Skip to content

build(deps): bump the prod-dependencies group across 1 directory with 3 updates - #56

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-dependencies-cb9328b395
Open

build(deps): bump the prod-dependencies group across 1 directory with 3 updates#56
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-dependencies-cb9328b395

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 2 updates in the / directory: alloy and async-trait.

Updates alloy from 2.2.0 to 2.4.1

Release notes

Sourced from alloy's releases.

v2.4.1

What's Changed

New Contributors

Full Changelog: alloy-rs/alloy@v2.4.0...v2.4.1

v2.4.0

What's Changed

New Contributors

Full Changelog: alloy-rs/alloy@v2.3.0...v2.4.0

v2.3.0

What's Changed

... (truncated)

Changelog

Sourced from alloy's changelog.

2.4.1 - 2026-08-13

Features

  • [genesis] Add slot_number genesis header field (EIP-7843) (#4138)
  • [rpc-types-engine] Add Bogota payload sidecar fields (#4141)
  • [rpc-types-engine] Add Bogota payload types (#4139)
  • [rpc-types-engine] Add FOCIL response types (#4137)

2.4.0 - 2026-08-12

Bug Fixes

  • [signer-local] Add fallible YubiHSM constructors (#4128)
  • [provider] Skip cache for requireCanonical block hash queries (#4075)

Dependencies

  • [deps] Bump lru to 0.18.2 (#4131)
  • Bump tokio-tungstenite to 0.29 (#3969)
  • [deps] Bump the ci-weekly group with 2 updates (#4126)

Documentation

  • Clarify public API behavior (#4123)

Features

  • [eip7594] Reconstruct sidecars from sparse cells (#4120)
  • [genesis] Add account code helpers (#4132)
  • [rpc-types-trace] Add EIP-8037 state-gas fields (#4113)
  • [contract] Add call timeout futures (#4119)
  • [consensus] Add EIP-8070 blob clearing helpers (#4121)
  • [provider] Add trace chain subscription (#4116)
  • [contract] Convert multicall errors (#4118)
  • [rpc-types] Add debug_traceChain result type (#4115)

Miscellaneous Tasks

  • Release 2.4.0

Styling

  • [eips] Remove redundant format import (#4134)

2.3.0 - 2026-08-03

Bug Fixes

  • [transport-http] Honor Retry-After (#4103)

... (truncated)

Commits
  • df0a0b5 chore: release 2.4.1
  • 28b3450 feat(genesis): add slot_number genesis header field (EIP-7843) (#4138)
  • 0445b43 feat(rpc-types-engine): add Bogota payload sidecar fields (#4141)
  • 13dadd8 feat(rpc-types-engine): add Bogota payload types (#4139)
  • 1afccf0 feat(rpc-types-engine): add FOCIL response types (#4137)
  • 9edca79 chore: release 2.4.0
  • e175b9c docs: clarify public API behavior (#4123)
  • 192d7c8 chore(eips): remove redundant format import (#4134)
  • 249c727 feat(eip7594): reconstruct sidecars from sparse cells (#4120)
  • cf5166f feat(genesis): add account code helpers (#4132)
  • Additional commits viewable in compare view

Updates async-trait from 0.1.91 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)
Commits

Updates alloy-node-bindings from 2.2.0 to 2.4.1

Release notes

Sourced from alloy-node-bindings's releases.

v2.4.1

What's Changed

New Contributors

Full Changelog: alloy-rs/alloy@v2.4.0...v2.4.1

v2.4.0

What's Changed

New Contributors

Full Changelog: alloy-rs/alloy@v2.3.0...v2.4.0

v2.3.0

What's Changed

... (truncated)

Changelog

Sourced from alloy-node-bindings's changelog.

2.4.1 - 2026-08-13

Features

  • [genesis] Add slot_number genesis header field (EIP-7843) (#4138)
  • [rpc-types-engine] Add Bogota payload sidecar fields (#4141)
  • [rpc-types-engine] Add Bogota payload types (#4139)
  • [rpc-types-engine] Add FOCIL response types (#4137)

2.4.0 - 2026-08-12

Bug Fixes

  • [signer-local] Add fallible YubiHSM constructors (#4128)
  • [provider] Skip cache for requireCanonical block hash queries (#4075)

Dependencies

  • [deps] Bump lru to 0.18.2 (#4131)
  • Bump tokio-tungstenite to 0.29 (#3969)
  • [deps] Bump the ci-weekly group with 2 updates (#4126)

Documentation

  • Clarify public API behavior (#4123)

Features

  • [eip7594] Reconstruct sidecars from sparse cells (#4120)
  • [genesis] Add account code helpers (#4132)
  • [rpc-types-trace] Add EIP-8037 state-gas fields (#4113)
  • [contract] Add call timeout futures (#4119)
  • [consensus] Add EIP-8070 blob clearing helpers (#4121)
  • [provider] Add trace chain subscription (#4116)
  • [contract] Convert multicall errors (#4118)
  • [rpc-types] Add debug_traceChain result type (#4115)

Miscellaneous Tasks

  • Release 2.4.0

Styling

  • [eips] Remove redundant format import (#4134)

2.3.0 - 2026-08-03

Bug Fixes

  • [transport-http] Honor Retry-After (#4103)

... (truncated)

Commits
  • df0a0b5 chore: release 2.4.1
  • 28b3450 feat(genesis): add slot_number genesis header field (EIP-7843) (#4138)
  • 0445b43 feat(rpc-types-engine): add Bogota payload sidecar fields (#4141)
  • 13dadd8 feat(rpc-types-engine): add Bogota payload types (#4139)
  • 1afccf0 feat(rpc-types-engine): add FOCIL response types (#4137)
  • 9edca79 chore: release 2.4.0
  • e175b9c docs: clarify public API behavior (#4123)
  • 192d7c8 chore(eips): remove redundant format import (#4134)
  • 249c727 feat(eip7594): reconstruct sidecars from sparse cells (#4120)
  • cf5166f feat(genesis): add account code helpers (#4132)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the prod-dependencies group across 1 directory with…
a199c69 
… 3 updates

Bumps the prod-dependencies group with 2 updates in the / directory: [alloy](https://github.com/alloy-rs/alloy) and [async-trait](https://github.com/dtolnay/async-trait).


Updates `alloy` from 2.2.0 to 2.4.1
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v2.2.0...v2.4.1)

Updates `async-trait` from 0.1.91 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.91...0.1.92)

Updates `alloy-node-bindings` from 2.2.0 to 2.4.1
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v2.2.0...v2.4.1)

---
updated-dependencies:
- dependency-name: alloy
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: alloy-node-bindings
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 1, 2026
@cursor

cursor Bot commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Medium Risk
Alloy drives RPC, contracts, signing, and WebSocket transport; a minor-version jump can change provider caching, decoding, and networking behavior even without local code edits.

Overview
Lockfile-only production dependency refresh: the entire alloy stack (including alloy-node-bindings) moves from 2.2.0 to 2.4.1, and async-trait from 0.1.91 to 0.1.92. There are no application source changes in this diff.

The lockfile also picks up transitive updates pulled in by alloy—notably provider caching now uses lru 0.18.3 (was 0.16.4), WebSocket transport standardizes on tokio-tungstenite 0.29 (dropping duplicate 0.28 entries), and assorted networking/hash crates (socket2, hashbrown, getrandom) shift to match the new dependency graph.

Reviewed by Cursor Bugbot for commit a199c69. Bugbot is set up for automated code reviews on this repo. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants