Skip to content

build(deps): bump github.com/blinklabs-io/gouroboros from 0.153.1 to 0.160.0#535

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.160.0
Closed

build(deps): bump github.com/blinklabs-io/gouroboros from 0.153.1 to 0.160.0#535
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.160.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 9, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/blinklabs-io/gouroboros from 0.153.1 to 0.160.0.

Release notes

Sourced from github.com/blinklabs-io/gouroboros's releases.

v0.160.0

What's Changed

New Contributors

Full Changelog: blinklabs-io/gouroboros@v0.159.2...v0.160.0

v0.159.2

What's Changed

Full Changelog: blinklabs-io/gouroboros@v0.159.1...v0.159.2

v0.159.1

What's Changed

Full Changelog: blinklabs-io/gouroboros@v0.159.0...v0.159.1

v0.159.0

What's Changed

Full Changelog: blinklabs-io/gouroboros@v0.158.4...v0.159.0

v0.158.4

What's Changed

... (truncated)

Changelog

Sourced from github.com/blinklabs-io/gouroboros's changelog.

v0.160.0 - protocol flow control and validation fixes

  • Date: 2026-03-03
  • Version: 0.160.0

Summary

This release includes network protocol flow control updates, consensus validation corrections, and CI and documentation refinements.

New Features

  • Added CI workflows to run benchmarking and profiling, including allocation-regression tests for core validation paths, comment-triggered benchmark runs with an authorization gate, and automated posting of benchmark results to pull requests.
  • Added GitHub Actions workflows that trigger on issue closure to log issue metadata and update the project item Closed Date field.

Breaking Changes

  • Updated network protocol flow control to apply backpressure instead of disconnecting by increasing the max pending message bytes for NtN, removing byte limits from NtC ChainSync, and modifying the protocol read loop when pending bytes or queues fill.

Bug Fixes

  • Fixed JSON marshaling for LazyValue when underlying CBOR is missing or empty and added test coverage.
  • Fixed nonce and header validation to follow era-specific rules by making VRF input and nonce handling era-specific, switching KES verification to use stored header-body CBOR, tightening validation logic, and expanding tests.
  • Fixed rolling nonce derivation to hash prevBlockNonce concatenated with raw VRF output bytes and refreshed related tests and comments.
  • Fixed connection shutdown to treat normal protocol completion as graceful so stop paths avoid spurious errors and avoid sending Done or ClientDone when protocols are already finished.
  • Fixed transaction fee sizing and era-specific semantics by centralizing fee size calculation via TxSizeForFee, correcting datum-hash nil semantics, normalizing Conway redeemer handling, eagerly caching CBOR for Babbage transactions, and adding a Conway Plutus V3 reproduction test using plutigo v0.0.26.

Additional Changes

  • Updated RELEASE_NOTES.md by backfilling entries for versions 0.128.0 through 0.159.2, including detailed notes for 0.140.0 through 0.159.1 and a dedicated entry for 0.159.2.
  • Updated release note language for clearer scanning while preserving technical meaning.
  • Updated GitHub Actions dependencies to actions/setup-go v6.3.0 (from v6.2.0) and actions/upload-artifact v7.0.0.

v0.159.2 - transaction validation updates

  • Date: 2026-02-27
  • Version: 0.159.2

Summary

This release includes Conway Plutus transaction validation updates, strict CBOR metadata decoding, and developer documentation refinements.

Breaking Changes

  • Updated Conway Plutus transaction validation to require ScriptDataHash only when redeemers or witness datums are present (script references are treated as inert) and to return a typed input-resolution error when a UTxO lookup fails.
  • Updated callers to omit ScriptDataHash unless a transaction includes Plutus redeemers or witness datums.

Bug Fixes

  • Fixed metadata decoding for generic CBOR maps to fail fast on any key or value decode error by using *cbor.Value map keys.

... (truncated)

Commits
  • aeebf7e fix(ledger): epoch nonce calc (#1619)
  • 147db04 feat(protocol): skip return error on connection close (#1469)
  • 8c76795 fix(ledger): datum hashes, redeemer iterator, updated mintxfee calc (#1617)
  • 48a1591 feat(cbor): Fixed LazyValue.MarshalJSON for empty CBOR and added a test for L...
  • 91fde04 chore(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#1616)
  • d38385a chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#1615)
  • 7aa46f6 fix(protocol): correct max pending bytes, split n2n/n2c (#1613)
  • c02bcba ci(benchmarks): support triggering by comment (#1612)
  • 577ad32 feat(vrf): era-specific VRF (#1610)
  • f1ddb34 feat(add-workflow): update-closed-issues (#1614)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade github.com/blinklabs-io/gouroboros to v0.160.0 to improve protocol flow control and fix ledger validation (VRF/nonce, fee sizing) and CBOR JSON handling. This should make node connections more stable and validation more accurate.

  • Dependencies
    • Bump github.com/blinklabs-io/gouroboros to v0.160.0.
    • Update indirect filippo.io/edwards25519 to v1.2.0.
    • Update indirect github.com/blinklabs-io/plutigo to v0.0.26.

Written for commit 0dcf744. Summary will update on new commits.

Bumps [github.com/blinklabs-io/gouroboros](https://github.com/blinklabs-io/gouroboros) from 0.153.1 to 0.160.0.
- [Release notes](https://github.com/blinklabs-io/gouroboros/releases)
- [Changelog](https://github.com/blinklabs-io/gouroboros/blob/main/RELEASE_NOTES.md)
- [Commits](blinklabs-io/gouroboros@v0.153.1...v0.160.0)

---
updated-dependencies:
- dependency-name: github.com/blinklabs-io/gouroboros
  dependency-version: 0.160.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner March 9, 2026 15:31
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 9, 2026

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@dependabot @github

dependabot Bot commented on behalf of github Mar 16, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #544.

@dependabot dependabot Bot closed this Mar 16, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/blinklabs-io/gouroboros-0.160.0 branch March 16, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants