Skip to content

Bump the dependencies group across 1 directory with 6 updates#607

Merged
pk910 merged 4 commits intomasterfrom
dependabot/go_modules/dependencies-21774bee80
Mar 20, 2026
Merged

Bump the dependencies group across 1 directory with 6 updates#607
pk910 merged 4 commits intomasterfrom
dependabot/go_modules/dependencies-21774bee80

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the dependencies group with 5 updates in the / directory:

Package From To
github.com/ethereum/go-ethereum 1.17.0 1.17.1
github.com/minio/minio-go/v7 7.0.98 7.0.99
github.com/pk910/dynamic-ssz 1.2.1 1.2.2
golang.org/x/crypto 0.48.0 0.49.0
golang.org/x/time 0.14.0 0.15.0

Updates github.com/ethereum/go-ethereum from 1.17.0 to 1.17.1

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Eezo Shunt (v1.17.1)

This is a bug fix release and is recommended for all users. It resolves a regression in snap sync, as well as several security issues.

Geth

  • The engine API no longer enables plain-text HTTP2, due to some reports of incompatibilities with the teku CL (#33922)
  • The new --metrics.influxdb.interval flag allows changing the metrics reporting interval. (#33767)
  • Geth has a new inspect-trie subcommand that prints information about node counts at all state trie depths (#28892)

Core

  • Some Amsterdam fork-related changes:
  • Payload building had a fix that could prevent the CL from receiving the latest built payloads (#33908)

Networking

  • Geth no longer supports p2p protocol version eth/68 (#33511)
  • A rare crash in p2p request tracking is resolved (#33940)
  • The transaction pool, and specifically the blobpool, saw some fixes that reduce relaying transactions that likely won't make it into the chain, or have already been included on chain recently. This should reduce txpool traffic (#33607, #33887, #33923, #33893)
  • In v1.17.0, a regression in snap-sync was introduced that would cause sync to fail when using --history.chain=postmerge (#33865)
  • Snap-sync had a bug where peer connections would stop being used after a timeout or similar event. This wasn't too noticeable for mainnet sync because of peer churn (#33790)
  • Unexpected state delivered by peers is now reported during snap-sync (#33898)
  • P2P listener metrics now record handshake timeouts correctly (#33539)

RPC

  • eth_estimateGas now honors the user-supplied access list (#33849)
  • New RPC method: eth_getStorageValues (#32591)
  • New RPC method: testing_buildBlockV1 (#33656)

Build

  • This release is built with Go 1.25.7 (#33874)
  • Our official Docker images are experimentally built with Go 1.26 (#33899)

For a full rundown of the changes please consult the Geth 1.17.1 release milestone.

As with all our previous releases, you can find the:

Commits

Updates github.com/minio/minio-go/v7 from 7.0.98 to 7.0.99

Commits
  • c44cb2a Fix PutObject and ConcurrentStreamParts error handling for empty stream (#2207)
  • 1451162 Fix object ReadAt performs seek (#2197)
  • ffb7ec0 Implement support for new UpdateObjectEncryption API & bump Go to 1.25 (#2204)
  • See full diff in compare view

Updates github.com/pk910/dynamic-ssz from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/pk910/dynamic-ssz's releases.

v1.2.2

Major Changes

  • Extended Type Support: Added support for extended non specified types (signed integers, floating point numbers, big integers, optionals).
  • Fuzzer Implementation: Improved extensive fuzzer.
  • Performance Optimizations: Refactored getZeroOrderHashes for significant performance improvements in tree operations.
  • Bug Fixes: Addressed concurrent map read/write panic in specValueCache and bitlist parsing issues in fuzzer.
  • Test Coverage Improvements: Expanded test coverage to ensure more robust and reliable code.

Full changelog

  • 94da410 Merge pull request #90 from pk910/pk910/test-coverage
  • 63ddb58 Merge pull request #89 from pk910/pk910/fuzz-multidim
  • 5933ad5 Merge pull request #88 from pk910/pk910/fuzzer-fix
  • 83af752 Merge pull request #87 from pk910/pk910/fuzz-testing-v2
  • bf2363d Merge pull request #86 from pk910/pk910/extended-type-support
  • b712168 Merge pull request #85 from Sahil-4555/optimize-getZeroOrderHashes
  • 910092d Merge pull request #84 from pk910/pk910/codegen-fmt-fixes
  • 2c3d054 Merge pull request #83 from pk910/pk910/fix-spec-cache-concurrent-writes
Changelog

Sourced from github.com/pk910/dynamic-ssz's changelog.

[v1.2.2] 2026-03-12

Added

  • Fuzz testing framework with parallel workers and multi-dimensional list/vector support
  • Extended type support (int8/int16/int32/int64, float32/float64, bigint, optional) for reflection and code generation
  • Fuzzing CI workflow
  • Smoke tests for fuzzer in CI
  • Codecov exclusion for fuzzer code

Changed

  • Refactored getZeroOrderHashes for clarity

Fixed

  • Concurrent map read/write panic in specValueCache (added mutex synchronization)
  • Minor code generation formatting issues
Commits

Updates golang.org/x/crypto from 0.48.0 to 0.49.0

Commits
  • 982eaa6 go.mod: update golang.org/x dependencies
  • 159944f ssh,acme: clean up tautological/impossible nil conditions
  • a408498 acme: only require prompt if server has terms of service
  • cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
  • 2f26647 x509roots/fallback: update bundle
  • See full diff in compare view

Updates golang.org/x/text from 0.34.0 to 0.35.0

Commits
  • 7ca2c6d go.mod: update golang.org/x dependencies
  • 73d1ba9 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/time from 0.14.0 to 0.15.0

Commits
  • 812b343 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group across 1 directory with 6 updates
b350432 
Bumps the dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.17.0` | `1.17.1` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.98` | `7.0.99` |
| [github.com/pk910/dynamic-ssz](https://github.com/pk910/dynamic-ssz) | `1.2.1` | `1.2.2` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.48.0` | `0.49.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.14.0` | `0.15.0` |



Updates `github.com/ethereum/go-ethereum` from 1.17.0 to 1.17.1
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.0...v1.17.1)

Updates `github.com/minio/minio-go/v7` from 7.0.98 to 7.0.99
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](minio/minio-go@v7.0.98...v7.0.99)

Updates `github.com/pk910/dynamic-ssz` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/pk910/dynamic-ssz/releases)
- [Changelog](https://github.com/pk910/dynamic-ssz/blob/master/CHANGELOG.md)
- [Commits](pk910/dynamic-ssz@v1.2.1...v1.2.2)

Updates `golang.org/x/crypto` from 0.48.0 to 0.49.0
- [Commits](golang/crypto@v0.48.0...v0.49.0)

Updates `golang.org/x/text` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.34.0...v0.35.0)

Updates `golang.org/x/time` from 0.14.0 to 0.15.0
- [Commits](golang/time@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.0.99
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/pk910/dynamic-ssz
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 16, 2026
@pk910 pk910 force-pushed the dependabot/go_modules/dependencies-21774bee80 branch from aa2ae82 to f1c78db Compare March 20, 2026 10:05
@pk910 pk910 enabled auto-merge March 20, 2026 10:18
@pk910 pk910 merged commit 2681980 into master Mar 20, 2026
4 checks passed
@pk910 pk910 deleted the dependabot/go_modules/dependencies-21774bee80 branch March 20, 2026 10:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pk910 pk910 pk910 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@pk910 @barnabasbusa