Bump the dependencies group with 6 updates #138

dependabot · 2026-02-09T00:55:09Z

Bumps the dependencies group with 6 updates:

Package	From	To
github.com/attestantio/go-eth2-client	`0.27.1`	`0.28.0`
github.com/ethereum/go-ethereum	`1.16.5`	`1.16.8`
github.com/itchyny/gojq	`0.12.17`	`0.12.18`
github.com/lib/pq	`1.10.9`	`1.11.1`
github.com/sirupsen/logrus	`1.9.3`	`1.9.4`
github.com/spf13/cobra	`1.10.1`	`1.10.2`

Updates github.com/attestantio/go-eth2-client from 0.27.1 to 0.28.0

Changelog

Sourced from github.com/attestantio/go-eth2-client's changelog.

0.28.0:

update dependency for go-bitfield to get from offchain instead of prysmatic org

0.27.2:

add /eth/v1/beacon/blobs/ endpoint support

update go version to 1.25

updated spec conformance tests for latest forks

updated linters and corresponding fixes

Commits

9616db6 Merge pull request #278 from attestantio/release_go_eth2_client
ec91bf6 Lint.
60ad4c7 Add release information.
43433ff Update go-bitfield refs to OffchainLabs and fix linter issues #276
3109c2f Merge pull request #277 from attestantio/release_27_2
e8d3f36 Fix linter.
be371ef Release 0.27.2
ca04703 Merge pull request #274 from attestantio/update_go_version_and_golangci_lint
1bfc628 Merge pull request #273 from pk910/pk910/add-blobs-request
dd39e83 fix typo in filename
Additional commits viewable in compare view

Updates github.com/ethereum/go-ethereum from 1.16.5 to 1.16.8

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Moisture Filters (v1.16.8)

This is a security fix release and is recommended for all users. It resolves two p2p vulnerabilities reported through the Ethereum Foundation bug bounty program.

As with all our previous releases, you can find the:

Pre-built binaries for all platforms on our downloads page.

Docker images published under ethereum/client-go (use "stable" tag).

Ubuntu packages in our Launchpad PPA repository.

macOS packages in our Homebrew Tap repository.

Ballistic Drift Stabilizer (v1.16.7)

This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.

This release enables the Fusaka hardfork on Ethereum mainnet.

The Fusaka fork is scheduled to occur at 2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.

This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.

BPO1 on2025-12-09

BPO2 on 2026-01-07

Fusaka

Set mainnet timestamps for Osaka (#33063)

Enable Fusaka for geth --dev mode (#32917)

RPC

Add eth_sendRawTransactionSync which waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)

Add support for eth_simulateV1 in ethclient (#32856)

Fix for an issue that might crash debug_traceCall (#33015)

Fix for an issuer where local transactions were not persisted to the journal (#32921)

Core

Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)

Add geth --genesis flag as an alternative to running geth init genesis.json (#32844)

Fix for receipt insertion during ERA file import. (#32934)

Work on getting the trie node history in order to serve historical eth_getProof request with the new path-based archive node. (#32907, #32914, #32937)

Further work on cmd/keeper, our guest program for zkVMs (#32816)

Various optimizations (#32971, #32916, #32965, #32946)

... (truncated)

Commits

abeb78c Merge branch 'dos-fixes' into release/1.16
ce43eb9 version: release go-ethereum v1.16.8 stable
638741b crypto/ecies: use aes blocksize
fdfd123 core/txpool: drop peers on invalid KZG proofs
8ecb686 version: begin v1.16.8 release cycle
b9f3a3d Merge branch 'master' into release/1.16
07129d2 version: release go-ethereum v1.16.7 stable
653f8d4 go.mod: update to c-kzg v2.1.5 (#33093)
5b77af3 version: begin v1.16.7 release cycle
386c3de Merge branch 'master' into release/1.16
Additional commits viewable in compare view

Updates github.com/itchyny/gojq from 0.12.17 to 0.12.18

Release notes

Sourced from github.com/itchyny/gojq's releases.

Release v0.12.18

implement trimstr/1, toboolean/0 function

fix last/1 to be included in builtins/0

fix --indent 0 to preserve newlines

fix string repetition to emit error when the result is too large

increase the array index limit to 536870912 (2^29)

stop numeric normalization for concurrent execution (see 1ace748d08df)

support binding expressions with binary operators (1 + 2 as $x | -$x)

improve gojq.NewIter to be a generic function

improve logic for getting file contents on JSON parse error

improve JSON parsing to preserve the precision of floating-point numbers

improve YAML parsing performance and preserve the precision of large integers

improve performance and reduce memory allocation of long-running queries

Changelog

Sourced from github.com/itchyny/gojq's changelog.

v0.12.18 (2025-12-02)

implement trimstr/1, toboolean/0 function

fix last/1 to be included in builtins/0

fix --indent 0 to preserve newlines

fix string repetition to emit error when the result is too large

increase the array index limit to 536870912 (2^29)

stop numeric normalization for concurrent execution (see 1ace748d08df)

support binding expressions with binary operators (1 + 2 as $x | -$x)

improve gojq.NewIter to be a generic function

improve logic for getting file contents on JSON parse error

improve JSON parsing to preserve the precision of floating-point numbers

improve YAML parsing performance and preserve the precision of large integers

improve performance and reduce memory allocation of long-running queries

Commits

fa534a1 bump up version to 0.12.18
d7e1531 update CHANGELOG.md for v0.12.18
672cc79 update dependencies
2263e18 update actions/checkout to v6
5d8a53c add more tests for empty strings and NO_COLOR
97274d3 make use of cmp package for comparisons
3e31863 merge identical cases for getting operator functions
e4d456b avoid variable names that shadow built-in functions
19a3975 stop replacing capturing group syntax
5bb6d33 support binding expressions with binary operators (fix #283)
Additional commits viewable in compare view

Updates github.com/lib/pq from 1.10.9 to 1.11.1

Release notes

Sourced from github.com/lib/pq's releases.

v1.11.1

This fixes two regressions present in the v1.11.0 release:

Fix build on 32bit systems, Windows, and Plan 9 (#1253).

Named []byte types and pointers to []byte (e.g. *[]byte, json.RawMessage) would be treated as an array instead of bytea (#1252).

#1252: lib/pq#1252 #1253: lib/pq#1253

v1.11.0

This version of pq requires Go 1.21 or newer.

pq now supports only maintained PostgreSQL releases, which is PostgreSQL 14 and newer. Previously PostgreSQL 8.4 and newer were supported.

Features
The pq.Error.Error() text includes the position of the error (if reported by PostgreSQL) and SQLSTATE code (#1219, #1224):
pq: column "columndoesntexist" does not exist at column 8 (42703)
pq: syntax error at or near ")" at position 2:71 (42601)
The pq.Error.ErrorWithDetail() method prints a more detailed multiline message, with the Detail, Hint, and error position (if any) (#1219):
ERROR:   syntax error at or near ")" (42601)
CONTEXT: line 12, column 1:
 10 |     name           varchar,
 11 |     version        varchar,
 12 | );
      ^
Add Config, NewConfig(), and NewConnectorConfig() to supply connection details in a more structured way (#1240).

Support hostaddr and $PGHOSTADDR (#1243).

Support multiple values in host, port, and hostaddr, which are each tried in order, or randomly if load_balance_hosts=random is set (#1246).

Support target_session_attrs connection parameter (#1246).

Support [sslnegotiation] to use SSL without negotiation (#1180).

Allow using a custom tls.Config, for example for encrypted keys (#1228).

Add PQGO_DEBUG=1 print the communication with PostgreSQL to stderr, to aid in debugging, testing, and bug reports (#1223).

Add support for NamedValueChecker interface (#1125, #1238).
Fixes

... (truncated)

Changelog

Sourced from github.com/lib/pq's changelog.

v1.11.1 (2025-01-29)

This fixes two regressions present in the v1.11.0 release:

Fix build on 32bit systems, Windows, and Plan 9 (#1253).

Named []byte types and pointers to []byte (e.g. *[]byte, json.RawMessage) would be treated as an array instead of bytea (#1252).

#1252: lib/pq#1252 #1253: lib/pq#1253

v1.11.0 (2025-01-28)

This version of pq requires Go 1.21 or newer.

pq now supports only maintained PostgreSQL releases, which is PostgreSQL 14 and newer. Previously PostgreSQL 8.4 and newer were supported.

Features
The pq.Error.Error() text includes the position of the error (if reported by PostgreSQL) and SQLSTATE code (#1219, #1224):
pq: column "columndoesntexist" does not exist at column 8 (42703)
pq: syntax error at or near ")" at position 2:71 (42601)
The pq.Error.ErrorWithDetail() method prints a more detailed multiline message, with the Detail, Hint, and error position (if any) (#1219):
ERROR:   syntax error at or near ")" (42601)
CONTEXT: line 12, column 1:
 10 |     name           varchar,
 11 |     version        varchar,
 12 | );
      ^
Add Config, NewConfig(), and NewConnectorConfig() to supply connection details in a more structured way (#1240).

Support hostaddr and $PGHOSTADDR (#1243).

Support multiple values in host, port, and hostaddr, which are each tried in order, or randomly if load_balance_hosts=random is set (#1246).

Support target_session_attrs connection parameter (#1246).

Support [sslnegotiation] to use SSL without negotiation (#1180).

... (truncated)

Commits

eec526c Release v1.11.1 (#1255)
1928a1d Fix []byte types incorrectly converted to PostgreSQL array (#1252)
9e2aa8e Run staticcheck on all GOOS/GOARCH combinations
c9320c4 Fix build on Windows and Plan9
2809526 Fix build on 32bit systems
8e88f7e Release 1.11.0
0ad3049 Handle pre-protocol errors to prevent memory exhaustion
f1fae2e Add pqtest.Fake.Close()
3815d03 Remove assumption that the auth response is AuthenticateOk
589ad43 Implement load_balance_hosts=random
Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.3 to 1.9.4

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.9.4

Notable changes

go.mod: update minimum supported go version to v1.17 sirupsen/logrus#1460

go.mod: bump up dependencies sirupsen/logrus#1460

Touch-up godoc and add "doc" links.

README: fix links, grammar, and update examples.

Add GNU/Hurd support sirupsen/logrus#1364

Add WASI wasip1 support sirupsen/logrus#1388

Remove uses of deprecated ioutil package sirupsen/logrus#1472

CI: update actions and golangci-lint sirupsen/logrus#1459

CI: remove appveyor, add macOS sirupsen/logrus#1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

Commits

b61f268 Merge pull request #1472 from goldlinker/master
15c29db refactor: replace the deprecated function in the ioutil package
cb253f3 Merge pull request #1464 from thaJeztah/touchup_godoc
29b2337 Merge pull request #1468 from thaJeztah/touchup_readme
d916819 Merge pull request #1427 from dolmen/fix-testify-usage
135e482 README: small touch-ups
2c5fa36 Merge pull request #1467 from thaJeztah/rm_old_badge
877ecec README: remove travis badge
55cf256 Merge pull request #1393 from jsoref/grammar
21bae50 Merge pull request #1426 from dolmen/testing-fix-use-of-math-rand
Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

Fix linter and allow CI to pass by @marckhouzam in spf13/cobra#2327

fix: actions/setup-go v6 by @jpmcb in spf13/cobra#2337

🔥✍🏼 Docs

Add documentation for repeated flags functionality by @rvergis in spf13/cobra#2316

🍂 Refactors

refactor: replace several vars with consts by @htoyoda18 in spf13/cobra#2328

refactor: change minUsagePadding from var to const by @ssam18 in spf13/cobra#2325

🤗 New Contributors

@rvergis made their first contribution in spf13/cobra#2316

@htoyoda18 made their first contribution in spf13/cobra#2328

@ssam18 made their first contribution in spf13/cobra#2325

@dims made their first contribution in spf13/cobra#2336

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

88b30ab chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)
346d408 fix: actions/setup-go v6 (#2337)
fc81d20 refactor: change minUsagePadding from var to const (#2325)
117698a refactor: replace several vars with consts (#2328)
e2dd29d Add documentation for repeated flags functionality (#2316)
0629892 Fix linter (#2327)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/attestantio/go-eth2-client](https://github.com/attestantio/go-eth2-client) | `0.27.1` | `0.28.0` | | [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.16.5` | `1.16.8` | | [github.com/itchyny/gojq](https://github.com/itchyny/gojq) | `0.12.17` | `0.12.18` | | [github.com/lib/pq](https://github.com/lib/pq) | `1.10.9` | `1.11.1` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.3` | `1.9.4` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` | Updates `github.com/attestantio/go-eth2-client` from 0.27.1 to 0.28.0 - [Changelog](https://github.com/attestantio/go-eth2-client/blob/master/CHANGELOG.md) - [Commits](attestantio/go-eth2-client@v0.27.1...v0.28.0) Updates `github.com/ethereum/go-ethereum` from 1.16.5 to 1.16.8 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.16.5...v1.16.8) Updates `github.com/itchyny/gojq` from 0.12.17 to 0.12.18 - [Release notes](https://github.com/itchyny/gojq/releases) - [Changelog](https://github.com/itchyny/gojq/blob/main/CHANGELOG.md) - [Commits](itchyny/gojq@v0.12.17...v0.12.18) Updates `github.com/lib/pq` from 1.10.9 to 1.11.1 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.10.9...v1.11.1) Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.9.3...v1.9.4) Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.10.1...v1.10.2) --- updated-dependencies: - dependency-name: github.com/attestantio/go-eth2-client dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/ethereum/go-ethereum dependency-version: 1.16.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/itchyny/gojq dependency-version: 0.12.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/lib/pq dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/sirupsen/logrus dependency-version: 1.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Feb 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group with 6 updates #138

Bump the dependencies group with 6 updates #138

Uh oh!

dependabot bot commented on behalf of github Feb 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the dependencies group with 6 updates #138

Are you sure you want to change the base?

Bump the dependencies group with 6 updates #138

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 9, 2026

Moisture Filters (v1.16.8)

Ballistic Drift Stabilizer (v1.16.7)

Fusaka

RPC

Core

Release v0.12.18

v0.12.18 (2025-12-02)

v1.11.1

v1.11.0

Features

Fixes

v1.11.1 (2025-01-29)

v1.11.0 (2025-01-28)

Features

v1.9.4

Notable changes

v1.10.2

🔧 Dependencies

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants