Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 10, 2023

Bumps github.com/ethereum/go-ethereum from 1.10.17 to 1.11.4.

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Vana (v1.11.4)

This is a security release of Geth, improving resilience of the transaction pool against certain kinds of DoS attacks. These attacks have recently been observed in testnets.

Notable changes:

  • TxPool validation rules have been tightened to defend against certain DoS attacks. The new checks are based on research by @​dwn1998, @​wangyibo0308, @​ZhouYuxuan97, @​tristartom, @​fs3l. Thank you for your report and cooperation! (#26648)
  • EIP-712 signing in Clef now recognizes all primitive types of Solidity. (#26770)
  • EF bootstrap nodes on MS Azure have been removed because they will be decommissioned soon. (#26828)
  • The core.Message type has been changed from interface to struct and types.Message (in core/types) has been removed. This is a breaking API change in core/types. We believe the removal should not cause additional disruption for downstream projects because types.Messages had no meaningful use outside of package core. (#25977)
  • core.BlockGen has a new Timestamp method. (#26844)

For a full rundown of the changes please consult the Geth 1.11.4 release milestone.


As with all our previous releases, you can find the:

Spekilas (v1.11.3)

This is a minor release, fixing a couple of issues and enabling the Shanghai upgrade on Goerli at block timestamp 1678832736 (#26795).

⚠️ If you are running Goerli, this is a required update.

Minimum Go version

In accordance with our policy to only support the newest two versions of Go, we have changed the minimum required compiler version to Go 1.19 (#26803).

Pebble

In v1.11.0 we released Pebble support (guarded by the --db.engine=pebble flag). Thanks to everyone testing it! We found and fixed a few issues:

  • You can now set more than 4 GB in --cache when using Pebble. (#26776)
  • Range compaction now works correctly for Pebble. (#26771)
  • Pebble support is disabled on OpenBSD to resolve a compilation error. (#26801)

RPC changes

  • Add support for Parity-style flat traces with the new built-in flatCallTracer. (#26377)
  • The callTracer now reports a null address for failed contract creation operations. (#26779)
  • head and difficulty have been removed in admin_peerInfo responses. (#26804)

Other fixes

  • types.Receipt now contains the EffectiveGasPrice of the transaction, so you can get the true gas price using the TransactionReceipt method of ethclient. (#26713)
  • ethclient no longer panics when requesting missing blocks. This fixes a regression introduced in v1.11.2. (#26817)
  • ethclient now returns block withdrawals, if present. (#26778)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) from 1.10.17 to 1.11.4.
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.10.17...v1.11.4)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file. go Pull requests that update Go code labels Mar 10, 2023
@codecov
Copy link

codecov bot commented Mar 10, 2023

Codecov Report

Merging #337 (7c7c23a) into master (5ccdbbc) will decrease coverage by 5.14%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #337      +/-   ##
==========================================
- Coverage   68.77%   63.63%   -5.14%     
==========================================
  Files         132        1     -131     
  Lines        6770       11    -6759     
==========================================
- Hits         4656        7    -4649     
+ Misses       1406        2    -1404     
+ Partials      708        2     -706     

see 131 files with indirect coverage changes

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file. go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants