Skip to content

chore(deps): bump the go-updates group with 12 updates #19190

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 3 commits into from
Closed

chore(deps): bump the go-updates group with 12 updates #19190

dependabot wants to merge 3 commits into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2025

Bumps the go-updates group with 12 updates:

Package From To
github.com/buildkite/terminal-to-html/v3 3.16.4 3.16.8
github.com/decred/dcrd/dcrec/secp256k1/v4 4.3.0 4.4.0
github.com/go-git/go-git/v5 5.13.2 5.14.0
github.com/labstack/echo-contrib 0.17.2 0.17.3
github.com/labstack/echo-jwt/v4 4.3.0 4.3.1
github.com/pressly/goose/v3 3.24.1 3.24.2
github.com/prometheus/client_golang 1.20.5 1.21.1
github.com/prysmaticlabs/prysm/v5 5.3.0 5.3.2
github.com/testcontainers/testcontainers-go 0.35.0 0.36.0
github.com/urfave/cli/v2 2.27.5 2.27.6
golang.org/x/exp 0.0.0-20250218142911-aa4b98e5adaa 0.0.0-20250305212735-054e65f0b394
golang.org/x/sync 0.11.0 0.12.0

Updates github.com/buildkite/terminal-to-html/v3 from 3.16.4 to 3.16.8

Release notes

Sourced from github.com/buildkite/terminal-to-html/v3's releases.

v3.16.8: The Club 🐦‍⬛

v3.16.8 (2025-03-25)

Full Changelog

Changed

v3.16.7: Accounting+ 🍎

Fixed

Added

Dependency updates

Full Changelog: buildkite/terminal-to-html@v3.16.6...v3.16.7

v3.16.6: Accounting 🔥

v3.16.6 (2025-02-18)

Full Changelog

Fixed

Dependency updates

Commits
  • 536b027 Merge pull request #223 from buildkite/release-v3.16.8
  • 8df8a01 Bump version to v3.16.8
  • 96ca610 Merge pull request #222 from buildkite/dependabot/docker/docker/library/golan...
  • 4416e0b Bump docker/library/golang from fa145a3 to 52ff1b3
  • f97fd35 Merge pull request #220 from buildkite/dependabot/docker/docker/library/golan...
  • 0fb30d0 Bump docker/library/golang from c5adecd to fa145a3
  • 3d17eea Merge pull request #218 from buildkite/dependabot/go_modules/golang.org/x/sys...
  • cdbfadb Bump golang.org/x/sys from 0.30.0 to 0.31.0
  • fe97533 Merge pull request #217 from buildkite/dependabot/docker/docker/library/golan...
  • f260c0d Bump docker/library/golang from 1.24.0 to 1.24.1
  • Additional commits viewable in compare view

Updates github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0

Commits
  • f98d08e secp256k1: Prepare v4.4.0.
  • cb51153 mixing: Prepare v0.5.0.
  • 35c5572 crypto/rand: Prepare v1.0.1.
  • 1ddfc95 mixclient: Wait for runs to finish before closing client
  • b77edc3 mixclient: Wait for KEs from all attempted sessions
  • 921b7c3 docs: Update README.md to required Go 1.23/1.24.
  • bcb663b build: Test against Go 1.24.
  • 53648fb build: Update golangci-lint to v1.64.5.
  • ecc32f7 certgen: Use t.TempDir in tests.
  • a746655 build: Update to latest action versions.
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.13.2 to 5.14.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.14.0

What's Changed

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/[email protected] which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

Commits

Updates github.com/labstack/echo-contrib from 0.17.2 to 0.17.3

Release notes

Sourced from github.com/labstack/echo-contrib's releases.

v0.17.3

What's Changed

New Contributors

Full Changelog: labstack/echo-contrib@v0.17.2...v0.17.3

Commits

Updates github.com/labstack/echo-jwt/v4 from 4.3.0 to 4.3.1

Release notes

Sourced from github.com/labstack/echo-jwt/v4's releases.

v4.3.1

Security

Full Changelog: labstack/echo-jwt@v4.3.0...v4.3.1

Changelog

Sourced from github.com/labstack/echo-jwt/v4's changelog.

v4.3.1 - 2025-03-22

Security

Commits

Updates github.com/pressly/goose/v3 from 3.24.1 to 3.24.2

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.24.2

What's Changed

  • Add TableExists table existence check for the mysql dialect (#895)
  • Upgrade minimum Go version to 1.23
  • Various dependency updates

New Contributors

Full Changelog: pressly/goose@v3.24.1...v3.24.2

Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.24.2]

  • Add TableExists table existence check for the mysql dialect (#895)
  • Upgrade minimum Go version to 1.23
  • Various dependency updates
Commits
  • b63ff99 Upgrade integration deps
  • 9b2ef34 Upgrade go deps and bump minimum version to Go 1.23 (#931)
  • da6d92e Update CHANGELOG.md (#930)
  • a31731d Upgrade go deps (#927)
  • 99d73b7 Upgrade golangci-lint (#928)
  • ed6d53e build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 in /intern...
  • e9543c6 build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#925)
  • 6a70e74 chore: upgrade go deps and bump min version to go1.22 (#909)
  • d4c1cff chore: skip flaky Starrocks integration test
  • fa06062 fix: return joined err when try to get migrations list (#862)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.20.5 to 1.21.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.21.1 / 2025-03-04

This release addresses a performance regression introduced in #1661 -- thanks to all who reported this quickly: @​chlunde, @​dethi, @​aaronbee @​tsuna @​kakkoyun 💪🏽. This patch release also fixes the iOS build.

We will be hardening the release process even further (#1759, #1761) to prevent this in future, sorry for the inconvenience!

The high concurrency optimization is planned to be eventually reintroduced, however in a much safer manner, potentially in a separate API.

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low concurrency cases #1757
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags. #1758

Full Changelog: prometheus/client_golang@v1.21.0...v1.21.1

v1.21.0 / 2025-02-19

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang (and depend on the strict, legacy validation for the label names). New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function. ⚠️

  • [BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583
  • [BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687
  • [PERF] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665
  • [PERF] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661
  • [CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712
  • [CHANGE] Add support for Go 1.23. #1602
  • [FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715
  • [FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513
  • [FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408
  • [FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.21.1 / 2025-03-04

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

  • [BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583
  • [BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687
  • [ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665
  • [ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661
  • [CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712
  • [CHANGE] Add support for Go 1.23. #1602
  • [FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715
  • [FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513
  • [FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408
  • [FEATURE] prometheus: Add NewConstNativeHistogram function. #1654
Commits

Updates github.com/prysmaticlabs/prysm/v5 from 5.3.0 to 5.3.2

Release notes

Sourced from github.com/prysmaticlabs/prysm/v5's releases.

v5.3.2

v5.3.2 - 2025-03-25

This release introduces support for the Hoodi testnet.

Release highlights:

  • Ability to run the node on the Hoodi tesnet. See https://blog.ethereum.org/2025/03/18/hoodi-holesky for more information about Hoodi.
  • A new feature that allows treat certain blocks as invalid. This is especially useful when the network is split, allowing the node to discontinue following unwanted forks.

Testnet operators are required to update to this release. Without this release you will be unable to run the node on the Hoodi testnet.

Mainnet operators are recommended to update to this release at their regular cadence.

Added

  • enable SSZ for builder API calls. [PR]
  • Add Hoodi testnet flag --hoodi to specify Hoodi testnet config and bootnodes. [PR]
  • block_gossip topic support to the beacon api event stream. [PR]
  • Added a static analyzer to discourage use of panic() in Prysm. [PR]
  • Add a feature flag --blacklist-roots to allow the node to specify blocks that will be treated as invalid. [PR]

Changed

  • changed request object for POST /eth/v1/beacon/states/head/validators to omit the field if empty for satisfying other clients. [PR]
  • Update spec test to v1.5.0-beta.3. [PR]
  • Update Gossip and RPC message limits to comply with the spec. [PR]
  • Return 404 instead of 500 from API when when a blob for a requested index is not found. [PR]
  • Save Electra orphaned attestations into attestations pool's block attestations. [PR]
  • Removed redundant string conversion in BeaconDbStater.State to improve code clarity and maintainability. [PR]

Fixed

  • Update seen unaggregated att cache to properly handle Electra attestations. [PR]
  • cosmetic fix for calling /prysm/validators/performance when connecting to non prysm beacon nodes and removing the 404 error log. [PR]
  • Tracked validator cache: Make sure no to loose the reference. [PR]
  • Fixed proposing at genesis when starting post Bellatrix. [PR]

v5.3.1

v5.3.1 - 2025-03-13

This release is packed with critical fixes for Electra and some important fixes for mainnet too.

The release highlights include:

  • Ensure that deleting a block from the database clears its entry in the slot->root db index. This issue was causing some operators to have a bricked database, requiring a full resync. [PR]
  • Updated go to go1.24.0. [PR]
  • Added a feature flag to sync from an arbitrary beacon block root at startup. [PR]
  • Updated default gas limit from 30M to 36M. Override this with --suggested-gas-limit= in the validator client. [PR]

... (truncated)

Changelog

Sourced from github.com/prysmaticlabs/prysm/v5's changelog.

v5.3.2 - 2025-03-25

This release introduces support for the Hoodi testnet.

Release highlights:

  • Ability to run the node on the Hoodi tesnet. See https://blog.ethereum.org/2025/03/18/hoodi-holesky for more information about Hoodi.
  • A new feature that allows treat certain blocks as invalid. This is especially useful when the network is split, allowing the node to discontinue following unwanted forks.

Testnet operators are required to update to this release. Without this release you will be unable to run the node on the Hoodi testnet.

Mainnet operators are recommended to update to this release at their regular cadence.

Added

  • enable SSZ for builder API calls. [PR]
  • Add Hoodi testnet flag --hoodi to specify Hoodi testnet config and bootnodes. [PR]
  • block_gossip topic support to the beacon api event stream. [PR]
  • Added a static analyzer to discourage use of panic() in Prysm. [PR]
  • Add a feature flag --blacklist-roots to allow the node to specify blocks that will be treated as invalid. [PR]

Changed

  • changed request object for POST /eth/v1/beacon/states/head/validators to omit the field if empty for satisfying other clients. [PR]
  • Update spec test to v1.5.0-beta.3. [PR]
  • Update Gossip and RPC message limits to comply with the spec. [PR]
  • Return 404 instead of 500 from API when when a blob for a requested index is not found. [PR]
  • Save Electra orphaned attestations into attestations pool's block attestations. [PR]
  • Removed redundant string conversion in BeaconDbStater.State to improve code clarity and maintainability. [PR]

Fixed

  • Update seen unaggregated att cache to properly handle Electra attestations. [PR]
  • cosmetic fix for calling /prysm/validators/performance when connecting to non prysm beacon nodes and removing the 404 error log. [PR]
  • Tracked validator cache: Make sure no to loose the reference. [PR]
  • Fixed proposing at genesis when starting post Bellatrix. [PR]

v5.3.1 - 2025-03-13

This release is packed with critical fixes for Electra and some important fixes for mainnet too.

The release highlights include:

  • Ensure that deleting a block from the database clears its entry in the slot->root db index. This issue was causing some operators to have a bricked database, requiring a full resync. [PR]
  • Updated go to go1.24.0. [PR]
  • Added a feature flag to sync from an arbitrary beacon block root at startup. [PR]
  • Updated default gas limit from 30M to 36M. Override this with --suggested-gas-limit= in the validator client. [PR]

Known issues in Electra:

... (truncated)

Commits

Updates github.com/testcontainers/testcontainers-go from 0.35.0 to 0.36.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.36.0

What's Changed

⚠️ Breaking Changes

  • feat(azure)!: add Azurite, EventHubs and ServiceBus in the new Azure module, deprecating the old Azurite module (#3008) @​mdelapenya

Users of the old Azurite module must update their code to use the new Azure module instead, which contains the same functionality under the azurite sub-package. We took this opportunity to remove the unnecessarily exported Settings field from the Azurite container type, so users of the Azurite container type must update their code to simply do not use that field.

  • chore(deps)!: bump github.com/docker/docker from 27.1.1+incompatible to 28.0.1+incompatible (#3017) @dependabot[bot]

Bumping the Docker package to a newer major version came with lots of benefits, but also some breaking changes. For that reason, users of the following container methods and types must update their code to use the new types and methods instead:

  • Container.Inspect: the return type has been changed from types.ContainerJSON to container.InspectResponse.
  • Container.State: the return type has been changed from types.ContainerState to container.State.
  • DockerProvider.ContainerFromType: the method signature has been changed to accept a container.Summary instead of a types.Container. At the same time, if consuming Docker types or methods, users must update their code to use the new types and methods instead. As a good rule of thumb, users of the "github.com/docker/docker/api/types" package must update their code to use "github.com/docker/docker/api/types/container" instead.

Users of the deprecated DockerCompose type from the compose module must update their code to use DockerComposer instead. The former unexported dockerCompose type has been renamed to DockerCompose. This breaking change was done because returning an un-exported type from a constructor function limits the flexibility and usability of the returned instance. Callers could use the exported methods, but could not declare variables of that type, pass instances to other functions, or embed them in structs without exposing the constructor itself. This breaking change was needed to improve the usability of the compose module.

Users of the testcontainers.Logging variable and the testcontainers.TestLogger function must update their code to use the new log.Default() logger instance and the log.TestLogger() function instead, and users of the testcontainers.Logger interface must update their code to use the new log.Logger interface instead. The new log package allows users to set a custom logger instance calling the log.SetDefault(l log.Logger) function. This breaking change was needed to improve the usability of the logging functionality when using the testcontainers package.

Users of the NATS module and the ConnectionString type must remove the variadic arguments from the ConnectionString method. This breaking change was needed because those arguments weren't in use.

We fixed a typo in the exported field of the ContainerRequest struct, so users of the EnpointSettingsModifier type must update their code to use the EndpointSettingsModifier type instead.

🔒 Security

🚀 Features

... (truncated)

Commits
  • a0e3b71 chore: use new version (v0.36.0) in modules and examples
  • 3298e9a chore: dockerise docs build (#3060)
  • 5334660 chore(deps): bump golang.org/x/net from 0.23.0 to 0.36.0 in /modules/dynamodb...
  • 82c37e2 chore(deps): bump github.com/magiconair/properties from 1.8.7 to 1.8.9 (#3057)
  • 615aa5d chore(deps): bump golangci/golangci-lint-action from 6.3.0 to 6.5.2 (#3052)
  • bdbdf3e chore(deps): bump golang.org/x/sys from 0.28.0 to 0.31.0 (#3056)
  • 4bfd24c chore(deps): bump actions/setup-go from 5.3.0 to 5.4.0 (#3054)
  • 6ab30fe chore(deps): bump golang.org/x/net in /modules/scylladb (#3058)
  • 802d143 chore(deps): bump github/codeql-action from 3.28.11 to 3.28.12 (#3053)
  • b88be99 chore(deps): bump golang.org/x/net in /modules/databend (#3055)
  • Additional commits viewable in compare view

Updates github.com/urfave/cli/v2 from 2.27.5 to 2.27.6

Release notes

Sourced from github.com/urfave/cli/v2's releases.

v2.27.6

What's Changed

Full Changelog: urfave/cli@v2.27.5...v2.27.6

Commits
  • 9d76d15 Merge pull request #2070 from dearchap/issue_2069
  • 4abc9c3 Fix:(issue_2069) Add sep for string slice
  • 3b17080 Merge pull request #2015 from urfave/update_docs_v2
  • 1e15e30 Update cli.yml
  • 50bdebf Merge pull request #1986 from urfave/v2-use-usage-template-in-subcommand-help
  • ba8fc3d Use usage template in subcommand help
  • See full diff in compare view

Updates golang.org/x/exp from 0.0.0-20250218142911-aa4b98e5adaa to 0.0.0-20250305212735-054e65f0b394

Commits

Updates golang.org/x/sync from 0.11.0 to 0.12.0

Commits
  • b637f27 errgroup: drop support for Go versions before 1.20
  • 960bf1f all: upgrade go directive to at least 1.23.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-updates group with 12 updates
6efdbca 
Bumps the go-updates group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/buildkite/terminal-to-html/v3](https://github.com/buildkite/terminal-to-html) | `3.16.4` | `3.16.8` |
| [github.com/decred/dcrd/dcrec/secp256k1/v4](https://github.com/decred/dcrd) | `4.3.0` | `4.4.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.2` | `5.14.0` |
| [github.com/labstack/echo-contrib](https://github.com/labstack/echo-contrib) | `0.17.2` | `0.17.3` |
| [github.com/labstack/echo-jwt/v4](https://github.com/labstack/echo-jwt) | `4.3.0` | `4.3.1` |
| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.24.1` | `3.24.2` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.21.1` |
| [github.com/prysmaticlabs/prysm/v5](https://github.com/prysmaticlabs/prysm) | `5.3.0` | `5.3.2` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.35.0` | `0.36.0` |
| [github.com/urfave/cli/v2](https://github.com/urfave/cli) | `2.27.5` | `2.27.6` |
| [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20250218142911-aa4b98e5adaa` | `0.0.0-20250305212735-054e65f0b394` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.11.0` | `0.12.0` |


Updates `github.com/buildkite/terminal-to-html/v3` from 3.16.4 to 3.16.8
- [Release notes](https://github.com/buildkite/terminal-to-html/releases)
- [Commits](buildkite/terminal-to-html@v3.16.4...v3.16.8)

Updates `github.com/decred/dcrd/dcrec/secp256k1/v4` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/decred/dcrd/releases)
- [Changelog](https://github.com/decred/dcrd/blob/master/CHANGES)
- [Commits](decred/dcrd@dcrec/secp256k1/v4.3.0...dcrec/secp256k1/v4.4.0)

Updates `github.com/go-git/go-git/v5` from 5.13.2 to 5.14.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.13.2...v5.14.0)

Updates `github.com/labstack/echo-contrib` from 0.17.2 to 0.17.3
- [Release notes](https://github.com/labstack/echo-contrib/releases)
- [Commits](labstack/echo-contrib@v0.17.2...v0.17.3)

Updates `github.com/labstack/echo-jwt/v4` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/labstack/echo-jwt/releases)
- [Changelog](https://github.com/labstack/echo-jwt/blob/main/CHANGELOG.md)
- [Commits](labstack/echo-jwt@v4.3.0...v4.3.1)

Updates `github.com/pressly/goose/v3` from 3.24.1 to 3.24.2
- [Release notes](https://github.com/pressly/goose/releases)
- [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md)
- [Commits](pressly/goose@v3.24.1...v3.24.2)

Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.21.1
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.20.5...v1.21.1)

Updates `github.com/prysmaticlabs/prysm/v5` from 5.3.0 to 5.3.2
- [Release notes](https://github.com/prysmaticlabs/prysm/releases)
- [Changelog](https://github.com/prysmaticlabs/prysm/blob/develop/CHANGELOG.md)
- [Commits](OffchainLabs/prysm@v5.3.0...v5.3.2)

Updates `github.com/testcontainers/testcontainers-go` from 0.35.0 to 0.36.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.35.0...v0.36.0)

Updates `github.com/urfave/cli/v2` from 2.27.5 to 2.27.6
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](urfave/cli@v2.27.5...v2.27.6)

Updates `golang.org/x/exp` from 0.0.0-20250218142911-aa4b98e5adaa to 0.0.0-20250305212735-054e65f0b394
- [Commits](https://github.com/golang/exp/commits)

Updates `golang.org/x/sync` from 0.11.0 to 0.12.0
- [Commits](golang/sync@v0.11.0...v0.12.0)

---
updated-dependencies:
- dependency-name: github.com/buildkite/terminal-to-html/v3
  dependency-version: 3.16.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-updates
- dependency-name: github.com/decred/dcrd/dcrec/secp256k1/v4
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-updates
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-updates
- dependency-name: github.com/labstack/echo-contrib
  dependency-version: 0.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-updates
- dependency-name: github.com/labstack/echo-jwt/v4
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-updates
- dependency-name: github.com/pressly/goose/v3
  dependency-version: 3.24.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-updates
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-updates
- dependency-name: github.com/prysmaticlabs/prysm/v5
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-updates
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-updates
- dependency-name: github.com/urfave/cli/v2
  dependency-version: 2.27.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-updates
- dependency-name: golang.org/x/exp
  dependency-version: 0.0.0-20250305212735-054e65f0b394
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-updates
- dependency-name: golang.org/x/sync
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested review from RogerLamTd and davidtaikocha April 1, 2025 08:59
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 1, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 16, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/go_modules/go-updates-337a99b9fe branch April 16, 2025 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

@davidtaikocha davidtaikocha Awaiting requested review from davidtaikocha

@RogerLamTd RogerLamTd Awaiting requested review from RogerLamTd

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@davidtaikocha