Skip to content

Bump the dependencies group with 3 updates#601

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/dependencies-a93c44ebbe
Open

Bump the dependencies group with 3 updates#601
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/dependencies-a93c44ebbe

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the dependencies group with 3 updates: github.com/ethereum/go-ethereum, github.com/minio/minio-go/v7 and golang.org/x/time.

Updates github.com/ethereum/go-ethereum from 1.17.0 to 1.17.1

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Eezo Shunt (v1.17.1)

This is a bug fix release and is recommended for all users. It resolves a regression in snap sync, as well as several security issues.

Geth

  • The engine API no longer enables plain-text HTTP2, due to some reports of incompatibilities with the teku CL (#33922)
  • The new --metrics.influxdb.interval flag allows changing the metrics reporting interval. (#33767)
  • Geth has a new inspect-trie subcommand that prints information about node counts at all state trie depths (#28892)

Core

  • Some Amsterdam fork-related changes:
  • Payload building had a fix that could prevent the CL from receiving the latest built payloads (#33908)

Networking

  • Geth no longer supports p2p protocol version eth/68 (#33511)
  • A rare crash in p2p request tracking is resolved (#33940)
  • The transaction pool, and specifically the blobpool, saw some fixes that reduce relaying transactions that likely won't make it into the chain, or have already been included on chain recently. This should reduce txpool traffic (#33607, #33887, #33923, #33893)
  • In v1.17.0, a regression in snap-sync was introduced that would cause sync to fail when using --history.chain=postmerge (#33865)
  • Snap-sync had a bug where peer connections would stop being used after a timeout or similar event. This wasn't too noticeable for mainnet sync because of peer churn (#33790)
  • Unexpected state delivered by peers is now reported during snap-sync (#33898)
  • P2P listener metrics now record handshake timeouts correctly (#33539)

RPC

  • eth_estimateGas now honors the user-supplied access list (#33849)
  • New RPC method: eth_getStorageValues (#32591)
  • New RPC method: testing_buildBlockV1 (#33656)

Build

  • This release is built with Go 1.25.7 (#33874)
  • Our official Docker images are experimentally built with Go 1.26 (#33899)

For a full rundown of the changes please consult the Geth 1.17.1 release milestone.


As with all our previous releases, you can find the:

Commits

Updates github.com/minio/minio-go/v7 from 7.0.98 to 7.0.99

Commits
  • c44cb2a Fix PutObject and ConcurrentStreamParts error handling for empty stream (#2207)
  • 1451162 Fix object ReadAt performs seek (#2197)
  • ffb7ec0 Implement support for new UpdateObjectEncryption API & bump Go to 1.25 (#2204)
  • See full diff in compare view

Updates golang.org/x/time from 0.14.0 to 0.15.0

Commits
  • 812b343 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum), [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) and [golang.org/x/time](https://github.com/golang/time).


Updates `github.com/ethereum/go-ethereum` from 1.17.0 to 1.17.1
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.0...v1.17.1)

Updates `github.com/minio/minio-go/v7` from 7.0.98 to 7.0.99
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](minio/minio-go@v7.0.98...v7.0.99)

Updates `golang.org/x/time` from 0.14.0 to 0.15.0
- [Commits](golang/time@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.0.99
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants