Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2025

Bumps the go-mod group with 9 updates in the / directory:

Package From To
github.com/99designs/gqlgen 0.17.81 0.17.82
github.com/ClickHouse/clickhouse-go/v2 2.40.1 2.40.3
github.com/DIMO-Network/attestation-api 0.1.2 0.1.10
github.com/DIMO-Network/token-exchange-api 0.3.7 0.3.8
github.com/ethereum/go-ethereum 1.16.4 1.16.7
github.com/go-jose/go-jose/v4 4.1.1 4.1.3
github.com/prometheus/client_golang 1.23.0 1.23.2
golang.org/x/sync 0.17.0 0.18.0
google.golang.org/grpc 1.75.0 1.76.0

Updates github.com/99designs/gqlgen from 0.17.81 to 0.17.82

Release notes

Sourced from github.com/99designs/gqlgen's releases.

v0.17.82

What's Changed

New Contributors

Full Changelog: 99designs/gqlgen@v0.17.81...v0.17.82

Commits
  • e10ac92 release v0.17.82
  • 220b29b [NEW] perf: Optimize CollectFields calculation for non-primitive array fields...
  • cf0df5d feat(time): enhance time handling marshalling and unmarshalling (#3898)
  • e9c59e9 fix: allow error presenter to silence errors (#3896)
  • 438572b Adjust permissions for Nancy to avoid spurious failures (#3897)
  • cb93011 fix(modelgen): use ToGoModelName in generateGetters (#3894)
  • 8aacdda Change interceptor default inner context to avoid nil pointer (#3895)
  • d3614b1 chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#3875)
  • f493b67 chore(deps-dev): bump graphql from 16.11.0 to 16.12.0 in /integration (#3891)
  • a9b20b1 chore(deps-dev): bump vitest from 4.0.3 to 4.0.6 in /integration (#3893)
  • Additional commits viewable in compare view

Updates github.com/ClickHouse/clickhouse-go/v2 from 2.40.1 to 2.40.3

Release notes

Sourced from github.com/ClickHouse/clickhouse-go/v2's releases.

v2.40.3

What's Changed

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.40.2...v2.40.3

v2.40.2

What's Changed

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.40.1...v2.40.2

Changelog

Sourced from github.com/ClickHouse/clickhouse-go/v2's changelog.

v2.40.3, 2025-09-13

What's Changed

Enhancements 🎉

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.40.2...v2.40.3

v2.40.2, 2025-09-13

What's Changed

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.40.1...v2.40.2

Commits

Updates github.com/DIMO-Network/attestation-api from 0.1.2 to 0.1.10

Release notes

Sourced from github.com/DIMO-Network/attestation-api's releases.

v0.1.10

Full Changelog: DIMO-Network/attestation-api@v0.1.9...v0.1.10

v0.1.9

What's Changed

Full Changelog: DIMO-Network/attestation-api@v0.1.8...v0.1.9

v0.1.8

What's Changed

New Contributors

Full Changelog: DIMO-Network/attestation-api@v0.1.7...v0.1.8

v0.1.7

What's Changed

Full Changelog: DIMO-Network/attestation-api@v0.1.6...v0.1.7

v0.1.6

Full Changelog: DIMO-Network/attestation-api@v0.1.5...v0.1.6

v0.1.5

Full Changelog: DIMO-Network/attestation-api@v0.1.4...v0.1.5

v0.1.4

What's Changed

Full Changelog: DIMO-Network/attestation-api@v0.1.3...v0.1.4

v0.1.3

What's Changed

... (truncated)

Commits
  • 8cc9d1c Update Image Version to 81cca4f
  • 81cca4f chore: tidy + generate
  • a6ec85d Update Image Version to 1a7fbf8
  • 1a7fbf8 move to new tokenclaim fields
  • 96b04f3 Update Image Version to ce68717
  • ce68717 Updating producers, valid lifetimes
  • 214354f Update Image Version to 0.1.9
  • b5886f9 Update Image Version to 0a1822c
  • 0a1822c Bump the actions group with 2 updates (#90)
  • 4bbcb55 Update Image Version to 67a87cd
  • Additional commits viewable in compare view

Updates github.com/DIMO-Network/server-garage from 0.0.7 to 0.0.8

Release notes

Sourced from github.com/DIMO-Network/server-garage's releases.

v0.0.8

Full Changelog: DIMO-Network/server-garage@v0.0.7...v0.0.8

Commits

Updates github.com/DIMO-Network/token-exchange-api from 0.3.7 to 0.3.8

Release notes

Sourced from github.com/DIMO-Network/token-exchange-api's releases.

v0.3.8

Full Changelog: DIMO-Network/token-exchange-api@v0.3.7...v0.3.8

Commits

Updates github.com/ethereum/go-ethereum from 1.16.4 to 1.16.7

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Ballistic Drift Stabilizer (v1.16.7)

This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.

This release enables the Fusaka hardfork on Ethereum mainnet.

The Fusaka fork is scheduled to occur at 2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.

This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.

  • BPO1 on2025-12-09
  • BPO2 on 2026-01-07

Fusaka

  • Set mainnet timestamps for Osaka (#33063)
  • Enable Fusaka for geth --dev mode (#32917)

RPC

  • Add eth_sendRawTransactionSync which waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)
  • Add support for eth_simulateV1 in ethclient (#32856)
  • Fix for an issue that might crash debug_traceCall (#33015)
  • Fix for an issuer where local transactions were not persisted to the journal (#32921)

Core

  • Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
  • Add geth --genesis flag as an alternative to running geth init genesis.json (#32844)
  • Fix for receipt insertion during ERA file import. (#32934)
  • Work on getting the trie node history in order to serve historical eth_getProof request with the new path-based archive node. (#32907, #32914, #32937)
  • Further work on cmd/keeper, our guest program for zkVMs (#32816)
  • Various optimizations (#32971, #32916, #32965, #32946)

Networking

  • New metrics for tracking slow peers (#32964)
  • Fix for an issue where disconnected peers were not removed in txFetcher (#32947)

For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.

As with all our previous releases, you can find the:

... (truncated)

Commits
  • b9f3a3d Merge branch 'master' into release/1.16
  • 07129d2 version: release go-ethereum v1.16.7 stable
  • 653f8d4 go.mod: update to c-kzg v2.1.5 (#33093)
  • 5b77af3 version: begin v1.16.7 release cycle
  • 386c3de Merge branch 'master' into release/1.16
  • 044828e version: release go-ethereum v1.16.6
  • 0250724 params: set osaka and BPO1 & BPO2 mainnet dates (#33063)
  • 28c59b7 core/rawdb: fix db inspector by supporting trienode history (#33087)
  • 18a9027 common: fix duration comparison in PrettyAge (#33064)
  • e6d34c1 eth/tracers: fix prestateTracer for EIP-6780 SELFDESTRUCT (#33050)
  • Additional commits viewable in compare view

Updates github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.3

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.3

This release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop x/crypto and no longer have any external dependencies in go-jose outside of the standard library!

This release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.

What's Changed

Full Changelog: go-jose/go-jose@v4.1.2...v4.1.3

v4.1.2

What's Changed

go-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.

New Contributors

Full Changelog: go-jose/go-jose@v4.1.1...v4.1.2

Commits

Updates github.com/prometheus/client_golang from 1.23.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Commits

Updates github.com/vektah/gqlparser/v2 from 2.5.30 to 2.5.31

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.31

What's Changed

New Contributors

Full Changelog: vektah/gqlparser@v2.5.30...v2.5.31

Commits
  • 5b41269 fix(validator): allow nullable variables for nonnull args with default (#396)
  • fecb70c Add a nil check in ArgumentMap (#397)
  • 1bb503e Bump the actions-deps group in /validator/imported with 3 updates (#395)
  • a662801 Bump chai in /validator/imported in the actions-deps group (#394)
  • 343d05e Bump @​babel/core in /validator/imported in the actions-deps group (#392)
  • 953b989 Bump actions/setup-go from 5 to 6 in the actions-deps group (#393)
  • ac66872 Bump chai in /validator/imported in the actions-deps group (#390)
  • cc5d2dc Bump github.com/stretchr/testify in the actions-deps group (#391)
  • 52511f2 Bump actions/checkout from 4 to 5 in the actions-deps group (#387)
  • a13b5b8 Bump github.com/stretchr/testify in the actions-deps group (#389)
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.17.0 to 0.18.0

Commits

Updates google.golang.org/grpc from 1.75.0 to 1.76.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.76.0

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

New Features

  • credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#8431)

Performance Improvements

  • client: Improve HTTP/2 header size estimate to reduce re-allocations. (#8547)
  • encoding/proto: Avoid redundant message size calculation when marshaling. (#8569)

Release 1.75.1

Bug Fixes

  • transport: Fix a data race while copying headers for stats handlers in the std lib http2 server transport. (#8519)
  • xdsclient:
    • Fix a data race caused while reporting load to LRS. (#8483)
    • Fix regression preventing empty node IDs when creating an LRS client. (#8483)
  • server: Fix a regression preventing streams from being cancelled or timed out when blocked on flow control. (#8528)
Commits
  • d96c2ef Change version to 1.76.0 (#8584)
  • 79c553c Cherry pick #8610, #8615 to v1.76.x (#8621)
  • 0513350 client: minor improvements to log messages (#8564)
  • ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (#8431)
  • ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache...
  • 83bead4 internal/buffer: set closed flag when closing channel in the Load method (#8575)
  • 0f45079 encoding/proto: enable use cached size option (#8569)
  • 8420f3f transport: avoid slice reallocation during header creation (#8547)
  • b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (#8342)"...
  • c122250 stats/opentelemetry: record retry attempts from clientStream (#8342)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to ...

Description has been truncated

Bumps the go-mod group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/99designs/gqlgen](https://github.com/99designs/gqlgen) | `0.17.81` | `0.17.82` |
| [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.40.1` | `2.40.3` |
| [github.com/DIMO-Network/attestation-api](https://github.com/DIMO-Network/attestation-api) | `0.1.2` | `0.1.10` |
| [github.com/DIMO-Network/token-exchange-api](https://github.com/DIMO-Network/token-exchange-api) | `0.3.7` | `0.3.8` |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.16.4` | `1.16.7` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.1` | `4.1.3` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.0` | `1.23.2` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.17.0` | `0.18.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.0` | `1.76.0` |



Updates `github.com/99designs/gqlgen` from 0.17.81 to 0.17.82
- [Release notes](https://github.com/99designs/gqlgen/releases)
- [Changelog](https://github.com/99designs/gqlgen/blob/master/CHANGELOG.md)
- [Commits](99designs/gqlgen@v0.17.81...v0.17.82)

Updates `github.com/ClickHouse/clickhouse-go/v2` from 2.40.1 to 2.40.3
- [Release notes](https://github.com/ClickHouse/clickhouse-go/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-go/blob/main/CHANGELOG.md)
- [Commits](ClickHouse/clickhouse-go@v2.40.1...v2.40.3)

Updates `github.com/DIMO-Network/attestation-api` from 0.1.2 to 0.1.10
- [Release notes](https://github.com/DIMO-Network/attestation-api/releases)
- [Commits](DIMO-Network/attestation-api@v0.1.2...v0.1.10)

Updates `github.com/DIMO-Network/server-garage` from 0.0.7 to 0.0.8
- [Release notes](https://github.com/DIMO-Network/server-garage/releases)
- [Commits](DIMO-Network/server-garage@v0.0.7...v0.0.8)

Updates `github.com/DIMO-Network/token-exchange-api` from 0.3.7 to 0.3.8
- [Release notes](https://github.com/DIMO-Network/token-exchange-api/releases)
- [Commits](DIMO-Network/token-exchange-api@v0.3.7...v0.3.8)

Updates `github.com/ethereum/go-ethereum` from 1.16.4 to 1.16.7
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.16.4...v1.16.7)

Updates `github.com/go-jose/go-jose/v4` from 4.1.1 to 4.1.3
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.1...v4.1.3)

Updates `github.com/prometheus/client_golang` from 1.23.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.23.0...v1.23.2)

Updates `github.com/vektah/gqlparser/v2` from 2.5.30 to 2.5.31
- [Release notes](https://github.com/vektah/gqlparser/releases)
- [Commits](vektah/gqlparser@v2.5.30...v2.5.31)

Updates `golang.org/x/sync` from 0.17.0 to 0.18.0
- [Commits](golang/sync@v0.17.0...v0.18.0)

Updates `google.golang.org/grpc` from 1.75.0 to 1.76.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.75.0...v1.76.0)

---
updated-dependencies:
- dependency-name: github.com/99designs/gqlgen
  dependency-version: 0.17.82
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/ClickHouse/clickhouse-go/v2
  dependency-version: 2.40.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/DIMO-Network/attestation-api
  dependency-version: 0.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/DIMO-Network/server-garage
  dependency-version: 0.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/DIMO-Network/token-exchange-api
  dependency-version: 0.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.16.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/vektah/gqlparser/v2
  dependency-version: 2.5.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant