Skip to content

Bump the global group with 2 updates - #185

Merged
cmmarslender merged 1 commit into
mainfrom
dependabot/go_modules/global-e44e3389ce
Sep 2, 2026
Merged

Bump the global group with 2 updates#185
cmmarslender merged 1 commit into
mainfrom
dependabot/go_modules/global-e44e3389ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the global group with 2 updates: github.com/chia-network/go-chia-libs and github.com/sirupsen/logrus.

Updates github.com/chia-network/go-chia-libs from 1.3.3 to 1.3.4

Release notes

Sourced from github.com/chia-network/go-chia-libs's releases.

v1.3.4

What's Changed

Full Changelog: Chia-Network/go-chia-libs@v1.3.3...v1.3.4

Commits
  • 3ddea21 Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 in the global group (#...
  • e2eeb82 Add exempt peer network support for wallet (#250)
  • See full diff in compare view

Updates github.com/sirupsen/logrus from 1.10.0 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

1.10.1

Fixes:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed implementations of error as field values.
Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • 8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
  • 0b920ad Merge pull request #1584 from thaJeztah/more_coverage
  • 5e20694 TextFormatter: cover nil pointer method receivers
  • 8312732 update changelog for v1.10.1
  • e987a40 Merge pull request #1582 from thaJeztah/panic_handler
  • 17d574b TextFormatter: recover panics from Error and String methods
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note

Low Risk
Dependency-only bumps with no app code changes; logrus patch fixes are low-impact for this service’s logging usage.

Overview
This PR only updates dependency versions in go.mod and go.sum; there are no changes to application source files.

github.com/chia-network/go-chia-libs moves from 1.3.3 to 1.3.4, which upstream adds wallet exempt peer network support and bumps testify. This repo uses the library for RPC, types, and bech32m in internal/metrics, so the new wallet-oriented behavior is unlikely to change block-metrics behavior unless you rely on those wallet APIs transitively.

github.com/sirupsen/logrus moves from 1.10.0 to 1.10.2, picking up 1.10.1 fixes (TextFormatter panic handling for nil/panicking errors and function-backed error fields in WithError/WithField) and 1.10.2 dependency-only maintenance. Logging in the cmd packages should behave the same or slightly more robust.

Indirect updates include go.yaml.in/yaml/v3 3.0.4 → 3.0.5 and github.com/stretchr/testify 1.11.1 → 1.12.1, with some transitive entries removed from go.sum.

Reviewed by Cursor Bugbot for commit 9b04641. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps the global group with 2 updates: [github.com/chia-network/go-chia-libs](https://github.com/chia-network/go-chia-libs) and [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus).


Updates `github.com/chia-network/go-chia-libs` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/chia-network/go-chia-libs/releases)
- [Commits](Chia-Network/go-chia-libs@v1.3.3...v1.3.4)

Updates `github.com/sirupsen/logrus` from 1.10.0 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.10.0...v1.10.2)

---
updated-dependencies:
- dependency-name: github.com/chia-network/go-chia-libs
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: global
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: global
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Changed dependencies Pull requests that update a dependency file go labels Sep 1, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​chia-network/​go-chia-libs@​v1.3.3 ⏵ v1.3.487 +1100100100100
Updatedgithub.com/​sirupsen/​logrus@​v1.10.0 ⏵ v1.10.298100100100100

View full report

@cmmarslender
cmmarslender merged commit 110251d into main Sep 2, 2026
8 checks passed
@cmmarslender
cmmarslender deleted the dependabot/go_modules/global-e44e3389ce branch September 2, 2026 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed dependencies Pull requests that update a dependency file go

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant