Skip to content

Bump the all-dependencies group across 1 directory with 6 updates#936

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-dependencies-c26827ea27
Open

Bump the all-dependencies group across 1 directory with 6 updates#936
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-dependencies-c26827ea27

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 5, 2026 •
edited
Loading

Bumps the all-dependencies group with 6 updates in the / directory:

Package From To
github.com/chromedp/chromedp 0.14.2 0.15.1
github.com/go-echarts/go-echarts/v2 2.7.0 2.7.2
go.sia.tech/core 0.19.1-0.20251215141429-887336e35dd9 0.20.0
go.sia.tech/coreutils 0.21.1 0.21.3
go.sia.tech/renterd/v2 2.9.0 2.9.1
go.uber.org/zap 1.27.1 1.28.0

Updates github.com/chromedp/chromedp from 0.14.2 to 0.15.1

Commits

Updates github.com/go-echarts/go-echarts/v2 from 2.7.0 to 2.7.2

Release notes

Sourced from github.com/go-echarts/go-echarts/v2's releases.

v2.7.2

What's Changed

New Contributors

Full Changelog: go-echarts/go-echarts@v2.7.1...v2.7.2

v2.7.1

What's Changed

New Contributors

Full Changelog: go-echarts/go-echarts@v2.7.0...v2.7.1

Commits
  • 088f87b chore(deps): bump actions/deploy-pages from 4 to 5 (#590)
  • d19d938 update(opts): add roam to geo chart with progressive render disabled (#592)
  • c30bf7f update(opts): add pad angle to pie chart (#588)
  • e4d3310 update(opts): adding boundary gap option for category axis (#589)
  • See full diff in compare view

Updates go.sia.tech/core from 0.19.1-0.20251215141429-887336e35dd9 to 0.20.0

Release notes

Sourced from go.sia.tech/core's releases.

0.20.0 (2026-04-21)

Breaking Changes

  • Require passing host's wallet address when constructing a contract for renewal/refresh.

0.19.1 (2026-04-10)

Features

  • Adds a new error type for "host is shutting down"

Fixes

  • Add contract not found error
  • Added additional context in error message when the signing threshold of a spend policy wasn't reached.
  • Increase maxLen for request and response types including RenterInputs or HostInputs.
  • Update mux dependency to v1.5.0.
Changelog

Sourced from go.sia.tech/core's changelog.

0.20.0 (2026-04-21)

Breaking Changes

  • Require passing host's wallet address when constructing a contract for renewal/refresh.

0.19.1 (2026-04-10)

Features

  • Adds a new error type for "host is shutting down"

Fixes

  • Add contract not found error
  • Added additional context in error message when the signing threshold of a spend policy wasn't reached.
  • Increase maxLen for request and response types including RenterInputs or HostInputs.
  • Update mux dependency to v1.5.0.

0.19.0 (2025-12-01)

Breaking Changes

  • Changed rhp.BuildSectorProof to accept cached subtrees to reduce disk IO required for sector reads.

Fixes

  • Parallelize sector root computation in ReaderRoot.

0.18.1 (2025-11-10)

Fixes

  • Fix invalid MaxCollateral validation for partial contract refreshes.

0.18.0 (2025-09-23)

Breaking Changes

  • Changed the encoding of rhp.Account to include the ed25519: prefix.

0.17.5 (2025-09-01)

Fixes

  • Fix ProtocolVersion marshalling failing.

0.17.4 (2025-08-27)

Fixes

... (truncated)

Commits

Updates go.sia.tech/coreutils from 0.21.1 to 0.21.3

Release notes

Sourced from go.sia.tech/coreutils's releases.

0.21.3 (2026-04-21)

Fixes

  • Fix a bug where a changed host wallet address leads to failed renewals.
  • Update webtransport-go to 05fe5253a73c

0.21.2 (2026-04-10)

Features

  • RHP4 graceful shutdown

Fixes

  • Always cancel read side of QUIC stream when calling stream.Close.
  • Fixed an edge case in RPCFreeSectors where the deletion logic would keep a sector root that was supposed to be deleted.
  • Pass proper descriptions when closing QUIC connection.
  • Fixed excessive "peer relayed a v2 header with unknown parent" log spam by only relaying headers after sync when the synced blocks became the new tip.
  • Update Go version to 1.26.0.
  • Update mux dependency to v1.5.0.
  • Use DEBUG log level instead of ERROR for RPCs failing due to the peer closing the connection on their end.
Changelog

Sourced from go.sia.tech/coreutils's changelog.

0.21.3 (2026-04-21)

Fixes

  • Fix a bug where a changed host wallet address leads to failed renewals.
  • Update webtransport-go to 05fe5253a73c

0.21.2 (2026-04-10)

Features

  • RHP4 graceful shutdown

Fixes

  • Always cancel read side of QUIC stream when calling stream.Close.
  • Fixed an edge case in RPCFreeSectors where the deletion logic would keep a sector root that was supposed to be deleted.
  • Pass proper descriptions when closing QUIC connection.
  • Fixed excessive "peer relayed a v2 header with unknown parent" log spam by only relaying headers after sync when the synced blocks became the new tip.
  • Update Go version to 1.26.0.
  • Update mux dependency to v1.5.0.
  • Use DEBUG log level instead of ERROR for RPCs failing due to the peer closing the connection on their end.
Commits

Updates go.sia.tech/renterd/v2 from 2.9.0 to 2.9.1

Release notes

Sourced from go.sia.tech/renterd/v2's releases.

v2.9.1

Fixes

  • Add smoke tests for renterd binary to ensure basic startup is covered on the CI.
  • Fix a bug where contracts weren't renewed due to invalid signatures.
  • Fixed an edge case where pruning a contract might delete a wrong sector.

v2.9.1-beta.2

Fixes

  • Add smoke tests for renterd binary to ensure basic startup is covered on the CI.
  • Fix a bug where contracts weren't renewed due to invalid signatures.
  • Fixed an edge case where pruning a contract might delete a wrong sector.

v2.9.1-beta.1

This PR was created automatically. Merging it will finalize the changelog for 2.9.1

Fixes

  • Add smoke tests for renterd binary to ensure basic startup is covered on the CI.
  • Fixed an edge case where pruning a contract might delete a wrong sector.
Changelog

Sourced from go.sia.tech/renterd/v2's changelog.

2.9.1 (2026-04-22)

Fixes

  • Add smoke tests for renterd binary to ensure basic startup is covered on the CI.
  • Fix a bug where contracts weren't renewed due to invalid signatures.
  • Fixed an edge case where pruning a contract might delete a wrong sector.
Commits
  • 8d7275b chore: prepare release 2.9.1
  • f7a93b4 update action to use newer node
  • e07f9f1 fix build
  • dcefd23 changeset
  • 9a27b1d update coreutils
  • fa8c8ed chore(deps): bump the all-dependencies group with 6 updates
  • 8d67bfe chore(deps): bump the all-dependencies group with 2 updates
  • 70eb242 chore(deps): bump github.com/montanaflynn/stats
  • 2b335bc chore(deps): bump github.com/mattn/go-sqlite3
  • c6c772f chore(deps): bump the all-dependencies group with 4 updates
  • Additional commits viewable in compare view

Updates go.uber.org/zap from 1.27.1 to 1.28.0

Release notes

Sourced from go.uber.org/zap's releases.

v1.28.0

Enhancements:

  • #1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

#1534: uber-go/zap#1534

Changelog

Sourced from go.uber.org/zap's changelog.

1.28.0 (27 Apr 2026)

Enhancements:

  • #1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.
Commits
  • 5b81b37 release v1.28.0 (#1547)
  • 0ab0d5a zapcore: Add PreWriteHook for transforming entries before write (#1534)
  • d278c59 [chore] CI: test on Go 1.26 (#1535)
  • 16fb16b chore(dep): replace archived gopkg.in/yaml.v3 with officially maintained go.y...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-dependencies group across 1 directory with 6 updates
bd790fe 
Bumps the all-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/chromedp/chromedp](https://github.com/chromedp/chromedp) | `0.14.2` | `0.15.1` |
| [github.com/go-echarts/go-echarts/v2](https://github.com/go-echarts/go-echarts) | `2.7.0` | `2.7.2` |
| [go.sia.tech/core](https://github.com/SiaFoundation/core) | `0.19.1-0.20251215141429-887336e35dd9` | `0.20.0` |
| [go.sia.tech/coreutils](https://github.com/SiaFoundation/coreutils) | `0.21.1` | `0.21.3` |
| [go.sia.tech/renterd/v2](https://github.com/SiaFoundation/renterd) | `2.9.0` | `2.9.1` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` |



Updates `github.com/chromedp/chromedp` from 0.14.2 to 0.15.1
- [Release notes](https://github.com/chromedp/chromedp/releases)
- [Commits](chromedp/chromedp@v0.14.2...v0.15.1)

Updates `github.com/go-echarts/go-echarts/v2` from 2.7.0 to 2.7.2
- [Release notes](https://github.com/go-echarts/go-echarts/releases)
- [Commits](go-echarts/go-echarts@v2.7.0...v2.7.2)

Updates `go.sia.tech/core` from 0.19.1-0.20251215141429-887336e35dd9 to 0.20.0
- [Release notes](https://github.com/SiaFoundation/core/releases)
- [Changelog](https://github.com/SiaFoundation/core/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SiaFoundation/core/commits/v0.20.0)

Updates `go.sia.tech/coreutils` from 0.21.1 to 0.21.3
- [Release notes](https://github.com/SiaFoundation/coreutils/releases)
- [Changelog](https://github.com/SiaFoundation/coreutils/blob/master/CHANGELOG.md)
- [Commits](SiaFoundation/coreutils@v0.21.1...v0.21.3)

Updates `go.sia.tech/renterd/v2` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/SiaFoundation/renterd/releases)
- [Changelog](https://github.com/SiaFoundation/renterd/blob/master/CHANGELOG.md)
- [Commits](SiaFoundation/renterd@v2.9.0...v2.9.1)

Updates `go.uber.org/zap` from 1.27.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.1...v1.28.0)

---
updated-dependencies:
- dependency-name: github.com/chromedp/chromedp
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/go-echarts/go-echarts/v2
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: go.sia.tech/core
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: go.sia.tech/coreutils
  dependency-version: 0.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: go.sia.tech/renterd/v2
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 5, 2026
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 5, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedgo.sia.tech/​renterd/​v2@​v2.9.0 ⏵ v2.9.173 +1100100100100
Updatedgithub.com/​chromedp/​chromedp@​v0.14.2 ⏵ v0.15.192100100100100
Updatedgo.uber.org/​zap@​v1.27.1 ⏵ v1.28.098 +1100100100100
Updatedgo.sia.tech/​coreutils@​v0.21.1 ⏵ v0.21.398 +1100100100100
Updatedgithub.com/​go-echarts/​go-echarts/​v2@​v2.7.0 ⏵ v2.7.299 +1100100100100
Updatedgo.sia.tech/​core@​v0.19.1-0.20251215141429-887336e35dd9 ⏵ v0.20.099 +1100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants