Open renovate[bot] opened 2 weeks ago
renovate[bot]
commented
2 weeks ago In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):
Details:
| Package | Change |
|---|---|
github.com/holiman/billy |
v0.0.0-20230718173358-1c7e68d277a7 -> v0.0.0-20240216141850-2abb0c79d3c4 |
coderabbitai[bot]
commented
2 weeks ago [!IMPORTANT]
Review skipped
Bot user detected.
To trigger a single review, invoke the
@coderabbitai reviewcommand.You can disable this status message by setting the
reviews.review_statustofalsein the CodeRabbit configuration file.
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?
codecov[bot]
commented
2 weeks ago All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 25.68527%. Comparing base (
d787c29) to head (2bc37d3).
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
cloudflare-pages[bot]
commented
2 weeks ago 
Cloudflare Pages| Latest commit: |
2bc37d3
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://b71b87c2.sanguine-fe.pages.dev |
| Branch Preview URL: | https://renovate-opbot-go-github-com.sanguine-fe.pages.dev |
This PR contains the following updates:
v1.13.8->v1.13.15GitHub Vulnerability Alerts
CVE-2024-32972
Impact
A vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node.
More in-depth details will be released at a later time.
Patches
The fix has been included in geth version
1.13.15and onwards.Workarounds
No workarounds have been made public.
References
No more information is released at this time.
Credit
This issue was disclosed responsibly by DongHan Kim via the Ethereum bug bounty program. Thank you for your cooperation.
Release Notes
ethereum/go-ethereum (github.com/ethereum/go-ethereum)
### [`v1.13.15`](https://togithub.com/ethereum/go-ethereum/releases/tag/v1.13.15): Ontamalca (v1.13.15) [Compare Source](https://togithub.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15) Geth v1.13.15 is a maintenance-release that contains some fixes mainly to avoid snapsync-related data-corruption. We recommend all users to upgrade to v1.13.15 as soon as possible. *** As with all our previous releases, you can find the: - Pre-built binaries for all platforms on our [downloads page](https://geth.ethereum.org/downloads/). - Docker images published under [`ethereum/client-go`](https://cloud.docker.com/u/ethereum/repository/docker/ethereum/client-go). - Ubuntu packages in our [Launchpad PPA repository](https://launchpad.net/~ethereum/+archive/ubuntu/ethereum). - OSX packages in our [Homebrew Tap repository](https://togithub.com/ethereum/homebrew-ethereum). ### [`v1.13.14`](https://togithub.com/ethereum/go-ethereum/releases/tag/v1.13.14): Altaaya (v1.13.14) [Compare Source](https://togithub.com/ethereum/go-ethereum/compare/v1.13.13...v1.13.14) Geth v1.13.14 is a small maintenance release with a handful of polishes to the blob pool: - Disallow blob transactions below the protocol minimum of 1 wei to enter the pool ([#29081](https://togithub.com/ethereum/go-ethereum/pull/29081)). - Reduce the blob pool's max capacity to 2.5GB for the rollout. ([#29090](https://togithub.com/ethereum/go-ethereum/pull/29090)). - Fix gas estimation for blob transactions ([#29085](https://togithub.com/ethereum/go-ethereum/pull/29085)). ***This release is NOT critical for the Cancun fork, but recommended to make Geth lighter in anticipation to unknown blob load.*** Other fixes: - Support overriding the basefee during tracing ([#29051](https://togithub.com/ethereum/go-ethereum/pull/29051)). - Fix call tracers missing top level logs in top-only mode ([#29068](https://togithub.com/ethereum/go-ethereum/pull/29068)). - Support unlimited gas for `eth_createAccessList` if `--gascap=0` ([#28846](https://togithub.com/ethereum/go-ethereum/pull/28846)). For a full rundown of the changes please consult the Geth [1.13.14 release milestone](https://togithub.com/ethereum/go-ethereum/milestone/162?closed=1). *** As with all our previous releases, you can find the: - Pre-built binaries for all platforms on our [downloads page](https://geth.ethereum.org/downloads/). - Docker images published under [`ethereum/client-go`](https://cloud.docker.com/u/ethereum/repository/docker/ethereum/client-go). - Ubuntu packages in our [Launchpad PPA repository](https://launchpad.net/~ethereum/+archive/ubuntu/ethereum). - OSX packages in our [Homebrew Tap repository](https://togithub.com/ethereum/homebrew-ethereum). ### [`v1.13.13`](https://togithub.com/ethereum/go-ethereum/releases/tag/v1.13.13): Alsages (v1.13.13) [Compare Source](https://togithub.com/ethereum/go-ethereum/compare/v1.13.12...v1.13.13) This is a minor release with fixes for several issues related to the upcoming Cancun mainnet fork. As such, it is recommended for all mainnet users. Changes in this release: - Block-building performance with blob transactions has been improved a lot. ([#29026](https://togithub.com/ethereum/go-ethereum/pull/29026), [#29008](https://togithub.com/ethereum/go-ethereum/pull/29008), [#29005](https://togithub.com/ethereum/go-ethereum/pull/29005)) - A corner case in the EVM related to out-of-order fork scheduling has been fixed. ([#29023](https://togithub.com/ethereum/go-ethereum/pull/29023)) - `eth_fillTransaction` has seen some bug fixes related to blob transactions as well. ([#28929](https://togithub.com/ethereum/go-ethereum/pull/28929), [#29037](https://togithub.com/ethereum/go-ethereum/pull/29037)) - A rare panic in the ethstats client related to chain reorgs is resolved. ([#29020](https://togithub.com/ethereum/go-ethereum/pull/29020)) - The blobpool database will now recover from disk corruption faults instead of crashing geth on startup. ([#29001](https://togithub.com/ethereum/go-ethereum/pull/29001)) - Geth now implements `getClientVersionV1` on the Engine API endpoint. ([#28915](https://togithub.com/ethereum/go-ethereum/pull/28915), [#28994](https://togithub.com/ethereum/go-ethereum/pull/28994)) Go API changes: - `ethereum.CallMsg` now contains EIP-4844 related fields ([#28989](https://togithub.com/ethereum/go-ethereum/pull/28989)) - `core.GenesisAlloc` is now available from package `core/types`. We hope this change will reduce external dependencies on package `core`. ([#29003](https://togithub.com/ethereum/go-ethereum/pull/29003)) For a full rundown of the changes please consult the Geth [1.13.13 release milestone](https://togithub.com/ethereum/go-ethereum/milestone/161?closed=1). *** As with all our previous releases, you can find the: - Pre-built binaries for all platforms on our [downloads page](https://geth.ethereum.org/downloads/). - Docker images published under [`ethereum/client-go`](https://cloud.docker.com/u/ethereum/repository/docker/ethereum/client-go). - Ubuntu packages in our [Launchpad PPA repository](https://launchpad.net/~ethereum/+archive/ubuntu/ethereum). - OSX packages in our [Homebrew Tap repository](https://togithub.com/ethereum/homebrew-ethereum). ### [`v1.13.12`](https://togithub.com/ethereum/go-ethereum/releases/tag/v1.13.12): Edolus (v1.13.12) [Compare Source](https://togithub.com/ethereum/go-ethereum/compare/v1.13.11...v1.13.12) This release embeds the mainnet fork number for Cancun, scheduled to go live on 13th March, 2024 (unix `1710338135`). The specification can be read [here](https://togithub.com/ethereum/execution-specs/blob/master/network-upgrades/mainnet-upgrades/cancun.md), and it contains the following changes: - [EIP-1153: Transient storage opcodes](https://eips.ethereum.org/EIPS/eip-1153) - [EIP-4788: Beacon block root in the EVM ](https://eips.ethereum.org/EIPS/eip-4788) - [EIP-4844: Shard Blob Transactions](https://eips.ethereum.org/EIPS/eip-4844) - [EIP-5656: MCOPY - Memory copying instruction](https://eips.ethereum.org/EIPS/eip-5656) - [EIP-6780: SELFDESTRUCT only in same transaction](https://eips.ethereum.org/EIPS/eip-6780) - [EIP-7516: BLOBBASEFEE opcode](https://eips.ethereum.org/EIPS/eip-7516) To go along Cancun, we're providing refreshed Grafana dashboards: - [Geth Cancun InfluxDB Dashboard](https://togithub.com/ethereum/go-ethereum/files/14211069/Geth-Cancun-InfluxDB.json) - [Geth Cancun Prometheus Dashboard](https://togithub.com/ethereum/go-ethereum/files/14211070/Geth-Cancun-Prometheus.json) Other than that, the following assorted fixes and features are included in this release: - Initial implementation of the `era` format. The `era` format is meant to provide a cross-client archive format for block data ([#26621](https://togithub.com/ethereum/go-ethereum/pull/26621), [#28959](https://togithub.com/ethereum/go-ethereum/pull/28959)) - Make rpc request limits configurable ([#28948](https://togithub.com/ethereum/go-ethereum/pull/28948)) - Fix memory-leak with blob transactions ([#28917](https://togithub.com/ethereum/go-ethereum/pull/28917)) - Stricter adherence to engine api spec ([#28882](https://togithub.com/ethereum/go-ethereum/pull/28882)) - Fix enforcement of minimum miner tip ([#28933](https://togithub.com/ethereum/go-ethereum/pull/28933)) For a full rundown of the changes please consult the Geth 1.13.12 [release milestone](https://togithub.com/ethereum/go-ethereum/milestone/160?closed=1). *** As with all our previous releases, you can find the: - Pre-built binaries for all platforms on our [downloads page](https://geth.ethereum.org/downloads/). - Docker images published under [`ethereum/client-go`](https://cloud.docker.com/u/ethereum/repository/docker/ethereum/client-go). - Ubuntu packages in our [Launchpad PPA repository](https://launchpad.net/~ethereum/+archive/ubuntu/ethereum). - OSX packages in our [Homebrew Tap repository](https://togithub.com/ethereum/homebrew-ethereum). ### [`v1.13.11`](https://togithub.com/ethereum/go-ethereum/releases/tag/v1.13.11): Tremanre (v1.13.11) [Compare Source](https://togithub.com/ethereum/go-ethereum/compare/v1.13.10...v1.13.11) This release fixes a few bugs and enables the Cancun upgrade for the Sepolia and Holesky networks; Sepolia will upgrade on Jan 31, and Holesky on Feb 7, and naturally this is a required upgrade if you intend to follow either chain. - Enable Cancun on Sepolia and Holesky, plus Cancun-related changes ([#28834](https://togithub.com/ethereum/go-ethereum/pull/28834), [#28246](https://togithub.com/ethereum/go-ethereum/pull/28246), [#28230](https://togithub.com/ethereum/go-ethereum/pull/28230), [#28827](https://togithub.com/ethereum/go-ethereum/pull/28827)) - Support EIP-4844 transactions in API-methods ([#28786](https://togithub.com/ethereum/go-ethereum/pull/28786)) - Change how transaction indexing operates. As of 1.13.11, the behaviour of `eth_syncing` is slightly changed, so that it now does reports `true` until transaction indexing is finished. ([#28703](https://togithub.com/ethereum/go-ethereum/pull/28703)) - `rlpdump`: add `-pos` flag for displaying byte positions ([#28785](https://togithub.com/ethereum/go-ethereum/pull/28785)) - Fixes logging configuration ([#28801](https://togithub.com/ethereum/go-ethereum/pull/28801)) For a full rundown of the changes please consult the Geth 1.13.11 [release milestone](https://togithub.com/ethereum/go-ethereum/milestone/159?closed=1). *** As with all our previous releases, you can find the: - Pre-built binaries for all platforms on our [downloads page](https://geth.ethereum.org/downloads/). - Docker images published under [`ethereum/client-go`](https://cloud.docker.com/u/ethereum/repository/docker/ethereum/client-go). - Ubuntu packages in our [Launchpad PPA repository](https://launchpad.net/~ethereum/+archive/ubuntu/ethereum). - OSX packages in our [Homebrew Tap repository](https://togithub.com/ethereum/homebrew-ethereum). ### [`v1.13.10`](https://togithub.com/ethereum/go-ethereum/releases/tag/v1.13.10): Sharjila B (v1.13.10) [Compare Source](https://togithub.com/ethereum/go-ethereum/compare/v1.13.9...v1.13.10) **This release is equivalent to v1.13.9, just contains a version bump. The reason is that a bad commit was tagged on 1.13.9 originally and whilst it was untagged and fixed, some caches (Go's package manager (`go mod`)) managed to store the temporary bad version. As there is no way for us to flush the bad version out, it's cleaner to tag a next version instead. Apologies about the mess.** *** This release fixes a few issues and **enables the Cancun upgrade for the Goerli network** at block timestamp [`1705473`](https://togithub.com/ethereum/go-ethereum/commit/1705473120) ([#28719](https://togithub.com/ethereum/go-ethereum/pull/28719)) which is 6:32:am 17. Jan. 2024 UTC. :warning: **If you are running Goerli, this is a required update!** Apart from the Goerli configuration update, we have a few other changes. - The 'simulated backend' in package `accounts/abi/backends` was rewritten. The improved version is available from the new package `ethclient/simulated`. A backwards-compatibility wrapper remains in the old location. ([#28202](https://togithub.com/ethereum/go-ethereum/pull/28202)) - Fix ABI-encoding of negative big.Int in topics ([#28764](https://togithub.com/ethereum/go-ethereum/pull/28764)) - In JSON logging output, the "error" level is now correctly emitted as `"error"`. ([#28774](https://togithub.com/ethereum/go-ethereum/pull/28774), [#28780](https://togithub.com/ethereum/go-ethereum/pull/28780)) - Fixed an issue with configuration of stdlib package `log` for consumers of the geth library ([#28747](https://togithub.com/ethereum/go-ethereum/pull/28747)) - `geth removedb` can now be run non-interactively ([#28725](https://togithub.com/ethereum/go-ethereum/pull/28725)) - We're building a package for ubuntu 23.10: mantic minotaur now ([#28728](https://togithub.com/ethereum/go-ethereum/pull/28728)) ##### Testing - Add `currentExcessBlobGas` to the state tests for better coverage of state tests ([#28735](https://togithub.com/ethereum/go-ethereum/pull/28735)) - Fixed an issue in t8n regarding blob gas usage ([#28735](https://togithub.com/ethereum/go-ethereum/pull/28734)) For a full rundown of the changes please consult the Geth 1.13.9 [release milestone](https://togithub.com/ethereum/go-ethereum/milestone/157?closed=1). *** As with all our previous releases, you can find the: - Pre-built binaries for all platforms on our [downloads page](https://geth.ethereum.org/downloads/). - Docker images published under [`ethereum/client-go`](https://cloud.docker.com/u/ethereum/repository/docker/ethereum/client-go). - Ubuntu packages in our [Launchpad PPA repository](https://launchpad.net/~ethereum/+archive/ubuntu/ethereum). - OSX packages in our [Homebrew Tap repository](https://togithub.com/ethereum/homebrew-ethereum). ### [`v1.13.9`](https://togithub.com/ethereum/go-ethereum/releases/tag/v1.13.9): Sharjila (v1.13.9) [Compare Source](https://togithub.com/ethereum/go-ethereum/compare/v1.13.8...v1.13.9) This release fixes a few issues and **enables the Cancun upgrade for the Goerli network** at block timestamp [`1705473`](https://togithub.com/ethereum/go-ethereum/commit/1705473120) ([#28719](https://togithub.com/ethereum/go-ethereum/pull/28719)) which is 6:32:am 17. Jan. 2024 UTC. :warning: **If you are running Goerli, this is a required update!** Apart from the Goerli configuration update, we have a few other changes. - The 'simulated backend' in package `accounts/abi/backends` was rewritten. The improved version is available from the new package `ethclient/simulated`. A backwards-compatibility wrapper remains in the old location. ([#28202](https://togithub.com/ethereum/go-ethereum/pull/28202)) - Fix ABI-encoding of negative big.Int in topics ([#28764](https://togithub.com/ethereum/go-ethereum/pull/28764)) - In JSON logging output, the "error" level is now correctly emitted as `"error"`. ([#28774](https://togithub.com/ethereum/go-ethereum/pull/28774), [#28780](https://togithub.com/ethereum/go-ethereum/pull/28780)) - Fixed an issue with configuration of stdlib package `log` for consumers of the geth library ([#28747](https://togithub.com/ethereum/go-ethereum/pull/28747)) - `geth removedb` can now be run non-interactively ([#28725](https://togithub.com/ethereum/go-ethereum/pull/28725)) - We're building a package for ubuntu 23.10: mantic minotaur now ([#28728](https://togithub.com/ethereum/go-ethereum/pull/28728)) ##### Testing - Add `currentExcessBlobGas` to the state tests for better coverage of state tests ([#28735](https://togithub.com/ethereum/go-ethereum/pull/28735)) - Fixed an issue in t8n regarding blob gas usage ([#28735](https://togithub.com/ethereum/go-ethereum/pull/28734)) For a full rundown of the changes please consult the Geth 1.13.9 [release milestone](https://togithub.com/ethereum/go-ethereum/milestone/157?closed=1). *** As with all our previous releases, you can find the: - Pre-built binaries for all platforms on our [downloads page](https://geth.ethereum.org/downloads/). - Docker images published under [`ethereum/client-go`](https://cloud.docker.com/u/ethereum/repository/docker/ethereum/client-go). - Ubuntu packages in our [Launchpad PPA repository](https://launchpad.net/~ethereum/+archive/ubuntu/ethereum). - OSX packages in our [Homebrew Tap repository](https://togithub.com/ethereum/homebrew-ethereum).Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.