coinbase / mesh-sdk-go

Mesh Client Go SDK
Apache License 2.0
194 stars 136 forks source link

Bump github.com/ethereum/go-ethereum from 1.10.21 to 1.11.4 #476

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps github.com/ethereum/go-ethereum from 1.10.21 to 1.11.4.

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Vana (v1.11.4)

This is a security release of Geth, improving resilience of the transaction pool against certain kinds of DoS attacks. These attacks have recently been observed in testnets.

Notable changes:

  • TxPool validation rules have been tightened to defend against certain DoS attacks. The new checks are based on research by @​dwn1998, @​wangyibo0308, @​ZhouYuxuan97, @​tristartom, @​fs3l. Thank you for your report and cooperation! (#26648)
  • EIP-712 signing in Clef now recognizes all primitive types of Solidity. (#26770)
  • EF bootstrap nodes on MS Azure have been removed because they will be decommissioned soon. (#26828)
  • The core.Message type has been changed from interface to struct and types.Message (in core/types) has been removed. This is a breaking API change in core/types. We believe the removal should not cause additional disruption for downstream projects because types.Messages had no meaningful use outside of package core. (#25977)
  • core.BlockGen has a new Timestamp method. (#26844)

For a full rundown of the changes please consult the Geth 1.11.4 release milestone.


As with all our previous releases, you can find the:

Spekilas (v1.11.3)

This is a minor release, fixing a couple of issues and enabling the Shanghai upgrade on Goerli at block timestamp 1678832736 (#26795).

:warning: If you are running Goerli, this is a required update.

Minimum Go version

In accordance with our policy to only support the newest two versions of Go, we have changed the minimum required compiler version to Go 1.19 (#26803).

Pebble

In v1.11.0 we released Pebble support (guarded by the --db.engine=pebble flag). Thanks to everyone testing it! We found and fixed a few issues:

  • You can now set more than 4 GB in --cache when using Pebble. (#26776)
  • Range compaction now works correctly for Pebble. (#26771)
  • Pebble support is disabled on OpenBSD to resolve a compilation error. (#26801)

RPC changes

  • Add support for Parity-style flat traces with the new built-in flatCallTracer. (#26377)
  • The callTracer now reports a null address for failed contract creation operations. (#26779)
  • head and difficulty have been removed in admin_peerInfo responses. (#26804)

Other fixes

  • types.Receipt now contains the EffectiveGasPrice of the transaction, so you can get the true gas price using the TransactionReceipt method of ethclient. (#26713)
  • ethclient no longer panics when requesting missing blocks. This fixes a regression introduced in v1.11.2. (#26817)
  • ethclient now returns block withdrawals, if present. (#26778)

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Superseded by #477.