Skip to content

fix(deps): update module github.com/ethereum/go-ethereum to v1.17.5 - autoclosed - #375

Closed
renovate[bot] wants to merge 1 commit into
developfrom
renovate/github.com-ethereum-go-ethereum-1.x
Closed

fix(deps): update module github.com/ethereum/go-ethereum to v1.17.5 - autoclosed#375
renovate[bot] wants to merge 1 commit into
developfrom
renovate/github.com-ethereum-go-ethereum-1.x

Conversation

@renovate

@renovate renovate Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/ethereum/go-ethereum v1.11.6 → v1.17.5 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

ethereum/go-ethereum (github.com/ethereum/go-ethereum)

v1.17.5: Grav-Torque Pad (v1.17.5)

Compare Source

This is a maintenance release with accumulated bug fixes and improvements, and is recommended for all users. It continues the implementation work for the upcoming Amsterdam hardfork.

A few things worth highlighting:

  • The default GOGC has changed from 20 to 50, trading a higher memory peak for less GC overhead. Set --gogc=20 to keep the old behavior.
  • Pebble v2 is now supported as a key-value store backend. Pebble v2 is used when Geth is bootstrapped from scratch, and falls back to Pebble v1 for a pre-existing database. Run geth db pebble-upgrade to explicitly upgrade a legacy Pebble v1 database to v2.

Fork Implementation

Core

  • Introduce a sparse blobpool to reduce blob transaction pool memory usage (#​34047)
  • Migrate legacy blobpool limbo entries to the new cell-based sidecar format on startup (#​35209)
  • Drop support for v0 blob sidecars in blobpool (#​35191)
  • Inline gas deduction to fix a performance regression (#​35203)
  • Fix eth/71 block-access-list empty marker decoding which wrongly disconnected peers (#​35286)
  • Disable snap sync mode once the pivot block is committed (#​35402, #​35405)
  • Speed up debug_setHead and reject unrecoverable targets (#​35252)
  • Fix snap sync failing to backfill blocks with missing canonical-hash mappings (#​35190)
  • Reuse the chain's JUMPDEST cache in payload building (#​35378)
  • Support Pebble v2 as the database backend (#​34009)
  • Support .ere files in the era store (#​34978)
  • Introduce the trie.UpdateBatch API (#​32448)
  • Fix freezer truncation error on newly-added empty tables after unclean shutdown (#​35258)
  • Improve state recoverability reporting by considering sync status (#​35400)
  • Fix account prefetching for absent accounts (#​35256)
  • Various snap v2 fixes (#​35321, #​35323)
  • Optimize block validation (#​35403)
  • Various allocation improvements (#​35234, #​35237, #​35232)
  • Continue binary trie development (#​34772)
  • Fix tx size calculation (#​35406)

Networking

  • Protect high-value peers from random dropping based on transaction-inclusion statistics (#​34702)
  • Keep invalid and unreachable nodes out of DNS discovery trees (#​35312)
  • Support a dual-stack discovery listener in devp2p, with several related fixes (#​35220, #​35298, #​35243, #​35206)

RPC

  • Introduce the --rpc.http-body-limit flag to configure the maximum HTTP request body size (#​35224)
  • Reject gasPrice when combined with an authorizationList (#​35320)
  • Reject a block parameter with neither a number nor a hash (#​35271)
  • Match the authorization scheme case-insensitively (#​35022)

Tracing

  • Respect the configured log limit in the struct logger (#​35349)
  • Emit tracing frames in the EIP-2780 manner (#​35396)
  • Include the log index in ERC-7562 tracer output (#​35200)
  • Stop incorrectly capturing callcode transfers in the log tracer (#​35248)

Engine API

Geth & Tooling

  • Introduce a --gogc flag and bump the default GOGC to 50 (#​35363, #​34851)
  • Write block-level access lists in geth export (#​35369)
  • Preserve metrics tag values containing = (#​35168)
  • Update eels tests to v20.0.0 (#​35283)

Accounts & ABI

  • Forward the blob fee cap to external signers (#​35167)
  • Introduce a GetABI() method on abigen v2 generated contract bindings (#​35221)
  • Fix abigen v1 bindings to handle deployment of library dependencies (#​32164)

Build

  • Update the ckzg dependency (#​35336)
  • Upgrade the -dlgo bootstrap Go version to 1.25.12 (#​35317)

For a full rundown of the changes please consult the Geth 1.17.5 release milestone.

As with all our previous releases, you can find the:

v1.17.4: Flexible Polymer Casing (v1.17.4)

Compare Source

This is a maintenance release with accumulated bug fixes and improvements, and is recommended for all users. It also continues the implementation work for the upcoming Amsterdam hardfork.

One thing worth highlighting:

Fork Implementation (Amsterdam)
Geth
RPC

  • eth_baseFee has been added, returning the base fee of the next block (#​34904, #​35023)

  • eth_capabilities has been added, letting clients discover which historical data a node can serve (#​33886)

  • debug_clearTxpool has been added to clear the transaction pool (#​33347, #​35130)

  • State-reading methods (eth_getBalance, eth_getCode, eth_getStorageAt, etc.) now default the block parameter to latest when omitted (#​35100)

  • Fixes for eth_simulateV1: an incorrect "base fee too low" error code and a pre-Shanghai withdrawal regression (#​34951, #​34939)

  • debug_setHead now propagates rewind errors instead of silently ignoring them (#​35001)

  • EIP-7702 transactions with a nil To address are now rejected (#​35094)

  • HTTP RPC responses now always set Content-Length, and a WebSocket handshake status-code bug was fixed (#​35072, #​35111)

  • The client can now configure trace-context propagation via the traceparent header, and response writes are now traced (#​35132, #​35049)

GraphQL
  • GraphQL request bodies are now limited to 5 MiB (#​35034)
  • Log-range queries with begin > 0 and end == 0 are now rejected (#​35032)
  • The Block.raw resolver now returns empty bytes when the block body is missing (#​35027)
Core
  • A global cache for JUMPDEST bitmaps speeds up EVM execution (#​34850)
  • EVM stack operations are now computed in place, avoiding per-operand copies (#​35156)
  • New code-cache hit/miss meters have been added (#​34821)
  • A shutdown race in snapshot generation has been fixed (#​33540)
Engine API & Blobs
  • Engine API JSON encoding for large blob payloads has been optimized, and gzip is disabled on the engine API (#​33969, #​35057)
  • engine_hasBlobs has been added, and engine_getBlobs now counts only actually-available blobs (#​34859, #​35028)
  • A cache for GetBlobs requests reduces engine API latency, and otel tracing has been added to the GetBlobs endpoints (#​35124, #​35026)
  • Reorged v0 blob sidecar transactions are now dropped rather than converted (#​35099)
  • testing_commitBlockV1 has been added as the write companion to testing_buildBlockV1 (#​34995)
  • New payloads are now imported at genesis regardless of sync status (#​32673)
Networking
  • NAT STUN discovery no longer fails on IPv6 servers (#​35084)
  • Several snap-sync robustness fixes: uncovered state is removed before resuming, a catch-up stall was fixed, sync restarts when the required BAL is unavailable, and the pivot is frozen once state download completes (#​35159)

For a full rundown of the changes please consult the Geth 1.17.4 release milestone.

As with all our previous releases, you can find the:

v1.17.3: Enzymatic Injector (v1.17.3)

Compare Source

This is a maintenance release with continued progress on the Amsterdam fork implementation. It also introduces ETH/70, which is now live on the network.

Breaking change for tracing APIs (debug_trace*), specifically the structLog (opcode) tracer. The following response fields now follow the newly established client-wide spec (ethereum/execution-apis#762) and reexec has been removed from the tracing config:

  • memory: words are 0x-prefixed and padded to 32 bytes
  • storage: keys and values are 0x-prefixed
  • error: omitted when empty (previously serialized as "")
Geth
  • Add retry mechanism for checkpoint init in blsync (#​33966)
  • Add subcommand for offline binary tree conversion (#​33740)
  • Add code exporter for db export (#​34696)
Core
Networking
  • Fix early exit of timeout loop when removing expired matchers (#​34743, #​34878)
  • Prevent data races by copying discover buffers before unhandled read errors (#​34888)
  • Fix discover waitForNodes deadlock by decoupling nodeFeed from table mutex (#​34898)
Cryptography
  • Validate hash length in nocgo signature verification (#​33839)
RPC
  • Fix structLog JSON output format and drop reexec from tracing config (#​34093)
  • Apply block overrides (gasLimit, blobBaseFee) in eth_estimateGas (#​34081)
  • Apply block overrides to header in eth_call (#​34842)
  • Add MaxUsedGas to eth_simulate call results (#​34820)
  • Integrate trienode history indexing progress into eth_syncing (#​34633)
  • Return -32602 from log RPCs (eth_getLogs, eth_getFilterLogs, …) when the block range limit is exceeded (#​34647)
Others
  • Fix prestate tracer to distinguish cleared code from unchanged in EIP-7702 (#​34675)
  • Emit logs for EIP-7708 ETH burns in tracer (#​34623)
  • Forward V2 state hooks through mux tracer (#​34869)
  • Send WebSocket close frame on client disconnect (#​33909)
  • Omit empty address/topics fields in RPC filter requests (#​33884)
  • Add package-level error for event signature mismatch (#​34076, #​34868)
  • Add gRPC transport for OTLP trace export (#​33941)
  • Add system call tracing in t8n command (#​34862)
  • Stream t8n alloc output to reduce memory use (#​34785)
  • Enable fsnotify watcher on linux/arm64 (#​34834)
  • Fix FreeBSD build (#​34784)
  • Fix disconnect decoding in RLPx ping (#​34781)
  • Fix hive test for discv5 findnode results (#​34043)
  • Fix truncation of opening parenthesis in clef (#​33702)

For a full rundown of the changes please consult the Geth 1.17.3 release milestone.

As with all our previous releases, you can find the:

v1.17.2: EMF Suppressor (v1.17.2)

Compare Source

This is a maintenance release with several important bug fixes. Notably, a critical issue in debug_executionWitness could previously corrupt node data, users relying on this RPC endpoint are strongly advised to upgrade.

Geth now also supports syncing with chains where pre-Prague history has been pruned, and allows explicitly removing it via geth prune-history --history.chain postprague.

Geth
  • Set default cache size to 4GB across all networks (#​33836, #​33975)
  • Added support for pruning chain history prior to the Prague fork (#​33657, #​34036)
  • Added fetchpayload command to build execution witnesses for specific blocks (#​33919)
  • Optimized Era history import with batched insertion (#​33894)
  • Added womir target for keeper (#​34079)
  • Added support for iterating a single storage trie in geth snapshot traverse-state and geth snapshot traverse-rawstate (#​34051)
Core
  • Amsterdam fork updates:
    • EIP-8024: Switch to branchless normalization and extend EXCHANGE (#​33869)
    • EIP-7778: Block gas accounting without refunds (#​33593)
    • EIP-7954: Increase maximum contract size (#​33832)
    • EIP-7708: ETH transfers now emit logs (#​33645)
    • Reworked gas measurement order (prerequisite for EIP-7928) (#​33648)
  • Improved payload building by prewarming trie nodes for state hash computation (#​33945)
  • Various binary trie improvements (#​33951, #​33961, #​33989, #​34021, #​34032, #​34022, #​34056)
  • Upgraded go-eth-kzg to v1.5.0, significantly reducing allocations in VerifyCellProofBatch (#​33963)
  • Refactored state database in preparation for binary trie integration (#​33816)
  • Enabled trie node history retention on existing nodes (#​33934)
  • Optimized historical state indexer with batch processing (#​33640)
  • Fixed potential deadlock in txlookup (#​34039)
  • Added new RLP APIs (#​34052, #​34048)
  • Fix dir.Sync() failure in freezer on Windows (#​34115)
Networking
  • Avoid duplicate connections by skipping simultaneous inbound/outbound dials (#​33198)
  • Fixed session key mismatch by using consistent remote address handling in discv5 tests (#​34031)
  • Added DNS hostname resolution for bootstrap nodes (#​34101)
RPC
  • Fixed state corruption issue in debug_executionWitness; deprecated debug_executionWitnessByHash (#​33931)
  • Added MaxUsedGas field to eth_simulateV1 response (#​32789)
  • Fixed gas cap handling in eth_simulateV1 (#​33952)
  • Fixed nonce revert edge case during contract creation in tracer (#​33978)
  • Fixed eth_createAccessList to return an empty list instead of null for storage keys (#​33976)
  • eth_getFilterLogs now returns an error if the requested chain segment has been pruned (#​33823)
  • Fixed slot number encoding in RPC responses (#​34005)
  • Enforce RPC call limits for eth_simulateV1 (#​34616)
  • Enforce storage slot limits for proofs in eth_getProof (#​34617)
Observability
Build

For a full rundown of the changes please consult the Geth 1.17.2 release milestone.

As with all our previous releases, you can find the:

v1.17.1: Eezo Shunt (v1.17.1)

Compare Source

This is a bug fix release and is recommended for all users. It resolves a regression in snap sync, as well as several security issues.

Geth
  • The engine API no longer enables plain-text HTTP2, due to some reports of incompatibilities with the teku CL (#​33922)
  • The new --metrics.influxdb.interval flag allows changing the metrics reporting interval. (#​33767)
  • Geth has a new inspect-trie subcommand that prints information about node counts at all state trie depths (#​28892)
Core
  • Some Amsterdam fork-related changes:
  • Payload building had a fix that could prevent the CL from receiving the latest built payloads (#​33908)
Networking
  • Geth no longer supports p2p protocol version eth/68 (#​33511)
  • A rare crash in p2p request tracking is resolved (#​33940)
  • The transaction pool, and specifically the blobpool, saw some fixes that reduce relaying transactions that likely won't make it into the chain, or have already been included on chain recently. This should reduce txpool traffic (#​33607, #​33887, #​33923, #​33893)
  • In v1.17.0, a regression in snap-sync was introduced that would cause sync to fail when using --history.chain=postmerge (#​33865)
  • Snap-sync had a bug where peer connections would stop being used after a timeout or similar event. This wasn't too noticeable for mainnet sync because of peer churn (#​33790)
  • Unexpected state delivered by peers is now reported during snap-sync (#​33898)
  • P2P listener metrics now record handshake timeouts correctly (#​33539)
RPC
  • eth_estimateGas now honors the user-supplied access list (#​33849)
  • New RPC method: eth_getStorageValues (#​32591)
  • New RPC method: testing_buildBlockV1 (#​33656)
Build
  • This release is built with Go 1.25.7 (#​33874)
  • Our official Docker images are experimentally built with Go 1.26 (#​33899)

For a full rundown of the changes please consult the Geth 1.17.1 release milestone.

As with all our previous releases, you can find the:

v1.17.0: Eezo-Inlaid Circuitry (v1.17.0)

Compare Source

This is a feature release, with all accumulated development from the last 3 months. See below for the highlights.

Note that this release contains multiple critical security fixes, as well as many bug fixes, and is recommended for all users. However, if you are cautious about upgrades, you can also install v1.16.9 which has just the critical security fixes. Specifically, this release fixes CVE-2026-26313, CVE-2026-26314, CVE-2026-26315.

We recommend recreating your p2p node key after installing this update, which you can do by removing the DATADIR/geth/nodekey file before restarting geth. Note this will cause a change in the p2p node ID, which may break static peering setups.

Highlights

Path-based Archive Node with Proofs

The path-based archive node can now serve proofs (via eth_getProof) for the state of older blocks.

You can configure the block range that supports proving independently from other archive state availability. Specifically, you can use the --history.trienode command-line flag to set the amount of blocks for which tree nodes will be tracked.

This feature is disabled by default. Note that state history cannot easily be recovered once deleted, as it can only be generated by processing blocks. However, you can enable trienode history (and/or state history) at any time to turn a full node into a partial archive node, keeping state from that point in time onwards.

#​32727, #​32621, #​33551, #​32981, #​33399, #​32913, #​33303, #​33584, #​33329, #​33681, #​33103, #​33098, #​33515, #​32247

EraE History Support

Geth now suports the EraE file format, an archival format for post-merge chain history.

#​32157, #​33827

OpenTelemetry Tracing

OpenTelemetry tracing is now supported by the RPC server, including support for distributed tracing.
We have also added some tracing spans for block processing via the engine API, i.e. engine_newPayload.

#​33599, #​33452, #​33780, #​33521

All Changes

Geth CLI
  • The geth version-check subcommand has been removed. This command checked the geth website for signed vulnerability notices, and would tell if updates are necessary (#​33498)
  • There is now a --miner.maxblobs command-line flag to set a limit on blobs included in built blocks (#​33129, #​33302)
  • Geth now supports continuous profiling with Grafana Pyroscope (#​33623)
  • A rare bug that could halt block production in geth --dev mode was fixed (#​33146)
  • A new --rpc.rangelimit flag configures the maximum block range for eth_getLogs (#​33163)
  • geth --exitwhensynced will now set the finalized and safe block (#​33038)
  • geth --ethstats now reports the newPayload processing time to the stats server (#​33395)
  • A lot of minor issues in Geth's command-line flag processing have been fixed (#​33379, #​33338, #​33330, #​32999, #​33279, #​33252)
  • The evm blocktest command can now read filenames from stdin when no path is provided (#​32824)
Fork Implementation
Core
  • The crypto/ecies library allowed extraction of the private key used for key derivation via observation of response timing. We recommend rotating the node key after applying this update. (#​33669)
  • When a missing block is encountered during tx unindexing, Geth will now skip it and move on instead of entering an infinite loop. (#​33573)
  • Geth now optionally collect and export metrics about the total state size (#​33254, #​33376, #​33415)
  • There is a new OnStateUpdate hook, which is called after all state of a block has been committed. This gives access to the changeset of the block. (#​33490)
  • Some minor tracing bugs have been fixed (#​32919, #​33148, #​33644, #​33214)
  • Various minor issues in the freezer database have also been fixed (#​33747, #​33025, #​33203, #​33344)
  • The setHead operation now unsets the finalized block, in cases where the rolled-back block range extends before it. (#​33486)
  • The SignatureValues method of types.Signer now reports an error for invalid signature sizes (#​33647)
  • Geth prints detailed log messages for 'slow blocks' (#​33655, #​33525, #​33442, #​32812, #​33659, #​33532)
  • Pebble configuration has been tweaked for improved performance (#​33697, #​33353, #​33315)
  • A rare crash in the log indexer related to reorg handling has been fixed (#​33810)
  • Internal state diff size accounting has been corrected, so state diffs will now be flushed to the disk store less often (#​33505)
  • Since the keccak256 hash function variant used by Ethereum no longer has a fast-path in the standard library, we have vendored the keccak implementation back into our repository (#​33323)
Library
  • The RLP library now has a RawList type for dealing with un-decoded lists in a more convenient way (#​33755, #​33834, #​33840, #​33841)
  • The low-level RLP iterator and uses of it have been im

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner August 31, 2026 06:13
@renovate

renovate Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 24 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.21.5 -> 1.24.0
github.com/spf13/cobra v1.8.0 -> v1.8.1
github.com/stretchr/testify v1.9.0 -> v1.11.1
google.golang.org/grpc v1.60.0 -> v1.79.1
google.golang.org/protobuf v1.31.0 -> v1.36.11
github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
github.com/deckarep/golang-set/v2 v2.1.0 -> v2.6.0
github.com/golang/glog v1.1.2 -> v1.2.5
github.com/golang/protobuf v1.5.3 -> v1.5.4
github.com/golang/snappy v0.0.5-0.20220116011046-fa5810519dcb -> v1.0.1-0.20260716114414-9ae09f520e93
github.com/grpc-ecosystem/grpc-gateway/v2 v2.9.0 -> v2.28.0
github.com/holiman/uint256 v1.2.2-0.20230321075855-87b91420868c -> v1.3.2
github.com/klauspost/compress v1.17.0 -> v1.17.11
github.com/spf13/pflag v1.0.5 -> v1.0.6
github.com/tklauser/go-sysconf v0.3.10 -> v0.3.12
github.com/tklauser/numcpus v0.4.0 -> v0.6.1
golang.org/x/crypto v0.21.0 -> v0.48.0
golang.org/x/net v0.23.0 -> v0.50.0
golang.org/x/sync v0.6.0 -> v0.19.0
golang.org/x/sys v0.18.0 -> v0.41.0
golang.org/x/term v0.18.0 -> v0.40.0
golang.org/x/text v0.14.0 -> v0.34.0
google.golang.org/genproto/googleapis/api v0.0.0-20231106174013-bbf56f31fb17 -> v0.0.0-20260209200024-4cfbd4190f57
google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f -> v0.0.0-20260209200024-4cfbd4190f57
gopkg.in/check.v1 v1.0.0-20200902074654-038fdea0a05b -> v1.0.0-20201130134442-10cb98267c6c

@vega-issues vega-issues moved this to Waiting Review in Core Kanban Aug 31, 2026
@renovate renovate Bot changed the title fix(deps): update module github.com/ethereum/go-ethereum to v1.17.5 fix(deps): update module github.com/ethereum/go-ethereum to v1.17.5 - autoclosed Aug 31, 2026
@renovate renovate Bot closed this Aug 31, 2026
@renovate
renovate Bot deleted the renovate/github.com-ethereum-go-ethereum-1.x branch August 31, 2026 14:38
@github-project-automation github-project-automation Bot moved this from Waiting Review to Merged in Core Kanban Aug 31, 2026
@vega-issues vega-issues moved this from Merged to Waiting Review in Core Kanban Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

Core Kanban
Archived in project

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vega-issues