chore(deps): update module github.com/ethereum/go-ethereum to v1.17.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/ethereum/go-ethereum	v1.17.3 → v1.17.5

---

Release Notes

ethereum/go-ethereum (github.com/ethereum/go-ethereum)

v1.17.5: Grav-Torque Pad (v1.17.5)

Compare Source

This is a maintenance release with accumulated bug fixes and improvements, and is recommended for all users. It continues the implementation work for the upcoming Amsterdam hardfork.

A few things worth highlighting:

• The default GOGC has changed from 20 to 50, trading a higher memory peak for less GC overhead. Set --gogc=20 to keep the old behavior.
• Pebble v2 is now supported as a key-value store backend. Pebble v2 is used when Geth is bootstrapped from scratch, and falls back to Pebble v1 for a pre-existing database. Run geth db pebble-upgrade to explicitly upgrade a legacy Pebble v1 database to v2.

Fork Implementation

• Several Amsterdam EIPs have been implemented or updated:
  • EIP-2780: Resource-based intrinsic transaction gas (#​35212, #​35318)
  • EIP-8037: State creation gas cost increase (#​35173, #​35318, #​35301, #​35342, #​35279)
  • EIP-8038: State-access gas cost update (#​35216)
  • EIP-8246: Remove SELFDESTRUCT burn (#​35219)
  • EIP-8282: Builder execution requests (#​35175, #​35341)
  • EIP-7997: Deterministic factory contract (#​35223, #​35285)
  • EIP-7954: Increase maximum contract size (#​35217)
  • EIP-7928: Block-level access lists (#​35260, #​35281, #​35261, #​35348, #​35279)
• Improve Amsterdam fork test coverage (#​35364)
• Introduce the --override.amsterdam flag (#​35213)
• Remove named hardforks from the BPO schedule (#​35029)
• Introduce the Bogota fork in the chain configuration (#​34057)

Core

• Introduce a sparse blobpool to reduce blob transaction pool memory usage (#​34047)
• Migrate legacy blobpool limbo entries to the new cell-based sidecar format on startup (#​35209)
• Drop support for v0 blob sidecars in blobpool (#​35191)
• Inline gas deduction to fix a performance regression (#​35203)
• Fix eth/71 block-access-list empty marker decoding which wrongly disconnected peers (#​35286)
• Disable snap sync mode once the pivot block is committed (#​35402, #​35405)
• Speed up debug_setHead and reject unrecoverable targets (#​35252)
• Fix snap sync failing to backfill blocks with missing canonical-hash mappings (#​35190)
• Reuse the chain's JUMPDEST cache in payload building (#​35378)
• Support Pebble v2 as the database backend (#​34009)
• Support .ere files in the era store (#​34978)
• Introduce the trie.UpdateBatch API (#​32448)
• Fix freezer truncation error on newly-added empty tables after unclean shutdown (#​35258)
• Improve state recoverability reporting by considering sync status (#​35400)
• Fix account prefetching for absent accounts (#​35256)
• Various snap v2 fixes (#​35321, #​35323)
• Optimize block validation (#​35403)
• Various allocation improvements (#​35234, #​35237, #​35232)
• Continue binary trie development (#​34772)
• Fix tx size calculation (#​35406)

Networking

• Protect high-value peers from random dropping based on transaction-inclusion statistics (#​34702)
• Keep invalid and unreachable nodes out of DNS discovery trees (#​35312)
• Support a dual-stack discovery listener in devp2p, with several related fixes (#​35220, #​35298, #​35243, #​35206)

RPC

• Introduce the --rpc.http-body-limit flag to configure the maximum HTTP request body size (#​35224)
• Reject gasPrice when combined with an authorizationList (#​35320)
• Reject a block parameter with neither a number nor a hash (#​35271)
• Match the authorization scheme case-insensitively (#​35022)

Tracing

• Respect the configured log limit in the struct logger (#​35349)
• Emit tracing frames in the EIP-2780 manner (#​35396)
• Include the log index in ERC-7562 tracer output (#​35200)
• Stop incorrectly capturing callcode transfers in the log tracer (#​35248)

Engine API

• Pass TargetGasLimit via the engine API (#​35372)
• Make the maximum reorg depth configurable (#​35335, #​35373, #​35391)
• Return block access lists from engine_getPayloadBodiesV2 (#​35347)
• Cap miner-configured MaxBlobsPerBlock to the protocol limit (#​35295)

Geth & Tooling

• Introduce a --gogc flag and bump the default GOGC to 50 (#​35363, #​34851)
• Write block-level access lists in geth export (#​35369)
• Preserve metrics tag values containing = (#​35168)
• Update eels tests to v20.0.0 (#​35283)

Accounts & ABI

• Forward the blob fee cap to external signers (#​35167)
• Introduce a GetABI() method on abigen v2 generated contract bindings (#​35221)
• Fix abigen v1 bindings to handle deployment of library dependencies (#​32164)

Build

• Update the ckzg dependency (#​35336)
• Upgrade the -dlgo bootstrap Go version to 1.25.12 (#​35317)

For a full rundown of the changes please consult the Geth 1.17.5 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page
• Docker images published under ethereum/client-go (use "stable" tag)
• Ubuntu packages in our Launchpad PPA repository
• macOS packages in our Homebrew Tap repository

v1.17.4: Flexible Polymer Casing (v1.17.4)

Compare Source

This is a maintenance release with accumulated bug fixes and improvements, and is recommended for all users. It also continues the implementation work for the upcoming Amsterdam hardfork.

One thing worth highlighting:

• Clef has been removed. The standalone clef signer has moved to https://github.com/ethereum/clef (#​35097).

Fork Implementation (Amsterdam)

• EIP-7928: Block-Level Access Lists: the block access list is now constructed and verified during block execution, with the serving side of the eth/71 BAL messages implemented (#​34652, #​34803, #​34879, #​34957, #​34967, #​34972, #​34977, #​35110)
• EIP-8189: snap/2, a new state-sync protocol based on block-level access lists, has been added (#​34626, #​34807, #​35098, #​35155, #​35158, #​35163, #​35178, #​35180, #​35181)
• EIP-8037: state-creation gas cost increase, has been implemented (#​33601)
  • The tracing system provides a new OnGasChangeV2 hook for multi-dimensional gas (#​34946)
• engine_newPayloadWithWitnessV5 has been added and the witness format now uses the canonical spec field ordering (#​35009)
• The evm t8n tooling has been updated for Amsterdam, adding BAL and slot-number support and binary-trie leaf export (#​34843, #​35025)
• For EIP-7843, the slot number is now set for the pending block post-Amsterdam (#​34792, #​35036)

Geth

• Caches are now sized against the cgroup memory cap (e.g. Docker --memory) when one is set (#​34947)
• A number of small command-line flag and logging issues have been fixed (#​33880, #​34732, #​34943, #​34948, #​35011, #​35104, #​35116, #​35136)
• A number of long-deprecated command-line flags have been removed (#​35021)

RPC

• eth_baseFee has been added, returning the base fee of the next block (#​34904, #​35023)

• eth_capabilities has been added, letting clients discover which historical data a node can serve (#​33886)

• debug_clearTxpool has been added to clear the transaction pool (#​33347, #​35130)

• State-reading methods (eth_getBalance, eth_getCode, eth_getStorageAt, etc.) now default the block parameter to latest when omitted (#​35100)

• Fixes for eth_simulateV1: an incorrect "base fee too low" error code and a pre-Shanghai withdrawal regression (#​34951, #​34939)

• debug_setHead now propagates rewind errors instead of silently ignoring them (#​35001)

• EIP-7702 transactions with a nil To address are now rejected (#​35094)

• HTTP RPC responses now always set Content-Length, and a WebSocket handshake status-code bug was fixed (#​35072, #​35111)

• The client can now configure trace-context propagation via the traceparent header, and response writes are now traced (#​35132, #​35049)

GraphQL

• GraphQL request bodies are now limited to 5 MiB (#​35034)
• Log-range queries with begin > 0 and end == 0 are now rejected (#​35032)
• The Block.raw resolver now returns empty bytes when the block body is missing (#​35027)

Core

• A global cache for JUMPDEST bitmaps speeds up EVM execution (#​34850)
• EVM stack operations are now computed in place, avoiding per-operand copies (#​35156)
• New code-cache hit/miss meters have been added (#​34821)
• A shutdown race in snapshot generation has been fixed (#​33540)

Engine API & Blobs

• Engine API JSON encoding for large blob payloads has been optimized, and gzip is disabled on the engine API (#​33969, #​35057)
• engine_hasBlobs has been added, and engine_getBlobs now counts only actually-available blobs (#​34859, #​35028)
• A cache for GetBlobs requests reduces engine API latency, and otel tracing has been added to the GetBlobs endpoints (#​35124, #​35026)
• Reorged v0 blob sidecar transactions are now dropped rather than converted (#​35099)
• testing_commitBlockV1 has been added as the write companion to testing_buildBlockV1 (#​34995)
• New payloads are now imported at genesis regardless of sync status (#​32673)

Networking

• NAT STUN discovery no longer fails on IPv6 servers (#​35084)
• Several snap-sync robustness fixes: uncovered state is removed before resuming, a catch-up stall was fixed, sync restarts when the required BAL is unavailable, and the pivot is frozen once state download completes (#​35159)

For a full rundown of the changes please consult the Geth 1.17.4 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go (use "stable" tag).
• Ubuntu packages in our Launchpad PPA repository.
• macOS packages in our Homebrew Tap repository.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: sdk-go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/ethereum/c-kzg-4844/v2	v2.1.6 -> v2.1.8
golang.org/x/sys	v0.40.0 -> v0.41.0

[greptile-apps]

PR author is in the excluded authors list.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 9d19127

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[wave-bugbot]

🌊 WAVE BugBot — 1 finding(s)

🔴 1

• 🔴 P0 sdk-go/go.mod:17 CWE-1395 — vulnerable dependency: golang.org/x/sys@0.41.0
  OSV reports known advisories for this version: GO-2026-5024.

_{severity: critical · major · minor · info — local review · $0 inference · wave-dispatch · react 👍/👎 to tune}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​ethereum/​go-ethereum@​v1.17.3 ⏵ v1.17.5	+1

View full report