Skip to content

Bump the gomod group across 1 directory with 15 updates - #361

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-6bbec10df2
Open

Bump the gomod group across 1 directory with 15 updates#361
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-6bbec10df2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 10 updates in the / directory:

Package From To
blockwatch.cc/tzgo 1.17.4 1.18.4
github.com/blinklabs-io/bursa 0.7.2 0.16.0
github.com/briandowns/spinner 1.23.0 1.23.2
github.com/google/go-containerregistry 0.17.0 0.21.7
github.com/hyperledger-firefly/common 1.6.3 1.6.5
github.com/jarcoal/httpmock 1.3.1 1.4.1
github.com/mattn/go-isatty 0.0.20 0.0.24
github.com/miracl/conflate 1.3.2 1.3.4
github.com/otiai10/copy 1.7.0 1.14.1
github.com/spf13/viper 1.18.2 1.21.0

Updates blockwatch.cc/tzgo from 1.17.4 to 1.18.4

Changelog

Sourced from blockwatch.cc/tzgo's changelog.

v1.18.4

  • 2dc9fa0 | rpc: add missing balance update fields

v1.18.3

  • 291607c | Simplify micheline json decoder
  • 586f1bc | Add json tags to proposal model
  • 2205ca9 | Fix links to dev tools
  • b82e574 | rpc: handle empty block metadata level

v1.18.2

  • 82d9374 | Fix genesis info struct

v1.18.1 (broken)

  • 56291ca | Add genesis block helper

v1.18.0

  • Oxford protocol support
  • rpc: add adaptive issuance vote to block models
  • rpc: extend balance updates with staker info
  • rpc: add issuance rpc
  • tezos: add oxfordnet hashes and setup
  • codec: add staking operation codecs
  • codec: fix block encoding
  • codec: support block signing and block hash calculation
  • tzcompose: add oxford staking tasks
  • tzcompose: add double bake task
Commits
  • 976074d Update changelog
  • 2dc9fa0 rpc: add missing balance update fields
  • 20047e6 Re-add param json marshaler
  • 291607c Simplify micheline json decoder
  • 0c10b16 Disable custom parameter marshaler
  • 586f1bc Add json tags to proposal model
  • 2205ca9 Fix links to dev tools
  • b82e574 rpc: handle empty block metadata level
  • 82d9374 Fix genesis info struct
  • 56291ca Add genesis block helper
  • Additional commits viewable in compare view

Updates github.com/blinklabs-io/bursa from 0.7.2 to 0.16.0

Release notes

Sourced from github.com/blinklabs-io/bursa's releases.

v0.16.0

What's Changed

Full Changelog: blinklabs-io/bursa@v0.15.0...v0.16.0

v0.15.0

What's Changed

Full Changelog: blinklabs-io/bursa@v0.14.0...v0.15.0

v0.14.0

What's Changed

Full Changelog: blinklabs-io/bursa@v0.13.0...v0.14.0

v0.13.0

What's Changed

... (truncated)

Changelog

Sourced from github.com/blinklabs-io/bursa's changelog.

v0.16.0 - certificate generation and key derivation

  • Date: 2026-02-28
  • Version: 0.16.0

Summary

This release includes CLI support for generating stake and Conway governance certificates and updates wallet root key derivation to Cardano CIP-3 Icarus, along with security and dependency updates.

New Features

  • Added CLI support for generating stake and Conway governance certificates.

Breaking Changes

  • Updated wallet root key derivation to follow Cardano CIP-3 Icarus (PBKDF2), which requires regenerating derived keys and updating any stored test vectors.

Security

  • Updated cryptography and secret-management dependencies including filippo.io/edwards25519 to v1.2.0, github.com/cloudflare/circl to v1.6.3, github.com/ethereum/go-ethereum to v1.17.0, and sops to v3.12.1.

Additional Changes

  • Updated Go modules including gouroboros, plutigo, and grpc, bumped GitHub Actions docker/build-push-action to v6.19.2, and updated the blinklabs-io/go Docker base image to 1.25.7-1.
  • Updated lint-suppression annotations for selected security checks and updated .gitignore to exclude .worktrees/.
Commits
  • 9cead9e chore(deps): Bump filippo.io/edwards25519 from 1.1.0 to 1.2.0 (#441)
  • 6f8c62c chore(deps): Bump github.com/getsops/sops/v3 from 3.11.0 to 3.12.1 (#439)
  • f8a1e76 chore(deps): Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#442)
  • 4a9f9e2 chore(deps): Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#438)
  • e6c7609 chore(deps): Bump github.com/ethereum/go-ethereum from 1.16.8 to 1.17.0 (#437)
  • 5a0b5ac fix(bip32): use correct root derivation method (#444)
  • ae7e32b fix(lint): appease golangci-lint (#443)
  • 9ccbcd6 chore(deps): Bump github.com/blinklabs-io/gouroboros (#436)
  • 28c7ff0 chore(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.1 (#435)
  • 14ba6d8 chore(deps): Bump docker/build-push-action from 6.18.0 to 6.19.2 (#434)
  • Additional commits viewable in compare view

Updates github.com/briandowns/spinner from 1.23.0 to 1.23.2

Release notes

Sourced from github.com/briandowns/spinner's releases.

v1.23.2

No release notes provided.

v1.23.1

What's Changed

New Contributors

Full Changelog: briandowns/spinner@v1.23.0...v1.23.1

Commits

Updates github.com/btcsuite/btcd/btcec/v2 from 2.3.5 to 2.3.6

Commits
  • 442ef28 Merge pull request #2443 from sputn1ck/musig2_sign_with_agg_nonce
  • 21eb99e musig2: add combinedNonce getter
  • 8f54cc6 musig2: add Session.RegisterCombinedNonce
  • b7d0706 Merge pull request #2430 from Roasbeef/v-0-25-0-rc1
  • 31a762b build: bump version to v0.25.0-beta.rc1
  • e8097a1 Merge pull request #2410 from mohamedawnallah/fallback-to-GOPATH-bin-dir
  • 29f4215 Makefile+workflows: fallback to GOPATH/bin on non-existent GOBIN
  • a4ddae2 Merge pull request #2409 from gosunuts/fix/dockerfile-go-version
  • 2577dd3 Dockerfile: update go base image
  • c002ea3 Merge pull request #2320 from gosunuts/feature/fix-ci
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.17.0 to 0.21.7

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.7

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

v0.21.6

What's Changed

... (truncated)

Commits
  • c68d899 Bump go version to 1.26.4 (#2350)
  • da61d86 transport: do not re-attach bearer token after cross-host redirect (#2349)
  • 09fe1e5 fix(tarball): normalize paths when matching files (#2334)
  • 5baa399 build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)
  • 97a8a17 fix(transport): apply refreshed bearer token after cross-host redirect (#2337)
  • e963497 internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)
  • 02649ea fix: prevent SSRF in google.List() pagination (#2332)
  • 7204b40 build(deps): bump the actions group across 1 directory with 2 updates (#2344)
  • 4cfaa93 build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)
  • 6849394 pkg/registry: export RedirectError (#2177)
  • Additional commits viewable in compare view

Updates github.com/hyperledger-firefly/common from 1.6.3 to 1.6.5

Release notes

Sourced from github.com/hyperledger-firefly/common's releases.

v1.6.5

What's Changed

New Contributors

Full Changelog: hyperledger-firefly/common@v1.6.4...v1.6.5

v1.6.4

What's Changed

New Contributors

Full Changelog: hyperledger-firefly/common@v1.6.3...v1.6.4

Commits
  • 4cb9150 Merge pull request #234 from hyperledger-firefly/dependabot/github_actions/gi...
  • ddbf4a9 Bump the github-actions group across 1 directory with 2 updates
  • c959985 Merge pull request #237 from dan-r/main
  • f835aad Update package references for histogram
  • 3a6c585 Merge pull request #202 from Apostlex0/feature/chart-histogram
  • db56dd8 Merge pull request #235 from dan-r/main
  • 3dc0049 Revert #233
  • 12f0ed8 Merge pull request #231 from hyperledger-firefly/dependabot/go_modules/go_mod...
  • 9f1b9cf Merge pull request #233 from kaleido-io/update-ffi-with-topic
  • c9db031 Merge pull request #232 from hyperledger-firefly/dependabot-grouping
  • Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.3.1 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: jarcoal/httpmock@v1.4.0...v1.4.1

v1.4.0

What's Changed

New Contributors

Full Changelog: jarcoal/httpmock@v1.3.1...v1.4.0

Commits
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • 7d2a02f docs: clarify ConnectionFailure doc
  • fad35ec docs: README typo
  • dc21346 test: use golangci-lint v2.0.2
  • 8cdfbf1 docs: fix README build status badge
  • 2225990 feat: enhance Activate and add DeactivateNonDefault functions (#161)
  • ee13561 docs: update resty example (#160)
  • 1ebd59a Make http.Response.Status respect RFC 2616, like in Go stdlib.
  • Additional commits viewable in compare view

Updates github.com/mattn/go-isatty from 0.0.20 to 0.0.24

Commits
  • c44dc0b Use TIOCGWINSZ instead of TCGETS to detect terminals (#97)
  • 4bc9b75 Lower go directive to 1.20 for Windows 7 users (#94)
  • 4e061da add stub for haiku os (#93)
  • 9a68506 Fix isCygwinPipeName to accept Windows 7 trailing suffix (#90)
  • 4237fb1 Update Go test matrix to current versions (1.24-1.26)
  • 433c12b Update GitHub Actions to latest versions
  • 1cf5589 Add wasip1 and wasip2 to build constraints in isatty_others.go
  • 1237245 Update dependencies: go 1.15 -> 1.21, golang.org/x/sys v0.6.0 -> v0.28.0
  • ac9c88d Fix typo in comment: undocomented -> undocumented
  • 8b7124e Add availability check for NtQueryObject in init
  • Additional commits viewable in compare view

Updates github.com/miracl/conflate from 1.3.2 to 1.3.4

Commits

Updates github.com/otiai10/copy from 1.7.0 to 1.14.1

Release notes

Sourced from github.com/otiai10/copy's releases.

Concurrency Option

No release notes provided.

Add OnError option

so that users can suppress specific errors.

Commits
  • 5ef5923 Revert "CopyMethod" since it's not ready
  • 49b0b59 Merge pull request #164 from eth-p/feat-copymethod-api
  • f530620 ci: Allow triggering Go workflow manually
  • b4dd789 refactor: Split common code out of CopyBytes
  • 9205813 feat: Add FileCopyMethod option / API
  • 2f93b8f Merge pull request #159 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • 87072f3 Bump golang.org/x/sys from 0.23.0 to 0.24.0
  • d0690cb Merge pull request #158 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • b87119d Bump golang.org/x/sys from 0.22.0 to 0.23.0
  • 355527c Merge pull request #157 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.8.0 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

... (truncated)

Commits

Updates github.com/spf13/viper from 1.18.2 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Oth...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 24, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 24, 2026 03:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 24, 2026
Bumps the gomod group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [blockwatch.cc/tzgo](https://github.com/blockwatch-cc/tzgo) | `1.17.4` | `1.18.4` |
| [github.com/blinklabs-io/bursa](https://github.com/blinklabs-io/bursa) | `0.7.2` | `0.16.0` |
| [github.com/briandowns/spinner](https://github.com/briandowns/spinner) | `1.23.0` | `1.23.2` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.17.0` | `0.21.7` |
| [github.com/hyperledger-firefly/common](https://github.com/hyperledger-firefly/common) | `1.6.3` | `1.6.5` |
| [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) | `1.3.1` | `1.4.1` |
| [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) | `0.0.20` | `0.0.24` |
| [github.com/miracl/conflate](https://github.com/miracl/conflate) | `1.3.2` | `1.3.4` |
| [github.com/otiai10/copy](https://github.com/otiai10/copy) | `1.7.0` | `1.14.1` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.18.2` | `1.21.0` |



Updates `blockwatch.cc/tzgo` from 1.17.4 to 1.18.4
- [Changelog](https://github.com/blockwatch-cc/tzgo/blob/master/CHANGELOG.md)
- [Commits](blockwatch-cc/tzgo@v1.17.4...v1.18.4)

Updates `github.com/blinklabs-io/bursa` from 0.7.2 to 0.16.0
- [Release notes](https://github.com/blinklabs-io/bursa/releases)
- [Changelog](https://github.com/blinklabs-io/bursa/blob/main/RELEASE_NOTES.md)
- [Commits](blinklabs-io/bursa@v0.7.2...v0.16.0)

Updates `github.com/briandowns/spinner` from 1.23.0 to 1.23.2
- [Release notes](https://github.com/briandowns/spinner/releases)
- [Commits](briandowns/spinner@v1.23.0...v1.23.2)

Updates `github.com/btcsuite/btcd/btcec/v2` from 2.3.5 to 2.3.6
- [Release notes](https://github.com/btcsuite/btcd/releases)
- [Changelog](https://github.com/btcsuite/btcd/blob/master/CHANGES)
- [Commits](btcsuite/btcd@btcec/v2.3.5...btcec/v2.3.6)

Updates `github.com/google/go-containerregistry` from 0.17.0 to 0.21.7
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.17.0...v0.21.7)

Updates `github.com/hyperledger-firefly/common` from 1.6.3 to 1.6.5
- [Release notes](https://github.com/hyperledger-firefly/common/releases)
- [Commits](hyperledger-firefly/common@v1.6.3...v1.6.5)

Updates `github.com/jarcoal/httpmock` from 1.3.1 to 1.4.1
- [Release notes](https://github.com/jarcoal/httpmock/releases)
- [Commits](jarcoal/httpmock@v1.3.1...v1.4.1)

Updates `github.com/mattn/go-isatty` from 0.0.20 to 0.0.24
- [Commits](mattn/go-isatty@v0.0.20...v0.0.24)

Updates `github.com/miracl/conflate` from 1.3.2 to 1.3.4
- [Release notes](https://github.com/miracl/conflate/releases)
- [Commits](miracl/conflate@v1.3.2...v1.3.4)

Updates `github.com/otiai10/copy` from 1.7.0 to 1.14.1
- [Release notes](https://github.com/otiai10/copy/releases)
- [Commits](otiai10/copy@v1.7.0...v1.14.1)

Updates `github.com/spf13/cobra` from 1.8.0 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.0...v1.10.2)

Updates `github.com/spf13/viper` from 1.18.2 to 1.21.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.18.2...v1.21.0)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.11.1)

Updates `golang.org/x/crypto` from 0.36.0 to 0.51.0
- [Commits](golang/crypto@v0.36.0...v0.51.0)

Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.3...v1.9.4)

---
updated-dependencies:
- dependency-name: blockwatch.cc/tzgo
  dependency-version: 1.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/blinklabs-io/bursa
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/briandowns/spinner
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/btcsuite/btcd/btcec/v2
  dependency-version: 2.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/hyperledger-firefly/common
  dependency-version: 1.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/jarcoal/httpmock
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/mattn/go-isatty
  dependency-version: 0.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/miracl/conflate
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/otiai10/copy
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/spf13/viper
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gomod-6bbec10df2 branch from e705738 to 2729a60 Compare July 31, 2026 03:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants