Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

build(deps): Bump the all-go group across 5 directories with 5 updates

Open
Number: #2999
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 2
Created: January 19, 2026 at 10:15 PM UTC
(4 months ago)
Updated: January 20, 2026 at 07:55 AM UTC
(4 months ago)
Labels:
T:dependencies
Description:

Bumps the all-go group with 2 updates in the / directory: github.com/celestiaorg/go-header and github.com/libp2p/go-libp2p-kad-dht.
Bumps the all-go group with 1 update in the /apps/evm directory: github.com/celestiaorg/go-header.
Bumps the all-go group with 1 update in the /apps/testapp directory: github.com/celestiaorg/go-header.
Bumps the all-go group with 2 updates in the /execution/grpc directory: golang.org/x/net and google.golang.org/protobuf.
Bumps the all-go group with 1 update in the /test/e2e directory: github.com/celestiaorg/tastora.

Updates github.com/celestiaorg/go-header from 0.7.4 to 0.8.0

Release notes

Sourced from github.com/celestiaorg/go-header's releases.

v0.8.0

What's Changed

New Contributors

Full Changelog: https://github.com/celestiaorg/go-header/compare/v0.7.4...v0.8.0

Commits

Updates github.com/libp2p/go-libp2p-kad-dht from 0.36.0 to 0.37.0

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.37.0

[!NOTE] This release was brought to you by the Shipyard team.

Overview

This is a minor release focused on dependency updates and bug fixes. The most significant changes are:

  • Breaking change: The deprecated providers/ package has been removed. Users still importing from providers/ must migrate to records/.
  • Dependency update: Upgraded to go-libp2p v0.46.
  • Provider bug fixes: Several fixes to improve provider system stability, including proper handling of peers during keyspace exploration.

This release contains no major feature additions but improves overall reliability of the DHT implementation.

What's Changed

Full Changelog: https://github.com/libp2p/go-libp2p-kad-dht/compare/v0.36.0...v0.37.0

Commits
  • 23423e3 chore: release v0.37.0 (#1221)
  • 087717c fix(provider): keyspace exploration should succeed with a single peer (#1220)
  • 015f632 fix(provider): hold scheduleLk when reading schedule.Size() in test (#1219)
  • 6fee38f fix(provider): close worker pool before wg.Wait() (#1218)
  • e8e7cf5 chore: remove deprecated providers pkg (#1211)
  • 0ad6ca5 fix(provider): don't discard peers if they all share CPL during exploration (...
  • bb64bfa fix(records): clone addresses received from peerstore (#1210)
  • 9d7c64c tests: fix flaky TestOptimisticProvide (#1213)
  • 19925f5 tests: fix flaky TestHandleRemotePeerProtocolChanges (#1212)
  • 666af0e chore: bump go-libp2p to v0.46 (#1209)
  • See full diff in compare view

Updates github.com/celestiaorg/go-header from 0.7.5-0.20260116211018-3f61d145c9d2 to 0.8.0

Release notes

Sourced from github.com/celestiaorg/go-header's releases.

v0.8.0

What's Changed

New Contributors

Full Changelog: https://github.com/celestiaorg/go-header/compare/v0.7.4...v0.8.0

Commits

Updates github.com/celestiaorg/go-header from 0.7.5-0.20260116211018-3f61d145c9d2 to 0.8.0

Release notes

Sourced from github.com/celestiaorg/go-header's releases.

v0.8.0

What's Changed

New Contributors

Full Changelog: https://github.com/celestiaorg/go-header/compare/v0.7.4...v0.8.0

Commits

Updates golang.org/x/net from 0.47.0 to 0.49.0

Commits
  • d977772 go.mod: update golang.org/x dependencies
  • eea413e internal/http3: use go1.25 synctest.Test instead of go1.24 synctest.Run
  • 9ace223 websocket: add missing call to resp.Body.Close
  • 7d3dbb0 http2: buffer the most recently received PRIORITY_UPDATE frame
  • 35e1306 go.mod: update golang.org/x dependencies
  • 7c36036 http2, webdav, websocket: fix %q verb uses with wrong type
  • ec11ecc trace: fix data race in RenderEvents
  • bff14c5 http2: don't PING a responsive server when resetting a stream
  • 88a6421 dns/dnsmessage: avoid use of "strings" and "math" in dns/dnsmessage
  • 123d099 http2: support net/http.Transport.NewClientConn
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Updates github.com/celestiaorg/tastora from 0.8.0 to 0.9.0

Release notes

Sourced from github.com/celestiaorg/tastora's releases.

v0.9.0

What's Changed

Full Changelog: https://github.com/celestiaorg/tastora/compare/v0.8.0...v0.9.0

Commits
  • 529f7e1 chore: enable configuration of binary (#164)
  • 196802a chore: hyperlane part 6 - perform MsgRemoteTransfer (#160)
  • 749da71 chore: hyperlane support part 5 - enroll cosmos remote router (#159)
  • f0c0830 chore: enroll remote router (#158)
  • 7b769e4 chore: move internal helpers into separate util package (#162)
  • 821219d chore: hyperlane - deploy noop ism (#157)
  • 20b6e75 chore: hyperlane support part 2 - initial core and warp deployment (#156)
  • 9090e5a chore: adding hyperlane configuration types (#154)
  • 4938900 chore: add helpers to deploy parts of the stack (#155)
  • f1db2f0 chore(deps): bump golang.org/x/crypto (#152)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Package:
golang.org/x/net
Ecosystem:
go
Version Change:
0.47.0 → 0.49.0
Update Type:
Minor
Package:
google.golang.org/protobuf
Ecosystem:
go
Version Change:
1.36.10 → 1.36.11
Update Type:
Patch
Package:
github.com/celestiaorg/go-header
Ecosystem:
go
Version Change:
0.7.4 → 0.8.0
Update Type:
Minor
Package:
github.com/libp2p/go-libp2p-kad-dht
Ecosystem:
go
Version Change:
0.36.0 → 0.37.0
Update Type:
Minor
Package:
github.com/celestiaorg/tastora
Ecosystem:
go
Version Change:
0.8.0 → 0.9.0
Update Type:
Minor
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 12949265
UUID: 3831359181
Node ID: PR_kwDOFABrEc6-F_r4
Host: GitHub
Repository: evstack/ev-node