Skip to content

chore(deps): bump github.com/blinklabs-io/gouroboros from 0.153.1 to 0.164.0#547

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.164.0
Closed

chore(deps): bump github.com/blinklabs-io/gouroboros from 0.153.1 to 0.164.0#547
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.164.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Bumps github.com/blinklabs-io/gouroboros from 0.153.1 to 0.164.0.

Release notes

Sourced from github.com/blinklabs-io/gouroboros's releases.

v0.164.0

What's Changed

New Contributors

Full Changelog: blinklabs-io/gouroboros@v0.163.5...v0.164.0

v0.163.5

What's Changed

New Contributors

Full Changelog: blinklabs-io/gouroboros@v0.163.4...v0.163.5

v0.163.4

What's Changed

Full Changelog: blinklabs-io/gouroboros@v0.163.3...v0.163.4

v0.163.3

What's Changed

New Contributors

Full Changelog: blinklabs-io/gouroboros@v0.163.2...v0.163.3

... (truncated)

Changelog

Sourced from github.com/blinklabs-io/gouroboros's changelog.


title: Release notes

Release notes

v0.163.5 - byron offsets and validation hardening

  • Date: 2026-04-02
  • Version: 0.163.5

Summary

This release includes Byron block offset extraction, Byron validation hardening, and dependency and documentation updates.

New Features

  • Added Byron block detection and transaction and output offset extraction.

Bug Fixes

  • Fixed block ingestion to reject invalid Byron block body lengths and standardize Byron transaction validation errors.

Additional Changes

  • Updated README.md to add a DeepWiki badge link.
  • Updated plutigo to v0.1.0.
  • Updated RELEASE_NOTES.md to include the v0.163.4 entry.

v0.163.4 - blockfetch limits and conway validation fix

  • Date: 2026-03-30
  • Version: 0.163.4

Summary

This release includes separate BlockFetch pending message limits for Idle and Busy states, a Conway-era transaction validation fix, and CI workflow updates.

New Features

  • Added separate BlockFetch pending message limits for Idle and Busy states.

Bug Fixes

  • Fixed Conway-era transaction validation to reject invalid data.

Additional Changes

  • Updated configuration and tests for the BlockFetch pending message limit split.
  • Added a regression test to cover the Conway-era transaction validation fix.

... (truncated)

Commits
  • bc398cd chore(deps): bump github.com/blinklabs-io/plutigo from 0.1.3 to 0.1.6 (#1680)
  • 21c6991 chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 (#1681)
  • 3b7170a chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1683)
  • a5fa37a chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#1682)
  • 5d9f40b ci: restrict nilaway scanning to gouroboros (#1684)
  • 603966c fix: Support handshake query flag end-to-end (#1679)
  • e1642c9 build(deps): plutigo 0.1.3 (#1677)
  • 7b7722c chore(deps): bump github.com/blinklabs-io/plutigo from 0.1.0 to 0.1.1 (#1675)
  • 70f3d6b chore(deps): bump github.com/fxamacker/cbor/v2 from 2.9.0 to 2.9.1 (#1676)
  • 929a590 feat(messagesubmission): add V2 state machine (CIP-0137 update) (#1674)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade github.com/blinklabs-io/gouroboros from 0.153.1 to 0.164.0 to pick up protocol updates and validation fixes. This includes CIP-0137 MessageSubmission V2 and handshake query flag support from upstream.

  • Dependencies

    • Bump github.com/blinklabs-io/gouroboros to 0.164.0.
    • Update Go to 1.25.7 and refresh indirect deps (e.g., golang.org/x/crypto 0.50.0, github.com/fxamacker/cbor/v2 2.9.1, github.com/blinklabs-io/plutigo 0.1.6, OpenTelemetry 1.40.0).
  • Migration

    • Build with Go 1.25.7+.
    • No app code changes expected.

Written for commit ebcebef. Summary will update on new commits.

Bumps [github.com/blinklabs-io/gouroboros](https://github.com/blinklabs-io/gouroboros) from 0.153.1 to 0.164.0.
- [Release notes](https://github.com/blinklabs-io/gouroboros/releases)
- [Changelog](https://github.com/blinklabs-io/gouroboros/blob/main/RELEASE_NOTES.md)
- [Commits](blinklabs-io/gouroboros@v0.153.1...v0.164.0)

---
updated-dependencies:
- dependency-name: github.com/blinklabs-io/gouroboros
  dependency-version: 0.164.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 13, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 13, 2026 23:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 13, 2026
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="go.mod">

<violation number="1" location="go.mod:3">
P2: This change unexpectedly raises the project’s required Go version; keep the existing Go baseline unless a separate, intentional toolchain upgrade is planned.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

Comment thread go.mod
go 1.24.0

toolchain go1.24.4
go 1.25.7
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: This change unexpectedly raises the project’s required Go version; keep the existing Go baseline unless a separate, intentional toolchain upgrade is planned.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At go.mod, line 3:

<comment>This change unexpectedly raises the project’s required Go version; keep the existing Go baseline unless a separate, intentional toolchain upgrade is planned.</comment>

<file context>
@@ -1,44 +1,42 @@
-go 1.24.0
-
-toolchain go1.24.4
+go 1.25.7
 
 require (
</file context>
Fix with Cubic

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 20, 2026

Superseded by #551.

@dependabot dependabot Bot closed this Apr 20, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.164.0 branch April 20, 2026 23:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants