build(deps): Bump the all-go group across 5 directories with 6 updates #2738
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the all-go group with 3 updates in the / directory: [github.com/celestiaorg/go-square/v3](https://github.com/celestiaorg/go-square), [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht) and google.golang.org/protobuf. Bumps the all-go group with 2 updates in the /execution/grpc directory: google.golang.org/protobuf and [github.com/evstack/ev-node](https://github.com/evstack/ev-node). Bumps the all-go group with 2 updates in the /sequencers/single directory: google.golang.org/protobuf and [github.com/evstack/ev-node](https://github.com/evstack/ev-node). Bumps the all-go group with 2 updates in the /test/docker-e2e directory: [github.com/celestiaorg/tastora](https://github.com/celestiaorg/tastora) and [github.com/docker/docker](https://github.com/docker/docker). Bumps the all-go group with 1 update in the /test/e2e directory: [github.com/celestiaorg/tastora](https://github.com/celestiaorg/tastora). Updates `github.com/celestiaorg/go-square/v3` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/celestiaorg/go-square/releases) - [Commits](celestiaorg/go-square@v3.0.1...v3.0.2) Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.34.0 to 0.35.1 - [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases) - [Commits](libp2p/go-libp2p-kad-dht@v0.34.0...v0.35.1) Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 Updates `github.com/evstack/ev-node` from 1.0.0-beta.5 to 1.0.0-beta.6 - [Release notes](https://github.com/evstack/ev-node/releases) - [Changelog](https://github.com/evstack/ev-node/blob/main/CHANGELOG.md) - [Commits](v1.0.0-beta.5...v1.0.0-beta.6) Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 Updates `github.com/evstack/ev-node` from 1.0.0-beta.5 to 1.0.0-beta.6 - [Release notes](https://github.com/evstack/ev-node/releases) - [Changelog](https://github.com/evstack/ev-node/blob/main/CHANGELOG.md) - [Commits](v1.0.0-beta.5...v1.0.0-beta.6) Updates `github.com/celestiaorg/tastora` from 0.5.1 to 0.6.0 - [Release notes](https://github.com/celestiaorg/tastora/releases) - [Commits](celestiaorg/tastora@v0.5.1...v0.6.0) Updates `github.com/docker/docker` from 28.4.0+incompatible to 28.5.0+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v28.4.0...v28.5.0) Updates `github.com/celestiaorg/tastora` from 0.5.1 to 0.6.0 - [Release notes](https://github.com/celestiaorg/tastora/releases) - [Commits](celestiaorg/tastora@v0.5.1...v0.6.0) --- updated-dependencies: - dependency-name: github.com/celestiaorg/go-square/v3 dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/libp2p/go-libp2p-kad-dht dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/evstack/ev-node dependency-version: 1.0.0-beta.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/evstack/ev-node dependency-version: 1.0.0-beta.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/celestiaorg/tastora dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/docker/docker dependency-version: 28.5.0+incompatible dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/celestiaorg/tastora dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go ... Signed-off-by: dependabot[bot] <[email protected]>
Contributor
|
Claude finished @dependabot[bot]'s task —— View job Dependency Update Review - PR #2738SummaryThis PR updates 6 Go dependencies across 5 directories in a modular codebase. The updates include performance improvements, bug fixes, and new features. Overall assessment: APPROVE with monitoring recommendations. ✅ CI Status
📦 Dependency Updates Analysis
1. github.com/celestiaorg/go-square/v3 (v3.0.1 → v3.0.2)
2. github.com/libp2p/go-libp2p-kad-dht (v0.34.0 → v0.35.1)
|
Contributor
Dependency Update Review - PR #2738I've reviewed this Dependabot PR that updates 6 dependencies across 5 directories. Here's my assessment: ✅ Overall Assessment: APPROVEThis is a routine dependency update PR with low-risk changes. All updates are either patch or minor version bumps with no breaking changes. 📦 Dependency Changes Analysis1. github.com/celestiaorg/go-square/v3 (v3.0.1 → v3.0.2)
2. github.com/libp2p/go-libp2p-kad-dht (v0.34.0 → v0.35.1)
3. google.golang.org/protobuf (v1.36.9 → v1.36.10)
4. github.com/evstack/ev-node (v1.0.0-beta.5 → v1.0.0-beta.6)
5. github.com/celestiaorg/tastora (v0.5.1 → v0.6.0)
6. github.com/docker/docker (v28.4.0 → v28.5.0)
🔍 Code Quality & Best Practices✅ Proper Semantic Versioning: All updates follow semver conventions 🔒 Security Considerations✅ No known vulnerabilities introduced by these updates ⚡ Performance Considerations✅ Performance improvements in go-square (parallel commitment creation) 🧪 Test Coverage
📋 Recommendations
🎯 ConclusionThis is a clean, low-risk dependency update that brings performance improvements, security enhancements, and bug fixes. The changes align well with the project's modular architecture and follow Go best practices. Status: ✅ Ready to merge once CI passes Review performed by Claude Code following ev-node project conventions |
Contributor
Pull Request Review: Dependency UpdatesSummaryThis PR updates 6 Go dependencies across 5 directories. As an automated dependency update from Dependabot, this is a routine maintenance task. ✅ Code Quality & Best PracticesPositive aspects:
🔍 Dependency AnalysisMajor Updates:
Transitive Dependency Updates:Multiple indirect dependencies were also updated, including:
🐛 Potential Issues
🔒 Security Considerations✅ No immediate security concerns identified
Recommendations:
⚡ Performance Considerations✅ Positive performance impacts expected:
🧪 Test CoverageRequired testing:
Specific areas to verify:
📋 RecommendationsBefore merging:
After merging:
📚 Additional Notes
✅ Final AssessmentOverall: APPROVE with minor concerns This is a well-structured dependency update that brings performance improvements and bug fixes. The main consideration is ensuring the breaking configuration change in Risk Level: Low to Medium (due to breaking config change) Review conducted following ev-node project conventions and best practices as outlined in CLAUDE.md |
Contributor
|
The latest Buf updates on your PR. Results from workflow CI and Release / buf-check (pull_request).
|
tac0turtle
approved these changes
Oct 8, 2025
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #2738 +/- ##
==========================================
- Coverage 62.28% 62.17% -0.12%
==========================================
Files 79 79
Lines 8490 8497 +7
==========================================
- Hits 5288 5283 -5
- Misses 2711 2721 +10
- Partials 491 493 +2
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
alpe
added a commit
that referenced
this pull request
Oct 9, 2025
* main: feat(store)!: add batching for atomicity (#2746) refactor(apps): rollback cmd updates (#2744) chore: add makefile for tools (#2743) chore: fix markdown lint (#2742) build(deps): Bump the all-go group across 5 directories with 6 updates (#2738) refactor(block): improve cancellation (#2741) chore: make the prompt go oriented (#2739) perf(block): use `sync/atomic` instead of mutexes (#2735)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all-go group with 3 updates in the / directory: github.com/celestiaorg/go-square/v3, github.com/libp2p/go-libp2p-kad-dht and google.golang.org/protobuf.
Bumps the all-go group with 2 updates in the /execution/grpc directory: google.golang.org/protobuf and github.com/evstack/ev-node.
Bumps the all-go group with 2 updates in the /sequencers/single directory: google.golang.org/protobuf and github.com/evstack/ev-node.
Bumps the all-go group with 2 updates in the /test/docker-e2e directory: github.com/celestiaorg/tastora and github.com/docker/docker.
Bumps the all-go group with 1 update in the /test/e2e directory: github.com/celestiaorg/tastora.
Updates
github.com/celestiaorg/go-square/v3from 3.0.1 to 3.0.2Release notes
Sourced from github.com/celestiaorg/go-square/v3's releases.
Commits
ce051a4perf: parallelize creating commitments, use buffers (#196)Updates
github.com/libp2p/go-libp2p-kad-dhtfrom 0.34.0 to 0.35.1Release notes
Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.
... (truncated)
Commits
f67e4d8chore: release v0.35.1 (#1165)6033458feat(provider): use Trie.AddMany (#1164)89159c2fix(provider): memory usage (#1163)6e9a59cchore: release v0.35.0 (#1162)c7dddd0bump deps (#1161)861573brefactor: adjust FIND_NODE response exceptions (#1158)1386e98refactor: remove provider status command (#1157)0114a72refactor(provider): closestPeerToPrefix coverage trie (#1156)548e361fix: don't empty mapdatastore keystore on close (#1155)3dbfea9provider: default options (#1153)Updates
google.golang.org/protobuffrom 1.36.9 to 1.36.10Updates
google.golang.org/protobuffrom 1.36.9 to 1.36.10Updates
github.com/evstack/ev-nodefrom 1.0.0-beta.5 to 1.0.0-beta.6Commits
79cc094refactor(pkg/config)!: move da start height to genesis (#2727)c364b17fix(pkg/sync): fix block sync p2p for follower nodes (#2725)c045daffix(types): add timeout per request in retrieve helper (#2726)0679230fix(block/syncing): verify header data hash vs actual data hash (#2724)1917bd7refactor(block): add retries on SetFinal (#2721)bc6a0b1refactor(block): reduce max size in da submitter (#2720)a3b4b0dfix(block): halt on invalid blocks and wait on unavailable execution client (...1f3212bfix(pkg/sync): avoid pruning goheader store (#2718)94e545abuild(deps): Bump the all-go group across 6 directories with 5 updates (#2716)4f4f2c0feat(syncer): fetch from p2p and da (#2712)Updates
google.golang.org/protobuffrom 1.36.9 to 1.36.10Updates
github.com/evstack/ev-nodefrom 1.0.0-beta.5 to 1.0.0-beta.6Commits
79cc094refactor(pkg/config)!: move da start height to genesis (#2727)c364b17fix(pkg/sync): fix block sync p2p for follower nodes (#2725)c045daffix(types): add timeout per request in retrieve helper (#2726)0679230fix(block/syncing): verify header data hash vs actual data hash (#2724)1917bd7refactor(block): add retries on SetFinal (#2721)bc6a0b1refactor(block): reduce max size in da submitter (#2720)a3b4b0dfix(block): halt on invalid blocks and wait on unavailable execution client (...1f3212bfix(pkg/sync): avoid pruning goheader store (#2718)94e545abuild(deps): Bump the all-go group across 6 directories with 5 updates (#2716)4f4f2c0feat(syncer): fetch from p2p and da (#2712)Updates
github.com/celestiaorg/tastorafrom 0.5.1 to 0.6.0Release notes
Sourced from github.com/celestiaorg/tastora's releases.
Commits
ff64dcbfeat: support additional port mappings for chain nodes and ensure keys presen...4ff6ba2feat: propagate error to caller (#133)d6734dffeat: add support for arbitrarily modifying config (#132)3f8e8d8feat: support for internal port configuration (#124)Updates
github.com/docker/dockerfrom 28.4.0+incompatible to 28.5.0+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
cd04830Merge pull request #51075 from vvoland/51074-28.xe29d6bevendor: github.com/moby/buildkit v0.25.09b43690Merge pull request #51069 from thaJeztah/28.x_backport_docs_rm_deprecated_vir...4f35725api: swagger: remove VirtualSize fields for API > v1.4379f310dMerge pull request #51067 from austinvazquez/cherry-pick-deprecate-kernel-mem...deb4bbbapi: deprecateKernelMemoryTCPsupport423a7fdMerge pull request #51064 from thaJeztah/28.x_backport_fix_epcnt_warningfbf2fe8Eliminate warning about endpoint count store delete252a1ebMerge pull request #51061 from thaJeztah/28.x_backport_rm_email_example2c15eb6api/docs: remove email field from example authUpdates
github.com/celestiaorg/tastorafrom 0.5.1 to 0.6.0Release notes
Sourced from github.com/celestiaorg/tastora's releases.
Commits
ff64dcbfeat: support additional port mappings for chain nodes and ensure keys presen...4ff6ba2feat: propagate error to caller (#133)d6734dffeat: add support for arbitrarily modifying config (#132)3f8e8d8feat: support for internal port configuration (#124)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions