chore(deps): migrate to btcd v2

Author: m0wer

.github/workflows/docker.yaml

@@ -42,21 +42,21 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.1
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4.1.0
+        uses: docker/setup-buildx-action@v4.3.0
 
       - name: Log in to Container registry
-        uses: docker/login-action@v4.2.0
+        uses: docker/login-action@v4.6.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels)
         id: meta
-        uses: docker/metadata-action@v6.1.0
+        uses: docker/metadata-action@v6.2.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -69,7 +69,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v7.2.0
+        uses: docker/build-push-action@v7.3.0
         with:
           context: ./neutrino_server
           file: ./neutrino_server/Dockerfile

.github/workflows/e2e-mainnet.yaml

@@ -36,12 +36,12 @@ jobs:
     timeout-minutes: 5
 
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.1
 
       - name: Set up Go
-        uses: actions/setup-go@v6.4.0
+        uses: actions/setup-go@v7.0.0
         with:
-          go-version: '1.25'
+          go-version: '1.27.0'
           cache-dependency-path: neutrino_server/go.sum
 
       - name: Install dependencies

.github/workflows/pre-commit.yaml

@@ -24,15 +24,15 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.2
+    - uses: actions/checkout@v7.0.1
 
     - name: Set up Go
-      uses: actions/setup-go@v6.4.0
+      uses: actions/setup-go@v7.0.0
       with:
-        go-version: '1.25'
+        go-version: '1.27.0'
         cache: false
 
-    - uses: actions/setup-python@v6.2.0
+    - uses: actions/setup-python@v7.0.0
       with:
         python-version: '3.14'
 

.github/workflows/release.yaml

@@ -28,7 +28,7 @@ jobs:
       version: ${{ steps.get_version.outputs.version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.1
 
       - name: Get version
         id: get_version
@@ -50,7 +50,7 @@ jobs:
             # Get content between version header and next version or end
             NOTES=$(awk "/## \[${VERSION#v}\]/{flag=1; next} /## \[/{flag=0} flag" CHANGELOG.md)
             if [ -z "$NOTES" ]; then
-              NOTES="Release ${VERSION}"$'\n\n'"Built with Neutrino v0.16.0"$'\n\n'"See [CHANGELOG.md](CHANGELOG.md) for details."
+              NOTES="Release ${VERSION}"$'\n\n'"Built with Neutrino v0.18.0"$'\n\n'"See [CHANGELOG.md](CHANGELOG.md) for details."
             fi
           else
             NOTES="Release ${VERSION}"
@@ -109,16 +109,16 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.1
 
       - name: Get reproducible build timestamp
         id: source_date
         run: echo "epoch=$(git log -1 --pretty=%ct)" >> $GITHUB_OUTPUT
 
       - name: Set up Go
-        uses: actions/setup-go@v6.4.0
+        uses: actions/setup-go@v7.0.0
         with:
-          go-version: '1.25.11'
+          go-version: '1.27.0'
           cache-dependency-path: neutrino_server/go.sum
 
       - name: Get dependencies
@@ -159,24 +159,24 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.1
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4.1.0
+        uses: docker/setup-qemu-action@v4.2.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4.1.0
+        uses: docker/setup-buildx-action@v4.3.0
 
       - name: Log in to Container registry
-        uses: docker/login-action@v4.2.0
+        uses: docker/login-action@v4.6.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v6.1.0
+        uses: docker/metadata-action@v6.2.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -186,7 +186,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v7.2.0
+        uses: docker/build-push-action@v7.3.0
         with:
           context: ./neutrino_server
           file: ./neutrino_server/Dockerfile
@@ -208,7 +208,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.1
 
       - name: Download built binaries
         uses: actions/download-artifact@v8.0.1

.github/workflows/test.yaml

@@ -21,12 +21,12 @@ jobs:
   test-neutrino:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.1
 
       - name: Set up Go
-        uses: actions/setup-go@v6.4.0
+        uses: actions/setup-go@v7.0.0
         with:
-          go-version: '1.25'
+          go-version: '1.27.0'
           cache-dependency-path: neutrino_server/go.sum
 
       - name: Install dependencies
@@ -40,15 +40,15 @@ jobs:
       - name: Run staticcheck
         working-directory: neutrino_server
         run: |
-          go install honnef.co/go/tools/cmd/staticcheck@v0.7.0
+          go install honnef.co/go/tools/cmd/staticcheck@v0.8.1
           staticcheck ./...
 
       - name: Run tests
         working-directory: neutrino_server
         run: go test -v -race -coverprofile=coverage.out -covermode=atomic ./...
 
       - name: Upload coverage
-        uses: codecov/codecov-action@v6.0.1
+        uses: codecov/codecov-action@v7.0.0
         with:
           files: ./neutrino_server/coverage.out
           flags: unittests
@@ -57,7 +57,7 @@ jobs:
   test-docker-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.1
 
       - name: Build Docker image
         run: docker build -t neutrino-api:test ./neutrino_server
@@ -76,7 +76,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.1
 
       - name: Start services
         run: docker compose up -d --build

.pre-commit-config.yaml

@@ -29,7 +29,7 @@ repos:
         pass_filenames: false
       - id: go-staticcheck
         name: go staticcheck
-        entry: bash -c 'cd neutrino_server && go run honnef.co/go/tools/cmd/staticcheck@v0.7.0 ./...'
+        entry: bash -c 'cd neutrino_server && go run honnef.co/go/tools/cmd/staticcheck@v0.8.1 ./...'
         language: system
         files: \.go$
         pass_filenames: false

CHANGELOG.md

@@ -12,6 +12,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add `scripts/update-dependencies.sh` to synchronize reviewed Go, Docker,
   GitHub Actions, and tooling dependency pins before releases.
 
+### Changed
+
+- Migrate to Neutrino v0.18.0 and btcd v0.26.2, including the new v2 modules
+  for addresses, utilities, chain parameters, hashes, scripts, and wire types.
+- Update the build and CI toolchain to Go 1.27.0, Alpine 3.23.5, Staticcheck
+  2026.2.1, and the latest compatible GitHub Actions. Pin the regtest Bitcoin
+  Core image by digest for reproducible integration tests.
+
 ## [1.6.0] - 2026-08-23
 
 ### Added

docker-compose.yml

@@ -1,8 +1,8 @@
 services:
   # Bitcoin Core regtest node (main node for our implementation)
-  # Uses latest Bitcoin Core with descriptor wallets and compact block filters
+  # Uses digest-pinned Bitcoin Core with descriptor wallets and compact block filters
   bitcoin:
-    image: kylemanna/bitcoind:latest
+    image: kylemanna/bitcoind@sha256:86bbcaa99bf3bf3d5df7fd6d9217b3a41194db4c4e34385064f2cfc9fa7bdf91
     container_name: neutrino-bitcoin
     restart: unless-stopped
     healthcheck:

neutrino_server/Dockerfile

@@ -1,5 +1,5 @@
 # Build stage
-FROM golang:1.25-alpine AS builder
+FROM golang:1.27.0-alpine3.23 AS builder
 
 ARG VERSION=dev
 
@@ -18,8 +18,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \
     -o neutrinod ./cmd/neutrinod
 
 # Runtime stage
-FROM alpine:3.19
-
+FROM alpine:3.23.5
 RUN apk add --no-cache ca-certificates tzdata
 
 # Create non-root user

neutrino_server/go.mod

@@ -1,46 +1,50 @@
 module github.com/m0wer/neutrino-api/neutrino_server
 
-go 1.25.11
+go 1.27.0
 
 require (
-	github.com/btcsuite/btcd v0.25.0
-	github.com/btcsuite/btcd/btcutil v1.2.0
-	github.com/btcsuite/btcd/chaincfg/chainhash v1.2.0
+	github.com/btcsuite/btcd v0.26.2
+	github.com/btcsuite/btcd/address/v2 v2.0.0
+	github.com/btcsuite/btcd/btcutil/v2 v2.0.1
+	github.com/btcsuite/btcd/chaincfg/v2 v2.0.0
+	github.com/btcsuite/btcd/chainhash/v2 v2.0.0
+	github.com/btcsuite/btcd/txscript/v2 v2.0.0
+	github.com/btcsuite/btcd/wire/v2 v2.0.1
 	github.com/btcsuite/btclog v1.0.0
 	github.com/btcsuite/btcwallet/walletdb v1.6.0
 	github.com/gorilla/mux v1.8.1
-	github.com/lightninglabs/neutrino v0.17.1
+	github.com/lightninglabs/neutrino v0.18.0
 	go.etcd.io/bbolt v1.5.0
-	golang.org/x/net v0.57.0
+	golang.org/x/net v0.58.0
 )
 
-replace github.com/lightninglabs/neutrino => github.com/m0wer/neutrino v0.0.0-20260522161657-0d5f911e647c
+replace github.com/lightninglabs/neutrino => github.com/m0wer/neutrino v0.0.0-20260823175358-3ba12bde0bd0
 
 require (
 	github.com/aead/siphash v1.0.1 // indirect
-	github.com/btcsuite/btcd/btcec/v2 v2.3.5 // indirect
-	github.com/btcsuite/btcd/v2transport v1.0.1 // indirect
-	github.com/btcsuite/btcwallet/wtxmgr v1.5.0 // indirect
+	github.com/btcsuite/btcd/btcec/v2 v2.5.0 // indirect
+	github.com/btcsuite/btcd/v2transport v1.1.0 // indirect
+	github.com/btcsuite/btcwallet v0.18.0 // indirect
+	github.com/btcsuite/btcwallet/wtxmgr v1.6.0 // indirect
 	github.com/btcsuite/go-socks v0.0.0-20170105172521-4720035b7bfd // indirect
 	github.com/btcsuite/websocket v0.0.0-20150119174127-31079b680792 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/decred/dcrd/crypto/blake256 v1.0.1 // indirect
-	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.3.0 // indirect
-	github.com/decred/dcrd/lru v1.1.2 // indirect
+	github.com/decred/dcrd/crypto/blake256 v1.1.0 // indirect
+	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.1 // indirect
+	github.com/decred/dcrd/lru v1.1.3 // indirect
 	github.com/kcalvinalvin/anet v0.0.0-20251112173137-d8ddc1f6dbee // indirect
 	github.com/kkdai/bstream v1.0.0 // indirect
-	github.com/kr/text v0.2.0 // indirect
 	github.com/lightninglabs/neutrino/cache v1.1.4 // indirect
 	github.com/lightningnetwork/lnd/clock v1.1.1 // indirect
-	github.com/lightningnetwork/lnd/fn/v2 v2.0.8 // indirect
+	github.com/lightningnetwork/lnd/fn/v2 v2.0.9 // indirect
 	github.com/lightningnetwork/lnd/queue v1.2.0 // indirect
 	github.com/lightningnetwork/lnd/ticker v1.1.1 // indirect
-	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/stretchr/objx v0.5.3 // indirect
-	github.com/stretchr/testify v1.11.1 // indirect
-	golang.org/x/crypto v0.54.0 // indirect
-	golang.org/x/exp v0.0.0-20260727155853-b88d891fe743 // indirect
+	github.com/stretchr/testify v1.12.1 // indirect
+	go.yaml.in/yaml/v3 v3.0.5 // indirect
+	golang.org/x/crypto v0.55.0 // indirect
+	golang.org/x/exp v0.0.0-20260820142414-ca536658362e // indirect
 	golang.org/x/sync v0.22.0 // indirect
 	golang.org/x/sys v0.47.0 // indirect
-	gopkg.in/yaml.v3 v3.0.1 // indirect
+	golang.org/x/time v0.15.0 // indirect
 )