oasis-sdk icon indicating copy to clipboard operation
oasis-sdk copied to clipboard

Published 20 hours ago • verified publisher icon oasisprotocol

go: bump the go group across 4 directories with 6 updates

Open dependabot[bot] opened this issue 1 year ago • 1 comments

Bumps the go group with 6 updates in the /client-sdk/go directory:

Package From To
github.com/ethereum/go-ethereum 1.14.0 1.14.6
golang.org/x/crypto 0.23.0 0.24.0
google.golang.org/grpc 1.63.2 1.65.0
github.com/prometheus/client_golang 1.19.0 1.19.1
github.com/spf13/cobra 1.8.0 1.8.1
github.com/spf13/viper 1.18.2 1.19.0

Bumps the go group with 6 updates in the /tests/benchmark directory:

Package From To
github.com/ethereum/go-ethereum 1.14.0 1.14.6
golang.org/x/crypto 0.23.0 0.24.0
google.golang.org/grpc 1.63.2 1.65.0
github.com/prometheus/client_golang 1.19.0 1.19.1
github.com/spf13/cobra 1.8.0 1.8.1
github.com/spf13/viper 1.18.2 1.19.0

Bumps the go group with 6 updates in the /tests/e2e directory:

Package From To
github.com/ethereum/go-ethereum 1.14.0 1.14.6
golang.org/x/crypto 0.23.0 0.24.0
google.golang.org/grpc 1.63.2 1.65.0
github.com/prometheus/client_golang 1.19.0 1.19.1
github.com/spf13/cobra 1.8.0 1.8.1
github.com/spf13/viper 1.18.2 1.19.0

Bumps the go group with 6 updates in the /tools/gen_runtime_vectors directory:

Package From To
github.com/ethereum/go-ethereum 1.14.0 1.14.6
golang.org/x/crypto 0.23.0 0.24.0
google.golang.org/grpc 1.63.2 1.65.0
github.com/prometheus/client_golang 1.19.0 1.19.1
github.com/spf13/cobra 1.8.0 1.8.1
github.com/spf13/viper 1.18.2 1.19.0

Updates github.com/ethereum/go-ethereum from 1.14.0 to 1.14.6

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Talaria (v1.14.6)

Geth v1.14.6 is a maintenance release, but it does ship with the experimental witness building validation code used in @​karalabe's "cross validation" proposal.

Shipped features:

  • Add stateless witness builder and (self-)cross validator (#29719, #29807, #29970, #30024)
  • Set a 2KB hard limit for p2p handshake messages (#30029)
  • Improved display of database statistics (#29948)

Shipped bugfixes:

  • Fix issue in which the beacon root contract balance would not be saved in developer mode, causing an error on restart (#29963)
  • Fix shutdown crash when geth runs in blsync mode (#29946)
  • Fix data races in snapshot access (#30001) and (#30011)
  • Fix out of bounds access in json unmarshalling (#30014)
  • Add missing lock in peer discovery (#29960)

For a full rundown of the changes please consult the Geth 1.14.6 release milestone.

As with all our previous releases, you can find the:

Bothros (v1.14.5)

Geth v1.14.5 is a hotfix release that addresses a regression introduced in v1.14.4, which prevented the node from discovering other peers in certain networking setups (#29944). It is otherwise identical to v1.14.4.

Geth v1.14.4 in a usual maintenance release, but it does ship a 5-7% block import speed improvement. Furthermore, v1.14.4 also finally includes an Ether supply live tracer, that you can enable via --vmtrace supply. Also please note, the default value for miner tip enforcement was dropped from 1 gwei to 0.001 gwei (block producers can change this via --miner.gasprice).

Shipped features:

  • Reduce the default required minimum miner tip from 1 gwei to 0.001 gwei to cater better for network conditions (#29895).
  • Load trie nodes concurrently with trie updates, speeding up block import by 5-7% (#29519, #29768, #29919).
  • Introduce an Ether supply tracker as a live chain tracer (#29347).
  • Implement Verkle stateless gas accounting (EIP-4762) (#29338).
  • Optimise trie dirty tracking to reduce disk loads a bit (#29731).
  • Ensure the beacon chain roots system contract is deployed in dev mode (#29655).
  • Add an additional snap sync check for data validity before inserting into the database (#29485).
  • Improve the discovery protocol's node revalidation (#29572, #29864, #29836).
  • Continue working towards pathdb support in archive mode (#29530, #29924).

Shipped bugfixes:

... (truncated)

Commits
  • aadddf3 params: release Geth v1.14.6
  • 0905660 core/state: fix inconsistent verkle test error messages (#29753)
  • 41abab9 build: add check for stale generated files (#30037)
  • a4e338f accounts/usbwallet/trezor: upgrade to generate with protoc 27.1 (#30058)
  • 7cfff30 rpc: truncate call error data logs (#30028)
  • 06f1d07 all: replace division with right shift if possible (#29911)
  • 4939c25 cmd/evm/internal/t8ntool: log writeTraceResult error message (#30038)
  • 36d67be core/txpool/blobpool: improve newPriceHeap function (#30050)
  • 19c3c1e triedb/pathdb: fix flaky test in pathdb (#29901)
  • 045b971 trie: relocate state execution logic into pathdb package (#29861)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.23.0 to 0.24.0

Commits
  • 332fd65 go.mod: update golang.org/x dependencies
  • 0b431c7 x509roots/fallback: update bundle
  • 349231f ssh: implement CryptoPublicKey on sk keys
  • 44c9b0f ssh: allow server auth callbacks to send additional banners
  • 67b1361 sha3: reenable s390x assembly
  • 477a5b4 sha3: make APIs usable with zero allocations
  • 59b5a86 sha3: disable s390x assembly
  • 10f366e sha3: simplify XOR functions
  • See full diff in compare view

Updates google.golang.org/grpc from 1.63.2 to 1.65.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.65.0

Dependencies

  • Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See #7249 for more information. (#7250)
  • Update x/net/http2 to address CVE-2023-45288 (#7282)

Behavior Changes

  • credentials/tls: clients and servers will now reject connections that don't support ALPN when environment variable GRPC_ENFORCE_ALPN_ENABLED is set to "true" (case insensitive). (#7184)
    • NOTE: this behavior will become the default in a future release.
  • metadata: remove String method from MD to make printing more consistent (#7373)

New Features

  • grpc: add WithMaxCallAttempts to configure gRPC's retry behavior per-channel. (#7229)

Bug Fixes

  • ringhash: properly apply endpoint weights instead of ignoring them (#7156)
  • xds: fix a bug that could cause xds-enabled servers to stop accepting new connections after handshaking errors (#7128)

Release 1.64.0

API Changes

  • stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

  • codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

  • resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
  • metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)

Performance Improvements

  • client: Improve RPC performance by reducing work while holding a lock (#7132)

Bug Fixes

  • transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#7038)
  • channelz: Fix bug that was causing the subchannel's target to be unset (#7189)

... (truncated)

Commits
  • 2da9769 Change version to 1.65.0 (#7306)
  • ede96b7 metadata: remove String method (#7373)
  • 64be203 grpc: Readd pick first name (#7336) (#7341)
  • 25e33a6 examples: Add CSM Observability example (#7302) (#7318)
  • 04a5f46 xds/internal/xdsclient: Emit unknown for CSM Labels if not present in CDS (#7...
  • cff5c3e stats/opentelemetry: Add e2e testing for CSM Observability (#7279) (#7316)
  • 9b970fd dns: fix constant 30s backoff for re-resolution (#7262) (#7311)
  • 6d23620 documentation: on server, use FromIncomingContext for retrieving context and...
  • 7e5898e xds: unify xDS client creation APIs meant for testing (#7268)
  • 5d7bd7a interop/xds: Interop client and server changes for CSM Observability (#7280)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.19.1

What's Changed

  • Security patches for golang.org/x/sys and google.golang.org/protobuf

New Contributors

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.19.0...v1.19.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

Commits

Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

... (truncated)

Commits

Updates github.com/spf13/viper from 1.18.2 to 1.19.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.19.0

What's Changed

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • b9733f0 build(deps): bump actions/checkout from 4.1.4 to 4.1.6
  • 6ecc5c8 build(deps): bump cachix/install-nix-action from 26 to 27
  • 248c6fd build(deps): bump github/codeql-action from 3.25.4 to 3.25.7
  • abea773 Update references to bketelsen/crypt
  • f17acb4 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1
  • 8e285a5 build(deps): bump github/codeql-action from 3.25.2 to 3.25.4
  • 4017620 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1
  • b67e814 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
  • 4a182c7 build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2
  • 45a0e12 build(deps): bump mheap/github-action-required-labels
  • Additional commits viewable in compare view

Updates github.com/ethereum/go-ethereum from 1.14.0 to 1.14.6

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Talaria (v1.14.6)

Geth v1.14.6 is a maintenance release, but it does ship with the experimental witness building validation code used in @​karalabe's "cross validation" proposal.

Shipped features:

  • Add stateless witness builder and (self-)cross validator (#29719, #29807, #29970, #30024)
  • Set a 2KB hard limit for p2p handshake messages (#30029)
  • Improved display of database statistics (#29948)

Shipped bugfixes:

  • Fix issue in which the beacon root contract balance would not be saved in developer mode, causing an error on restart (#29963)
  • Fix shutdown crash when geth runs in blsync mode (#29946)
  • Fix data races in snapshot access (#30001) and (#30011)
  • Fix out of bounds access in json unmarshalling (#30014)
  • Add missing lock in peer discovery (#29960)

For a full rundown of the changes please consult the Geth 1.14.6 release milestone.

As with all our previous releases, you can find the:

Bothros (v1.14.5)

Geth v1.14.5 is a hotfix release that addresses a regression introduced in v1.14.4, which prevented the node from discovering other peers in certain networking setups (#29944). It is otherwise identical to v1.14.4.

Geth v1.14.4 in a usual maintenance release, but it does ship a 5-7% block import speed improvement. Furthermore, v1.14.4 also finally includes an Ether supply live tracer, that you can enable via --vmtrace supply. Also please note, the default value for miner tip enforcement was dropped from 1 gwei to 0.001 gwei (block producers can change this via --miner.gasprice).

Shipped features:

  • Reduce the default required minimum miner tip from 1 gwei to 0.001 gwei to cater better for network conditions (#29895).
  • Load trie nodes concurrently with trie updates, speeding up block import by 5-7% (#29519, #29768, #29919).
  • Introduce an Ether supply tracker as a live chain tracer (#29347).
  • Implement Verkle stateless gas accounting (EIP-4762) (#29338).
  • Optimise trie dirty tracking to reduce disk loads a bit (#29731).
  • Ensure the beacon chain roots system contract is deployed in dev mode (#29655).
  • Add an additional snap sync check for data validity before inserting into the database (#29485).
  • Improve the discovery protocol's node revalidation (#29572, #29864, #29836).
  • Continue working towards pathdb support in archive mode (#29530, #29924).

Shipped bugfixes:

... (truncated)

Commits
  • aadddf3 params: release Geth v1.14.6
  • 0905660 core/state: fix inconsistent verkle test error messages (#29753)
  • 41abab9 build: add check for stale generated files (#30037)
  • a4e338f accounts/usbwallet/trezor: upgrade to generate with protoc 27.1 (#30058)
  • 7cfff30 rpc: truncate call error data logs (#30028)
  • 06f1d07 all: replace division with right shift if possible (#29911)
  • 4939c25 cmd/evm/internal/t8ntool: log writeTraceResult error message (#30038)
  • 36d67be core/txpool/blobpool: improve newPriceHeap function (#30050)
  • 19c3c1e triedb/pathdb: fix flaky test in pathdb (#29901)
  • 045b971 trie: relocate state execution logic into pathdb package (#29861)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.23.0 to 0.24.0

Commits
  • 332fd65 go.mod: update golang.org/x dependencies
  • 0b431c7 x509roots/fallback: update bundle
  • 349231f ssh: implement CryptoPublicKey on sk keys
  • 44c9b0f ssh: allow server auth callbacks to send additional banners
  • 67b1361 sha3: reenable s390x assembly
  • 477a5b4 sha3: make APIs usable with zero allocations
  • 59b5a86 sha3: disable s390x assembly
  • 10f366e sha3: simplify XOR functions
  • See full diff in compare view

Updates google.golang.org/grpc from 1.63.2 to 1.65.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.65.0

Dependencies

  • Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See #7249 for more information. (#7250)
  • Update x/net/http2 to address CVE-2023-45288 (#7282)

Behavior Changes

  • credentials/tls: clients and servers will now reject connections that don't support ALPN when environment variable GRPC_ENFORCE_ALPN_ENABLED is set to "true" (case insensitive). (#7184)
    • NOTE: this behavior will become the default in a future release.
  • metadata: remove String method from MD to make printing more consistent (#7373)

New Features

  • grpc: add WithMaxCallAttempts to configure gRPC's retry behavior per-channel. (#7229)

Bug Fixes

  • ringhash: properly apply endpoint weights instead of ignoring them (#7156)
  • xds: fix a bug that could cause xds-enabled servers to stop accepting new connections after handshaking errors (#7128)

Release 1.64.0

API Changes

  • stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

  • codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

  • resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
  • metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)

Performance Improvements

  • client: Improve RPC performance by reducing work while holding a lock (#7132)

Bug Fixes

  • transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#7038)
  • channelz: Fix bug that was causing the subchannel's target to be unset (#7189)

... (truncated)

Commits
  • 2da9769 Change version to 1.65.0 (#7306)
  • ede96b7 metadata: remove String method (#7373)
  • 64be203 grpc: Readd pick first name (#7336) (#7341)
  • 25e33a6 examples: Add CSM Observability example (#7302) (#7318)
  • 04a5f46 xds/internal/xdsclient: Emit unknown for CSM Labels if not present in CDS (#7...
  • cff5c3e stats/opentelemetry: Add e2e testing for CSM Observability (#7279) (#7316)
  • 9b970fd dns: fix constant 30s backoff for re-resolution (#7262) (#7311)
  • 6d23620 documentation: on server, use FromIncomingContext for retrieving context and...
  • 7e5898e xds: unify xDS client creation APIs meant for testing (#7268)
  • 5d7bd7a interop/xds: Interop client and server changes for CSM Observability (#7280)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.19.1

What's Changed

  • Security patches for golang.org/x/sys and google.golang.org/protobuf

New Contributors

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.19.0...v1.19.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

Commits

Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

dependabot[bot] avatar Jul 03 '24 02:07 dependabot[bot]

Deploy Preview for oasisprotocol-oasis-sdk canceled.

Name Link
Latest commit 1d23661febb41666b3ea9eff44fce81d8ca09a63
Latest deploy log https://app.netlify.com/sites/oasisprotocol-oasis-sdk/deploys/6695c955f9372f000803af86

netlify[bot] avatar Jul 03 '24 02:07 netlify[bot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot[bot] avatar Jul 17 '24 01:07 dependabot[bot]