Skip to content

chore(deps): bump the dependencies group across 1 directory with 2 updates - #1537

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/sdk/dependencies-316a6323c9
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/sdk/dependencies-316a6323c9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates in the /sdk directory: go.sia.tech/core and go.sia.tech/coreutils.

Updates go.sia.tech/core from 0.21.6 to 0.21.7

Release notes

Sourced from go.sia.tech/core's releases.

0.21.7 (2026-07-17)

Fixes

  • Fix overflow bug in Currency.MulWithOverflow
Changelog

Sourced from go.sia.tech/core's changelog.

0.21.7 (2026-07-17)

Fixes

  • Fix overflow bug in Currency.MulWithOverflow
Commits
  • 5457cfa Merge pull request #422 from SiaFoundation/release
  • 6d54395 chore: prepare release 0.21.7
  • 78d08a7 build(deps): bump go.sia.tech/mux in the all-dependencies group
  • ad557b1 types: fix overflow bug in Currency.MulWithOverflow
  • fa431e0 build(deps): bump the all-dependencies group with 3 updates
  • See full diff in compare view

Updates go.sia.tech/coreutils from 0.23.5 to 0.24.0

Release notes

Sourced from go.sia.tech/coreutils's releases.

0.24.0 (2026-08-04)

Breaking Changes

Support concurrent chain.Manager reads via MVCC snapshots

The Manager previously serialized all of its methods -- including read-only ones -- with a single mutex, so heavy read load (e.g. from the syncer or subscribers) contended with block processing. The Manager now follows an MVCC scheme: writes accumulate in the Store's "scratchpad" -- which includes the tip state -- and are committed by Flush, at which point they become visible to "snapshots": self-contained, read-only captures of the committed state. Read-only Manager methods operate on snapshots, so they proceed concurrently with each other and with block processing, and never stall writers. bbolt supports snapshots natively via read-only transactions; MemDB now implements them with pin-aware copy-on-flush generations (CacheDB delegates to its underlying DB).

This is a breaking change for implementors and consumers of the chain.DB and chain.Store interfaces:

  • Store is now Snapshot() (StoreSnapshot, func()) + Scratchpad() StoreScratchpad. StoreSnapshot carries the read methods plus TipState; StoreScratchpad embeds it and adds the write methods and Flush, with ApplyBlock/RevertBlock updating the scratchpad's tip. Implementations may flush autonomously between operations (e.g. to bound the size or age of the accumulated writes), handling errors internally; the Manager explicitly calls Flush to publish the new tip after processing blocks, before notifying OnReorg listeners.
  • DB mirrors Store: Snapshot() (DBSnapshot, release func()) + Scratchpad() DBScratchpad. The scratchpad carries Bucket/CreateBucket/Flush/Cancel and must not flush autonomously; snapshots are read-only and remain valid until released, even across concurrent Flushes. A single DBBucket interface serves both sides; its Put/Delete methods may return errors on read-only (snapshot) buckets.
  • NewManager no longer takes a consensus.State parameter, and NewDBStore/NewDBStoreAtCheckpoint no longer return one; the tip state is provided by the Store itself (via a snapshot's or scratchpad's TipState).
  • Reads reflect committed state. Pruned blocks remain visible to read-only methods until the next commit, and blocks added to non-best chains remain invisible to them until the next commit. Blocks that extend the best chain are always committed before AddBlocks returns and before OnReorg listeners fire, so subscribers observe the tip they are notified of.

Fixes

  • reject nonunique txid txes from mempool
  • Use max of chain height and price table height when storing sectors.
Changelog

Sourced from go.sia.tech/coreutils's changelog.

0.24.0 (2026-08-04)

Breaking Changes

Support concurrent chain.Manager reads via MVCC snapshots

The Manager previously serialized all of its methods -- including read-only ones -- with a single mutex, so heavy read load (e.g. from the syncer or subscribers) contended with block processing. The Manager now follows an MVCC scheme: writes accumulate in the Store's "scratchpad" -- which includes the tip state -- and are committed by Flush, at which point they become visible to "snapshots": self-contained, read-only captures of the committed state. Read-only Manager methods operate on snapshots, so they proceed concurrently with each other and with block processing, and never stall writers. bbolt supports snapshots natively via read-only transactions; MemDB now implements them with pin-aware copy-on-flush generations (CacheDB delegates to its underlying DB).

This is a breaking change for implementors and consumers of the chain.DB and chain.Store interfaces:

  • Store is now Snapshot() (StoreSnapshot, func()) + Scratchpad() StoreScratchpad. StoreSnapshot carries the read methods plus TipState; StoreScratchpad embeds it and adds the write methods and Flush, with ApplyBlock/RevertBlock updating the scratchpad's tip. Implementations may flush autonomously between operations (e.g. to bound the size or age of the accumulated writes), handling errors internally; the Manager explicitly calls Flush to publish the new tip after processing blocks, before notifying OnReorg listeners.
  • DB mirrors Store: Snapshot() (DBSnapshot, release func()) + Scratchpad() DBScratchpad. The scratchpad carries Bucket/CreateBucket/Flush/Cancel and must not flush autonomously; snapshots are read-only and remain valid until released, even across concurrent Flushes. A single DBBucket interface serves both sides; its Put/Delete methods may return errors on read-only (snapshot) buckets.
  • NewManager no longer takes a consensus.State parameter, and NewDBStore/NewDBStoreAtCheckpoint no longer return one; the tip state is provided by the Store itself (via a snapshot's or scratchpad's TipState).
  • Reads reflect committed state. Pruned blocks remain visible to read-only methods until the next commit, and blocks added to non-best chains remain invisible to them until the next commit. Blocks that extend the best chain are always committed before AddBlocks returns and before OnReorg listeners fire, so subscribers observe the tip they are notified of.

Fixes

  • reject nonunique txid txes from mempool
  • Use max of chain height and price table height when storing sectors.
Commits
  • cb3e753 Merge pull request #463 from SiaFoundation/release
  • 12fe7cc chore: prepare release 0.24.0
  • 4b4ff13 Merge pull request #450 from SiaFoundation/snapshot
  • d53a68f bump webtransport-go
  • ac51a5a build(deps): bump github.com/quic-go/quic-go from 0.60.0 to 0.61.0
  • dd358f3 Merge origin/master into snapshot and resolve conflicts
  • 5c25232 Merge pull request #462 from SiaFoundation/matt/reject-nonunique-txes
  • 214c8cd Apply suggestions from code review
  • 112b5ef address comments
  • 30c80b9 chain: Fix MemDB Iter not observing unflushed writes
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 18, 2026
@vercel

vercel Bot commented Aug 18, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

5 Skipped Deployments
Project Deployment Actions Updated (UTC)
explorer Ignored Ignored Preview Aug 21, 2026 9:33am
explorer-zen Ignored Ignored Preview Aug 21, 2026 9:33am
hostd Ignored Ignored Preview Aug 21, 2026 9:33am
indexd Ignored Ignored Preview Aug 21, 2026 9:33am
renterd Ignored Ignored Preview Aug 21, 2026 9:33am

Request Review

@changeset-bot

changeset-bot Bot commented Aug 18, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 3ee2b95

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

…dates

Bumps the dependencies group with 2 updates in the /sdk directory: [go.sia.tech/core](https://github.com/SiaFoundation/core) and [go.sia.tech/coreutils](https://github.com/SiaFoundation/coreutils).


Updates `go.sia.tech/core` from 0.21.6 to 0.21.7
- [Release notes](https://github.com/SiaFoundation/core/releases)
- [Changelog](https://github.com/SiaFoundation/core/blob/master/CHANGELOG.md)
- [Commits](SiaFoundation/core@v0.21.6...v0.21.7)

Updates `go.sia.tech/coreutils` from 0.23.5 to 0.24.0
- [Release notes](https://github.com/SiaFoundation/coreutils/releases)
- [Changelog](https://github.com/SiaFoundation/coreutils/blob/master/CHANGELOG.md)
- [Commits](SiaFoundation/coreutils@v0.23.5...v0.24.0)

---
updated-dependencies:
- dependency-name: go.sia.tech/core
  dependency-version: 0.21.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: go.sia.tech/core
  dependency-version: 0.21.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: go.sia.tech/coreutils
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: go.sia.tech/coreutils
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/sdk/dependencies-316a6323c9 branch from d6d6da4 to 3ee2b95 Compare August 21, 2026 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants