Skip to content

build(deps): bump the dependencies group across 1 directory with 6 updates - #189

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/dependencies-a30d5b112d
Open

build(deps): bump the dependencies group across 1 directory with 6 updates#189
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/dependencies-a30d5b112d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates in the / directory: github.com/ethpandaops/go-eth2-client, github.com/pressly/goose/v3, github.com/sirupsen/logrus and golang.org/x/crypto.

Updates github.com/ethpandaops/go-eth2-client from 0.1.7-0.20260731014719-0dcfc98f58c3 to 0.1.7

Release notes

Sourced from github.com/ethpandaops/go-eth2-client's releases.

v0.1.7

consensus-specs v1.7.0-alpha.14

What's Changed

New Contributors

Full Changelog: ethpandaops/go-eth2-client@v0.1.6...v0.1.7

Commits

Updates github.com/pk910/dynamic-ssz from 1.3.2 to 1.3.3-0.20260812091520-ef568569f9c1

Changelog

Sourced from github.com/pk910/dynamic-ssz's changelog.

Changelog

All notable changes to the dynamic-ssz library are documented here.

[v1.3.3] 2026-08-26

Fixed

  • Fix treeproof.Wrapper building a non-canonical Merkle tree for containers that interleave buffered Append* fields with directly added Put*/AddNode fields - pending bytes are now flushed to leaf nodes before a node is added or a scope checkpoint is captured, so the leaf order matches hasher.Hasher
  • Fix GetTree(x).Hash() diverging from HashTreeRoot(x), and proofs derived from the tree failing to verify, for Deneb and later BeaconState, BeaconBlock, SignedBeaconBlock, ExecutionPayload and ExecutionPayloadHeader; this affects every release since GetTree was introduced in v1.1.1, while HashTreeRoot, MarshalSSZ and UnmarshalSSZ are unaffected
Commits

Updates github.com/pressly/goose/v3 from 3.27.3 to 3.28.0

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.28.0

Added

  • CLI: azuresql driver for Azure SQL with Microsoft Entra ID (Azure AD) authentication via fedauth connection string parameters, e.g. goose azuresql "sqlserver://host?database=mydb&fedauth=ActiveDirectoryDefault" status. Excluded when building with the no_mssql or no_azuresql tags (#1109)
  • MySQL/MariaDB table-based Locker via lock.NewMySQLTableLocker, the MySQL counterpart to the Postgres table locker from #993, accepting the same TableLockerOption set (#1075)

Changed

  • Minimum Go version is now 1.26
  • ClickHouse: new goose_db_version tables are created with ORDER BY (version_id) instead of ORDER BY (date). Existing tables are unchanged (#1085)
  • MySQL/TiDB: the tstamp column is now DATETIME instead of TIMESTAMP, which is capped at 2038-01-19 (#1053). Only newly created tables are affected; existing tables can be updated with: 
    ALTER TABLE goose_db_version MODIFY tstamp datetime NULL DEFAULT CURRENT_TIMESTAMP;
  • Various dependency upgrades

Fixed

  • goose create returns a clear "file exists" error, including the path, instead of %!w(<nil>) when the migration file already exists (#1104)
Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.28.0] - 2026-09-02

Added

  • CLI: azuresql driver for Azure SQL with Microsoft Entra ID (Azure AD) authentication via fedauth connection string parameters, e.g. goose azuresql "sqlserver://host?database=mydb&fedauth=ActiveDirectoryDefault" status. Excluded when building with the no_mssql or no_azuresql tags (#1109)
  • MySQL/MariaDB table-based Locker via lock.NewMySQLTableLocker, the MySQL counterpart to the Postgres table locker from #993, accepting the same TableLockerOption set (#1075)

Changed

  • Minimum Go version is now 1.26

  • ClickHouse: new goose_db_version tables are created with ORDER BY (version_id) instead of ORDER BY (date). Existing tables are unchanged (#1085)

  • MySQL/TiDB: the tstamp column is now DATETIME instead of TIMESTAMP, which is capped at 2038-01-19 (#1053). Only newly created tables are affected; existing tables can be updated with:

    ALTER TABLE goose_db_version MODIFY tstamp datetime NULL DEFAULT CURRENT_TIMESTAMP;

  • Various dependency upgrades

Fixed

  • goose create returns a clear "file exists" error, including the path, instead of %!w(<nil>) when the migration file already exists (#1104)
Commits
  • 43d2d9c release: v3.28.0
  • c65c559 docs: update changelog
  • 674e150 fix: use DATETIME instead of TIMESTAMP for MySQL/TiDB tstamp column (Y2K38) (...
  • f604e88 fix: include path in duplicate migration file error and use 0666 mode
  • 5f12f79 fix: return clear error when migration file already exists (#1104)
  • 4766566 fix: use version_id instead of date as ordering key (#1085)
  • 751ff94 docs: add Go 1.26.0 bump and dependency upgrades to changelog
  • 34124ac fix: wait for an alive StarRocks backend in tests (#1114)
  • f5caf10 chore: bump dependencies and go to 1.26.0 (#1113)
  • 2e8e87a Add azuresql driver with EntraID auth (#1109)
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.
Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • See full diff in compare view

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

Updates golang.org/x/crypto from 0.55.0 to 0.56.0

Commits
  • 86efde5 ssh: reject unexpected message types on established channels
  • a6cdac6 ssh: drop traffic on undecided channels
  • 39dc44e ssh: don't skip the source-address critical option in CheckCert
  • afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
  • 89f4e9b x509roots/fallback: update bundle
  • 71488c4 ssh/knownhosts: compare only public key portions for revocation
  • 82adefa ssh: synchronize unexpected response test
  • c757c98 all: upgrade go directive to at least 1.26.0 [generated]
  • 593c81a ssh: correctly ignore pre-banner lines
  • 46efc8b acme: add crypto.SignMessage test coverage
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the dependencies group across 1 directory with 6 up…
ec78428 
…dates

Bumps the dependencies group with 4 updates in the / directory: [github.com/ethpandaops/go-eth2-client](https://github.com/ethpandaops/go-eth2-client), [github.com/pressly/goose/v3](https://github.com/pressly/goose), [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) and [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `github.com/ethpandaops/go-eth2-client` from 0.1.7-0.20260731014719-0dcfc98f58c3 to 0.1.7
- [Release notes](https://github.com/ethpandaops/go-eth2-client/releases)
- [Changelog](https://github.com/ethpandaops/go-eth2-client/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ethpandaops/go-eth2-client/commits/v0.1.7)

Updates `github.com/pk910/dynamic-ssz` from 1.3.2 to 1.3.3-0.20260812091520-ef568569f9c1
- [Release notes](https://github.com/pk910/dynamic-ssz/releases)
- [Changelog](https://github.com/pk910/dynamic-ssz/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pk910/dynamic-ssz/commits)

Updates `github.com/pressly/goose/v3` from 3.27.3 to 3.28.0
- [Release notes](https://github.com/pressly/goose/releases)
- [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md)
- [Commits](pressly/goose@v3.27.3...v3.28.0)

Updates `github.com/sirupsen/logrus` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.10.1...v1.10.2)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `golang.org/x/crypto` from 0.55.0 to 0.56.0
- [Commits](golang/crypto@v0.55.0...v0.56.0)

---
updated-dependencies:
- dependency-name: github.com/ethpandaops/go-eth2-client
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/pk910/dynamic-ssz
  dependency-version: 1.3.3-0.20260812091520-ef568569f9c1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/pressly/goose/v3
  dependency-version: 3.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants