build(deps): Bump the all-go group across 8 directories with 23 updates by dependabot[bot] · Pull Request #2573 · evstack/ev-node

dependabot · 2025-08-18T13:09:51Z

Bumps the all-go group with 5 updates in the / directory:

Package	From	To
github.com/celestiaorg/go-header	`0.6.6`	`0.7.0`
github.com/ipfs/go-datastore	`0.8.2`	`0.8.3`
github.com/libp2p/go-libp2p-kad-dht	`0.33.1`	`0.34.0`
github.com/libp2p/go-libp2p-pubsub	`0.14.1`	`0.14.2`
github.com/spf13/pflag	`1.0.6`	`1.0.7`

Bumps the all-go group with 5 updates in the /apps/testapp directory:

Package	From	To
github.com/ipfs/go-datastore	`0.8.2`	`0.8.3`
github.com/libp2p/go-libp2p-kad-dht	`0.33.1`	`0.34.0`
github.com/libp2p/go-libp2p-pubsub	`0.14.1`	`0.14.2`
github.com/spf13/pflag	`1.0.6`	`1.0.7`
github.com/filecoin-project/go-jsonrpc	`0.7.1`	`0.8.0`

Bumps the all-go group with 2 updates in the /da directory: github.com/rs/zerolog and github.com/filecoin-project/go-jsonrpc.
Bumps the all-go group with 5 updates in the /execution/evm directory:

Package	From	To
github.com/prometheus/client_golang	`1.20.5`	`1.23.0`
github.com/spf13/pflag	`1.0.6`	`1.0.7`
github.com/ethereum/go-ethereum	`1.15.0`	`1.16.2`
github.com/golang-jwt/jwt/v5	`5.2.2`	`5.3.0`
github.com/testcontainers/testcontainers-go/modules/compose	`0.37.0`	`0.38.0`

Bumps the all-go group with 2 updates in the /execution/grpc directory: golang.org/x/net and google.golang.org/protobuf.
Bumps the all-go group with 5 updates in the /sequencers/single directory:

Package	From	To
github.com/celestiaorg/go-header	`0.6.6`	`0.7.0`
github.com/ipfs/go-datastore	`0.8.2`	`0.8.3`
github.com/libp2p/go-libp2p-kad-dht	`0.33.1`	`0.34.0`
github.com/libp2p/go-libp2p-pubsub	`0.14.1`	`0.14.2`
github.com/spf13/pflag	`1.0.6`	`1.0.7`

Bumps the all-go group with 9 updates in the /test/docker-e2e directory:

Package	From	To
github.com/prometheus/client_golang	`1.20.5`	`1.23.0`
github.com/rs/zerolog	`1.33.0`	`1.34.0`
github.com/spf13/cobra	`1.8.1`	`1.9.1`
github.com/spf13/viper	`1.19.0`	`1.20.1`
google.golang.org/protobuf	`1.36.6`	`1.36.7`
github.com/celestiaorg/tastora	`0.2.1`	`0.2.2`
cosmossdk.io/math	`1.4.0`	`1.5.3`
github.com/celestiaorg/go-square/v2	`2.2.0`	`2.3.1`
github.com/moby/moby	`27.5.1+incompatible`	`28.3.3+incompatible`

Bumps the all-go group with 11 updates in the /test/e2e directory:

Package	From	To
github.com/celestiaorg/go-header	`0.6.6`	`0.7.0`
github.com/ipfs/go-datastore	`0.8.2`	`0.8.3`
github.com/libp2p/go-libp2p-pubsub	`0.14.1`	`0.14.2`
github.com/multiformats/go-multiaddr	`0.16.0`	`0.16.1`
github.com/spf13/pflag	`1.0.6`	`1.0.7`
golang.org/x/crypto	`0.40.0`	`0.41.0`
golang.org/x/net	`0.42.0`	`0.43.0`
google.golang.org/protobuf	`1.36.6`	`1.36.7`
github.com/ethereum/go-ethereum	`1.15.0`	`1.16.2`
github.com/golang-jwt/jwt/v5	`5.2.2`	`5.3.0`
github.com/testcontainers/testcontainers-go/modules/compose	`0.37.0`	`0.38.0`

Updates github.com/celestiaorg/go-header from 0.6.6 to 0.7.0

Release notes

Sourced from github.com/celestiaorg/go-header's releases.

v0.7.0

v0.7.0 release brings high-performance dynamic Tail maintenance for Syncer, also known as header pruning.

Notable Changes

Syncer

These new fields were introduced to Syncer's config:
        // PruningWindow defines the duration within which headers are retained before being pruned.
        // Default is 337 hours.
	PruningWindow time.Duration
	// SyncFromHash is the hash of the header from which Syncer should start syncing.
	// Zero value to disable. Value updates up and down the chain are gracefully handled by Syncer.
	//
	// By default, Syncer maintains PruningWindow number of headers. SyncFromHash overrides this default,
	// allowing any user to specify a custom starting point.
	//
	// SyncFromHash has higher priority than SyncFromHeight.
	SyncFromHash string
	// SyncFromHeight is the height of the header from which Syncer should start syncing.
	// Zero value to disable. Value updates up and down the chain are gracefully handled by Syncer.
	//
	// By default, Syncer maintains PruningWindow number of headers. SyncFromHeight overrides this default,
	// allowing any user to specify a custom starting point.
	//
	// SyncFromHeight has lower priority than SyncFromHash.
	SyncFromHeight uint64
Store

store.Store.DeleteTo method (celestiaorg/go-header#275)

store.Store.OnDelete method, which allows users to register individual header deletion handlers. This will enable users to execute farewell logic when headers are removed, e.g., cleanup data committed in the header but stored separately. (celestiaorg/go-header#320)

Unsafe store recovery tools (celestiaorg/go-header#325)

Breaks

store.Store.Init and store.Init were removed. Initialization is now performed lazily using the first header given to store.Append (celestiaorg/go-header#274)

What's Changed

chore(CODEOWNERS): remove @cristaloleg by @cristaloleg in celestiaorg/go-header#288

chore(sync): improve bifurcation logs by @Wondertan in celestiaorg/go-header#291

Pruning Meta PR by @Wondertan in celestiaorg/go-header#292

fix(store): support intermittent writes for batch by @Wondertan in celestiaorg/go-header#296

fix(store): Tail aware HasAt by @Wondertan in celestiaorg/go-header#298

fix(sync): move tail only if head changes by @Wondertan in celestiaorg/go-header#293

chore: bump deps by @Wondertan in celestiaorg/go-header#299

chore: bump libp2p by @Wondertan in celestiaorg/go-header#300

fix(syncer): check tail hash via len by @Wondertan in celestiaorg/go-header#309

fix(headertest): correctly initialize Tail by @Wondertan in celestiaorg/go-header#308

feat(store)!: OnDelete method by @Wondertan in celestiaorg/go-header#304

chore(store|sync): error wrappings by @Wondertan in celestiaorg/go-header#310

... (truncated)

Commits

9b03087 feat(store): store recovery tools (#325)
38be935 perf(store): batch reads (#331)
bc5064b fix(sync): allow estimation errors (#329)
aa4ae28 fix(sync): subj init death loop (#324)
5c305ad feat(store): allow partial init (#327)
105a106 perf(store): pass batch through context (#328)
03ded0d misc(store): various fixes and chores (#330)
5776877 fix(store): stop long receding/advancing on Stop (#326)
27b8dfe perf(store): almost readless parallel deletes (#320)
21b31ff chore(syncer): improved logging (#315)
Additional commits viewable in compare view

Updates github.com/ipfs/go-datastore from 0.8.2 to 0.8.3

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.8.3

What's Changed

ci: uci/copy-templates by @web3-bot in ipfs/go-datastore#234

upgrade to latest opentelemetry packages by @gammazero in ipfs/go-datastore#240

replace gopkg.in/check.v1 with github.com/stretchr/testify by @gammazero in ipfs/go-datastore#241

Replace uber-go/multierr with errors.Join by @gammazero in ipfs/go-datastore#242

sort using slices.Sort by @gammazero in ipfs/go-datastore#243

Full Changelog: ipfs/go-datastore@v0.8.2...v0.8.3

Commits

fe275e4 new version (#245)
b135bef sort using slices.Sort (#243)
ac3ba45 Replace uber-go/multierr with errors.Join (#242)
4fb7cfb replace gopkg.in/check.v1 with github.com/stretchr/testify (#241)
8b21663 upgrade to latest opentelemetry packages (#240)
bee84ce ci: uci/copy-templates (#234)
See full diff in compare view

Updates github.com/libp2p/go-libp2p from 0.41.1 to 0.42.0

Release notes

Sourced from github.com/libp2p/go-libp2p's releases.

v0.42.0

⚠ Breaking Changes

Added a new method, VerifySourceAddress(net.Addr) bool, to the Resource Manager interface. For more details see the Source Address Verification section.

For custom implementation which want to opt out of Source Address Verification and keep the existing behavior, return false from the method.

🔦 Highlights

Per Address Reachability via AutoNAT v2

libp2p hosts can now determine reachability for individual addresses using AutoNATV2. To opt in to reachability checking use the EnableAutoNATV2 libp2p option. Using this nodes can now determine their IPv4, IPv6, and browser address reachability separately. In a future release, AutoRelay will use this information and make appropriate relay reservations accordingly. https://pkg.go.dev/github.com/libp2p/go-libp2p#EnableAutoNATv2

To query addresses by their reachability, ConfirmedAddrs() (reachable, unreachable, unknown []ma.Multiaddr) that provides Reachability information per host address. https://pkg.go.dev/github.com/libp2p/go-libp2p/p2p/host/basic#BasicHost.ConfirmedAddrs For notifications, Subscribe to the event event.EvtHostReachableAddrsChanged https://pkg.go.dev/github.com/libp2p/go-libp2p/core/event#EvtHostReachableAddrsChanged

Rate Limiting

We've introduced the package github.com/libp2p/go-libp2p/x/rate for rate limiting. The struct rate.Limiter provides Global, Network Specific, and Subnet Specific rate limiting. The Subnet specific rate limits allows for better DoS Protection by rate limiting malicious IPs. https://pkg.go.dev/github.com/libp2p/go-libp2p/x/rate

Use Limit(f func(s network.Stream)) func(s network.Stream) on Limiter to limit specific stream handlers. For example, within libp2p, the Identify Service uses this as ids.Host.SetStreamHandler(IDPush, ids.rateLimiter.Limit(ids.handlePush)) to rate limit the number of times peers can perform identify push.

For non Stream use cases use the Allow(ip) method on the limiter.

Connection Rate Limiting

New connection requests are now rate limited per IP. By default we allow 1 connection every 5 seconds from an IP address with a burst of 16 connections per IP. The burst is high enough that this should only block malicious peers.

To configure the connection rate limits, use the WithConnRateLimiters option on the Resource Manager. https://pkg.go.dev/github.com/libp2p/go-libp2p/p2p/host/resource-manager#WithConnRateLimiters

Source Address Verification for QUIC

This release introduces Source Address Verification for QUIC, preventing DoS attacks by spoofing IP addresses. See: https://www.rfc-editor.org/rfc/rfc9000.html#section-8 for details.

We are now gating incoming QUIC connections before the handshake is started. This further improves DoS protection by not wasting CPU on handshaking QUIC connections which would have been dropped by the Resource Manager.

Other changes

WebRTC Direct peers can now send messages of up to 256 kB (see spec: libp2p/specs#628)

Refactored the addressing code within BasicHost and moved it into Address Manager. In a future release, this will be exposed to users with an improved Address API for the libp2p Host.

What's Changed

addrsmanager: extract out addressing logic from basichost by @sukunrt in libp2p/go-libp2p#3075

fix: fix incorrect nil return value by @huochexizhan in libp2p/go-libp2p#3219

fix(libp2phttp): bound NewStream timeout by @algorandskiy in libp2p/go-libp2p#3225

webrtc: fix memory leak with udpmux.muxedConnection context by @sukunrt in libp2p/go-libp2p#3243

connmgr: fix transport association bug by @sukunrt in libp2p/go-libp2p#3221

connmgr: remove WithEmergencyTrim by @sukunrt in libp2p/go-libp2p#3217

fix: Add wrapped error type in stream.go by @Prabhat1308 in libp2p/go-libp2p#3237

autonatv2: fix server dial data request policy by @sukunrt in libp2p/go-libp2p#3247

autonatv2: explicitly handle dns addrs by @sukunrt in libp2p/go-libp2p#3249

... (truncated)

Commits

000582c Release v0.42.0 (#3318)
150f67b chore: update deps (#3312)
b0cc650 ci: use go-check for golangci-lint (#3309)
90633f6 mocknet: notify listeners on listen (#3310)
2d45a88 autonatv2: add metrics (#3308)
b06bfec Merge pull request #3295 from libp2p/uci-golangci-lint
735a7f0 fix: revive in p2p transport tcp
2d4d2ee fix: golangci lint configuration
198e27f chore: run gofmt
335c75a Merge branch 'master' into uci-golangci-lint
Additional commits viewable in compare view

Updates github.com/libp2p/go-libp2p-kad-dht from 0.33.1 to 0.34.0

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.34.0

What's Changed

chore(deps): bump github.com/pion/interceptor from 0.1.37 to 0.1.39 by @dependabot[bot] in libp2p/go-libp2p-kad-dht#1089

chore: bump boxo by @guillaumemichel in libp2p/go-libp2p-kad-dht#1091

refactor(providers): migrate providers/ to records/ by @guillaumemichel in libp2p/go-libp2p-kad-dht#1094

fix: move non-error log to warning level by @lidel in libp2p/go-libp2p-kad-dht#1119

feat(crawler): configurable protocol messenger by @guillaumemichel in libp2p/go-libp2p-kad-dht#1128

chore: update dependencies by @guillaumemichel in libp2p/go-libp2p-kad-dht#1129

chore: release v0.34.0 by @guillaumemichel in libp2p/go-libp2p-kad-dht#1130

Full Changelog: libp2p/go-libp2p-kad-dht@v0.33.1...v0.34.0

Commits

3c81035 chore: release v0.34.0 (#1130)
424801e update dependencies (#1129)
5dafe49 make crawler protocol messenger configurable (#1128)
944883e fix: move non-error log to warning level (#1119)
0532e1c migrate providers package (#1094)
dc0dee4 bump boxo version (#1091)
eaa3f59 chore(deps): bump github.com/pion/interceptor from 0.1.37 to 0.1.39 (#1089)
See full diff in compare view

Updates github.com/libp2p/go-libp2p-pubsub from 0.14.1 to 0.14.2

Release notes

Sourced from github.com/libp2p/go-libp2p-pubsub's releases.

v0.14.2

What's Changed

Fix race when calling Preprocess and msg ID generator by @MarcoPolo in libp2p/go-libp2p-pubsub#627

Fix test races and enable race tests in CI by @MarcoPolo in libp2p/go-libp2p-pubsub#626

Skip 32-bit tests in CI by @MarcoPolo in libp2p/go-libp2p-pubsub#628

Full Changelog: libp2p/go-libp2p-pubsub@v0.14.1...v0.14.2

Commits

abb8f8a Release v0.14.2 (#629)
bc7e2e6 Skip 32-bit tests in CI (#628)
631e47b Fix test races and enable race tests in CI (#626)
e38c340 Fix race when calling Preprocess and msg ID generator(#627)
See full diff in compare view

Updates github.com/multiformats/go-multiaddr from 0.16.0 to 0.16.1

Release notes

Sourced from github.com/multiformats/go-multiaddr's releases.

v0.16.1

What's Changed

reduce allocations in Bytes() and manet methods by @sukunrt in multiformats/go-multiaddr#280

Full Changelog: multiformats/go-multiaddr@v0.16.0...v0.16.1

Commits

3b99966 Release v0.16.1 (#281)
c94fa40 reduce allocations in Bytes() and manet methods (#280)
See full diff in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.7

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.7

What's Changed

Fix defaultIsZeroValue check for generic Value types by @MidnightRocket in spf13/pflag#422

feat: Use structs for errors returned by pflag. by @eth-p in spf13/pflag#425

Fix typos by @co63oc in spf13/pflag#428

fix #423 : Add helper function and some documentation to parse shorthand go test flags. by @valdar in spf13/pflag#424

add support equivalent to golang flag.TextVar(), also fixes the test failure as described in #368 by @hujun-open in spf13/pflag#418

add support for Func() and BoolFunc() #426 by @LeGEC in spf13/pflag#429

fix: correct argument length check in FlagSet.Parse by @ShawnJeffersonWang in spf13/pflag#409

fix usage message for func flags, fix arguments order by @LeGEC in spf13/pflag#431

Add support for time.Time flags by @max-frank in spf13/pflag#348

New Contributors

@MidnightRocket made their first contribution in spf13/pflag#422

@eth-p made their first contribution in spf13/pflag#425

@co63oc made their first contribution in spf13/pflag#428

@valdar made their first contribution in spf13/pflag#424

@hujun-open made their first contribution in spf13/pflag#418

@LeGEC made their first contribution in spf13/pflag#429

@ShawnJeffersonWang made their first contribution in spf13/pflag#409

@max-frank made their first contribution in spf13/pflag#348

Full Changelog: spf13/pflag@v1.0.6...v1.0.7

Commits

f9cbdd9 Merge pull request #348 from max-frank/add-time-flag-support
e3be2eb Reduce duplication by forwarding to sibling functions
7cc25e3 Don't export TimeValue (yet)
d15848d Remove unnecessary time test stderr dev null redirect
c5ce22e Use time.Time for expectations in time flag tests
1992c5a Add support for time.Time flags
1c62fb2 Merge pull request #431 from LeGEC/430-fix-usage-message-for-func-flags
1a4b5b2 fix discrepancy in order of arguments for Func() and BoolFunc() #433
4730aa0 fix help message for Func and BoolFunc flags #430
f4c97c2 minor: fix typos in comments
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.40.0 to 0.41.0

Commits

ef5341b go.mod: update golang.org/x dependencies
b999374 acme: fix pebble subprocess output data race
c247dea x509roots/fallback: store bundle certs directly in DER
1fda731 acme: increase pebble test waitForServer attempts
1b4c3d2 x509roots/fallback: update bundle
b903b53 acme: capture pebble test subprocess stdout/stderr
See full diff in compare view

Updates golang.org/x/net from 0.42.0 to 0.43.0

Commits

e74bc31 go.mod: update golang.org/x dependencies
af6926e http2: remove references to defunct http2.golang.org test server
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.6 to 1.36.7

Updates github.com/ipfs/go-datastore from 0.8.2 to 0.8.3

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.8.3

What's Changed

ci: uci/copy-templates by @web3-bot in ipfs/go-datastore#234

upgrade to latest opentelemetry packages by @gammazero in ipfs/go-datastore#240

replace gopkg.in/check.v1 with github.com/stretchr/testify by @gammazero in ipfs/go-datastore#241

Replace uber-go/multierr with errors.Join by @gammazero in ipfs/go-datastore#242

sort using slices.Sort by @gammazero in ipfs/go-datastore#243

Full Changelog: ipfs/go-datastore@v0.8.2...v0.8.3

Commits

fe275e4 new version (#245)
b135bef sort using slices.Sort (#243)
ac3ba45 Replace uber-go/multierr with errors.Join (#242)
4fb7cfb replace gopkg.in/check.v1 with github.com/stretchr/testify (#241)
8b21663 upgrade to latest opentelemetry packages (#240)
bee84ce ci: uci/copy-templates (#234)
See full diff in compare view

Updates golang.org/x/net from 0.42.0 to 0.43.0

Commits

e74bc31 go.mod: update golang.org/x dependencies
af6926e http2: remove references to defunct http2.golang.org test server
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.6 to 1.36.7

Updates github.com/ipfs/go-datastore from 0.8.2 to 0.8.3

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.8.3

What's Changed

ci: uci/copy-templates by @web3-bot in ipfs/go-datastore#234

upgrade to latest opentelemetry packages by @gammazero in ipfs/go-datastore#240

replace gopkg.in/check.v1 with github.com/stretchr/testify by @gammazero in ipfs/go-datastore#241

Replace uber-go/multierr with errors.Join by @gammazero in ipfs/go-datastore#242

sort using slices.Sort by @gammazero in ipfs/go-datastore#243

Full Changelog: ipfs/go-datastore@v0.8.2...v0.8.3

Commits

fe275e4 new version (#245)
b135bef sort using slices.Sort (#243)
ac3ba45 Replace uber-go/multierr with errors.Join (#242)
4fb7cfb replace gopkg.in/check.v1 with github.com/stretchr/testify (#241)
8b21663 upgrade to latest opentelemetry packages (#240)
bee84ce ci: uci/copy-templates (#234)
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.6 to 1.36.7

Updates github.com/libp2p/go-libp2p from 0.41.1 to 0.43.0

Release notes

Sourced from github.com/libp2p/go-libp2p's releases.

v0.42.0

⚠ Breaking Changes

Added a new method, VerifySourceAddress(net.Addr) bool, to the Resource Manager interface. For more details see the Source Address Verification section.

For custom implementation which want to opt out of Source Address Verification and keep the existing behavior, return false from the method.

🔦 Highlights

Per Address Reachability via AutoNAT v2

libp2p hosts can now determine reachability for individual addresses using AutoNATV2. To opt in to reachability checking use the EnableAutoNATV2 libp2p option. Using this nodes can now determine their IPv4, IPv6, and browser address reachability separately. In a future release, AutoRelay will use this information and make appropriate relay reservations accordingly. https://pkg.go.dev/github.com/libp2p/go-libp2p#EnableAutoNATv2

To query addresses by their reachability, ConfirmedAddrs() (reachable, unreachable, unknown []ma.Multiaddr) that provides Reachability information per host address. https://pkg.go.dev/github.com/libp2p/go-libp2p/p2p/host/basic#BasicHost.ConfirmedAddrs For notifications, Subscribe to the event event.EvtHostReachableAddrsChanged https://pkg.go.dev/github.com/libp2p/go-libp2p/core/event#EvtHostReachableAddrsChanged

Rate Limiting

We've introduced the package github.com/libp2p/go-libp2p/x/rate for rate limiting. The struct rate.Limiter provides Global, Network Specific, and Subnet Specific rate limiting. The Subnet specific rate limits allows for better DoS Protection by rate limiting malicious IPs. https://pkg.go.dev/github.com/libp2p/go-libp2p/x/rate

Use Limit(f func(s network.Stream)) func(s network.Stream) on Limiter to limit specific stream handlers. For example, within libp2p, the Identify Service uses this as ids.Host.SetStreamHandler(IDPush, ids.rateLimiter.Limit(ids.handlePush)) to rate limit the number of times peers can perform identify push.

For non Stream use cases use the Allow(ip) method on the limiter.

Connection Rate Limiting

New connection requests are now rate limited per IP. By default we allow 1 connection every 5 seconds from an IP address with a burst of 16 connections per IP. The burst is high enough that this should only block malicious peers.

To configure the connection rate limits, use the WithConnRateLimiters option on the Resource Manager. https://pkg.go.dev/github.com/libp2p/go-libp2p/p2p/host/resource-manager#WithConnRateLimiters

Source Address Verification for QUIC

This release introduces Source Address Verification for QUIC, preventing DoS attacks by spoofing IP addresses. See: https://www.rfc-editor.org/rfc/rfc9000.html#section-8 for details.

We are now gating incoming QUIC connections before the handshake is started. This further improves DoS protection by not wasting CPU on handshaking QUIC connections which would have been dropped by the Resource Manager.

Other changes

WebRTC Direct peers can now send messages of up to 256 kB (see spec: libp2p/specs#628)

Refactored the addressing code within BasicHost and moved it into Address Manager. In a future release, this will be exposed to users with an improved Address API for the libp2p Host.

What's Changed

addrsmanager: extract out addressing logic from basichost by @sukunrt in libp2p/go-libp2p#3075

fix: fix incorrect nil return value by @huochexizhan in libp2p/go-libp2p#3219

fix(libp2phttp): bound NewStream timeout by @algorandskiy in libp2p/go-libp2p#3225

webrtc: fix memory leak with udpmux.muxedConnection context by @sukunrt in libp2p/go-libp2p#3243

connmgr: fix transport association bug by @sukunrt in libp2p/go-libp2p#3221

connmgr: remove WithEmergencyTrim by @sukunrt in libp2p/go-libp2p#3217

fix: Add wrapped error type in stream.go by @Prabhat1308 in libp2p/go-libp2p#3237

autonatv2: fix server dial data request policy by @sukunrt in libp2p/go-libp2p#3247

autonatv2: explicitly handle dns addrs by @sukunrt in libp2p/go-libp2p#3249

... (truncated)

Commits

000582c Release v0.42.0 (#3318)
150f67b chore: update deps (#3312)
b0cc650 ci: use go-check for golangci-lint (#3309)
90633f6 mocknet: notify listeners on listen (#3310)
2d45a88 autonatv2: add metrics (#3308)
b06bfec Merge pull request #3295 from libp2p/uci-golangci-lint
735a7f0 fix: revive in p2p transport tcp
2d4d2ee fix: golangci lint configuration
198e27f chore: run gofmt
335c75a Merge branch 'master' into uci-golangci-lint
Additional commits viewable in compare view

Updates github.com/ipfs/go-datastore from 0.8.2 to 0.8.3

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.8.3

What's Changed

ci: uci/copy-templates by @web3-bot in ipfs/go-datastore#234

upgrade to latest opentelemetry packages by @gammazero in ipfs/go-datastore#240

replace gopkg.in/check.v1 with github.com/stretchr/testify by @gammazero in ipfs/go-datastore#241

Replace uber-go/multierr with errors.Join by @gammazero in ipfs/go-datastore#242

sort using slices.Sort by @gammazero in ipfs/go-datastore#243

Full Changelog: ipfs/go-datastore@v0.8.2...v0.8.3

Commits

fe275e4 new version (#245)
b135bef sort using slices.Sort (#243)
ac3ba45 Replace uber-go/multierr with errors.Join (#242)
4fb7cfb replace gopkg.in/check.v1 with github.com/stretchr/testify (#241)
8b21663 upgrade to latest opentelemetry packages (#240)
bee84ce ci: uci/copy-templates (#234)
See full diff in compare view

Updates github.com/libp2p/go-libp2p-kad-dht from 0.33.1 to 0.34.0

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.34.0

What's Changed

chore(deps): bump github.com/pion/interceptor from 0.1.37 to 0.1.39 by @dependabot[bot] in libp2p/go-libp2p-kad-dht#1089

chore: bump boxo by @guillaumemichel in libp2p/go-libp2p-kad-dht#1091

refactor(providers): migrate providers/ to records/ by @guillaumemichel in libp2p/go-libp2p-kad-dht#1094

fix: move non-error log to warning level by @lidel in libp2p/go-libp2p-kad-dht#1119

feat(crawler): configurable protocol messenger by @guillaumemichel in libp2p/go-libp2p-kad-dht#1128

chore: update dependencies by @guillaumemichel in libp2p/go-libp2p-kad-dht#1129

chore: release v0.34.0 by @guillaumemichel in libp2p/go-libp2p-kad-dht#1130

Full Changelog: libp2p/go-libp2p-kad-dht@v0.33.1...v0.34.0

Commits

3c81035 chore: release v0.34.0 (#1130)
424801e update dependencies (#1129)
5dafe49 make crawler protocol messenger configurable (#1128)
944883e fix: move non-error log to warning level (#1119)
0532e1c migrate providers package (#1094)
dc0dee4 bump boxo version (#1091)
eaa3f59 chore(deps): bump github.com/pion/interceptor from 0.1.37 to 0.1.39 (#1089)
See full diff in compare view

Updates github.com/libp2p/go-libp2p-pubsub from 0.14.1 to 0.14.2

Release notes

Sourced from github.com/libp2p/go-libp2p-pubsub's releases.

v0.14.2

What's Changed

Fix race when calling Preprocess and msg ID generator by @MarcoPolo in libp2p/go-libp2p-pubsub#627

Fix test races and enable race tests in CI by @MarcoPolo in libp2p/go-libp2p-pubsub#626

Skip 32-bit tests in CI by @MarcoPolo in libp2p/go-libp2p-pubsub#628

Full Changelog: libp2p/go-libp2p-pubsub@v0.14.1...v0.14.2
Description has been truncated

Bumps the all-go group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/celestiaorg/go-header](https://github.com/celestiaorg/go-header) | `0.6.6` | `0.7.0` | | [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore) | `0.8.2` | `0.8.3` | | [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht) | `0.33.1` | `0.34.0` | | [github.com/libp2p/go-libp2p-pubsub](https://github.com/libp2p/go-libp2p-pubsub) | `0.14.1` | `0.14.2` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` | Bumps the all-go group with 5 updates in the /apps/testapp directory: | Package | From | To | | --- | --- | --- | | [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore) | `0.8.2` | `0.8.3` | | [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht) | `0.33.1` | `0.34.0` | | [github.com/libp2p/go-libp2p-pubsub](https://github.com/libp2p/go-libp2p-pubsub) | `0.14.1` | `0.14.2` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` | | [github.com/filecoin-project/go-jsonrpc](https://github.com/filecoin-project/go-jsonrpc) | `0.7.1` | `0.8.0` | Bumps the all-go group with 2 updates in the /da directory: [github.com/rs/zerolog](https://github.com/rs/zerolog) and [github.com/filecoin-project/go-jsonrpc](https://github.com/filecoin-project/go-jsonrpc). Bumps the all-go group with 5 updates in the /execution/evm directory: | Package | From | To | | --- | --- | --- | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.23.0` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` | | [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.15.0` | `1.16.2` | | [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.2` | `5.3.0` | | [github.com/testcontainers/testcontainers-go/modules/compose](https://github.com/testcontainers/testcontainers-go) | `0.37.0` | `0.38.0` | Bumps the all-go group with 2 updates in the /execution/grpc directory: [golang.org/x/net](https://github.com/golang/net) and google.golang.org/protobuf. Bumps the all-go group with 5 updates in the /sequencers/single directory: | Package | From | To | | --- | --- | --- | | [github.com/celestiaorg/go-header](https://github.com/celestiaorg/go-header) | `0.6.6` | `0.7.0` | | [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore) | `0.8.2` | `0.8.3` | | [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht) | `0.33.1` | `0.34.0` | | [github.com/libp2p/go-libp2p-pubsub](https://github.com/libp2p/go-libp2p-pubsub) | `0.14.1` | `0.14.2` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` | Bumps the all-go group with 9 updates in the /test/docker-e2e directory: | Package | From | To | | --- | --- | --- | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.23.0` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.33.0` | `1.34.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.1` | `1.9.1` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.19.0` | `1.20.1` | | google.golang.org/protobuf | `1.36.6` | `1.36.7` | | [github.com/celestiaorg/tastora](https://github.com/celestiaorg/tastora) | `0.2.1` | `0.2.2` | | [cosmossdk.io/math](https://github.com/cosmos/cosmos-sdk) | `1.4.0` | `1.5.3` | | [github.com/celestiaorg/go-square/v2](https://github.com/celestiaorg/go-square) | `2.2.0` | `2.3.1` | | [github.com/moby/moby](https://github.com/moby/moby) | `27.5.1+incompatible` | `28.3.3+incompatible` | Bumps the all-go group with 11 updates in the /test/e2e directory: | Package | From | To | | --- | --- | --- | | [github.com/celestiaorg/go-header](https://github.com/celestiaorg/go-header) | `0.6.6` | `0.7.0` | | [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore) | `0.8.2` | `0.8.3` | | [github.com/libp2p/go-libp2p-pubsub](https://github.com/libp2p/go-libp2p-pubsub) | `0.14.1` | `0.14.2` | | [github.com/multiformats/go-multiaddr](https://github.com/multiformats/go-multiaddr) | `0.16.0` | `0.16.1` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.40.0` | `0.41.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.42.0` | `0.43.0` | | google.golang.org/protobuf | `1.36.6` | `1.36.7` | | [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.15.0` | `1.16.2` | | [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.2` | `5.3.0` | | [github.com/testcontainers/testcontainers-go/modules/compose](https://github.com/testcontainers/testcontainers-go) | `0.37.0` | `0.38.0` | Updates `github.com/celestiaorg/go-header` from 0.6.6 to 0.7.0 - [Release notes](https://github.com/celestiaorg/go-header/releases) - [Commits](celestiaorg/go-header@v0.6.6...v0.7.0) Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `github.com/libp2p/go-libp2p` from 0.41.1 to 0.42.0 - [Release notes](https://github.com/libp2p/go-libp2p/releases) - [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md) - [Commits](libp2p/go-libp2p@v0.41.1...v0.42.0) Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.33.1 to 0.34.0 - [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases) - [Commits](libp2p/go-libp2p-kad-dht@v0.33.1...v0.34.0) Updates `github.com/libp2p/go-libp2p-pubsub` from 0.14.1 to 0.14.2 - [Release notes](https://github.com/libp2p/go-libp2p-pubsub/releases) - [Commits](libp2p/go-libp2p-pubsub@v0.14.1...v0.14.2) Updates `github.com/multiformats/go-multiaddr` from 0.16.0 to 0.16.1 - [Release notes](https://github.com/multiformats/go-multiaddr/releases) - [Commits](multiformats/go-multiaddr@v0.16.0...v0.16.1) Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.7) Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/libp2p/go-libp2p` from 0.41.1 to 0.43.0 - [Release notes](https://github.com/libp2p/go-libp2p/releases) - [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md) - [Commits](libp2p/go-libp2p@v0.41.1...v0.42.0) Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.33.1 to 0.34.0 - [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases) - [Commits](libp2p/go-libp2p-kad-dht@v0.33.1...v0.34.0) Updates `github.com/libp2p/go-libp2p-pubsub` from 0.14.1 to 0.14.2 - [Release notes](https://github.com/libp2p/go-libp2p-pubsub/releases) - [Commits](libp2p/go-libp2p-pubsub@v0.14.1...v0.14.2) Updates `github.com/multiformats/go-multiaddr` from 0.16.0 to 0.16.1 - [Release notes](https://github.com/multiformats/go-multiaddr/releases) - [Commits](multiformats/go-multiaddr@v0.16.0...v0.16.1) Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.7) Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `github.com/filecoin-project/go-jsonrpc` from 0.7.1 to 0.8.0 - [Release notes](https://github.com/filecoin-project/go-jsonrpc/releases) - [Commits](filecoin-project/go-jsonrpc@v0.7.1...v0.8.0) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/libp2p/go-libp2p` from 0.41.1 to 0.43.0 - [Release notes](https://github.com/libp2p/go-libp2p/releases) - [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md) - [Commits](libp2p/go-libp2p@v0.41.1...v0.42.0) Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0 - [Commits](rs/zerolog@v1.33.0...v1.34.0) Updates `github.com/filecoin-project/go-jsonrpc` from 0.7.1 to 0.8.0 - [Release notes](https://github.com/filecoin-project/go-jsonrpc/releases) - [Commits](filecoin-project/go-jsonrpc@v0.7.1...v0.8.0) Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0 - [Commits](rs/zerolog@v1.33.0...v1.34.0) Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0 - [Commits](rs/zerolog@v1.33.0...v1.34.0) Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.20.5...v1.23.0) Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.7) Updates `golang.org/x/crypto` from 0.37.0 to 0.38.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/net` from 0.38.0 to 0.40.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `golang.org/x/sync` from 0.13.0 to 0.14.0 - [Commits](golang/sync@v0.13.0...v0.14.0) Updates `google.golang.org/protobuf` from 1.36.4 to 1.36.6 Updates `github.com/ethereum/go-ethereum` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.15.0...v1.16.2) Updates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.0 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v5.2.2...v5.3.0) Updates `github.com/testcontainers/testcontainers-go/modules/compose` from 0.37.0 to 0.38.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.37.0...v0.38.0) Updates `golang.org/x/net` from 0.38.0 to 0.40.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.4 to 1.36.6 Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.20.5...v1.23.0) Updates `google.golang.org/protobuf` from 1.36.4 to 1.36.6 Updates `github.com/ethereum/go-ethereum` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.15.0...v1.16.2) Updates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.0 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v5.2.2...v5.3.0) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/celestiaorg/go-header` from 0.6.6 to 0.7.0 - [Release notes](https://github.com/celestiaorg/go-header/releases) - [Commits](celestiaorg/go-header@v0.6.6...v0.7.0) Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `github.com/libp2p/go-libp2p` from 0.41.1 to 0.42.0 - [Release notes](https://github.com/libp2p/go-libp2p/releases) - [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md) - [Commits](libp2p/go-libp2p@v0.41.1...v0.42.0) Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.33.1 to 0.34.0 - [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases) - [Commits](libp2p/go-libp2p-kad-dht@v0.33.1...v0.34.0) Updates `github.com/libp2p/go-libp2p-pubsub` from 0.14.1 to 0.14.2 - [Release notes](https://github.com/libp2p/go-libp2p-pubsub/releases) - [Commits](libp2p/go-libp2p-pubsub@v0.14.1...v0.14.2) Updates `github.com/multiformats/go-multiaddr` from 0.16.0 to 0.16.1 - [Release notes](https://github.com/multiformats/go-multiaddr/releases) - [Commits](multiformats/go-multiaddr@v0.16.0...v0.16.1) Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.7) Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/libp2p/go-libp2p` from 0.41.1 to 0.43.0 - [Release notes](https://github.com/libp2p/go-libp2p/releases) - [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md) - [Commits](libp2p/go-libp2p@v0.41.1...v0.42.0) Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.20.5...v1.23.0) Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0 - [Commits](rs/zerolog@v1.33.0...v1.34.0) Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.1...v1.9.1) Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.6 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.7) Updates `github.com/spf13/viper` from 1.19.0 to 1.20.1 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.19.0...v1.20.1) Updates `golang.org/x/crypto` from 0.37.0 to 0.38.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/net` from 0.39.0 to 0.40.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `golang.org/x/sync` from 0.13.0 to 0.14.0 - [Commits](golang/sync@v0.13.0...v0.14.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.1...v1.9.1) Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0 - [Commits](rs/zerolog@v1.33.0...v1.34.0) Updates `golang.org/x/net` from 0.39.0 to 0.40.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.20.5...v1.23.0) Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0 - [Commits](rs/zerolog@v1.33.0...v1.34.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/celestiaorg/tastora` from 0.2.1 to 0.2.2 - [Release notes](https://github.com/celestiaorg/tastora/releases) - [Commits](celestiaorg/tastora@v0.2.1...v0.2.2) Updates `cosmossdk.io/math` from 1.4.0 to 1.5.3 - [Release notes](https://github.com/cosmos/cosmos-sdk/releases) - [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md) - [Commits](cosmos/cosmos-sdk@log/v1.4.0...math/v1.5.3) Updates `github.com/celestiaorg/go-square/v2` from 2.2.0 to 2.3.1 - [Release notes](https://github.com/celestiaorg/go-square/releases) - [Commits](celestiaorg/go-square@v2.2.0...v2.3.1) Updates `github.com/moby/moby` from 27.5.1+incompatible to 28.3.3+incompatible - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@v27.5.1...v28.3.3) Updates `github.com/celestiaorg/go-header` from 0.6.6 to 0.7.0 - [Release notes](https://github.com/celestiaorg/go-header/releases) - [Commits](celestiaorg/go-header@v0.6.6...v0.7.0) Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `github.com/libp2p/go-libp2p` from 0.41.1 to 0.42.0 - [Release notes](https://github.com/libp2p/go-libp2p/releases) - [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md) - [Commits](libp2p/go-libp2p@v0.41.1...v0.42.0) Updates `github.com/libp2p/go-libp2p-pubsub` from 0.14.1 to 0.14.2 - [Release notes](https://github.com/libp2p/go-libp2p-pubsub/releases) - [Commits](libp2p/go-libp2p-pubsub@v0.14.1...v0.14.2) Updates `github.com/multiformats/go-multiaddr` from 0.16.0 to 0.16.1 - [Release notes](https://github.com/multiformats/go-multiaddr/releases) - [Commits](multiformats/go-multiaddr@v0.16.0...v0.16.1) Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.7) Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `github.com/ethereum/go-ethereum` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.15.0...v1.16.2) Updates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.0 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v5.2.2...v5.3.0) Updates `github.com/testcontainers/testcontainers-go/modules/compose` from 0.37.0 to 0.38.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.37.0...v0.38.0) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ipfs/go-datastore` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/ipfs/go-datastore/releases) - [Commits](ipfs/go-datastore@v0.8.2...v0.8.3) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `github.com/ethereum/go-ethereum` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.15.0...v1.16.2) Updates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.0 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v5.2.2...v5.3.0) Updates `github.com/libp2p/go-libp2p` from 0.41.1 to 0.42.0 - [Release notes](https://github.com/libp2p/go-libp2p/releases) - [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md) - [Commits](libp2p/go-libp2p@v0.41.1...v0.42.0) --- updated-dependencies: - dependency-name: github.com/celestiaorg/go-header dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p-kad-dht dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p-pubsub dependency-version: 0.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/multiformats/go-multiaddr dependency-version: 0.16.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/spf13/pflag dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p-kad-dht dependency-version: 0.34.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p-pubsub dependency-version: 0.14.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/multiformats/go-multiaddr dependency-version: 0.16.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/spf13/pflag dependency-version: 1.0.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/filecoin-project/go-jsonrpc dependency-version: 0.8.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/rs/zerolog dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/filecoin-project/go-jsonrpc dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/rs/zerolog dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/rs/zerolog dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/spf13/pflag dependency-version: 1.0.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/crypto dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/sync dependency-version: 0.14.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ethereum/go-ethereum dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/testcontainers/testcontainers-go/modules/compose dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ethereum/go-ethereum dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/celestiaorg/go-header dependency-version: 0.7.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p dependency-version: 0.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p-kad-dht dependency-version: 0.34.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p-pubsub dependency-version: 0.14.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/multiformats/go-multiaddr dependency-version: 0.16.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/spf13/pflag dependency-version: 1.0.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/rs/zerolog dependency-version: 1.34.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/spf13/cobra dependency-version: 1.9.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/spf13/pflag dependency-version: 1.0.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/spf13/viper dependency-version: 1.20.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/crypto dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/sync dependency-version: 0.14.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/spf13/cobra dependency-version: 1.9.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/rs/zerolog dependency-version: 1.34.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/rs/zerolog dependency-version: 1.34.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/celestiaorg/tastora dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: cosmossdk.io/math dependency-version: 1.5.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/celestiaorg/go-square/v2 dependency-version: 2.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/moby/moby dependency-version: 28.3.3+incompatible dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-go - dependency-name: github.com/celestiaorg/go-header dependency-version: 0.7.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p-pubsub dependency-version: 0.14.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/multiformats/go-multiaddr dependency-version: 0.16.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/spf13/pflag dependency-version: 1.0.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ethereum/go-ethereum dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/testcontainers/testcontainers-go/modules/compose dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ipfs/go-datastore dependency-version: 0.8.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/ethereum/go-ethereum dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-08-18T13:14:09Z

The latest Buf updates on your PR. Results from workflow CI and Release / buf-check (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
`✅ passed`	`⏩ skipped`	`✅ passed`	`✅ passed`	Aug 18, 2025, 1:14 PM

claude · 2025-08-18T13:14:12Z

Claude finished @dependabot[bot]'s task —— View job

PR Review: Dependency Updates

I've completed my comprehensive review of this dependabot PR that updates 23 Go packages across 8 directories.

Todo List:

Analyze the scope and impact of dependency updates
Review major version changes for breaking changes
Check security implications of updates
Assess performance considerations
Verify code compatibility and potential issues
Run linting and basic tests
Provide comprehensive feedback and recommendations

🚨 Critical Issues Found

❌ Breaking Changes - Action Required

BLOCKER: go-header v0.7.0 Breaking Change

Issue: The store.Store.Init() method has been removed in v0.7.0
Impact: Code in pkg/sync/sync_service.go lines 124 and 142 will fail to compile
Files affected: /pkg/sync/sync_service.go
Fix required: Replace store.Init(ctx, initial) calls with the new lazy initialization pattern using store.Append()

Per the go-header v0.7.0 release notes:

"Initialization is now performed lazily using the first header given to store.Append"

📊 Review Summary

Code Quality & Best Practices ✅

Dependency updates follow semantic versioning principles
All updates are from reputable, well-maintained libraries
No deprecated packages being introduced

Security Analysis ✅

Ethereum: v1.15.0 → v1.16.2 includes security patches for DoS vulnerabilities
libp2p: Updates include improved rate limiting and source address verification
Prometheus: v1.20.5 → v1.23.0 includes security improvements
JWT: v5.2.2 → v5.3.0 includes timing attack mitigations
No known CVEs in target versions

Performance Considerations ✅

go-header v0.7.0: Introduces high-performance dynamic tail maintenance (header pruning)
go-datastore v0.8.3: Replaces uber-go/multierr with errors.Join for better performance
libp2p updates: Include memory allocation optimizations and reduced CPU usage
Ethereum: v1.16.2 includes performance improvements in transaction processing

Potential Issues & Concerns

Breaking Change Compatibility ❌
- go-header store initialization must be updated
- May affect header sync functionality if not addressed
Test Coverage Impact ⚠️
- testcontainers update (v0.37.0 → v0.38.0) may require test adjustments
- JWT v5.3.0 has updated APIs that might affect auth tests
Dependency Chain Effects ⚠️
- Multiple libp2p packages updated simultaneously could introduce interaction issues
- Ethereum update spans multiple components (execution, testing)

🔧 Recommendations

Immediate Actions Required:

Fix go-header breaking change - Update store initialization pattern
Run full test suite - Verify no test regressions from updates
Update integration tests - Ensure testcontainers changes don't break E2E tests

Testing Strategy:

Run make test to catch compilation errors
Run make test-integration to verify P2P functionality
Run make test-e2e to ensure EVM integration still works
Test multi-node scenarios with make run-n NODES=3

Optional Enhancements:

Consider using new go-header pruning features for better storage efficiency
Review if new libp2p rate limiting features should be enabled
Evaluate new Ethereum performance features for execution layer

📋 Verdict

❌ DO NOT MERGE without addressing the breaking change in go-header v0.7.0. This will cause compilation failures.

Priority: High - Breaking change prevents successful build
Effort: Medium - Requires updating store initialization pattern
Risk: Low - Well-documented breaking change with clear migration path

dependabot Bot added the T:dependencies label Aug 18, 2025

github-project-automation Bot added this to Evolve Aug 18, 2025

revert update to go-header

8e9c925

bump datastore

24fc096

tac0turtle approved these changes Aug 18, 2025

View reviewed changes

tac0turtle merged commit d096a24 into main Aug 18, 2025
22 of 26 checks passed

tac0turtle deleted the dependabot/go_modules/all-go-c7fb7aa5b9 branch August 18, 2025 13:30

github-project-automation Bot moved this to Done in Evolve Aug 18, 2025

tac0turtle removed this from Evolve Aug 25, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the all-go group across 8 directories with 23 updates#2573

build(deps): Bump the all-go group across 8 directories with 23 updates#2573
tac0turtle merged 3 commits intomainfrom
dependabot/go_modules/all-go-c7fb7aa5b9

dependabot Bot commented on behalf of github Aug 18, 2025

Uh oh!

github-actions Bot commented Aug 18, 2025 •

edited

Loading

Uh oh!

claude Bot commented Aug 18, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 18, 2025

v0.7.0

Notable Changes

Syncer

Store

Breaks

What's Changed

v0.8.3

What's Changed

v0.42.0

⚠ Breaking Changes

🔦 Highlights

Per Address Reachability via AutoNAT v2

Rate Limiting

Connection Rate Limiting

Source Address Verification for QUIC

Other changes

What's Changed

v0.34.0

What's Changed

v0.14.2

What's Changed

v0.16.1

What's Changed

v1.0.7

What's Changed

New Contributors

v0.8.3

What's Changed

v0.8.3

What's Changed

v0.42.0

⚠ Breaking Changes

🔦 Highlights

Per Address Reachability via AutoNAT v2

Rate Limiting

Connection Rate Limiting

Source Address Verification for QUIC

Other changes

What's Changed

v0.8.3

What's Changed

v0.34.0

What's Changed

v0.14.2

What's Changed

Uh oh!

github-actions Bot commented Aug 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

claude Bot commented Aug 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Review: Dependency Updates

Todo List:

🚨 Critical Issues Found

❌ Breaking Changes - Action Required

📊 Review Summary

Code Quality & Best Practices ✅

Security Analysis ✅

Performance Considerations ✅

Potential Issues & Concerns

🔧 Recommendations

Immediate Actions Required:

Testing Strategy:

Optional Enhancements:

📋 Verdict

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Aug 18, 2025 •

edited

Loading

claude Bot commented Aug 18, 2025 •

edited

Loading