Skip to content

chore(deps): bump the gomod-all group with 9 updates - #370

Merged
galt-tr merged 1 commit into
mainfrom
dependabot/go_modules/main/gomod-all-4d34c6a68f
Oct 14, 2026
Merged

chore(deps): bump the gomod-all group with 9 updates#370
galt-tr merged 1 commit into
mainfrom
dependabot/go_modules/main/gomod-all-4d34c6a68f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod-all group with 9 updates:

Package From To
github.com/bsv-blockchain/go-chaintracks 1.4.1 1.4.3
github.com/bsv-blockchain/go-p2p-message-bus 0.1.28 0.2.0
github.com/bsv-blockchain/go-sdk 1.7.0 1.7.2
github.com/bsv-blockchain/go-teranode-p2p-client 0.3.1 0.3.2
github.com/bsv-blockchain/teranode 0.16.0 0.16.1-beta-1
github.com/moby/moby/client 0.6.1 0.6.2
github.com/prometheus/client_golang 1.24.1 1.25.0
go.mongodb.org/mongo-driver/v2 2.9.1 2.9.2
golang.org/x/sync 0.23.0 0.24.0

Updates github.com/bsv-blockchain/go-chaintracks from 1.4.1 to 1.4.3

Release notes

Sourced from github.com/bsv-blockchain/go-chaintracks's releases.

Release v1.4.3

Changelog

  • f882ac02387ca97faf744e2b694ba64f089236d7 [Sync] Update project files from source repository (634ec23) (#179)

Release v1.4.2

Changelog

  • c7eeda1f15bdf89095e1c73a8e9f80ca22aa9132 chore(deps): bump github.com/bsv-blockchain/go-sdk (#176)
  • 7445bb5e679bf72fae47ccbeead1de2f779d40d9 chore(deps): bump github.com/bsv-blockchain/teranode (#177)
  • e2eebd36017df21309d85d678b1a18c1d917f7e0 chore(deps): bump golang in the dockerfiles-all group (#170)
  • 790cfae1cc0c6e8a5a459bd51e64121ecd525774 feat: allow reconnection when connection breaks (#178)
  • a196f57ab8a701e6bd30d4691585160507bafa09 sync(ci): upgrade to ubuntu-26.04 and tooling updates (#169)
Commits
  • f882ac0 [Sync] Update project files from source repository (634ec23) (#179)
  • 790cfae feat: allow reconnection when connection breaks (#178)
  • c7eeda1 chore(deps): bump github.com/bsv-blockchain/go-sdk (#176)
  • 7445bb5 chore(deps): bump github.com/bsv-blockchain/teranode (#177)
  • e2eebd3 chore(deps): bump golang in the dockerfiles-all group (#170)
  • a196f57 sync(ci): upgrade to ubuntu-26.04 and tooling updates (#169)
  • See full diff in compare view

Updates github.com/bsv-blockchain/go-p2p-message-bus from 0.1.28 to 0.2.0

Release notes

Sourced from github.com/bsv-blockchain/go-p2p-message-bus's releases.

Release v0.2.0

Changelog

  • 86cbf6d8907e850eac8ba70bba96b3a2fdd5e9b0 [Sync] Update project files from source repository (cffc563) (#128)
  • 72c699554aee2cfdbf1bc6d48c6816caeab35ee3 chore(deps): bump github.com/libp2p/go-libp2p-pubsub (#127)
  • ae4b03154ffa7ab507a5f04cecf9e9cd3f4a0649 sync(ci): upgrade to ubuntu-26.04 and tooling updates (#126)
Commits
  • 86cbf6d [Sync] Update project files from source repository (cffc563) (#128)
  • 72c6995 chore(deps): bump github.com/libp2p/go-libp2p-pubsub (#127)
  • ae4b031 sync(ci): upgrade to ubuntu-26.04 and tooling updates (#126)
  • See full diff in compare view

Updates github.com/bsv-blockchain/go-sdk from 1.7.0 to 1.7.2

Release notes

Sourced from github.com/bsv-blockchain/go-sdk's releases.

Release v1.7.2

Changelog

  • 1be5dca7ecc298b1240bef699e130322c226dd7c Merge commit from fork
  • 2ca481c5931b987a0c8f48bb341c70b7477b6b07 [Sync] Update project files from source repository (cffc563) (#375)
  • 511b58cec67215c408dcaf617198584293936849 test(interpreter): cover legacy non-forkid sighash (#374)

Release v1.7.1

Changelog

  • 9ac9b65f97db0eeaa21562e0086db8d328f3b3b7 feat(interpreter): default to after-Chronicle execution rules (#371)
  • f12ad4dadca392833290e9c50a5d50381d28848c fix(interpreter): match node semantics for OP_LSHIFTNUM/OP_RSHIFTNUM (#370)
  • 3edb94680908e6a8a9cc34d57080fb0e17bb8876 sync(ci): upgrade to ubuntu-26.04 and tooling updates (#369)
Commits

Updates github.com/bsv-blockchain/go-teranode-p2p-client from 0.3.1 to 0.3.2

Release notes

Sourced from github.com/bsv-blockchain/go-teranode-p2p-client's releases.

Release v0.3.2

Changelog

  • fd12b3d7ac8d5f9a40dfc5f1c6602b90e77374a1 [Sync] Update project files from source repository (cffc563) (#66)
  • 3872998912643a2bac381e01261a3cdea0af4b84 chore(deps): bump github.com/bsv-blockchain/go-p2p-message-bus (#64)
  • 2265290259cfc917f158000265876b7d6317001e chore(deps): bump github.com/bsv-blockchain/teranode (#65)
  • 3aad661528f175065e7258a080a14cbf2926ca0d sync(ci): upgrade to ubuntu-26.04 and tooling updates (#63)
Commits
  • fd12b3d [Sync] Update project files from source repository (cffc563) (#66)
  • 2265290 chore(deps): bump github.com/bsv-blockchain/teranode (#65)
  • 3872998 chore(deps): bump github.com/bsv-blockchain/go-p2p-message-bus (#64)
  • 3aad661 sync(ci): upgrade to ubuntu-26.04 and tooling updates (#63)
  • See full diff in compare view

Updates github.com/bsv-blockchain/teranode from 0.16.0 to 0.16.1-beta-1

Release notes

Sourced from github.com/bsv-blockchain/teranode's releases.

v0.16.1-beta-1

Upgrade notes

grpc_admin_api_key is required (#1755). The Blockchain service refuses to start unless grpc_admin_api_key is at least 16 characters, is not a well-known placeholder, and has no leading or trailing whitespace. Every service and teranode-cli must present the same key, or it fails with a configuration error. Use 32+ random characters, supplied through an environment variable or secret store. teranode-quickstart: nothing to do; ./update.sh then ./start.sh generates a key into .env if one is missing.

HTTP blob store writes need a shared token (#1800). Only affects a deployment whose blob store URL points at another node's block persister over http://. Set blockpersister_httpAuthToken on the node serving the blob API and the same value as blob_httpAuthToken on each node writing to it; until they match, writes are refused with 401. Put the token in these settings, not in the store URL: a URL carrying an authToken parameter is rejected. blockpersister_httpListenAddress now defaults to loopback; set it explicitly if another host needs to reach it. teranode-quickstart and the shipped configurations use file-based stores and are unaffected.

What's Changed

New Contributors

Full Changelog: bsv-blockchain/teranode@v0.16.0...v0.16.1-beta-1

Commits
  • d8c6c66 feat(settings): add Asset admission-budget settings keys (no-op) (#1787)
  • fffcc4e fix(blockchain): do not cache a negative GetBlockIsMined answer (#1676)
  • b22720b perf(blockassembly): clear the DiskTxMap index shards in parallel (#1878)
  • 9c0d344 perf(blockassembly): answer MoveForwardBlock before draining the queue, and d...
  • c2ec3f5 fix(util): quote Postgres connection values so a URL without a password keeps...
  • e6c2542 fix(teranode-cli): reject positional arguments a command does not take (#1865)
  • 4827547 fix(usql): retry SQLite busy and locked errors reported with extended codes (...
  • 768465a ci(claude-review): clean up stuck sticky comments and log permission denial s...
  • 8c25a7c fix(utxo/sql): report the TxInpoints error from the batched read path (#1863)
  • 97241fb ci(claude-review): switch to Opus 5.5 and bump claude-code-action to v1.0.238...
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.6.1 to 0.6.2

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.2

0.6.2

Changelog

  • client: bump github.com/docker/go-connections v0.8.2, github.com/Azure/go-ansiterm 8c912ac31dd4. moby/moby#53891
  • Fix request cancellation and deadlines during client HTTP upgrade handshakes. moby/moby#53889
Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.2 (2013-09-17)

  • Hack: Vendor all dependencies
  • Builder: Add -rm option in order to remove intermediate containers
  • Runtime: Add domainname support
  • Runtime: Implement image filtering with path.Match
  • Builder: Allow multiline for the RUN instruction
  • Runtime: Remove unnecesasry warnings
  • Runtime: Only mount the hostname file when the config exists
  • Runtime: Handle signals within the docker login command
  • Runtime: Remove os/user dependency
  • Registry: Implement login with private registry
  • Remote API: Bump to v1.5
  • Packaging: Break down hack/make.sh into small scripts, one per 'bundle': test, binary, ubuntu etc.
  • Documentation: General improvments
  • Runtime: UID and GID are now also applied to volumes
  • Runtime: docker start set error code upon error
  • Runtime: docker run set the same error code as the process started
  • Registry: Fix push issues
Commits
  • ca5913f Bump version to 0.6.2
  • b2707dc Merge pull request #1898 from dotcloud/smallfix_registry
  • b826351 Merge pull request #1897 from dotcloud/update_doc
  • 2183644 Information about data persistence
  • e836b00 Prevent panic upon error pulling registry
  • 986906c Merge pull request #1892 from dotcloud/fix-maintainers-files
  • 8d48119 Merge pull request #1894 from dotcloud/1891-remove_useless_warnings
  • cdce873 Merge pull request #1896 from dotcloud/1885-missing-hostfile
  • 5a01f74 Only mount hostname files if config exists
  • 45b5073 Merge pull request #1849 from dotcloud/better_handle_hostConfig
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135
Commits

Updates go.mongodb.org/mongo-driver/v2 from 2.9.1 to 2.9.2

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.9.2

The MongoDB Go Driver Team is pleased to release version 2.9.2 of the official MongoDB Go Driver.

Release Highlights

[!WARNING] Go Driver versions v2.1.0 through v2.8.1 and v2.9.0 through v2.9.1 are affected by a security issue CVE-2026-81521 in Client.BulkWrite. The fix shipped in v2.8.2 but was not included in v2.9.0 or v2.9.1. This release restores the fix for the 2.9 line. Users on v2.9.0 or v2.9.1 are encouraged to upgrade to Go Driver v2.9.2 as soon as possible. Go Driver v1 is not affected.

[!WARNING]
Go Driver versions v1.1.0 and later and v2.0.0 through v2.9.1 are affected by a security issue CVE-2026-107325 in the bson.RawArray.Validate method. This release resolves that security issue in Go Driver v2. Users are encouraged to upgrade to Go Driver v2.9.2 as soon as possible.

This release addresses CVE-2026-81521, a security issue in calling Client.BulkWrite. A caller-controlled database name containing a period ('.') may be interpreted as a different namespace when forwarded to MongoDB. This could redirect operations to a database or collection other than the one intended by the application.

This release addresses CVE-2026-107325, a security issue in calling bson.RawArray.Validate. Calling bson.RawArray.Validate on an array whose declared length is 0 causes a runtime panic.

It also restores a fix from v2.8.1 that was likewise missing from v2.9.0 and v2.9.1: when a command's first attempt failed with a server error and the retry reported NoWritesPerformed, operations such as Database.RunCommand could return a nil error instead of the server error. They now return the original server error.

Sessions now inherit timeoutMS from the client, so operations run in a session honor the client-level timeout.

What's Changed

🐛 Fixed

Full Changelog: mongodb/mongo-go-driver@v2.9.1...v2.9.2

Commits
  • df261dc BUMP v2.9.2
  • 16b6195 GODRIVER-4088 Return the server error when the first attempt fails wi… (#2666)
  • de647b7 GODRIVER-4075 Return an error if there are invalid characters in the … (#2665)
  • 59c2e6b GODRIVER-4177 guard empty documents slice in decodeOpReply QueryFailure branc...
  • 15edca6 GODRIVER-4138 Latest server binary downloads require private S3. (#2660)
  • 74278b9 GODRIVER-4118 fix: correct Truncate boundary handling for multi-byte UTF-8 ch...
  • 13954c2 GODRIVER-4168: Authenticate the Claude review with the drivers PR bot app (#2...
  • 8f9da57 GODRIVER-4168: Run Claude review only when the claude-review label is applied...
  • 44ee9af GODRIVER-4168: Add Claude GitHub workflow (#2632)
  • a097394 GODRIVER-4136: reject BSON lengths below the 5-byte minimum before slicing (#...
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.23.0 to 0.24.0

Commits
  • 36f2d70 errgroup: modernize the usage of closures in goroutines
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the gomod-all group with 9 updates
b702957 
Bumps the gomod-all group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/bsv-blockchain/go-chaintracks](https://github.com/bsv-blockchain/go-chaintracks) | `1.4.1` | `1.4.3` |
| [github.com/bsv-blockchain/go-p2p-message-bus](https://github.com/bsv-blockchain/go-p2p-message-bus) | `0.1.28` | `0.2.0` |
| [github.com/bsv-blockchain/go-sdk](https://github.com/bsv-blockchain/go-sdk) | `1.7.0` | `1.7.2` |
| [github.com/bsv-blockchain/go-teranode-p2p-client](https://github.com/bsv-blockchain/go-teranode-p2p-client) | `0.3.1` | `0.3.2` |
| [github.com/bsv-blockchain/teranode](https://github.com/bsv-blockchain/teranode) | `0.16.0` | `0.16.1-beta-1` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.6.1` | `0.6.2` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` |
| [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver) | `2.9.1` | `2.9.2` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` |


Updates `github.com/bsv-blockchain/go-chaintracks` from 1.4.1 to 1.4.3
- [Release notes](https://github.com/bsv-blockchain/go-chaintracks/releases)
- [Commits](bsv-blockchain/go-chaintracks@v1.4.1...v1.4.3)

Updates `github.com/bsv-blockchain/go-p2p-message-bus` from 0.1.28 to 0.2.0
- [Release notes](https://github.com/bsv-blockchain/go-p2p-message-bus/releases)
- [Commits](bsv-blockchain/go-p2p-message-bus@v0.1.28...v0.2.0)

Updates `github.com/bsv-blockchain/go-sdk` from 1.7.0 to 1.7.2
- [Release notes](https://github.com/bsv-blockchain/go-sdk/releases)
- [Changelog](https://github.com/bsv-blockchain/go-sdk/blob/master/CHANGELOG.md)
- [Commits](bsv-blockchain/go-sdk@v1.7.0...v1.7.2)

Updates `github.com/bsv-blockchain/go-teranode-p2p-client` from 0.3.1 to 0.3.2
- [Release notes](https://github.com/bsv-blockchain/go-teranode-p2p-client/releases)
- [Commits](bsv-blockchain/go-teranode-p2p-client@v0.3.1...v0.3.2)

Updates `github.com/bsv-blockchain/teranode` from 0.16.0 to 0.16.1-beta-1
- [Release notes](https://github.com/bsv-blockchain/teranode/releases)
- [Commits](bsv-blockchain/teranode@v0.16.0...v0.16.1-beta-1)

Updates `github.com/moby/moby/client` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.6.2/CHANGELOG.md)
- [Commits](moby/moby@v0.6.1...v0.6.2)

Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.1...v1.25.0)

Updates `go.mongodb.org/mongo-driver/v2` from 2.9.1 to 2.9.2
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v2.9.1...v2.9.2)

Updates `golang.org/x/sync` from 0.23.0 to 0.24.0
- [Commits](golang/sync@v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: github.com/bsv-blockchain/go-chaintracks
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-all
- dependency-name: github.com/bsv-blockchain/go-p2p-message-bus
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-all
- dependency-name: github.com/bsv-blockchain/go-sdk
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-all
- dependency-name: github.com/bsv-blockchain/go-teranode-p2p-client
  dependency-version: 0.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-all
- dependency-name: github.com/bsv-blockchain/teranode
  dependency-version: 0.16.1-beta-1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-all
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-all
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-all
- dependency-name: go.mongodb.org/mongo-driver/v2
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-all
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from mrz1836 as a code owner October 14, 2026 18:04
@dependabot dependabot Bot added chore Simple dependency updates or version bumps dependencies Dependency updates, version bumps, etc. gomod Used for referencing Go Modules labels Oct 14, 2026
@github-actions github-actions Bot added the size/L Large change (201-500 lines) label Oct 14, 2026
galt-tr
galt-tr approved these changes Oct 14, 2026
View reviewed changes

@galt-tr galt-tr left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Auto-approving minor production dependency update: github.com/bsv-blockchain/go-chaintracks, github.com/bsv-blockchain/go-p2p-message-bus, github.com/bsv-blockchain/go-sdk, github.com/bsv-blockchain/go-teranode-p2p-client, github.com/bsv-blockchain/teranode, github.com/moby/moby/client, github.com/prometheus/client_golang, go.mongodb.org/mongo-driver/v2, golang.org/x/sync (1.4.1 → 1.4.3)

@galt-tr
galt-tr enabled auto-merge (squash) October 14, 2026 18:04
@github-actions github-actions Bot added automerge Label to automatically merge pull requests that meet all required conditions dependabot PR or issue created by or related to Dependabot minor-update prod-dependency labels Oct 14, 2026
@socket-security

socket-security Bot commented Oct 14, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedgithub.com/​moby/​moby/​client@​v0.6.1 ⏵ v0.6.271 +1100100100100
Updatedgithub.com/​prometheus/​client_golang@​v1.24.1 ⏵ v1.25.072 +1100100100100
Updatedgo.mongodb.org/​mongo-driver/​v2@​v2.9.1 ⏵ v2.9.275 +110010010080
Updatedgithub.com/​bsv-blockchain/​go-sdk@​v1.7.0 ⏵ v1.7.275 +110010010080
Updatedgithub.com/​bsv-blockchain/​teranode@​v0.16.0 ⏵ v0.16.1-beta-176 +110010010080
Updatedgithub.com/​bsv-blockchain/​go-chaintracks@​v1.4.1 ⏵ v1.4.39810010010080
Updatedgithub.com/​bsv-blockchain/​go-p2p-message-bus@​v0.1.28 ⏵ v0.2.010010010010080
Updatedgithub.com/​bsv-blockchain/​go-teranode-p2p-client@​v0.3.1 ⏵ v0.3.210010010010080
Updatedgolang.org/​x/​sync@​v0.23.0 ⏵ v0.24.099100100100100

View full report

@galt-tr
galt-tr merged commit 6f90d0a into main Oct 14, 2026
35 checks passed
@galt-tr
galt-tr deleted the dependabot/go_modules/main/gomod-all-4d34c6a68f branch October 14, 2026 18:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@galt-tr galt-tr galt-tr approved these changes
@mrz1836 mrz1836 Awaiting requested review from mrz1836 mrz1836 is a code owner

Assignees

@mrz1836 mrz1836

Labels

automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps dependabot PR or issue created by or related to Dependabot dependencies Dependency updates, version bumps, etc. gomod Used for referencing Go Modules minor-update prod-dependency size/L Large change (201-500 lines)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@galt-tr @mrz1836