Skip to content

build(deps): Bump the all-go group across 8 directories with 6 updates#3076

Merged
julienrbrt merged 4 commits intomainfrom
dependabot/go_modules/all-go-a3de7dede9
Feb 17, 2026
Merged

build(deps): Bump the all-go group across 8 directories with 6 updates#3076
julienrbrt merged 4 commits intomainfrom
dependabot/go_modules/all-go-a3de7dede9

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 16, 2026

Bumps the all-go group with 3 updates in the / directory: github.com/filecoin-project/go-jsonrpc, github.com/ipfs/go-datastore and github.com/libp2p/go-libp2p-kad-dht.
Bumps the all-go group with 1 update in the /apps/evm directory: github.com/ipfs/go-datastore.
Bumps the all-go group with 1 update in the /apps/grpc directory: github.com/ipfs/go-datastore.
Bumps the all-go group with 1 update in the /apps/testapp directory: github.com/ipfs/go-datastore.
Bumps the all-go group with 1 update in the /execution/evm directory: github.com/ipfs/go-datastore.
Bumps the all-go group with 1 update in the /execution/grpc directory: github.com/evstack/ev-node.
Bumps the all-go group with 1 update in the /test/docker-e2e directory: github.com/evstack/ev-node/execution/evm.
Bumps the all-go group with 1 update in the /test/e2e directory: github.com/cosmos/cosmos-sdk.

Updates github.com/filecoin-project/go-jsonrpc from 0.10.0 to 0.10.1

Release notes

Sourced from github.com/filecoin-project/go-jsonrpc's releases.

v0.10.1

What's Changed

Full Changelog: filecoin-project/go-jsonrpc@v0.10.0...v0.10.1

Commits

Updates github.com/ipfs/go-datastore from 0.9.0 to 0.9.1

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.9.1

What's Changed

Full Changelog: ipfs/go-datastore@v0.9.0...v0.9.1

Commits

Updates github.com/libp2p/go-libp2p-kad-dht from 0.37.1 to 0.38.0

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.38.0

What's Changed

Full Changelog: libp2p/go-libp2p-kad-dht@v0.37.1...v0.38.0

Commits

Updates github.com/ipfs/go-datastore from 0.9.0 to 0.9.1

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.9.1

What's Changed

Full Changelog: ipfs/go-datastore@v0.9.0...v0.9.1

Commits

Updates github.com/ipfs/go-datastore from 0.9.0 to 0.9.1

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.9.1

What's Changed

Full Changelog: ipfs/go-datastore@v0.9.0...v0.9.1

Commits

Updates github.com/ipfs/go-datastore from 0.9.0 to 0.9.1

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.9.1

What's Changed

Full Changelog: ipfs/go-datastore@v0.9.0...v0.9.1

Commits

Updates github.com/ipfs/go-datastore from 0.9.0 to 0.9.1

Release notes

Sourced from github.com/ipfs/go-datastore's releases.

v0.9.1

What's Changed

Full Changelog: ipfs/go-datastore@v0.9.0...v0.9.1

Commits

Updates github.com/evstack/ev-node from 1.0.0-rc.3 to 1.0.0-rc.4

Changelog

Sourced from github.com/evstack/ev-node's changelog.

v1.0.0-rc.4

Changes

  • Skip draining when exec client unavailable. #3060
Commits

Updates github.com/evstack/ev-node/execution/evm from 1.0.0-rc.2 to 1.0.0-rc.3

Release notes

Sourced from github.com/evstack/ev-node/execution/evm's releases.

v1.0.0-rc.3 (2026-02-05)

ev-node v1.0.0-rc.3

This is new release candidate focused on improving cache handling, fixing critical bugs in block replay logic, and enhancing node synchronization with DA hints for P2P transactions. This release includes one breaking change related to cache persistence behavior that requires operator awareness.

Tested upgrade paths

  • ev-node v1.0.0-rc.2 -> ev-node v1.0.0-rc.3

⚠️ Breaking Changes

Cache Persistence Changes

What changed: The pending events cache and transaction cache are now fully ephemeral and will not persist across node restarts. Only the DA inclusion cache persists (stored in metadata) until cleared after DA inclusion processing has been completed. (#3047)

Action required:

  1. Be aware that on node restart, pending events and transactions will need to be re-fetched from peers or the DA layer
  2. Operators can delete the previous file cache to save disk space (rm -rf ./appd/data/cache)

Full Changelog

For a complete list of all changes including new features, improvements, and bug fixes, see CHANGELOG.md.

Images

  • ghcr.io/evstack/ev-node-evm:v1.0.0-rc.3
  • ghcr.io/evstack/ev-node-grpc:v1.0.0-rc.3
  • ghcr.io/evstack/ev-node-testapp:v1.0.0-rc.3
Changelog

Sourced from github.com/evstack/ev-node/execution/evm's changelog.

v1.0.0-rc.3

Added

  • Add DA Hints for P2P transactions. This allows a catching up node to be on sync with both DA and P2P. (#2891)

Changes

  • Improve cache.NumPendingData to not return empty data. Automatically bumps LastSubmittedHeight to reflect that. (#3046)
  • BREAKING Make pending events cache and tx cache fully ephemeral. Those will be re-fetched on restart. DA Inclusion cache persists until cleared up after DA inclusion has been processed. Persist accross restart using store metadata. (#3047)
  • Replace LRU cache by standard mem cache with manual eviction in store_adapter. When P2P blocks were fetched too fast, they would be evicted before being executed #3051
  • Fix replay logic leading to app hashes by verifying against the wrong block #3053.
Commits
  • aedd573 fix(block): fix replay logic (#3053)
  • 0425059 chore: updating changelog to include telemetry options (#3052)
  • b8eda5d refactor(store): improve cache restore perf & fix go-header store errs (#3051)
  • 0a349c0 build(deps): Bump bytes from 1.11.0 to 1.11.1 in the cargo group across 1 dir...
  • d20b1ac refactor(cache)!: remove gob cache (#3047)
  • 2510fe7 ci: release process with breaking changes (#2998)
  • 432d5a7 test: adding compatibility test to perform syncing (#3023)
  • 120195f build(deps): Bump the all-go group across 4 directories with 9 updates (#3042)
  • e7bf19d refactor(cache): skip empty data in pending data (#3046)
  • e8e8946 feat: DA hints in p2p (#2891)
  • Additional commits viewable in compare view

Updates github.com/cosmos/cosmos-sdk from 0.53.5 to 0.53.6

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.53.6

Cosmos SDK v0.53.6 Release Notes

🚀 Highlights

This patch release includes minor dependency bumps and functionality additions.

📝 Changelog

Check out the changelog for an exhaustive list of changes or compare changes from the last release.

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.53.6 - 2026-02-10

Improvements

  • (deps) #25710 Bump github.com/cosmos/ledger-cosmos-go from 0.16.0 to 1.0.0
  • (deps) #25820 Bump github.com/cometbft/cometbft from 0.80.20 to 0.38.21

Bug Fixes

  • (x/auth) #25871 Limits pagination at default for values that exceed it.
  • (events) #25881 Add OverrideEvents to EventManagerI.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the all-go group across 8 directories with 6 updates
376fb78 
Bumps the all-go group with 3 updates in the / directory: [github.com/filecoin-project/go-jsonrpc](https://github.com/filecoin-project/go-jsonrpc), [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore) and [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht).
Bumps the all-go group with 1 update in the /apps/evm directory: [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore).
Bumps the all-go group with 1 update in the /apps/grpc directory: [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore).
Bumps the all-go group with 1 update in the /apps/testapp directory: [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore).
Bumps the all-go group with 1 update in the /execution/evm directory: [github.com/ipfs/go-datastore](https://github.com/ipfs/go-datastore).
Bumps the all-go group with 1 update in the /execution/grpc directory: [github.com/evstack/ev-node](https://github.com/evstack/ev-node).
Bumps the all-go group with 1 update in the /test/docker-e2e directory: [github.com/evstack/ev-node/execution/evm](https://github.com/evstack/ev-node).
Bumps the all-go group with 1 update in the /test/e2e directory: [github.com/cosmos/cosmos-sdk](https://github.com/cosmos/cosmos-sdk).


Updates `github.com/filecoin-project/go-jsonrpc` from 0.10.0 to 0.10.1
- [Release notes](https://github.com/filecoin-project/go-jsonrpc/releases)
- [Commits](filecoin-project/go-jsonrpc@v0.10.0...v0.10.1)

Updates `github.com/ipfs/go-datastore` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/ipfs/go-datastore/releases)
- [Commits](ipfs/go-datastore@v0.9.0...v0.9.1)

Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.37.1 to 0.38.0
- [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases)
- [Commits](libp2p/go-libp2p-kad-dht@v0.37.1...v0.38.0)

Updates `github.com/ipfs/go-datastore` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/ipfs/go-datastore/releases)
- [Commits](ipfs/go-datastore@v0.9.0...v0.9.1)

Updates `github.com/ipfs/go-datastore` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/ipfs/go-datastore/releases)
- [Commits](ipfs/go-datastore@v0.9.0...v0.9.1)

Updates `github.com/ipfs/go-datastore` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/ipfs/go-datastore/releases)
- [Commits](ipfs/go-datastore@v0.9.0...v0.9.1)

Updates `github.com/ipfs/go-datastore` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/ipfs/go-datastore/releases)
- [Commits](ipfs/go-datastore@v0.9.0...v0.9.1)

Updates `github.com/evstack/ev-node` from 1.0.0-rc.3 to 1.0.0-rc.4
- [Release notes](https://github.com/evstack/ev-node/releases)
- [Changelog](https://github.com/evstack/ev-node/blob/main/CHANGELOG.md)
- [Commits](v1.0.0-rc.3...v1.0.0-rc.4)

Updates `github.com/evstack/ev-node/execution/evm` from 1.0.0-rc.2 to 1.0.0-rc.3
- [Release notes](https://github.com/evstack/ev-node/releases)
- [Changelog](https://github.com/evstack/ev-node/blob/main/CHANGELOG.md)
- [Commits](v1.0.0-rc.2...v1.0.0-rc.3)

Updates `github.com/cosmos/cosmos-sdk` from 0.53.5 to 0.53.6
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/v0.53.6/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@v0.53.5...v0.53.6)

---
updated-dependencies:
- dependency-name: github.com/filecoin-project/go-jsonrpc
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ipfs/go-datastore
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/libp2p/go-libp2p-kad-dht
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/ipfs/go-datastore
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ipfs/go-datastore
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ipfs/go-datastore
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/ipfs/go-datastore
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/evstack/ev-node
  dependency-version: 1.0.0-rc.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/evstack/ev-node/execution/evm
  dependency-version: 1.0.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/cosmos/cosmos-sdk
  dependency-version: 0.53.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Copy link
Contributor

github-actions bot commented Feb 17, 2026 •
edited
Loading

The latest Buf updates on your PR. Results from workflow CI / buf-check (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed⏩ skipped✅ passed✅ passedFeb 17, 2026, 4:54 PM

@claude
Copy link
Contributor

claude bot commented Feb 17, 2026 •
edited
Loading

Claude finished @julienrbrt's task in 1m 18s —— View job

Code Review

  • Gather context and understand the PR
  • Check CI status
  • Review dependency changes
  • Review source code changes
  • Provide final review feedback

Summary

This is a routine dependabot dependency bump PR across 8 Go modules. The changes are well-scoped: all modifications are in go.mod/go.sum files plus a small lint-driven commit (3d91d12) that touched 3 source files. The PR has already been approved by @julienrbrt.

Dependency Analysis

Package From To Type Notes
github.com/filecoin-project/go-jsonrpc 0.10.0 0.10.1 Patch Bug fix: nextWriter now always invokes callback on error — prevents silent error swallowing in RPC calls
github.com/ipfs/go-datastore 0.9.0 0.9.1 Patch OTel bump to v1.40.0, code modernization, test fixes — no API changes
github.com/libp2p/go-libp2p-kad-dht 0.37.1 0.38.0 Minor Bug fixes: closes datastore result iterators (resource leak fix), protects keystore size during reset. Minor version bump due to min Go version update
github.com/evstack/ev-node rc.3 rc.4 Pre-release Skip draining when exec client unavailable (#3060) — matches recent work in this repo
github.com/evstack/ev-node/execution/evm rc.2 rc.3 Pre-release Cache handling improvements, replay logic fix, DA hints for P2P
github.com/cosmos/cosmos-sdk 0.53.5 0.53.6 Patch Pagination fix, OverrideEvents addition, dep bumps

All updates are patch/minor with no breaking API changes reported. The go-libp2p-kad-dht v0.38.0 minor bump is safe — the breaking change is only the minimum Go version requirement (Go 1.26 modernizers), not the public API.

Notable: go-datastore v0.9.1 bumps opentelemetry to v1.40.0, and the root go.mod also directly pins go.opentelemetry.io/otel to v1.40.0 — these are consistent. ✓

Lint Commit Review (3d91d12)

The extra lint commit touched 3 files:

pkg/config/config.go — Minor lint fix, no functional change. File looks well-structured with proper error wrapping, %w used throughout, and good use of errors.Join for aggregating validation errors in RaftConfig.Validate().

pkg/rpc/server/http_test.go — Uses t.Context() (Go 1.21+) which is correct. Tests are table-driven with proper cleanup via t.Cleanup. No issues.

tools/cache-analyzer/main.go — This is a debugging utility for reading the now-deprecated gob cache. One observation:

  • The tool still references the old gob-based cache format (cache/pending_da_events/items_by_height.gob), which was removed in rc.3 (refactor(cache)!: remove gob cache #3047 — cache made ephemeral). The tool's usefulness is now limited to pre-rc.3 data. This is a minor concern — the tool could be removed or updated with a note that it only applies to legacy cache files, but it's not a blocker.

Observations

  1. No source API changes: All diff is in go.mod/go.sum plus the lint fix. No behavioral changes introduced.

  2. Resource leak fix in kad-dht (go-libp2p-kad-dht v0.38.0): The fix to close datastore results (#1226) is a meaningful bug fix that reduces resource leaks in the P2P layer used by ev-node. Beneficial to pick up.

  3. go-jsonrpc callback fix: The fix ensures error callbacks are always invoked — this prevents silent failures in the JSON-RPC server layer (pkg/rpc/server). Beneficial.

  4. Self-referencing dependency (/execution/grpc → github.com/evstack/ev-node rc.3→rc.4): This bumps the grpc execution module's dependency on the main ev-node module. The rc.4 change (skip draining when exec client unavailable) is directly relevant to execution modules and safe to adopt.

  5. CI: Semantic PR check passed. Buf checks passed (from prior comment). The main CI workflow is still in progress at the time of this review. Codecov shows a slight coverage improvement (+0.05%).

Verdict

This is a low-risk, well-maintained dependency update. All changes are patch/minor bug fixes with no breaking API changes. The self-referential module updates are internally consistent. Approved to merge once CI passes.

@codecov
Copy link

codecov bot commented Feb 17, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 61.13%. Comparing base (d4394f6) to head (3d91d12).

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #3076      +/-   ##
==========================================
+ Coverage   61.11%   61.13%   +0.01%     
==========================================
  Files         113      113              
  Lines       11444    11444              
==========================================
+ Hits         6994     6996       +2     
+ Misses       3661     3659       -2     
  Partials      789      789
Flag Coverage Δ
combined 61.13% <ø> (+0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@julienrbrt julienrbrt enabled auto-merge February 17, 2026 16:36
@julienrbrt julienrbrt disabled auto-merge February 17, 2026 17:02
@julienrbrt julienrbrt merged commit cf5565e into main Feb 17, 2026
25 checks passed
@julienrbrt julienrbrt deleted the dependabot/go_modules/all-go-a3de7dede9 branch February 17, 2026 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@julienrbrt julienrbrt julienrbrt approved these changes

Assignees

No one assigned

Labels

T:dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@julienrbrt