Bump the go_modules group across 1 directory with 5 updates by dependabot[bot] · Pull Request #16 · JSTONE1111/chainlink

dependabot · 2026-03-26T18:29:51Z

Bumps the go_modules group with 3 updates in the / directory: github.com/ethereum/go-ethereum, filippo.io/edwards25519 and github.com/buger/jsonparser.

Updates github.com/ethereum/go-ethereum from 1.16.2 to 1.17.0

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Eezo-Inlaid Circuitry (v1.17.0)

This is a feature release, with all accumulated development from the last 3 months. See below for the highlights.

Note that this release contains multiple critical security fixes, as well as many bug fixes, and is recommended for all users. However, if you are cautious about upgrades, you can also install v1.16.9 which has just the critical security fixes. Specifically, this release fixes CVE-2026-26313, CVE-2026-26314, CVE-2026-26315.

We recommend recreating your p2p node key after installing this update, which you can do by removing the DATADIR/geth/nodekey file before restarting geth. Note this will cause a change in the p2p node ID, which may break static peering setups.

Highlights

Path-based Archive Node with Proofs

The path-based archive node can now serve proofs (via eth_getProof) for the state of older blocks.

You can configure the block range that supports proving independently from other archive state availability. Specifically, you can use the --history.trienode command-line flag to set the amount of blocks for which tree nodes will be tracked.

This feature is disabled by default. Note that state history cannot easily be recovered once deleted, as it can only be generated by processing blocks. However, you can enable trienode history (and/or state history) at any time to turn a full node into a partial archive node, keeping state from that point in time onwards.

#32727, #32621, #33551, #32981, #33399, #32913, #33303, #33584, #33329, #33681, #33103, #33098, #33515, #32247

EraE History Support

Geth now suports the EraE file format, an archival format for post-merge chain history.

#32157, #33827

OpenTelemetry Tracing

OpenTelemetry tracing is now supported by the RPC server, including support for distributed tracing. We have also added some tracing spans for block processing via the engine API, i.e. engine_newPayload.

#33599, #33452, #33780, #33521

All Changes

Geth CLI

The geth version-check subcommand has been removed. This command checked the geth website for signed vulnerability notices, and would tell if updates are necessary (#33498)

There is now a --miner.maxblobs command-line flag to set a limit on blobs included in built blocks (#33129, #33302)

Geth now supports continuous profiling with Grafana Pyroscope (#33623)

A rare bug that could halt block production in geth --dev mode was fixed (#33146)

A new --rpc.rangelimit flag configures the maximum block range for eth_getLogs (#33163)

geth --exitwhensynced will now set the finalized and safe block (#33038)

geth --ethstats now reports the newPayload processing time to the stats server (#33395)

A lot of minor issues in Geth's command-line flag processing have been fixed (#33379, #33338, #33330, #32999, #33279, #33252)

The evm blocktest command can now read filenames from stdin when no path is provided (#32824)

Fork Implementation

... (truncated)

Commits

0cf3d3b version: release go-ethereum v1.17.0 stable
9b78f45 crypto/secp256k1: fix coordinate check
c709c19 eth/catalyst: add initial OpenTelemetry tracing for newPayload (#33521)
550ca91 consensus/misc: hardening header verification (#33860)
a4b3898 internal/telemetry: don't create internal spans without parents (#33780)
0cba803 eth/protocols/eth, eth/protocols/snap: delayed p2p message decoding (#33835)
ad88b68 internal/download: show progress bar only if server gives length (#33842)
c50e5ed cmd/geth, internal/telemetry: wire OpenTelemetry tracing via CLI flags (#33484)
d8b92cb rpc,internal/telemetry: fix deferred spanEnd to capture errors via pointer (#...
ac85a6f rlp: add back Iterator.Count, with fixes (#33841)
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.74.2 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)

client: Ignore HTTP status header for gRPC streams. (#8548)

client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)

Special Thanks: @jgold2-stripe

client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.

Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)

balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)

server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)

Special Thanks: @hugehoo

balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)

mem: Clear large buffers before re-using. (#8670)

Performance Improvements

transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)

transport: Avoid copies when reading and writing Data frames. (#8657, #8667)

mem: Avoid clearing newly allocated buffers. (#8670)

New Features

outlierdetection: Add metrics specified in gRFC A91. (#8644)

Special Thanks: @davinci26, @PardhuKonakanchi

stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)

xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)

Special Thanks: @dimpavloff

experimental/stats: Add support for up/down counters. (#8581)

Release 1.76.0

Dependencies

Minimum supported Go version is now 1.24 (#8509)

Special Thanks: @kevinGC

Bug Fixes

client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)

client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)

Special Thanks: @vinothkumarr227

pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

... (truncated)

Commits

805b1f8 Change version to 1.77.0 (#8677)
ea7b66e Cherrypick #8702 to v1.77.x (#8709)
cadae08 Cherry-pick #8536 to v1.77.x (#8691)
4288cfc Cherrypick #8657 and #8667 to v1.77.x (#8690)
f959da6 transport: Reduce heap allocations (#8668)
0d49384 deps: update all dependencies (#8673)
e3e142d pickfirst: Remove old pickfirst (#8672)
254ab10 documentation: fix typos in benchmark and auth docs (#8674)
2d56bda mem: Remove Reader interface and export the concrete struct (#8669)
8ab0c82 mem: Avoid clearing new buffers and clear buffers from simpleBufferPools (#8670)
Additional commits viewable in compare view

Updates filippo.io/edwards25519 from 1.1.0 to 1.1.1

Commits

d1c650a extra: initialize receiver in MultiScalarMult
See full diff in compare view

Updates github.com/buger/jsonparser from 1.1.1 to 1.1.2

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.1.2

What's Changed

Updated travis to build for 1.13 to 1.15 by @janreggie in buger/jsonparser#225

eliminate 2 allocations in EachKey() by @Villenny in buger/jsonparser#223

fix issue #150 (in deleting case) by @daria-kay in buger/jsonparser#226

fixing the oss-fuzz issue by @daria-kay in buger/jsonparser#227

Fix parseInt overflow check false negative by @carsonip in buger/jsonparser#231

Added bespoke error for null cases by @jonomacd in buger/jsonparser#228

Fuzzing: Add CIFuzz by @AdamKorcz in buger/jsonparser#239

Added latest versions of go to tests by @moredure in buger/jsonparser#244

fix EachKey pIdxFlags allocation by @unxcepted in buger/jsonparser#241

fix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by @dbarrosop in buger/jsonparser#276

New Contributors

@janreggie made their first contribution in buger/jsonparser#225

@Villenny made their first contribution in buger/jsonparser#223

@daria-kay made their first contribution in buger/jsonparser#226

@carsonip made their first contribution in buger/jsonparser#231

@jonomacd made their first contribution in buger/jsonparser#228

@moredure made their first contribution in buger/jsonparser#244

@unxcepted made their first contribution in buger/jsonparser#241

@dbarrosop made their first contribution in buger/jsonparser#276

Full Changelog: buger/jsonparser@v1.1.1...v1.1.2

Commits

a69e7e0 Merge pull request #276 from dbarrosop/master
d3eacc0 fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...
61b32cf Merge pull request #241 from unxcepted/master
2181e83 Merge pull request #244 from ScaleChamp/patch-2
1510b51 Added latest versions of go to tests
6fc2e48 fix: eachkey allocation
a6f867e Merge pull request #239 from AdamKorcz/cifuzz1
cbc01fd Fuzzing: Add CIFuzz
dc92d69 Merge pull request #228 from jonomacd/null-handling
2d9d634 Merge pull request #231 from carsonip/fix-parseint-overflow-check
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.37.0 to 1.39.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)

Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)

Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)

Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)

Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)

Add experimental observability metrics for simple span processor in go.opentelemetry.io/otel/sdk/trace. (#7374)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7512)

Add experimental observability metrics for manual reader in go.opentelemetry.io/otel/sdk/metric. (#7524)

Add experimental observability metrics for periodic reader in go.opentelemetry.io/otel/sdk/metric. (#7571)

Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environmental variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7608)

Add Enabled method to the Processor interface in go.opentelemetry.io/otel/sdk/log. All Processor implementations now include an Enabled method. (#7639)

The go.opentelemetry.io/otel/semconv/v1.38.0 package. The package contains semantic conventions from the v1.38.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.37.0.(#7648)

Changed

Distinct in go.opentelemetry.io/otel/attribute is no longer guaranteed to uniquely identify an attribute set. Collisions between Distinct values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (#7175)

WithInstrumentationAttributes in go.opentelemetry.io/otel/trace synchronously de-duplicates the passed attributes instead of delegating it to the returned TracerOption. (#7266)

WithInstrumentationAttributes in go.opentelemetry.io/otel/meter synchronously de-duplicates the passed attributes instead of delegating it to the returned MeterOption. (#7266)

WithInstrumentationAttributes in go.opentelemetry.io/otel/log synchronously de-duplicates the passed attributes instead of delegating it to the returned LoggerOption. (#7266)

Rename the OTEL_GO_X_SELF_OBSERVABILITY environment variable to OTEL_GO_X_OBSERVABILITY in go.opentelemetry.io/otel/sdk/trace, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/exporters/stdout/stdouttrace. (#7302)

Improve performance of histogram Record in go.opentelemetry.io/otel/sdk/metric when min and max are disabled using NoMinMax. (#7306)

Improve error handling for dropped data during translation by using prometheus.NewInvalidMetric in go.opentelemetry.io/otel/exporters/prometheus. ⚠️ Breaking Change: Previously, these cases were only logged and scrapes succeeded. Now, when translation would drop data (e.g., invalid label/value), the exporter emits a NewInvalidMetric, and Prometheus scrapes fail with HTTP 500 by default. To preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }. (#7363)

Replace fnv hash with xxhash in go.opentelemetry.io/otel/attribute for better performance. (#7371)

The default TranslationStrategy in go.opentelemetry.io/exporters/prometheus is changed from otlptranslator.NoUTF8EscapingWithSuffixes to otlptranslator.UnderscoreEscapingWithSuffixes. (#7421)

Improve performance of concurrent measurements in go.opentelemetry.io/otel/sdk/metric. (#7427)

Include W3C TraceFlags (bits 0–7) in the OTLP Span.Flags field in go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp and go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc. (#7438)

The ErrorType function in go.opentelemetry.io/otel/semconv/v1.37.0 now handles custom error types. If an error implements an ErrorType() string method, the return value of that method will be used as the error type. (#7442)

Fixed

Fix WithInstrumentationAttributes options in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/log to properly merge attributes when passed multiple times instead of replacing them. Attributes with duplicate keys will use the last value passed. (#7300)

The equality of attribute.Set when using the Equal method is not affected by the user overriding the empty set pointed to by attribute.EmptySet in go.opentelemetry.io/otel/attribute. (#7357)

... (truncated)

Commits

6ce1429 Release v1.39.0 (#7676)
12e421a sdk/log: move Enabled method from FilterProcessor to Processor (#7639)
5982f16 fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)
9288378 chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)
ee3dfef chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)
9345d1f fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)
d03b033 Check context prior to delaying retry in OTLP exporters (#7678)
61765e7 Fix flaky TestClientInstrumentation (#7677)
a54721c chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#7679)
746d086 chore(deps): update github/codeql-action action to v4.31.7 (#7675)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the go_modules group with 3 updates in the / directory: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum), [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) and [github.com/buger/jsonparser](https://github.com/buger/jsonparser). Updates `github.com/ethereum/go-ethereum` from 1.16.2 to 1.17.0 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.16.2...v1.17.0) Updates `google.golang.org/grpc` from 1.74.2 to 1.77.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.74.2...v1.77.0) Updates `filippo.io/edwards25519` from 1.1.0 to 1.1.1 - [Commits](FiloSottile/edwards25519@v1.1.0...v1.1.1) Updates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/buger/jsonparser/releases) - [Commits](buger/jsonparser@v1.1.1...v1.1.2) Updates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.39.0) --- updated-dependencies: - dependency-name: github.com/ethereum/go-ethereum dependency-version: 1.17.0 dependency-type: direct:production dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.77.0 dependency-type: direct:production dependency-group: go_modules - dependency-name: filippo.io/edwards25519 dependency-version: 1.1.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/buger/jsonparser dependency-version: 1.1.2 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.39.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-26T03:43:46Z

This PR is stale because it has been open days with no activity.
Remove the stale label, comment, or update this PR to prevent this PR from being closed in days.

github-actions · 2026-06-02T04:09:23Z

This PR has been automatically closed because it had been stale for > days.
If you wish to continue working on this PR, please reopen it to make any necessary changes.

dependabot · 2026-06-02T04:09:26Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 26, 2026

dependabot Bot had a problem deploying to integration March 26, 2026 18:29 Error

dependabot Bot had a problem deploying to integration March 26, 2026 18:30 Failure

dependabot Bot temporarily deployed to integration March 26, 2026 18:32 Inactive

dependabot Bot had a problem deploying to integration March 26, 2026 18:32 Failure

dependabot Bot temporarily deployed to integration March 26, 2026 18:32 Inactive

dependabot Bot had a problem deploying to integration March 26, 2026 18:32 Failure

dependabot Bot temporarily deployed to integration March 26, 2026 18:32 Inactive

github-actions Bot added the Stale label May 26, 2026

github-actions Bot closed this Jun 2, 2026

github-actions Bot deleted the dependabot/go_modules/go_modules-0557c2b4f1 branch June 2, 2026 04:09

Navigation Menu

Repository navigation

Bump the go_modules group across 1 directory with 5 updates - #16

Bump the go_modules group across 1 directory with 5 updates#16
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/go_modules-0557c2b4f1

dependabot Bot commented on behalf of github Mar 26, 2026

Uh oh!

github-actions Bot commented May 26, 2026

Uh oh!

github-actions Bot commented Jun 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 2, 2026

Uh oh!

This branch was previously deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 26, 2026

Eezo-Inlaid Circuitry (v1.17.0)

Highlights

Path-based Archive Node with Proofs

EraE History Support

OpenTelemetry Tracing

All Changes

Geth CLI

Fork Implementation

Release 1.77.0

API Changes

Behavior Changes

Bug Fixes

Performance Improvements

New Features

Release 1.76.0

Dependencies

Bug Fixes

v1.1.2

What's Changed

New Contributors

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

Changed

Fixed

Uh oh!

github-actions Bot commented May 26, 2026

Uh oh!

github-actions Bot commented Jun 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 2, 2026

Uh oh!

This branch was previously deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants