build(deps): Bump the all-go group across 4 directories with 10 updates by dependabot[bot] · Pull Request #3357 · evstack/ev-node

dependabot · 2026-06-15T21:12:56Z

Bumps the all-go group with 6 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.41.11`	`1.42.0`
github.com/aws/aws-sdk-go-v2/config	`1.32.22`	`1.32.25`
github.com/aws/aws-sdk-go-v2/service/kms	`1.53.2`	`1.53.4`
golang.org/x/crypto	`0.52.0`	`0.53.0`
golang.org/x/net	`0.55.0`	`0.56.0`
google.golang.org/api	`0.283.0`	`0.284.0`

Bumps the all-go group with 1 update in the /apps/loadgen directory: github.com/spf13/cobra.
Bumps the all-go group with 1 update in the /execution/evm directory: github.com/evstack/ev-node.
Bumps the all-go group with 1 update in the /execution/grpc directory: golang.org/x/net.

Updates github.com/aws/aws-sdk-go-v2 from 1.41.11 to 1.42.0

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.22 to 1.32.25

Commits

0016334 Release 2026-06-10
396a182 Regenerated Clients
3eb8533 Update API model
7bbea79 Release 2026-06-09
1fefa6c Regenerated Clients
a2cf49f Update endpoints model
d87be68 Update API model
9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.53.2 to 1.53.4

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.27.0 to 1.27.1

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-06-05)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.2

Bug Fix: Fix incorrect serialization of unions in CBOR-based protocols.

Release (2026-06-04)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.1

Bug Fix: Fixed a deserialization failure in all protocols when encountering a union with explicit null members.

Bug Fix: Fixed a panic when deserializing nested unions in JSON- and CBOR-based protocols.

Release (2026-06-02)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.0

Feature: Add APIs for schema-based serialization.

Feature: Add support for all current AWS and Smithy protocols.

Bug Fix: Enforce max nesting depth of 128 on CBOR payloads.

github.com/aws/smithy-go/aws-http-auth: v1.2.0

Feature: Add event stream signer.

Release (2026-05-27)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.26.0

Feature: Add StringSlice to endpoint rulesfn.

Release (2026-04-23)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.25.1

Bug Fix: Fixed a memory leak in the LRU cache implementation used by some AWS services.

... (truncated)

Commits

6a1dd2f Release 2026-06-04
ec26415 fix nested union json ctx break/smithy.ReadUnion contract issue (#673)
See full diff in compare view

Updates golang.org/x/crypto from 0.52.0 to 0.53.0

Commits

45460e0 go.mod: update golang.org/x dependencies
d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion
e2ffffe ssh: reject incomplete gssapi-with-mic configurations
60e158a ssh/test: isolate CLI tests from user SSH config and agent
1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers
3872a2b ssh/knownhosts: verify declared key type matches decoded key
9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace
8f405a4 ssh: validate ECDSA curve matches expected algorithm
bb41b3d ssh: improve DH GEX group selection using PreferredBits
e04e721 ssh/agent: validate ed25519 private key length in Add
Additional commits viewable in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits

9e7fdbf internal/http3: fix wrong argument being given when validating header value
b686e5f internal/http3: add gzip support to transport
8a34885 go.mod: update golang.org/x dependencies
72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
b64f1fa internal/http3: add server support for "Trailer:" magic prefix
2707ee2 internal/http3: implement HTTP/3 clientConn methods
31358cc internal/http3: snapshot response headers at WriteHeader time
8ecbaa9 html: don't adjust xml:base
8ae811a html: properly handle end script tag in fragment mode
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.20.0 to 0.21.0

Commits

5071ed6 all: fix some comments to improve readability
See full diff in compare view

Updates google.golang.org/api from 0.283.0 to 0.284.0

Release notes

Sourced from google.golang.org/api's releases.

v0.284.0

0.284.0 (2026-06-09)

Features

all: Auto-regenerate discovery clients (#3613) (5f02153)

all: Auto-regenerate discovery clients (#3616) (25b429a)

all: Auto-regenerate discovery clients (#3617) (1ef3625)

Changelog

Sourced from google.golang.org/api's changelog.

0.284.0 (2026-06-09)

Features

all: Auto-regenerate discovery clients (#3613) (5f02153)

all: Auto-regenerate discovery clients (#3616) (25b429a)

all: Auto-regenerate discovery clients (#3617) (1ef3625)

Commits

5c6a0b0 chore(main): release 0.284.0 (#3614)
1ef3625 feat(all): auto-regenerate discovery clients (#3617)
4dd580d chore(all): update all (#3615)
25b429a feat(all): auto-regenerate discovery clients (#3616)
5f02153 feat(all): auto-regenerate discovery clients (#3613)
See full diff in compare view

Updates github.com/spf13/cobra from 1.9.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

Fix linter and allow CI to pass by @marckhouzam in spf13/cobra#2327

fix: actions/setup-go v6 by @jpmcb in spf13/cobra#2337

🔥✍🏼 Docs

Add documentation for repeated flags functionality by @rvergis in spf13/cobra#2316

🍂 Refactors

refactor: replace several vars with consts by @htoyoda18 in spf13/cobra#2328

refactor: change minUsagePadding from var to const by @ssam18 in spf13/cobra#2325

🤗 New Contributors

@rvergis made their first contribution in spf13/cobra#2316

@htoyoda18 made their first contribution in spf13/cobra#2328

@ssam18 made their first contribution in spf13/cobra#2325

@dims made their first contribution in spf13/cobra#2336

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

... (truncated)

Commits

88b30ab chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)
346d408 fix: actions/setup-go v6 (#2337)
fc81d20 refactor: change minUsagePadding from var to const (#2325)
117698a refactor: replace several vars with consts (#2328)
e2dd29d Add documentation for repeated flags functionality (#2316)
0629892 Fix linter (#2327)
7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
Additional commits viewable in compare view

Updates github.com/evstack/ev-node from 1.1.2 to 1.1.3

Release notes

Sourced from github.com/evstack/ev-node's releases.

v1.1.3

This is a targeted bugfix release addressing a transaction queue backlog issue under heavy load. Operators running sequencer nodes with high transaction throughput are strongly encouraged to upgrade.

Full Changelog

For a complete list of all changes including new features, improvements, and bug fixes, see CHANGELOG.md.

Images

ghcr.io/evstack/ev-node-evm:v1.1.3

ghcr.io/evstack/ev-node-grpc:v1.1.3

ghcr.io/evstack/ev-node-testapp:v1.1.3

Changelog

Sourced from github.com/evstack/ev-node's changelog.

v1.1.3

Fixed

Drain the pending tx queue in merged batches with a durable WAL-backed ack, fixing severe queue backlog under heavy tx load. Tx dedup moved from the reaper cache into the sequencer queue #3351

Commits

d208cd0 chore: prep ev-node v1.1.3 (#3353)
85119a6 fix: drain pending tx queue in batches with durable ack (#3351)
3fed700 feat(loadgen): adding loadgen binary (#3335)
29e8542 build(deps): Bump codecov/codecov-action from 6 to 7 (#3348)
74efee3 Add locad devnet guide (#3350)
89c7fe8 chore: bring back dev replaces (#3347)
056bf5a chore: bump ev-node in apps (#3346)
See full diff in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits

9e7fdbf internal/http3: fix wrong argument being given when validating header value
b686e5f internal/http3: add gzip support to transport
8a34885 go.mod: update golang.org/x dependencies
72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
b64f1fa internal/http3: add server support for "Trailer:" magic prefix
2707ee2 internal/http3: implement HTTP/3 clientConn methods
31358cc internal/http3: snapshot response headers at WriteHeader time
8ecbaa9 html: don't adjust xml:base
8ae811a html: properly handle end script tag in fragment mode
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-go group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.11` | `1.42.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.22` | `1.32.25` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.53.2` | `1.53.4` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.55.0` | `0.56.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.283.0` | `0.284.0` | Bumps the all-go group with 1 update in the /apps/loadgen directory: [github.com/spf13/cobra](https://github.com/spf13/cobra). Bumps the all-go group with 1 update in the /execution/evm directory: [github.com/evstack/ev-node](https://github.com/evstack/ev-node). Bumps the all-go group with 1 update in the /execution/grpc directory: [golang.org/x/net](https://github.com/golang/net). Updates `github.com/aws/aws-sdk-go-v2` from 1.41.11 to 1.42.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.41.11...v1.42.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.22 to 1.32.25 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.22...config/v1.32.25) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.53.2 to 1.53.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.53.2...service/kms/v1.53.4) Updates `github.com/aws/smithy-go` from 1.27.0 to 1.27.1 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.27.0...v1.27.1) Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0 - [Commits](golang/crypto@v0.52.0...v0.53.0) Updates `golang.org/x/net` from 0.55.0 to 0.56.0 - [Commits](golang/net@v0.55.0...v0.56.0) Updates `golang.org/x/sync` from 0.20.0 to 0.21.0 - [Commits](golang/sync@v0.20.0...v0.21.0) Updates `google.golang.org/api` from 0.283.0 to 0.284.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.283.0...v0.284.0) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.2) Updates `github.com/evstack/ev-node` from 1.1.2 to 1.1.3 - [Release notes](https://github.com/evstack/ev-node/releases) - [Changelog](https://github.com/evstack/ev-node/blob/main/CHANGELOG.md) - [Commits](v1.1.2...v1.1.3) Updates `golang.org/x/net` from 0.55.0 to 0.56.0 - [Commits](golang/net@v0.55.0...v0.56.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-version: 1.53.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: github.com/aws/smithy-go dependency-version: 1.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/crypto dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: golang.org/x/sync dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: google.golang.org/api dependency-version: 0.284.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go - dependency-name: github.com/evstack/ev-node dependency-version: 1.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go - dependency-name: golang.org/x/net dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the T:dependencies label Jun 15, 2026

chore: run just deps after Dependabot update

e189485

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the all-go group across 4 directories with 10 updates#3357

build(deps): Bump the all-go group across 4 directories with 10 updates#3357
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/all-go-f7bebf7647

dependabot Bot commented on behalf of github Jun 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 15, 2026

Release (2026-06-05)

General Highlights

Module Highlights

Release (2026-06-04)

General Highlights

Module Highlights

Release (2026-06-02)

General Highlights

Module Highlights

Release (2026-05-27)

General Highlights

Module Highlights

Release (2026-04-23)

General Highlights

Module Highlights

v0.284.0

0.284.0 (2026-06-09)

Features

0.284.0 (2026-06-09)

Features

v1.10.2

🔧 Dependencies

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

v1.1.3

Full Changelog

v1.1.3

Fixed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants