Skip to content

build(deps): bump the minor-and-patch group with 3 updates - #7

Merged
j0sh merged 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-cc5e6ae55a
Oct 23, 2026
Merged

j0sh merged 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-cc5e6ae55a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Updates three Go dependencies:

Package From To
github.com/ethereum/go-ethereum 1.17.5 1.17.8
github.com/stretchr/testify 1.11.1 1.12.1
modernc.org/sqlite 1.39.1 1.60.1

Bumps the minor-and-patch group with 3 updates: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum), [github.com/stretchr/testify](https://github.com/stretchr/testify) and [modernc.org/sqlite](https://gitlab.com/cznic/sqlite).


Updates `github.com/ethereum/go-ethereum` from 1.17.5 to 1.17.8
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.5...v1.17.8)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `modernc.org/sqlite` from 1.39.1 to 1.60.1
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.39.1...v1.60.1)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: modernc.org/sqlite
  dependency-version: 1.60.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI balanced review requested due to automatic review settings October 23, 2026 16:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 23, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The substantial SQLite upgrade affects durable payment storage and needs human review of compatibility and regression test results.

No open issues 🎉

What changed in this PR

Updates Go dependencies used for Ethereum integration, testing, and SQLite-backed storage, bringing upstream fixes and refreshing transitive dependencies.

Changes:

  • Bumps go-ethereum from 1.17.5 to 1.17.8 and testify from 1.11.1 to 1.12.1.
  • Upgrades SQLite from 1.39.1 to 1.60.1, with its matching libc dependency.
  • Updates indirect dependencies and module checksums.
File Description
go.sum Refreshes checksums for updated dependencies.
go.mod Updates direct and indirect dependency versions.

Review effort: Balanced

@j0sh
j0sh enabled auto-merge (squash) October 23, 2026 16:12
@j0sh
j0sh disabled auto-merge October 23, 2026 16:16
@j0sh
j0sh merged commit 2046b05 into main Oct 23, 2026
6 checks passed
@j0sh
j0sh deleted the dependabot/go_modules/minor-and-patch-cc5e6ae55a branch October 23, 2026 16:17
j0sh added a commit that referenced this pull request Oct 23, 2026
Dependabot descriptions contain generated HTML that gets copied into
squash commit messages. Clean them automatically when a PR is opened,
reopened, updated, or edited, preserving Markdown summaries and version
tables.

The workflow only edits PR metadata and aborts if the result is empty or
still contains HTML. It uses a pinned action with `pull-requests: write`
and does not check out PR code.

Validation:

- Executed the embedded script against the original descriptions from
#6, #7, and #9; verified summaries and tables are retained and repeated
runs make no changes.
- Checked clean/closed PRs and empty or unexpected HTML descriptions.
- `actionlint` v1.7.12 and `git diff --check` pass. The linter's
outdated `ubuntu-26.04` label warning was excluded; this is the
repository's existing runner and is [supported by
GitHub](https://github.com/actions/runner-images#available-images).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants