Bump the all-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the all-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/chromedp/chromedp	0.14.2	0.15.1
github.com/go-echarts/go-echarts/v2	2.7.0	2.7.2
go.sia.tech/core	0.19.1-0.20251215141429-887336e35dd9	0.21.0
go.sia.tech/coreutils	0.21.1	0.22.0
go.sia.tech/renterd/v2	2.9.0	2.9.1

Updates github.com/chromedp/chromedp from 0.14.2 to 0.15.1

Commits

• 216cd35 Updating to latest cdproto
• 3c21a92 Updating to latest cdproto
• 9d449ea Updating dependencies
• 31fb3b7 Cleanup
• See full diff in compare view

Updates github.com/go-echarts/go-echarts/v2 from 2.7.0 to 2.7.2

Release notes

Sourced from github.com/go-echarts/go-echarts/v2's releases.

v2.7.2

What's Changed

• update(opts): add roam to geo chart with progressive render disabled by @​westo0852 in go-echarts/go-echarts#592
• chore(deps): bump actions/deploy-pages from 4 to 5 by @​dependabot[bot] in go-echarts/go-echarts#590

New Contributors

• @​westo0852 made their first contribution in go-echarts/go-echarts#592

Full Changelog: go-echarts/go-echarts@v2.7.1...v2.7.2

v2.7.1

What's Changed

• update(opts): adding boundary gap option for category axis by @​ShivamHasurkar in go-echarts/go-echarts#589
• update(opts): add pad angle to pie chart by @​FabioRNobrega in go-echarts/go-echarts#588

New Contributors

• @​ShivamHasurkar made their first contribution in go-echarts/go-echarts#589
• @​FabioRNobrega made their first contribution in go-echarts/go-echarts#588

Full Changelog: go-echarts/go-echarts@v2.7.0...v2.7.1

Commits

• 088f87b chore(deps): bump actions/deploy-pages from 4 to 5 (#590)
• d19d938 update(opts): add roam to geo chart with progressive render disabled (#592)
• c30bf7f update(opts): add pad angle to pie chart (#588)
• e4d3310 update(opts): adding boundary gap option for category axis (#589)
• See full diff in compare view

Updates go.sia.tech/core from 0.19.1-0.20251215141429-887336e35dd9 to 0.21.0

Release notes

Sourced from go.sia.tech/core's releases.

0.21.0 (2026-05-08)

Breaking Changes

Add RHP4 pool RPCs and types for shared balance pools.

Pools let a renter deposit once into a shared backing pool and have multiple accounts draw from it on demand, reducing the per-account allowance needed and the total capital tied up in idle balances. This is especially useful for multi-tenant setups where one party holds the funds and many account keypairs spend from them.

Features

• Introduce ErrorCodeClientError for client-side RPC errors.

Fixes

• Update RangeProofVerifier.ReadFrom to return actual bytes read from io.Reader rather than multiple of subtree size.

0.20.0 (2026-04-21)

Breaking Changes

• Require passing host's wallet address when constructing a contract for renewal/refresh.

0.19.1 (2026-04-10)

Features

• Adds a new error type for "host is shutting down"

Fixes

• Add contract not found error
• Added additional context in error message when the signing threshold of a spend policy wasn't reached.
• Increase maxLen for request and response types including RenterInputs or HostInputs.
• Update mux dependency to v1.5.0.

Changelog

Sourced from go.sia.tech/core's changelog.

0.21.0 (2026-05-08)

Breaking Changes

Add RHP4 pool RPCs and types for shared balance pools.

Pools let a renter deposit once into a shared backing pool and have multiple accounts draw from it on demand, reducing the per-account allowance needed and the total capital tied up in idle balances. This is especially useful for multi-tenant setups where one party holds the funds and many account keypairs spend from them.

Features

• Introduce ErrorCodeClientError for client-side RPC errors.

Fixes

• Update RangeProofVerifier.ReadFrom to return actual bytes read from io.Reader rather than multiple of subtree size.

0.20.0 (2026-04-21)

Breaking Changes

• Require passing host's wallet address when constructing a contract for renewal/refresh.

0.19.1 (2026-04-10)

Features

• Adds a new error type for "host is shutting down"

Fixes

• Add contract not found error
• Added additional context in error message when the signing threshold of a spend policy wasn't reached.
• Increase maxLen for request and response types including RenterInputs or HostInputs.
• Update mux dependency to v1.5.0.

0.19.0 (2025-12-01)

Breaking Changes

• Changed rhp.BuildSectorProof to accept cached subtrees to reduce disk IO required for sector reads.

Fixes

• Parallelize sector root computation in ReaderRoot.

0.18.1 (2025-11-10)

Fixes

• Fix invalid MaxCollateral validation for partial contract refreshes.

... (truncated)

Commits

• See full diff in compare view

Updates go.sia.tech/coreutils from 0.21.1 to 0.22.0

Release notes

Sourced from go.sia.tech/coreutils's releases.

0.22.0 (2026-05-12)

Breaking Changes

Add RHP4 pool RPC handlers, renter helpers, and Contractor interface methods for shared balance pools.

Hosts can now back accounts with shared balance pools so renters don't need to pre-fund and continually rebalance every account. A renter funds a pool once and attaches as many accounts as they want; debits drain the account's own balance first and fall through to attached pools, which keeps per-account allowances small and reduces the total capital sitting idle in account balances. This is the host-side companion to the new RHP4 pool RPCs.

Extends the RHP4 Contractor interface with PoolBalances, CreditPoolsWithContract, AttachPools, and DetachPools (existing implementations must be updated). Adds host-side handlers for the new pool RPCs and renter-side helpers RPCReplenishPools, RPCAttachPools, and RPCDetachPools. DebitAccount semantics are extended to drain the account's own balance first, then attached pools in attachment order.

Fixes

• Check downloaded data length in RPCReadSector before proof validation for a more meaningful error.
• Fix incorrect v2 pool index.
• Wrap client rpc errors in RPCError.

0.21.3 (2026-04-21)

Fixes

• Fix a bug where a changed host wallet address leads to failed renewals.
• Update webtransport-go to 05fe5253a73c

0.21.2 (2026-04-10)

Features

• RHP4 graceful shutdown

Fixes

• Always cancel read side of QUIC stream when calling stream.Close.
• Fixed an edge case in RPCFreeSectors where the deletion logic would keep a sector root that was supposed to be deleted.
• Pass proper descriptions when closing QUIC connection.
• Fixed excessive "peer relayed a v2 header with unknown parent" log spam by only relaying headers after sync when the synced blocks became the new tip.
• Update Go version to 1.26.0.
• Update mux dependency to v1.5.0.
• Use DEBUG log level instead of ERROR for RPCs failing due to the peer closing the connection on their end.

Changelog

Sourced from go.sia.tech/coreutils's changelog.

0.22.0 (2026-05-12)

Breaking Changes

Add RHP4 pool RPC handlers, renter helpers, and Contractor interface methods for shared balance pools.

Hosts can now back accounts with shared balance pools so renters don't need to pre-fund and continually rebalance every account. A renter funds a pool once and attaches as many accounts as they want; debits drain the account's own balance first and fall through to attached pools, which keeps per-account allowances small and reduces the total capital sitting idle in account balances. This is the host-side companion to the new RHP4 pool RPCs.

Extends the RHP4 Contractor interface with PoolBalances, CreditPoolsWithContract, AttachPools, and DetachPools (existing implementations must be updated). Adds host-side handlers for the new pool RPCs and renter-side helpers RPCReplenishPools, RPCAttachPools, and RPCDetachPools. DebitAccount semantics are extended to drain the account's own balance first, then attached pools in attachment order.

Fixes

• Check downloaded data length in RPCReadSector before proof validation for a more meaningful error.
• Fix incorrect v2 pool index.
• Wrap client rpc errors in RPCError.

0.21.3 (2026-04-21)

Fixes

• Fix a bug where a changed host wallet address leads to failed renewals.
• Update webtransport-go to 05fe5253a73c

0.21.2 (2026-04-10)

Features

• RHP4 graceful shutdown

Fixes

• Always cancel read side of QUIC stream when calling stream.Close.
• Fixed an edge case in RPCFreeSectors where the deletion logic would keep a sector root that was supposed to be deleted.
• Pass proper descriptions when closing QUIC connection.
• Fixed excessive "peer relayed a v2 header with unknown parent" log spam by only relaying headers after sync when the synced blocks became the new tip.
• Update Go version to 1.26.0.
• Update mux dependency to v1.5.0.
• Use DEBUG log level instead of ERROR for RPCs failing due to the peer closing the connection on their end.

Commits

• 36253a4 Merge pull request #426 from SiaFoundation/release
• c8cad8a chore: prepare release 0.22.0
• a820662 Merge pull request #427 from SiaFoundation/chris/wrap-client-error
• b081ba1 changeset
• 83ce27e Wrap client rpc errors in RPCError
• e0f827a Merge pull request #421 from SiaFoundation/nate/balance-pools
• a0b230a address comments
• 7e990b1 add account pools
• 1d28a32 build(deps): bump go.sia.tech/core
• 365fd5e build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1
• Additional commits viewable in compare view

Updates go.sia.tech/renterd/v2 from 2.9.0 to 2.9.1

Release notes

Sourced from go.sia.tech/renterd/v2's releases.

v2.9.1

Fixes

• Add smoke tests for renterd binary to ensure basic startup is covered on the CI.
• Fix a bug where contracts weren't renewed due to invalid signatures.
• Fixed an edge case where pruning a contract might delete a wrong sector.

v2.9.1-beta.2

Fixes

• Add smoke tests for renterd binary to ensure basic startup is covered on the CI.
• Fix a bug where contracts weren't renewed due to invalid signatures.
• Fixed an edge case where pruning a contract might delete a wrong sector.

v2.9.1-beta.1

This PR was created automatically. Merging it will finalize the changelog for 2.9.1

Fixes

• Add smoke tests for renterd binary to ensure basic startup is covered on the CI.
• Fixed an edge case where pruning a contract might delete a wrong sector.

Changelog

Sourced from go.sia.tech/renterd/v2's changelog.

2.9.1 (2026-04-22)

Fixes

• Add smoke tests for renterd binary to ensure basic startup is covered on the CI.
• Fix a bug where contracts weren't renewed due to invalid signatures.
• Fixed an edge case where pruning a contract might delete a wrong sector.

Commits

• 8d7275b chore: prepare release 2.9.1
• f7a93b4 update action to use newer node
• e07f9f1 fix build
• dcefd23 changeset
• 9a27b1d update coreutils
• fa8c8ed chore(deps): bump the all-dependencies group with 6 updates
• 8d67bfe chore(deps): bump the all-dependencies group with 2 updates
• 70eb242 chore(deps): bump github.com/montanaflynn/stats
• 2b335bc chore(deps): bump github.com/mattn/go-sqlite3
• c6c772f chore(deps): bump the all-dependencies group with 4 updates
• Additional commits viewable in compare view

Updates go.uber.org/zap from 1.27.1 to 1.28.0

Release notes

Sourced from go.uber.org/zap's releases.

v1.28.0

Enhancements:

• #1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

#1534: uber-go/zap#1534

Changelog

Sourced from go.uber.org/zap's changelog.

1.28.0 (27 Apr 2026)

Enhancements:

• #1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

Commits

• 5b81b37 release v1.28.0 (#1547)
• 0ab0d5a zapcore: Add PreWriteHook for transforming entries before write (#1534)
• d278c59 [chore] CI: test on Go 1.26 (#1535)
• 16fb16b chore(dep): replace archived gopkg.in/yaml.v3 with officially maintained go.y...
• See full diff in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	go.sia.tech/​renterd/​v2@​v2.9.0 ⏵ v2.9.1	+1
	github.com/​chromedp/​chromedp@​v0.14.2 ⏵ v0.15.1
	go.uber.org/​zap@​v1.27.1 ⏵ v1.28.0	+1
	go.sia.tech/​coreutils@​v0.21.1 ⏵ v0.22.0	+1
	github.com/​go-echarts/​go-echarts/​v2@​v2.7.0 ⏵ v2.7.2	+1
	go.sia.tech/​core@​v0.19.1-0.20251215141429-887336e35dd9 ⏵ v0.21.0	+1

View full report