Skip to content

Bump the all group with 25 updates#59

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/all-93001695ec
Open

Bump the all group with 25 updates#59
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/all-93001695ec

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps the all group with 25 updates:

Package From To
connectrpc.com/connect 1.16.2 1.19.2
github.com/NethermindEth/juno 0.3.1 0.16.0
github.com/NethermindEth/starknet.go 0.7.1 0.17.1
github.com/bmatcuk/doublestar/v4 4.6.1 4.10.0
github.com/huandu/xstrings 1.4.0 1.5.0
github.com/lib/pq 1.10.9 1.12.3
github.com/mr-tron/base58 1.2.0 1.3.0
github.com/rs/cors 1.10.0 1.11.1
github.com/spf13/cobra 1.7.0 1.10.2
github.com/spf13/pflag 1.0.5 1.0.10
github.com/spf13/viper 1.15.0 1.21.0
github.com/streamingfast/dhttp 0.0.2-0.20240508021440-c29850a1478f 0.1.2
github.com/streamingfast/dstore 0.1.1-0.20240419152712-b7df14cba7b5 0.2.3
github.com/streamingfast/logging 0.0.0-20260108192805-38f96de0a641 1.2.2
github.com/stretchr/testify 1.10.0 1.11.1
github.com/testcontainers/testcontainers-go 0.39.0 0.42.0
github.com/tidwall/gjson 1.14.1 1.18.0
github.com/tidwall/sjson 1.0.4 1.2.5
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.49.0 0.63.0
go.opentelemetry.io/otel 1.35.0 1.42.0
go.uber.org/zap 1.27.0 1.27.1
golang.org/x/exp 0.0.0-20240613232115-7f521ea00fb8 0.0.0-20260312153236-7ab1446f8b90
golang.org/x/sync 0.13.0 0.20.0
google.golang.org/grpc 1.67.0 1.80.0
google.golang.org/protobuf 1.36.6 1.36.11

Updates connectrpc.com/connect from 1.16.2 to 1.19.2

Release notes

Sourced from connectrpc.com/connect's releases.

v1.19.2

What's Changed

Governance

Bugfixes

Other changes

New Contributors

Full Changelog: connectrpc/connect-go@v1.19.1...v1.19.2

v1.19.1

What's Changed

Bugfixes

Full Changelog: connectrpc/connect-go@v1.19.0...v1.19.1

v1.19.0

This release introduces the highly requested "simple" flag for code generation, making Connect significantly more ergonomic for everyday RPC development.

The new simple flag in protoc-gen-connect-go generates cleaner, more intuitive client and handler interfaces that eliminate request/response wrappers for most use cases. This addresses community feedback about verbosity and provides a more straightforward API. When enabled, metadata (headers/trailers) can be passed through context instead of explicit wrapper objects, optimizing for the common case where developers don't need direct access to HTTP headers.

What's Changed

Enhancements

Bugfixes

Other changes

... (truncated)

Commits
  • 1c195ae Prepare for v1.19.2 (#920)
  • 96abc6b Upgrade golangci-lint to v2 (#917)
  • be72fa5 Clarify concurrent use semantics for streaming types (#911)
  • 299d2e7 Fix nil pointer deref in duplexHTTPCall under concurrent Send + CloseAndRecei...
  • e299aa6 Bump google.golang.org/grpc from 1.76.0 to 1.79.3 in /internal/conformance (#...
  • 7b531c0 Clarify UnaryFunc response type (#912)
  • 02f23a3 Fix typo in RELEASE.md (#906)
  • ec6f523 Add Timo Stamm to maintainers (#905)
  • 59cc697 Use 'deadline_exceeded' instead of 'canceled' on HTTP/2 cancelation when appr...
  • e9aff4a Bump connectrpc.com/conformance from 1.0.4 to 1.0.5 in /internal/conformance ...
  • Additional commits viewable in compare view

Updates github.com/NethermindEth/juno from 0.3.1 to 0.16.0

Release notes

Sourced from github.com/NethermindEth/juno's releases.

v0.16.0

This update comes with a migration which was optional since v0.15.18. Small updates may be necessary to your command line configuration when updating from Juno v0.15.x.

⚠️ Warning: This update applies a migration that rewrites the entire database and compresses it to half the size. If you are using a decent SSD and minimum requirements, expected migration time is 40 minutes. Lower SSDs or Disks will experience a longer migration time. This migration was optional since [v0.15.18], if you've already applied it, no migration will trigger.

NOTE: Since the new DB layout is now the default, the db info and db revert commands will fail when run against a database that hasn't been migrated yet. Run the migration first, then these commands will work as expected.

Breaking changes

  • Long running migration will kick in after the update. Check Warning note on top for details.
    • The flag--transaction-combined-layout used to trigger the migration has been removed since it is the new default.
  • Default Database compression has changed from snappy to zstd.
  • The default RPC endpoint of Juno has changed from v0_8 to v0_10. If you're application interacts with a Juno node and doesn't specify the version in the URL this might break it. Add /v0_8 at the end of your URL to fix it.
  • RPC versions v6 and v7 are no longer supported.
  • RPC field elements can only be specified as hexadecimals (0x1234abcd) and not decimals. A changed designed to follow the Starknet JSON RPC spec more strictly.
  • The pending-poll-interval flag is now called prelatest-poll-interval reflecting its actual usage better.

Added

  • --disable-received-txn-stream flag which disables RECEIVED alerts, users subscribed to these will no longer get a notification when the nodes receives a transaction.

Fixed

  • starknet_estimateFee and starknet_simulateTransactions rejecting transactions with a non-zero tip when the account balance could cover the fee. The maximum L2 gas bound now accounts for the tip, matching the blockifier's fee calculation (max_amount * (max_price_per_unit + tip)).

Full Changelog: NethermindEth/juno@v0.15.22...v0.16.0

v0.15.22

This update objective is to reduce the amount of data Juno downloads from the sequencer. It will reduce bandwidth cost for everyone.

Changed

  • Blockifier updated to version v0.18.0-rc.1.
  • Reduced data downloaded from the Sequencer every time we poll the latest block. From 40 to 500kbs to just a few bytes.
  • Reduced data downloaded from the Sequencer when querying a transaction status. Before, we would get the full transaction and discard the rest of the fields. Now, we correctly get only the data we need.

Fixed

  • v0.15.21 would sent compress requests to mainnet causing the Gateway to not be able to parse it. This is now disabled until Mainnet hits Starknet version 0.14.2. Full Changelog: NethermindEth/juno@v0.15.21...v0.15.22

v0.15.21

Added

  • Added gzip compression to requests to the feeder gateway when they exceed 1 kilobyte of size. #3505

Changed

  • Updated Starknet execution libraries to their latest version. #3507

... (truncated)

Commits
  • 4030235 chore(rpc/v10): bump SpecVersion to 0.10.2 (#3573)
  • bc6db50 docs: version 0.16.0
  • 710a686 fix(vm): account for tip when computing max L2 gas limit (#3562)
  • 026d019 refactor(state): split state into State and StateReader (#3563)
  • 1364259 refactor(core): new pending pkg (#3564)
  • 925371e refactor(core): new deprecatedstate pkg (#3561)
  • 4924bc8 chore(deps): bump thin-vec from 0.2.14 to 0.2.16 in /vm/rust in the cargo gro...
  • 8449d65 refactor: move deprecatedmigration pkg to under migration pkg (#3552)
  • 8aabab8 refactor: remove old layout code (part 2) (#3551)
  • 3318620 Revert "refactor: deprecate HeapPtr use new instead"
  • Additional commits viewable in compare view

Updates github.com/NethermindEth/starknet.go from 0.7.1 to 0.17.1

Release notes

Sourced from github.com/NethermindEth/starknet.go's releases.

v0.17.1

This release implements Starknet RPC v0.9.0

This release is exclusively to support the use of the new Blake2s hash when sending DECLARE transactions. Starknet.go will automatically fetch the current Starknet version and decide whether to use the Blake2s hash function when using the account.BuildAndSendDeclareTxn method. See the description of the new opts.UseBlake2sHash param to know more.

For more details, see the CHANGELOG file.

What's Changed

Full Changelog: NethermindEth/starknet.go@v0.17.0...v0.17.1

v0.17.0

This release implements Starknet RPC v0.9.0

Key changes:

  • New paymaster pkg for interacting with paymaster services via the SNIP-29 API (see the examples/paymaster folder to learn how to use it).
  • Now, all the account.BuildAndSend* methods will automatically estimate and set the tip to be used in the transaction based on the average tip of all transactions in the latest block. The user can set a custom tip by setting the CustomTip field in the opts *TxnOptions parameter to override the automatic estimation.
  • The rpc.NewProvider function now returns an error if the node RPC version is different from the version implemented by the starknet.go provider. The returned Provider instance is still valid, but there might be unexpected behaviour due to the spec differences.
  • New rpc.EstimateTip and rpc.IsCompatible utility functions.
  • Two bug fixes in utilities related to fee calculation.

For more details, see the CHANGELOG file.

What's Changed

New Contributors

Full Changelog: NethermindEth/starknet.go@v0.16.0...v0.17.0

v0.16.0

This release implements Starknet RPC v0.9.0

... (truncated)

Changelog

Sourced from github.com/NethermindEth/starknet.go's changelog.

0.17.1 - 2025-11-25

Added

  • curve pkg:
    • new Blake2s and Blake2sArray functions.
  • hash pkg:
    • new CompiledClassHashV2 function to compute the compiled class hash using the Blake2s hash function.
  • utils pkg:
    • new UseBlake2sHash param in the TxnOptions struct to be used by the BuildDeclareTxn function.
  • account pkg:
    • new UseBlake2sHash param in the TxnOptions struct to be used by the BuildAndSendDeclareTxn method.

Changed

  • In the account.BuildAndSendDeclareTxn method, if the new opts.UseBlake2sHash param is nil, Starknet.go will automatically fetch the current Starknet version and decide whether to use the Blake2s hash function.

0.17.0 - 2025-11-06

Added

  • New paymaster pkg for interacting with paymaster services via the SNIP-29 API.
  • New examples/paymaster folder with examples of how to use the paymaster pkg.
  • New rpc.IsCompatible function utility to check if the node RPC version is compatible with the version implemented by the starknet.go provider.
  • new rpc.EstimateTip function utility to estimate the tip to be used in a transaction.
  • New rpc.ErrIncompatibleVersion error variable, used in the rpc.NewProvider function.
  • New rpc.U128.ToBigInt() method to convert the rpc.U128 type to a *big.Int, also validating if the value is within the range of a uint128.
  • New utils.CustomFeeEstToResBoundsMap function that does the same as utils.FeeEstToResBoundsMap, but accepts a utils.FeeLimits parameter to set custom limits for the resource bounds instead of using the Starknet default limits.

Changed

  • The rpc.NewProvider and rpc.NewWebsocketProvider functions now accept a context.Context parameter.
  • The rpc.NewProvider function now returns an error if the node RPC version is different from the version implemented by the starknet.go provider. The returned Provider instance is still valid, but there might be unexpected behaviour.
  • The typedata pkg was renamed to typeddata, fixing the typo in the package name introduced in v0.16.0.
  • Now, all the account.BuildAndSend* methods will automatically estimate and set the tip to be used in the transaction based on the average tip of all transactions in the latest block. The user can set a custom tip by setting the CustomTip field in the TxnOptions type to override the automatic estimation.
  • In the account.TxnOptions type:
    • The Tip field was renamed to CustomTip.
    • The Multiplier field was renamed to FeeMultiplier.
    • New TipMultiplier field was added to set the multiplier to be used when automatically estimating the tip.

Removed

  • The warning message when the node RPC version is different from the version implemented by the starknet.go provider when calling the rpc.NewProvider function. Now, an error is returned instead.

Fixed

  • The utils.FeeEstToResBoundsMap function was using the max uint64 value for the L2 gas amount limit instead of the limit defined by Starknet, causing the txn to be rejected by the node when the amount was greater than the limit. Now, the limit is used correctly, and it's returned in the case of overflow.
  • The utils.ResBoundsMapToOverallFee function was not considering the tip when calculating the overall fee, causing incorrect fee calculations.

0.16.0 - 2025-10-14

... (truncated)

Commits
  • d8bbb2b feat: Blake2s implementation (#821)
  • 262d3a9 Documentation for v0.17.0 SDK Release (#822)
  • b31381f chore: update CHANGELOG for version 0.17.0 release
  • 05b602a feat: tip estimation utility + automatically tip estimation for account metho...
  • 7a57b4e chore: remove unused .all-contrigutorsrc file
  • 86bc7d7 chore: update changelog to reflext the overall fee calculation fix
  • 269178c fix: Overall Fee calculation (#820)
  • 0b9c66f Thiagodeev/fix-fee-limit (#819)
  • 718d85f chore(deps): bump hono from 4.10.2 to 4.10.3 in /docs in the npm_and_yarn gro...
  • 53679c7 refactor: rename typedata package to typeddata (#811)
  • Additional commits viewable in compare view

Updates github.com/bmatcuk/doublestar/v4 from 4.6.1 to 4.10.0

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Added WithNoHidden option

Added support for a WithNoHidden option to ignore hidden files in patterns that might unintentionally match them. For example, a .config directory would not be matched by * or recursed into by **, but would be matched by .* or recursed by .config/**.

Thanks to @​lukasngl for the initial PR and idea!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.9.2...v4.10.0

Fixed Handling of Paths With Meta Chars Using Alts

@​toga4 submitted a PR that fixed a small bug with the way paths were handled when the pattern used {alts}: if some part of the on-disk path that came before the {alt} included meta characters (say, a directory name that included the character ?), these meta characters were not escaped when they were passed back through the globbing routines. This caused doublestar to interpret them as actual meta characters, rather than a fixed-string path as it should have. Nice find, @​toga4 !

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.9.1...v4.9.2

Small Performance Change

This release contains a small change that gives a slight performance increase. Thanks to @​jbedard for the PR!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.9.0...v4.9.1

Added WithCaseInsensitive option

Added a WithCaseInsensitive option to ignore alphabetic case when globbing. Thanks @​braydonk for the PR!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.8.1...v4.9.0

Small Performance Improvement for MatchUnvalidated

Skip some additional validation checks in MatchUnvalidated. Thanks to @​lukemassa for the PR!

... (truncated)

Commits
  • a9ad9e0 allow starting test manually
  • 9987c0c update docs
  • d3b2184 windows support for WithNoHidden; better tests
  • 5d6a6cd Merge branch 'lukasngl-feat/no-hidden'
  • e8319d2 run tests when a branch/tag is created
  • 614b331 run tests when a branch/tag is created
  • df2e03f feat: add WithNoHidden option to skip hidden files
  • 3dc8306 Merge branch 'toga4-fix-brace-exp-with-meta'
  • 4db19e2 fix tests
  • 4ef2b00 fix: escape meta characters in paths during brace expansion
  • Additional commits viewable in compare view

Updates github.com/huandu/xstrings from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/huandu/xstrings's releases.

API Change: New API ToPascalCase and make ToCamelCase camelCase

Per discuss in #56, I decide to change the result of ToCamelCase to make it align with common sense. In the past, ToCamelCase converts camel_case_string to CamelCaseString, in which the first letter is upper case; Starting from this release, ToCamelCase returns camelCaseString instead. If we want to convert string to "upper" camel case, we can use new API ToPascalCase.

If you have any concern, please feel free to send issue to me. Thanks.

Full Changelog: huandu/xstrings@v1.4.0...v1.5.0

Commits

Updates github.com/lib/pq from 1.10.9 to 1.12.3

Release notes

Sourced from github.com/lib/pq's releases.

v1.12.3

  • Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2

  • Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

v1.12.1

  • Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#1300).

  • Don't clear password if directly set on pq.Config (#1302).

#1300: lib/pq#1300 #1302: lib/pq#1302

v1.12.0

  • The next release may change the default sslmode from require to prefer. See #1271 for details.

  • CopyIn() and CopyInToSchema() have been marked as deprecated. These are simple query builders and not needed for COPY [..] FROM STDIN support (which is not deprecated). (#1279)

    // Old
    tx.Prepare(CopyIn("temp", "num", "text", "blob", "nothing"))
    

    // Replacement tx.Prepare(copy temp (num, text, blob, nothing) from stdin)

Features

  • Support protocol 3.2, and the min_protocol_version and max_protocol_version DSN parameters (#1258).

  • Support sslmode=prefer and sslmode=allow (#1270).

  • Support ssl_min_protocol_version and ssl_max_protocol_version (#1277).

  • Support connection service file to load connection details (#1285).

  • Support sslrootcert=system and use ~/.postgresql/root.crt as the default value of sslrootcert (#1280, #1281).

  • Add a new pqerror package with PostgreSQL error codes (#1275).

    For example, to test if an error is a UNIQUE constraint violation:

    if pqErr, ok := errors.AsType[*pq.Error](https://github.com/lib/pq/blob/HEAD/err); ok && pqErr.Code == pqerror.UniqueViolation {
        log.Fatalf("email %q already exsts", email)
    }
    

    To make this a bit more convenient, it also adds a pq.As() function:

... (truncated)

Changelog

Sourced from github.com/lib/pq's changelog.

v1.12.3 (2026-04-03)

  • Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2 (2026-04-02)

  • Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

v1.12.1 (2026-03-30)

  • Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#1300).

  • Don't clear password if directly set on pq.Config (#1302).

#1300: lib/pq#1300 #1302: lib/pq#1302

v1.12.0 (2026-03-18)

  • The next release may change the default sslmode from require to prefer. See #1271 for details.

  • CopyIn() and CopyInToSchema() have been marked as deprecated. These are simple query builders and not needed for COPY [..] FROM STDIN support (which is not deprecated). (#1279)

    // Old
    tx.Prepare(CopyIn("temp", "num", "text", "blob", "nothing"))
    

    // Replacement tx.Prepare(copy temp (num, text, blob, nothing) from stdin)

Features

  • Support protocol 3.2, and the min_protocol_version and max_protocol_version DSN parameters (#1258).

  • Support sslmode=prefer and sslmode=allow (#1270).

  • Support ssl_min_protocol_version and ssl_max_protocol_version (#1277).

... (truncated)

Commits
  • 1f3e3d9 Send datestyle as a startup parameter (#1312)
  • 32ba56b Expand tests for multiple result sets
  • c2cfac1 Release v1.12.2
  • 859f104 Test CockroachDB
  • 12e464c Allow multiple matches and regexps in pqtest.ErrorContains()
  • 6d77ced Treat io.ErrUnexpectedEOF as driver.ErrBadConn in handleError
  • 71daecb Ensure transactions are closed in pqtest
  • 8f44823 Set PGAPPNAME for tests
  • 4af2196 Fix healthcheck
  • 38a54e4 Split out testdata/init a bit
  • Additional commits viewable in compare view

Updates github.com/mr-tron/base58 from 1.2.0 to 1.3.0

Release notes

Sourced from github.com/mr-tron/base58's releases.

x10 speedup

What's Changed

Previous version:

cpu: Apple M4
BenchmarkTrivialBase58Encoding
BenchmarkTrivialBase58Encoding-10       	  704328	      1554 ns/op
BenchmarkFastBase58Encoding
BenchmarkFastBase58Encoding-10          	 1000000	      1065 ns/op
BenchmarkTrivialBase58Decoding
BenchmarkTrivialBase58Decoding-10       	 1541754	       767.0 ns/op
BenchmarkFastBase58Decoding
BenchmarkFastBase58Decoding-10          	 4358894	       278.3 ns/op
BenchmarkTrivialBase58Encoding32
BenchmarkTrivialBase58Encoding32-10     	  729949	      1627 ns/op
BenchmarkFastBase58Encoding32
BenchmarkFastBase58Encoding32-10        	 1000000	      1118 ns/op
BenchmarkTrivialBase58Encoding36
BenchmarkTrivialBase58Encoding36-10     	  608595	      1813 ns/op
BenchmarkFastBase58Encoding36
BenchmarkFastBase58Encoding36-10        	  893626	      1275 ns/op
BenchmarkTrivialBase58Encoding64
BenchmarkTrivialBase58Encoding64-10     	  284566	      4028 ns/op
BenchmarkFastBase58Encoding64
BenchmarkFastBase58Encoding64-10        	  279295	      3955 ns/op
BenchmarkTrivialBase58Encoding256
BenchmarkTrivialBase58Encoding256-10    	   33140	     35533 ns/op
BenchmarkFastBase58Encoding256
BenchmarkFastBase58Encoding256-10       	   17833	     67081 ns/op
BenchmarkTrivialBase58Decoding32
BenchmarkTrivialBase58Decoding32-10     	 1512828	       875.7 ns/op
BenchmarkFastBase58Decoding32
BenchmarkFastBase58Decoding32-10        	 4247128	       341.9 ns/op
BenchmarkTrivialBase58Decoding36
BenchmarkTrivialBase58Decoding36-10     	 1319317	       880.9 ns/op
BenchmarkFastBase58Decoding36
BenchmarkFastBase58Decoding36-10        	 3449229	       366.6 ns/op
BenchmarkTrivialBase58Decoding64
BenchmarkTrivialBase58Decoding64-10     	  663181	      1636 ns/op
BenchmarkFastBase58Decoding64
BenchmarkFastBase58Decoding64-10        	 1327443	       903.0 ns/op
BenchmarkTrivialBase58Decoding256
BenchmarkTrivialBase58Decoding256-10    	  153183	      7469 ns/op
BenchmarkFastBase58Decoding256
BenchmarkFastBase58Decoding256-10       	   93289	     12428 ns/op

... (truncated)

Commits
  • 14609f6 big refactorig. speedup x10. better tests. add more benchmarks.
  • 957145f mark deprecated functions
  • 7feefc8 Merge pull request #17 from ribasushi/more_tests_and_nits
  • 925b607 Slightly better README rendering
  • d3aa3a3 Better handling of custom alphabets + tests
  • 82a293c Seed the math/rand PRNG on every test run
  • dfe7821 Works without changes on go1.11: lower dep
  • d2877cb Add myself to authors
  • See full diff in compare view

Updates github.com/rs/cors from 1.10.0 to 1.11.1

Commits
  • a814d79 Re-add support for multiple Access-Control-Request-Headers field (fixes #184)...
  • 1562b17 Removed redundant log nil checks (#178)
  • 3d336ea Update all dependencies to latest in examples (#175)
  • 85fc0ca Make Gin wrapper's status configurable and use 204 as default (fixes #145) (#...
  • 4c32059 Normalize allowed request headers and store them in a sorted set (fixes #170)...
  • 8d33ca4 Complete documentation; deprecate AllowOriginRequestFunc in favour of AllowOr...
  • af821ae Merge branch 'jub0bs-master'
  • 0bcf73f Update benchmark
  • eacc8e8 Fix skewed middleware benchmarks (#165)
  • 9297f15 Respect the documented precedence of options (#163)
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.7.0 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

... (truncated)

Commits

Updates github.com/spf13/pflag from 1.0.5 to 1.0.10

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.10

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

v1.0.9

What's Changed

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

Bumps the all group with 25 updates:

| Package | From | To |
| --- | --- | --- |
| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.16.2` | `1.19.2` |
| [github.com/NethermindEth/juno](https://github.com/NethermindEth/juno) | `0.3.1` | `0.16.0` |
| [github.com/NethermindEth/starknet.go](https://github.com/NethermindEth/starknet.go) | `0.7.1` | `0.17.1` |
| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.6.1` | `4.10.0` |
| [github.com/huandu/xstrings](https://github.com/huandu/xstrings) | `1.4.0` | `1.5.0` |
| [github.com/lib/pq](https://github.com/lib/pq) | `1.10.9` | `1.12.3` |
| [github.com/mr-tron/base58](https://github.com/mr-tron/base58) | `1.2.0` | `1.3.0` |
| [github.com/rs/cors](https://github.com/rs/cors) | `1.10.0` | `1.11.1` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.7.0` | `1.10.2` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.5` | `1.0.10` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.15.0` | `1.21.0` |
| [github.com/streamingfast/dhttp](https://github.com/streamingfast/dhttp) | `0.0.2-0.20240508021440-c29850a1478f` | `0.1.2` |
| [github.com/streamingfast/dstore](https://github.com/streamingfast/dstore) | `0.1.1-0.20240419152712-b7df14cba7b5` | `0.2.3` |
| [github.com/streamingfast/logging](https://github.com/streamingfast/logging) | `0.0.0-20260108192805-38f96de0a641` | `1.2.2` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.39.0` | `0.42.0` |
| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.14.1` | `1.18.0` |
| [github.com/tidwall/sjson](https://github.com/tidwall/sjson) | `1.0.4` | `1.2.5` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.49.0` | `0.63.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.42.0` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` |
| [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20240613232115-7f521ea00fb8` | `0.0.0-20260312153236-7ab1446f8b90` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.13.0` | `0.20.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.67.0` | `1.80.0` |
| google.golang.org/protobuf | `1.36.6` | `1.36.11` |


Updates `connectrpc.com/connect` from 1.16.2 to 1.19.2
- [Release notes](https://github.com/connectrpc/connect-go/releases)
- [Changelog](https://github.com/connectrpc/connect-go/blob/main/RELEASE.md)
- [Commits](connectrpc/connect-go@v1.16.2...v1.19.2)

Updates `github.com/NethermindEth/juno` from 0.3.1 to 0.16.0
- [Release notes](https://github.com/NethermindEth/juno/releases)
- [Commits](NethermindEth/juno@v0.3.1...v0.16.0)

Updates `github.com/NethermindEth/starknet.go` from 0.7.1 to 0.17.1
- [Release notes](https://github.com/NethermindEth/starknet.go/releases)
- [Changelog](https://github.com/NethermindEth/starknet.go/blob/main/CHANGELOG.md)
- [Commits](NethermindEth/starknet.go@v0.7.1...v0.17.1)

Updates `github.com/bmatcuk/doublestar/v4` from 4.6.1 to 4.10.0
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.6.1...v4.10.0)

Updates `github.com/huandu/xstrings` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/huandu/xstrings/releases)
- [Commits](huandu/xstrings@v1.4.0...v1.5.0)

Updates `github.com/lib/pq` from 1.10.9 to 1.12.3
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](lib/pq@v1.10.9...v1.12.3)

Updates `github.com/mr-tron/base58` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/mr-tron/base58/releases)
- [Commits](mr-tron/base58@v1.2.0...v1.3.0)

Updates `github.com/rs/cors` from 1.10.0 to 1.11.1
- [Commits](rs/cors@v1.10.0...v1.11.1)

Updates `github.com/spf13/cobra` from 1.7.0 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.7.0...v1.10.2)

Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.5...v1.0.10)

Updates `github.com/spf13/viper` from 1.15.0 to 1.21.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.15.0...v1.21.0)

Updates `github.com/streamingfast/dhttp` from 0.0.2-0.20240508021440-c29850a1478f to 0.1.2
- [Release notes](https://github.com/streamingfast/dhttp/releases)
- [Changelog](https://github.com/streamingfast/dhttp/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/streamingfast/dhttp/commits/v0.1.2)

Updates `github.com/streamingfast/dstore` from 0.1.1-0.20240419152712-b7df14cba7b5 to 0.2.3
- [Release notes](https://github.com/streamingfast/dstore/releases)
- [Changelog](https://github.com/streamingfast/dstore/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/streamingfast/dstore/commits/v0.2.3)

Updates `github.com/streamingfast/logging` from 0.0.0-20260108192805-38f96de0a641 to 1.2.2
- [Release notes](https://github.com/streamingfast/logging/releases)
- [Changelog](https://github.com/streamingfast/logging/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/streamingfast/logging/commits/v1.2.2)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `github.com/testcontainers/testcontainers-go` from 0.39.0 to 0.42.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.39.0...v0.42.0)

Updates `github.com/tidwall/gjson` from 1.14.1 to 1.18.0
- [Commits](tidwall/gjson@v1.14.1...v1.18.0)

Updates `github.com/tidwall/sjson` from 1.0.4 to 1.2.5
- [Commits](tidwall/sjson@v1.0.4...v1.2.5)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.49.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.49.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/otel` from 1.35.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.42.0)

Updates `go.uber.org/zap` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.27.1)

Updates `golang.org/x/exp` from 0.0.0-20240613232115-7f521ea00fb8 to 0.0.0-20260312153236-7ab1446f8b90
- [Commits](https://github.com/golang/exp/commits)

Updates `golang.org/x/sync` from 0.13.0 to 0.20.0
- [Commits](golang/sync@v0.13.0...v0.20.0)

Updates `google.golang.org/grpc` from 1.67.0 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.67.0...v1.80.0)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.11

---
updated-dependencies:
- dependency-name: connectrpc.com/connect
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/NethermindEth/juno
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/NethermindEth/starknet.go
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/huandu/xstrings
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/lib/pq
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/mr-tron/base58
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/rs/cors
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/spf13/viper
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/streamingfast/dhttp
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/streamingfast/dstore
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/streamingfast/logging
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/tidwall/gjson
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/tidwall/sjson
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: golang.org/x/exp
  dependency-version: 0.0.0-20260312153236-7ab1446f8b90
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants