gei Hinnom (v1.14.12)

This release covers quite a lot of time, and has many changes across the codebase. In particular; changes in tracing and account management, optimizations in database, trie and evm, and, as always bugfixes.

This release removes the personal RPC namespace. It was already previously deprecated, and has not been accessible by default for nearly two years. We also removed the --unlock command-line parameter, with a view towards removing key/account management from the geth binary.

  • Key management:
    • Remove --unlock command line flag from geth (#30737)
    • Remove personal RPC namespace (#30704)
  • Builds:
    • RISC-V docker images (#30739)
    • ppa-builds for ubuntu 24.10 (#30580)
  • Tracing:
    • invoke OnCodeChange-hook on selfdestruct (#30686, #30497)
    • improvements to flatCallTracer (#30539)
    • invoke tx-end hook in runtime helpers (#30711)
    • disableCode and disableStorage options for prestateTracer (#30648)
    • tracing of system calls (#30666)
    • Change to how chainconfig is passed to tracers (breaking change) (#30540)
    • add GetTransientState method to StateDB interface (#30531)
  • Signing:
    • improved support for EIP-712 array types (#30620)
    • non-legacy transactions support for ledger wallets (#30180)
  • Bugfixes:
    • Set basefee for AccessList based on given block, not chain tip (#30538)
    • Multiple issues in benchmarks (#30667)
    • Fix bug with resolving a payload (#30615)
  • Database optimizations
    • Run pebble in non-sync mode (#30573, #29792). This change makes quite a big difference on certain OS:es, particularly MacOSX/Darwin, where it has been noted that fsync is notoriously slow.
    • Use to increasing level sizes (#30602), This change makes pebble use larger files, reducing the number of files from 160K to 10K.
  • Assorted:
    • Make jwtsecretflag expand tilde
    • Work on verkle (#30672)
    • Work on EIP-7002 and EIP 7251 (#30571)
    • Implement EIP-7685 and EIP-6110 (flat requests enconding) (#30425)
    • Validation of EOF containers (#30418)

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the go_modules group with 3 updates in the /prover directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/net](https://github.com/golang/net) and [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).


Updates `golang.org/x/crypto` from 0.31.0 to 0.35.0
- [Commits](golang/crypto@v0.31.0...v0.35.0)

Updates `golang.org/x/net` from 0.27.0 to 0.36.0
- [Commits](golang/net@v0.27.0...v0.36.0)

Updates `github.com/ethereum/go-ethereum` from 1.14.8 to 1.14.13
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.14.8...v1.14.13)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.35.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.36.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.14.13
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 14, 2025
Copy link

cla-assistant bot commented Apr 14, 2025

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

1 similar comment
Copy link

cla-assistant bot commented Apr 14, 2025

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@dependabot dependabot bot had a problem deploying to docker-build-and-e2e April 14, 2025 19:00 Failure
Copy link

PR has had no activity for 30 days. What is blocking it? Is there anything you can do to help move it forward? Without action it will be closed in 7 days.

@github-actions github-actions bot added Stale and removed Stale labels May 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants