Skip to content

Bump the dependencies group in /junkd with 3 updates#18

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/junkd/dependencies-de7367e60d
Open

Bump the dependencies group in /junkd with 3 updates#18
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/junkd/dependencies-de7367e60d

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 13, 2026 •
edited
Loading

Bumps the dependencies group in /junkd with 3 updates: go.sia.tech/core, go.sia.tech/coreutils and go.sia.tech/siastorage.

Updates go.sia.tech/core from 0.19.1-0.20260326151920-bbeb92b26458 to 0.19.1

Release notes

Sourced from go.sia.tech/core's releases.

0.19.1 (2026-04-10)

Features

  • Adds a new error type for "host is shutting down"

Fixes

  • Add contract not found error
  • Added additional context in error message when the signing threshold of a spend policy wasn't reached.
  • Increase maxLen for request and response types including RenterInputs or HostInputs.
  • Update mux dependency to v1.5.0.
Changelog

Sourced from go.sia.tech/core's changelog.

0.19.1 (2026-04-10)

Features

  • Adds a new error type for "host is shutting down"

Fixes

  • Add contract not found error
  • Added additional context in error message when the signing threshold of a spend policy wasn't reached.
  • Increase maxLen for request and response types including RenterInputs or HostInputs.
  • Update mux dependency to v1.5.0.

0.19.0 (2025-12-01)

Breaking Changes

  • Changed rhp.BuildSectorProof to accept cached subtrees to reduce disk IO required for sector reads.

Fixes

  • Parallelize sector root computation in ReaderRoot.

0.18.1 (2025-11-10)

Fixes

  • Fix invalid MaxCollateral validation for partial contract refreshes.

0.18.0 (2025-09-23)

Breaking Changes

  • Changed the encoding of rhp.Account to include the ed25519: prefix.

0.17.5 (2025-09-01)

Fixes

  • Fix ProtocolVersion marshalling failing.

0.17.4 (2025-08-27)

Fixes

  • Add compatibility for old protocol version JSON encoding

0.17.3 (2025-08-21)

Fixes

... (truncated)

Commits

Updates go.sia.tech/coreutils from 0.21.2-0.20260327081620-0c3739d3b615 to 0.21.2

Release notes

Sourced from go.sia.tech/coreutils's releases.

0.21.2 (2026-04-10)

Features

  • RHP4 graceful shutdown

Fixes

  • Always cancel read side of QUIC stream when calling stream.Close.
  • Fixed an edge case in RPCFreeSectors where the deletion logic would keep a sector root that was supposed to be deleted.
  • Pass proper descriptions when closing QUIC connection.
  • Fixed excessive "peer relayed a v2 header with unknown parent" log spam by only relaying headers after sync when the synced blocks became the new tip.
  • Update Go version to 1.26.0.
  • Update mux dependency to v1.5.0.
  • Use DEBUG log level instead of ERROR for RPCs failing due to the peer closing the connection on their end.
Changelog

Sourced from go.sia.tech/coreutils's changelog.

0.21.2 (2026-04-10)

Features

  • RHP4 graceful shutdown

Fixes

  • Always cancel read side of QUIC stream when calling stream.Close.
  • Fixed an edge case in RPCFreeSectors where the deletion logic would keep a sector root that was supposed to be deleted.
  • Pass proper descriptions when closing QUIC connection.
  • Fixed excessive "peer relayed a v2 header with unknown parent" log spam by only relaying headers after sync when the synced blocks became the new tip.
  • Update Go version to 1.26.0.
  • Update mux dependency to v1.5.0.
  • Use DEBUG log level instead of ERROR for RPCs failing due to the peer closing the connection on their end.

0.21.1 (2026-02-25)

Fixes

  • Fix edge case where a node incorrectly sends the genesis state to peers while syncing.
  • Fix NDF in TestFormContractBasis
  • Fix parallelSync stalling when all workers fail.
  • Mark peer synced if there are no more blocks to sync.
  • Reduced excessive logging in syncer.
  • Validate RPCFundAccountsRequest

0.21.0 (2026-02-04)

Breaking Changes

Changed block pruning to an active decision for integrators rather than a passive option

This fixes a race condition on some nodes when chain subscribers are slow where blocks would be removed from the store before they could be indexed.

Fixes

  • Enable StreamResetPartialDelivery when listening for QUIC connections.
  • Use custom sectorBuffer rather than bytes.Buffer in handleRPCWriteSector.

0.20.1 (2026-01-05)

Fixes

  • Fix a race in the goroutine spun up by NewEphemeralContractor.
  • Fixed an issue where fully connected peers could get stuck on a stale chain after a reorg.

0.20.0 (2025-12-18)

Breaking Changes

... (truncated)

Commits

Updates go.sia.tech/siastorage from 0.0.3-0.20260408144318-1b939ff0ebe3 to 0.0.3

Release notes

Sourced from go.sia.tech/siastorage's releases.

0.0.3 (2026-04-09)

Fixes

  • Update indexd dependency
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group in /junkd with 3 updates
be44457 
Bumps the dependencies group in /junkd with 3 updates: [go.sia.tech/core](https://github.com/SiaFoundation/core), [go.sia.tech/coreutils](https://github.com/SiaFoundation/coreutils) and [go.sia.tech/siastorage](https://github.com/SiaFoundation/sia-storage-go).


Updates `go.sia.tech/core` from 0.19.1-0.20260326151920-bbeb92b26458 to 0.19.1
- [Release notes](https://github.com/SiaFoundation/core/releases)
- [Changelog](https://github.com/SiaFoundation/core/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SiaFoundation/core/commits/v0.19.1)

Updates `go.sia.tech/coreutils` from 0.21.2-0.20260327081620-0c3739d3b615 to 0.21.2
- [Release notes](https://github.com/SiaFoundation/coreutils/releases)
- [Changelog](https://github.com/SiaFoundation/coreutils/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SiaFoundation/coreutils/commits/v0.21.2)

Updates `go.sia.tech/siastorage` from 0.0.3-0.20260408144318-1b939ff0ebe3 to 0.0.3
- [Release notes](https://github.com/SiaFoundation/sia-storage-go/releases)
- [Commits](https://github.com/SiaFoundation/sia-storage-go/commits/v0.0.3)

---
updated-dependencies:
- dependency-name: go.sia.tech/core
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: go.sia.tech/coreutils
  dependency-version: 0.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: go.sia.tech/siastorage
  dependency-version: 0.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 13, 2026
@socket-security
Copy link
Copy Markdown

socket-security bot commented Apr 13, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedgolang/​go.sia.tech/​coreutils@​v0.21.2-0.20260327081620-0c3739d3b615 ⏵ v0.21.298100100100100
Updatedgolang/​go.sia.tech/​core@​v0.19.1-0.20260326151920-bbeb92b26458 ⏵ v0.19.199100100100100
Updatedgolang/​go.sia.tech/​siastorage@​v0.0.3-0.20260408144318-1b939ff0ebe3 ⏵ v0.0.3100100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants