fix(deps): update module github.com/ethereum/go-ethereum to v1.13.15 [security] - autoclosed #2773
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
ℹ Artifact update noticeFile name: contrib/opbot/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
|
Warning Rate limit exceeded@github-actions[bot] has exceeded the limit for the number of commits or files that can be reviewed per hour. Please wait 29 minutes and 54 seconds before requesting another review. How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #2773 +/- ##
=============================================
Coverage 25.69169% 25.69169%
=============================================
Files 770 770
Lines 55516 55516
Branches 80 80
=============================================
Hits 14263 14263
Misses 39775 39775
Partials 1478 1478
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
Deploying sanguine-fe with
|
| Latest commit: |
763f625
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://200aa5cc.sanguine-fe.pages.dev |
| Branch Preview URL: | https://renovate-opbot-go-github.aaakk.us.kg.sanguine-fe.pages.dev |
renovate
bot
force-pushed
the
renovate/opbot-go-github.aaakk.us.kg/ethereum/go-ethereum-vulnerability
branch
from
1732752 to
2bc37d3
Compare
…[security] | datasource | package | from | to | | ---------- | ------------------------------- | ------- | -------- | | go | github.com/ethereum/go-ethereum | v1.13.8 | v1.13.15 | Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate
bot
force-pushed
the
renovate/opbot-go-github.aaakk.us.kg/ethereum/go-ethereum-vulnerability
branch
from
2bc37d3 to
763f625
Compare
|
This PR is stale because it has been open 14 days with no activity. Remove stale label or comment or this will be closed in 5 days. |
renovate
bot
changed the title
renovate
bot
deleted the
renovate/opbot-go-github.aaakk.us.kg/ethereum/go-ethereum-vulnerability
branch
This PR contains the following updates:
v1.13.8->v1.13.15Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
GitHub Vulnerability Alerts
CVE-2024-32972
Impact
A vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node.
More in-depth details will be released at a later time.
Patches
The fix has been included in geth version
1.13.15and onwards.Workarounds
No workarounds have been made public.
References
No more information is released at this time.
Credit
This issue was disclosed responsibly by DongHan Kim via the Ethereum bug bounty program. Thank you for your cooperation.
Release Notes
ethereum/go-ethereum (github.com/ethereum/go-ethereum)
v1.13.15: Ontamalca (v1.13.15)Compare Source
Geth v1.13.15 is a maintenance-release that contains some fixes mainly to avoid snapsync-related data-corruption.
We recommend all users to upgrade to v1.13.15 as soon as possible.
As with all our previous releases, you can find the:
ethereum/client-go.v1.13.14: Altaaya (v1.13.14)Compare Source
Geth v1.13.14 is a small maintenance release with a handful of polishes to the blob pool:
This release is NOT critical for the Cancun fork, but recommended to make Geth lighter in anticipation to unknown blob load.
Other fixes:
eth_createAccessListif--gascap=0(#28846).For a full rundown of the changes please consult the Geth 1.13.14 release milestone.
As with all our previous releases, you can find the:
ethereum/client-go.v1.13.13: Alsages (v1.13.13)Compare Source
This is a minor release with fixes for several issues related to the upcoming Cancun mainnet fork. As such, it is recommended for all mainnet users.
Changes in this release:
eth_fillTransactionhas seen some bug fixes related to blob transactions as well. (#28929, #29037)getClientVersionV1on the Engine API endpoint. (#28915, #28994)Go API changes:
ethereum.CallMsgnow contains EIP-4844 related fields (#28989)core.GenesisAllocis now available from packagecore/types. We hope this change will reduce external dependencies on packagecore. (#29003)For a full rundown of the changes please consult the Geth 1.13.13 release milestone.
As with all our previous releases, you can find the:
ethereum/client-go.v1.13.12: Edolus (v1.13.12)Compare Source
This release embeds the mainnet fork number for Cancun, scheduled to go live on 13th March, 2024 (unix
1710338135). The specification can be read here, and it contains the following changes:To go along Cancun, we're providing refreshed Grafana dashboards:
Other than that, the following assorted fixes and features are included in this release:
eraformat. Theeraformat is meant to provide a cross-client archive formatfor block data (#26621, #28959)
For a full rundown of the changes please consult the Geth 1.13.12 release milestone.
As with all our previous releases, you can find the:
ethereum/client-go.v1.13.11: Tremanre (v1.13.11)Compare Source
This release fixes a few bugs and enables the Cancun upgrade for the Sepolia and Holesky networks; Sepolia will upgrade on Jan 31, and Holesky on Feb 7, and naturally this is a required upgrade if you intend to follow either chain.
eth_syncingis slightly changed, so that it nowdoes reports
trueuntil transaction indexing is finished. (#28703)rlpdump: add-posflag for displaying byte positions (#28785)For a full rundown of the changes please consult the Geth 1.13.11 release milestone.
As with all our previous releases, you can find the:
ethereum/client-go.v1.13.10: Sharjila B (v1.13.10)Compare Source
This release is equivalent to v1.13.9, just contains a version bump. The reason is that a bad commit was tagged on 1.13.9 originally and whilst it was untagged and fixed, some caches (Go's package manager (
go mod)) managed to store the temporary bad version. As there is no way for us to flush the bad version out, it's cleaner to tag a next version instead. Apologies about the mess.This release fixes a few issues and enables the Cancun upgrade for the Goerli network at block timestamp
1705473(#28719) which is 6:32:am 17. Jan. 2024 UTC.Apart from the Goerli configuration update, we have a few other changes.
accounts/abi/backendswas rewritten. The improved version is available from the new packageethclient/simulated. A backwards-compatibility wrapper remains in the old location. (#28202)"error". (#28774, #28780)logfor consumers of the geth library (#28747)geth removedbcan now be run non-interactively (#28725)Testing
currentExcessBlobGasto the state tests for better coverage of state tests (#28735)For a full rundown of the changes please consult the Geth 1.13.9 release milestone.
As with all our previous releases, you can find the:
ethereum/client-go.v1.13.9: Sharjila (v1.13.9)Compare Source
This release fixes a few issues and enables the Cancun upgrade for the Goerli network at block timestamp
1705473(#28719) which is 6:32:am 17. Jan. 2024 UTC.Apart from the Goerli configuration update, we have a few other changes.
accounts/abi/backendswas rewritten. The improved version is available from the new packageethclient/simulated. A backwards-compatibility wrapper remains in the old location. (#28202)"error". (#28774, #28780)logfor consumers of the geth library (#28747)geth removedbcan now be run non-interactively (#28725)Testing
currentExcessBlobGasto the state tests for better coverage of state tests (#28735)For a full rundown of the changes please consult the Geth 1.13.9 release milestone.
As with all our previous releases, you can find the:
ethereum/client-go.Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.