build(deps): bump the dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #231 · ethpandaops/assertoor

dependabot · 2026-08-17T00:53:56Z

Bumps the dependencies group with 8 updates in the / directory:

Package	From	To
github.com/ethereum/go-ethereum	`1.17.4`	`1.17.5`
github.com/ethpandaops/service-authenticatoor	`0.0.2`	`0.0.3`
github.com/ethpandaops/spamoor	`1.2.2`	`1.2.3`
github.com/glebarez/go-sqlite	`1.22.0`	`1.23.0`
github.com/pressly/goose/v3	`3.27.2`	`3.27.3`
github.com/prometheus/client_golang	`1.23.2`	`1.24.1`
github.com/sirupsen/logrus	`1.9.4`	`1.10.0`
google.golang.org/protobuf	`1.36.11`	`1.36.12`

Updates github.com/ethereum/go-ethereum from 1.17.4 to 1.17.5

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Grav-Torque Pad (v1.17.5)

This is a maintenance release with accumulated bug fixes and improvements, and is recommended for all users. It continues the implementation work for the upcoming Amsterdam hardfork.

A few things worth highlighting:

The default GOGC has changed from 20 to 50, trading a higher memory peak for less GC overhead. Set --gogc=20 to keep the old behavior.

Pebble v2 is now supported as a key-value store backend. Pebble v2 is used when Geth is bootstrapped from scratch, and falls back to Pebble v1 for a pre-existing database. Run geth db pebble-upgrade to explicitly upgrade a legacy Pebble v1 database to v2.

Fork Implementation

Several Amsterdam EIPs have been implemented or updated:

EIP-2780: Resource-based intrinsic transaction gas (#35212, #35318)

EIP-8037: State creation gas cost increase (#35173, #35318, #35301, #35342, #35279)

EIP-8038: State-access gas cost update (#35216)

EIP-8246: Remove SELFDESTRUCT burn (#35219)

EIP-8282: Builder execution requests (#35175, #35341)

EIP-7997: Deterministic factory contract (#35223, #35285)

EIP-7954: Increase maximum contract size (#35217)

EIP-7928: Block-level access lists (#35260, #35281, #35261, #35348, #35279)

Improve Amsterdam fork test coverage (#35364)

Introduce the --override.amsterdam flag (#35213)

Remove named hardforks from the BPO schedule (#35029)

Introduce the Bogota fork in the chain configuration (#34057)

Core

Introduce a sparse blobpool to reduce blob transaction pool memory usage (#34047)

Migrate legacy blobpool limbo entries to the new cell-based sidecar format on startup (#35209)

Drop support for v0 blob sidecars in blobpool (#35191)

Inline gas deduction to fix a performance regression (#35203)

Fix eth/71 block-access-list empty marker decoding which wrongly disconnected peers (#35286)

Disable snap sync mode once the pivot block is committed (#35402, #35405)

Speed up debug_setHead and reject unrecoverable targets (#35252)

Fix snap sync failing to backfill blocks with missing canonical-hash mappings (#35190)

Reuse the chain's JUMPDEST cache in payload building (#35378)

Support Pebble v2 as the database backend (#34009)

Support .ere files in the era store (#34978)

Introduce the trie.UpdateBatch API (#32448)

Fix freezer truncation error on newly-added empty tables after unclean shutdown (#35258)

Improve state recoverability reporting by considering sync status (#35400)

Fix account prefetching for absent accounts (#35256)

Various snap v2 fixes (#35321, #35323)

Optimize block validation (#35403)

Various allocation improvements (#35234, #35237, #35232)

Continue binary trie development (#34772)

Fix tx size calculation (#35406)

Networking

... (truncated)

Commits

9621c6a version: release v1.17.5 (#35421)
cff7fcb go.mod: update snappy dependency (#35422)
ca1f2e4 core: fix tx size calculation (#35406)
cd65cca eth/downloader: hold pivotLock when marking pivot committed (#35405)
a524f2b node: check authorization header case-insensitivity (#35408)
af03a27 cmd/utils: skip memory-limit sanitize when total memory is unknown (#35407)
ff44a79 core: coordinate the state prefetcher with block processing (#35404)
b2ee839 eth/catalyst: allow reorg depth equal to maxReorgDepth (#35391)
f03b91c core: optimize block validation (#35403)
e317407 eth/fetcher: clear partial map when dropping last waitlist peer (#35399)
Additional commits viewable in compare view

Updates github.com/ethpandaops/service-authenticatoor from 0.0.2 to 0.0.3

Release notes

Sourced from github.com/ethpandaops/service-authenticatoor's releases.

v0.0.3

Major Changes

null

Full changelog

4ad46cf Merge pull request #7 from ethpandaops/pk910/shared-session-handling

c36be63 Merge pull request #6 from ethpandaops/dependabot/github_actions/actions-293ee07e61

Release Artifacts

See the README for setup and configuration instructions.

Release File Description

authenticatoor_0.0.3_windows_amd64.zip authenticatoor executables for windows/amd64

authenticatoor_0.0.3_linux_amd64.tar.gz authenticatoor executables for linux/amd64

authenticatoor_0.0.3_linux_arm64.tar.gz authenticatoor executables for linux/arm64

authenticatoor_0.0.3_darwin_amd64.tar.gz authenticatoor executable for macos/amd64

authenticatoor_0.0.3_darwin_arm64.tar.gz authenticatoor executable for macos/arm64

Commits

4ad46cf Merge pull request #7 from ethpandaops/pk910/shared-session-handling
002ffd6 linter fixes
5381671 minify & inline scripts
c551012 linter fixes
c36be63 Merge pull request #6 from ethpandaops/dependabot/github_actions/actions-293e...
9e9fc88 implement shared session handler (client v2)
16900c5 Bump the actions group with 4 updates
See full diff in compare view

Updates github.com/ethpandaops/spamoor from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/ethpandaops/spamoor's releases.

v1.2.3

Major Changes

Added Authenticatoor as identity provider with hardened token verification

Implemented new scenarios: ens-names, seaport-trades, and aave-lending

Reworked default spammer organization and excluded them from audit logs

Added auto-restart functionality for failed spammer members

Updated dependencies including github.com/pressly/goose/v3

Full changelog

3cf5de7 Merge pull request #224 from ethpandaops/pk910/authenticatoor-auth-provider

e59d59a Merge branch 'master' into pk910/authenticatoor-auth-provider

f1a9ef2 fix merge issue

bcb326f Merge pull request #253 from ethpandaops/pk910/seaport

6fbaa31 Merge branch 'master' into pk910/authenticatoor-auth-provider

5c1005e add new scenarios to default spammers

7daf802 Merge branch 'master' into pk910/seaport

283083e Merge pull request #255 from ethpandaops/pk910/auto-restart-failed-members

5189671 Merge branch 'master' into pk910/auto-restart-failed-members

a54ddd5 Merge pull request #254 from ethpandaops/pk910/rework-default-spammers

ff93fff Merge branch 'master' into pk910/rework-default-spammers

a170f89 Merge pull request #256 from ethpandaops/dependabot/go_modules/dependencies-95fdd4fba6

f838847 build(deps): bump github.com/pressly/goose/v3 in the dependencies group

1cc5bc4 fixes for ens-names scenario

16c5ab6 make generate-symbols

5417ddf add ens-names scenario

91d2d4e add spammer auto restart & search to new spammer modal

fb7dc13 exclude default spammers from audit log

9390fea rework default spammer organization

9432e70 Merge branch 'master' into pk910/seaport

068cef2 Merge remote-tracking branch 'origin/master' into pk910/seaport

fe511bb fix seaport-trades

aed01f9 implement aave-lending scenario

fb29937 remove contract artifacts from repo

ee21c3f implement seaport-trades scenario

b1cae7e Merge remote-tracking branch 'origin/master' into pk910/authenticatoor-auth-provider

e29bb8f bump authenticatoor and harden token verification

0f950be cleanup authentication code

c0ed929 use authenticatoor as identity provider

Release Artifacts

Please read through the wiki for setup & configuration instructions.

Release File Description

spamoor_1.2.3_windows_amd64.zip spamoor executables for windows/amd64

spamoor_1.2.3_linux_amd64.tar.gz spamoor executables for linux/amd64

spamoor_1.2.3_linux_arm64.tar.gz spamoor executables for linux/arm64

... (truncated)

Commits

3cf5de7 Merge pull request #224 from ethpandaops/pk910/authenticatoor-auth-provider
e59d59a Merge branch 'master' into pk910/authenticatoor-auth-provider
f1a9ef2 fix merge issue
bcb326f Merge pull request #253 from ethpandaops/pk910/seaport
6fbaa31 Merge branch 'master' into pk910/authenticatoor-auth-provider
5c1005e add new scenarios to default spammers
7daf802 Merge branch 'master' into pk910/seaport
283083e Merge pull request #255 from ethpandaops/pk910/auto-restart-failed-members
5189671 Merge branch 'master' into pk910/auto-restart-failed-members
a54ddd5 Merge pull request #254 from ethpandaops/pk910/rework-default-spammers
Additional commits viewable in compare view

Updates github.com/glebarez/go-sqlite from 1.22.0 to 1.23.0

Commits

1825f18 Bump modernc.org/sqlite to 1.55.0 (SQLite 3.53.3) (#188)
ca37fea Document fork
e6de9fc build(deps): bump modernc.org/sqlite from 1.28.0 to 1.31.0 and upgrade go ver...
See full diff in compare view

Updates github.com/pressly/goose/v3 from 3.27.2 to 3.27.3

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.27.3

Changed

Various dependency upgrades

Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.27.3] - 2026-07-22

Changed

Various dependency upgrades

Commits

520411a release: v3.27.3
26403f9 build(deps): update internal/testing dependencies
abcfbd1 ci: pin GitHub Actions to commit SHAs
a54dd54 build(deps): bump actions/setup-go from 6 to 7 (#1094)
27c2f4f build(deps): update dependencies
a443d13 fix: capture markdown subsections in release-notes.sh
See full diff in compare view

Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.1 / 2026-07-23

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

v1.24.0 - 2026-07-20

Changes

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

build(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by @dependabot[bot] in prometheus/client_golang#1839

build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in prometheus/client_golang#1838

prometheus/collectors: use godoc link for runtime/metrics supported metrics by @xieyuschen in prometheus/client_golang#1844

Fix doc typo by @torrca in prometheus/client_golang#1849

Merge release-1.23 into main by @vesari in prometheus/client_golang#1851

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by @dependabot[bot] in prometheus/client_golang#1852

Refactor LabelNames to return model.LabelNames type for consistency by @yshngg in prometheus/client_golang#1850

remote: simplified Store interface; renamed Handler to WriteHandler by @bwplotka in prometheus/client_golang#1855

feat(api/prometheus): add format_query endpoint for query formatting by @yshngg in prometheus/client_golang#1846

feat(api): add FormatQuery method to Prometheus v1 API by @yshngg in prometheus/client_golang#1856

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.1 / 2026-07-23

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

1.24.0 / 2026-07-20

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

Commits

d6087ee release: cut v1.24.1 (#2076)
48dd383 Cut v1.24.0 (#2061)
a725305 Cut v1.24.0-rc.0 (#2058)
77c584f build(deps): update all Go dependencies in all go.mod files (#2059)
78262a7 feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...
34e9a7f Merge pull request #2055 from prombot/repo_sync
43749bc Update common Prometheus files
de19217 examples: improve simple main.go example (#1999)
20355eb fix: correct typos in comments and test error messages (#2049)
4cd2d3a test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...
Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.69.0 to 0.70.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.70.1

What's Changed

Update CHANGELOG for v0.70.0 by @roidelapluie in prometheus/common#945

config: clarify sensitive redirect headers match net/http by @roidelapluie in prometheus/common#924

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#946

build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in prometheus/common#950

build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in prometheus/common#949

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/common#948

build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 in the golang-org-x group across 1 directory by @dependabot[bot] in prometheus/common#947

Full Changelog: prometheus/common@v0.70.0...v0.70.1

v0.70.0

What's Changed

config: fix TLSVersion.String() printing pointer address by @s3onghyun in prometheus/common#929

build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in prometheus/common#933

Manually go mod tidy by @SuperQ in prometheus/common#934

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#937

route: add support for the QUERY HTTP method by @roidelapluie in prometheus/common#932

Combine and extend Prometheus text and OpenMetrics 1.0 encoder benchmarks by @dashpole in prometheus/common#943

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/common#938

build(deps): bump actions/setup-go from 6.2.0 to 6.5.0 by @dependabot[bot] in prometheus/common#940

build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in prometheus/common#942

build(deps): bump ossf/scorecard-action from 2.1.2 to 2.4.3 by @dependabot[bot] in prometheus/common#939

build(deps): bump actions/checkout from 3.1.0 to 7.0.0 by @dependabot[bot] in prometheus/common#941

New Contributors

@s3onghyun made their first contribution in prometheus/common#929

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

v0.70.0 / 2026-07-10

Enhancements

route: add support for the QUERY HTTP method. #932

Bugfixes

config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #929

Internal

expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #943

Update Go dependencies. #933 #934

Synchronize common files from prometheus/prometheus. #923 #927 #930 #937

Update GitHub Actions. #938 #939 #940 #941 #942

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Commits

b63d8c0 build(deps): bump golang.org/x/net (#947)
4109c3e build(deps): bump the codeql group with 4 updates (#948)
5270b62 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#949)
1167ca3 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#950)
d28d382 Update common Prometheus files (#946)
f915876 Merge pull request #924 from roidelapluie/roidelapluie/redirect-header-comment
dfbebd0 Merge pull request #945 from roidelapluie/roidelapluie/changelog-0.70.0
c8a0019 Update CHANGELOG for v0.70.0
5eff7a8 Merge pull request #941 from prometheus/dependabot/github_actions/actions/che...
a23c5b3 Merge pull request #939 from prometheus/dependabot/github_actions/ossf/scorec...
Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.0

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

~17% lower geomean runtime across the benchmark suite

~27% higher geomean formatter throughput

Common enabled logging paths are ~30–44% faster

WithError is ~40% faster

Chained fields are ~46% faster

TextFormatter paths are up to ~40% faster

Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

Logger + TextFormatter is ~31% faster, with ~24% fewer allocations

Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 log/slog interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

A Logrus slog hook can forward existing Logrus entries to an slog logger.

hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.

The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.

Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.

Custom slog levels can be mapped to Logrus levels.

The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an slog backend, while new slog code can continue using an established Logrus setup.

🔒 Concurrency & Correctness

Fix reentrant logging deadlocks, including logging from within MarshalJSON or formatter code.

Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel, contrary to their documented behavior.

Eliminate race conditions in entry and formatter paths.

Improve locking boundaries around formatters and hooks.

➕ Added

TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms.

Entry.Caller can now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs.

Add minimal, composable logging interfaces for each log level, allowing consumers to depend on narrower interfaces and making logging implementations easier to substitute or adapt.

Expand CI verification to include TinyGo and every cross-compile target reported by go tool dist list, improving coverage across alternative toolchains and platforms.

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.0

Fixes:

Fix reentrant logging deadlocks in formatter paths.

Fix race conditions in formatter and entry handling.

Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.

Improve concurrency safety around formatter and hook access.

Features:

Add slog hook for forwarding Logrus entries to log/slog.

Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.

Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.

Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

Raise minimum supported Go version to 1.23.

TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.

TextFormatter now uses distinct dimmed colors for debug and trace output.

TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.

Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.

Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used directly.

Performance:

Significantly improve TextFormatter performance and reduce allocations.

Optimize common Entry and Logger hot paths.

Reduce allocations in caller reporting.

~17% lower geomean runtime and ~27% higher formatter throughput overall.

Common enabled logging paths are ~30–44% faster.

TextFormatter paths are up to ~40% faster, with allocation counts reduced by 25–74% across the measured formatter cases.

Commits

457e372 Merge pull request #1573 from thaJeztah/update_colors
6b6a3a6 formatter: differentiate debug and trace colors
8ebae73 Merge pull request #1572 from thaJeztah/update_logs
f156a33 docs: clarify formatter field handling
84cedf9 Merge pull request #1571 from thaJeztah/slog_hookopts
a3e1580 hooks/slog: add HookOptions
e5b377a Merge pull request #1570 from thaJeztah/slog_leveler
30a5487 hooks/slog: add level adapters
0cee61e Merge pull request #1569 from thaJeztah/slog_noleveler
4069973 hooks/slog: use concrete slog.Level for hook level mapping
Additional commits viewable in compare view

Updates golang.org/x/text from 0.39.0 to 0.40.0

Commits

724af9c go.mod: update golang.org/x dependencies
bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove ...

Description has been truncated

…pdates Bumps the dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.17.4` | `1.17.5` | | [github.com/ethpandaops/service-authenticatoor](https://github.com/ethpandaops/service-authenticatoor) | `0.0.2` | `0.0.3` | | [github.com/ethpandaops/spamoor](https://github.com/ethpandaops/spamoor) | `1.2.2` | `1.2.3` | | [github.com/glebarez/go-sqlite](https://github.com/glebarez/go-sqlite) | `1.22.0` | `1.23.0` | | [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.27.2` | `3.27.3` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.2` | `1.24.1` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.0` | | google.golang.org/protobuf | `1.36.11` | `1.36.12` | Updates `github.com/ethereum/go-ethereum` from 1.17.4 to 1.17.5 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.17.4...v1.17.5) Updates `github.com/ethpandaops/service-authenticatoor` from 0.0.2 to 0.0.3 - [Release notes](https://github.com/ethpandaops/service-authenticatoor/releases) - [Commits](ethpandaops/service-authenticatoor@v0.0.2...v0.0.3) Updates `github.com/ethpandaops/spamoor` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/ethpandaops/spamoor/releases) - [Commits](ethpandaops/spamoor@v1.2.2...v1.2.3) Updates `github.com/glebarez/go-sqlite` from 1.22.0 to 1.23.0 - [Release notes](https://github.com/glebarez/go-sqlite/releases) - [Commits](glebarez/go-sqlite@v1.22.0...v1.23.0) Updates `github.com/pressly/goose/v3` from 3.27.2 to 3.27.3 - [Release notes](https://github.com/pressly/goose/releases) - [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md) - [Commits](pressly/goose@v3.27.2...v3.27.3) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.1) Updates `github.com/prometheus/common` from 0.69.0 to 0.70.1 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.69.0...v0.70.1) Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.0 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.9.4...v1.10.0) Updates `golang.org/x/text` from 0.39.0 to 0.40.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.39.0...v0.40.0) Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 --- updated-dependencies: - dependency-name: github.com/ethereum/go-ethereum dependency-version: 1.17.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/ethpandaops/service-authenticatoor dependency-version: 0.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/ethpandaops/spamoor dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/glebarez/go-sqlite dependency-version: 1.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/pressly/goose/v3 dependency-version: 3.27.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/prometheus/common dependency-version: 0.70.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/sirupsen/logrus dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 17, 2026

Navigation Menu

Uh oh!

build(deps): bump the dependencies group across 1 directory with 10 updates - #231

build(deps): bump the dependencies group across 1 directory with 10 updates#231
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/dependencies-2a276a8194

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Release File	Description
authenticatoor_0.0.3_windows_amd64.zip	authenticatoor executables for windows/amd64
authenticatoor_0.0.3_linux_amd64.tar.gz	authenticatoor executables for linux/amd64
authenticatoor_0.0.3_linux_arm64.tar.gz	authenticatoor executables for linux/arm64
authenticatoor_0.0.3_darwin_amd64.tar.gz	authenticatoor executable for macos/amd64
authenticatoor_0.0.3_darwin_arm64.tar.gz	authenticatoor executable for macos/arm64

Release File	Description
spamoor_1.2.3_windows_amd64.zip	spamoor executables for windows/amd64
spamoor_1.2.3_linux_amd64.tar.gz	spamoor executables for linux/amd64
spamoor_1.2.3_linux_arm64.tar.gz	spamoor executables for linux/arm64

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026

Grav-Torque Pad (v1.17.5)

Fork Implementation

Core

Networking

v0.0.3

Major Changes

Full changelog

Release Artifacts

v1.2.3

Major Changes

Full changelog

Release Artifacts

v3.27.3

Changed

[v3.27.3] - 2026-07-22

Changed

v1.24.1 / 2026-07-23

What's Changed

v1.24.0 - 2026-07-20

Changes

1.24.1 / 2026-07-23

1.24.0 / 2026-07-20

v0.70.1

What's Changed

v0.70.0

What's Changed

New Contributors

Changelog

main / unreleased

What's Changed

v0.70.0 / 2026-07-10

Enhancements

Bugfixes

Internal

v1.10.0

Logrus v1.10.0

🚀 Performance

🔄 log/slog interoperability

🔒 Concurrency & Correctness

➕ Added

1.10.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

🔄 `log/slog` interoperability