Skip to content

chore(go)(deps): bump the all-dependencies group with 11 updates - #178

Merged
YoshihitoAso merged 1 commit into
dev-2.8from
dependabot/go_modules/all-dependencies-cee9728ac6
Aug 19, 2026
Merged

chore(go)(deps): bump the all-dependencies group with 11 updates#178
YoshihitoAso merged 1 commit into
dev-2.8from
dependabot/go_modules/all-dependencies-cee9728ac6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 11 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.43.4 1.43.6
github.com/aws/aws-sdk-go-v2/config 1.32.35 1.32.37
github.com/aws/aws-sdk-go-v2/credentials 1.19.34 1.19.36
github.com/aws/aws-sdk-go-v2/service/kms 1.55.4 1.55.6
github.com/aws/aws-sdk-go-v2/service/route53 1.65.6 1.65.8
github.com/aws/aws-sdk-go-v2/service/secretsmanager 1.44.4 1.44.6
github.com/consensys/gnark-crypto 0.20.1 0.21.0
github.com/stretchr/testify 1.11.1 1.12.0
golang.org/x/crypto 0.54.0 0.55.0
golang.org/x/text 0.40.0 0.41.0
google.golang.org/protobuf 1.36.11 1.36.12

Updates github.com/aws/aws-sdk-go-v2 from 1.43.4 to 1.43.6

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.35 to 1.32.37

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.34 to 1.19.36

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.55.4 to 1.55.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/route53 from 1.65.6 to 1.65.8

Commits

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.44.4 to 1.44.6

Commits

Updates github.com/consensys/gnark-crypto from 0.20.1 to 0.21.0

Release notes

Sourced from github.com/consensys/gnark-crypto's releases.

v0.21.0

⚠️ Breaking Changes

  • FRI & Plookup relocated — The fri and plookup packages are gone from all curves. FRI primitives now live under field/koalabear.
  • Parallel goes publicinternal/parallel is now exported as parallel; the worker pool moved to utils.
  • Stricter EdDSA key parsing:
    • PublicKey.SetBytes now rejects points outside the prime-order subgroup.
    • PrivateKey.SetBytes now rejects malformed scalars and public keys that don't match their scalar.
    • Keys that used to load may now error.

🔒 Security

  • shplonk & fflonk were missing subgroup membership checks on digests and proof points before verifying.
  • KZG MPC setupVerify was checking the ratio on the previous SRS instead of the contributed one, and never bound the G1 update to the proof.
  • Subgroup membership tests added to all twistededwards curves.
  • Fp2.Sqrt returned a wrong result on (non-QR, 0) inputs.
  • Fixed a 4-byte overread in the innerProdVec AVX-512 path.

✨ New

  • Cube roots in Fp and Fp2.
  • FFT over degree-6 extensions for koalabear and babybear.
  • Generic BitReverse / BitReverseCopy helpers in utils.
  • Fixed-base scalar multiplication on twisted Edwards curves (used by eddsa).
  • secp256r1: Fp2 tower + Cardano cube-root solver.

⚡ Faster

  • 4-bit sliding window exponentiation across all fields.
  • Lazy-reduction 𝔽p2 multiplication assembly for BLS12-381, BLS12-377, BLS24-315 & BLS24-317, plus improved Expt/mulBySeed chains and faster hash-to-G1 in the highly 2-adic Fp case.
  • New SIMD work on the small fields:
    • AVX-512 & NEON kernels for Poseidon2 compression and VectorE6
    • AVX-512 batch ops for E6 FFT (2.97×)
    • Inlined E6 arithmetic for 31-bit primes (2.07×)
    • Unrolled FFT kernels
Changelog

Sourced from github.com/consensys/gnark-crypto's changelog.

[v0.21.0] - 2026-08-10

Breaking

  • remove fri package from all curves; FRI primitives now live in field/koalabear (#856, #871)
  • remove plookup package from all curves (#862)
  • internal/parallel is now public as parallel; the worker pool moved to utils (#819, #823)
  • eddsa PublicKey.SetBytes rejects points outside the prime-order subgroup; PrivateKey.SetBytes rejects malformed scalars and public keys that don't match the scalar (#859)

Security

  • eddsa: reject small-subgroup public keys (#859)
  • shplonk, fflonk: check digests and proof points are in the subgroup before verifying (#858)
  • kzg: MpcSetup.Verify checked the ratio on the previous SRS instead of the contributed one, and did not bind the G1 update to the proof (#857)
  • add subgroup membership tests to all twistededwards curves (#833)

Feat

  • cube roots in Fp and Fp2 (#825)
  • FFT over degree-6 extension for koalabear and babybear (#838, #772)
  • generic BitReverse/BitReverseCopy (naive and Cobra) in utils (#871)
  • koalabear: Compressx16Columns, Compressx16ColumnsWithState and VectorE6.MulAccByElement (#865, #866, #871)
  • twistededwards: fixed-base ScalarMultiplicationBase, used by eddsa (#839)
  • secp256r1: Fp2 tower and Cardano cube-root solver (#831)

Fix

  • Fp2.Sqrt returned a wrong result on (non-QR, 0) inputs (#845)
  • amd64: 4-byte overread in the innerProdVec AVX-512 path (#841)
  • restore ExecuteAligned behavior lost in the Execute refactor (#836)
  • macOS build
  • fft/domain: stale FinerGenerator/GeneratorSqrt comment (#744)

Perf

  • 4-bit sliding window exponentiation for all fields (#817)
  • lazy-reduction 𝔽p2 multiplication assembly (BLS12-381, BLS12-377, BLS24-315, BLS24-317) (#861)
  • add-sub chains in Expt/mulBySeed and optimal Karabina 0-runs (#860)
  • hash-to-G1 in the highly 2-adic Fp case (#830)
  • inline E6.Mul/E6.Square for 31-bit primes (2.07x) (#842)
  • AVX-512 batch ops for E6 FFT on koalabear (2.97x) (#843)
  • koalabear: unrolled FFT kernels and faster SIS LimbIterator (#834)
  • koalabear: AVX-512 VectorE6 scalar mul-acc kernels (#868)
  • koalabear: NEON Compressx16Columns kernel (arm64) (#870)
  • F31 Poseidon2: permutation16_avx512 (-17%) (#829)
  • generalize Compressx16 AVX-512 for variable colSize (#824)
  • kzg mpc setup: drop the parallel pool, use batch subgroup checks (#823)

Build

  • deps: bump golang.org/x/crypto to 0.54.0, x/sys to 0.47.0, x/sync to 0.22.0
  • pin GitHub Actions to commit SHAs (#837)
  • apply go fix modernizations (#820)

Commits
  • 0a975d7 v0.21.0 (#872)
  • a71790d feat(koalabear): upstream FRI primitives (#871)
  • e2a02f7 perf(koalabear): NEON kernel for Compressx16Columns (arm64) (#870)
  • e4cf874 fix: KZG MPC setup consistency (#857)
  • bc5b07e fix: prevent small subgroup public keys (#859)
  • 039783a Perf: Lazy-reduction 𝔽p2 multiplication assembly (BLS12-381, BLS12-377, BLS24...
  • 24876de feat(koalabear): AVX-512 VectorE6 scalar mul-acc kernels (#868)
  • 0d62bae deps(actions)(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#864)
  • 5736a0e deps(actions)(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the core-ac...
  • f1c4fca feat(koalabear): vectorized VectorE6.MulAccByElement (#866)
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

... (truncated)

Commits
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • d2699be _codegen: modernize
  • a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits
  • f44d03d go.mod: update golang.org/x dependencies
  • 5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
  • b07833c ssh: return window credit for discarded extended data
  • d701c51 acme: fix nil pointer dereference in pebble test error reporting
  • 999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
  • 90f76b8 ssh: reject certificate signature keys before recursing
  • b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
  • 626e40f ssh: drain stderr on forwarded TCP and Unix channels
  • 31914c6 x509roots/fallback: update bundle
  • f2135b8 all: clean up minor issues found by staticcheck
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.40.0 to 0.41.0

Commits
  • acdba66 go.mod: update golang.org/x dependencies
  • 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
  • See full diff in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.4` | `1.43.6` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.35` | `1.32.37` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.34` | `1.19.36` |
| [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.55.4` | `1.55.6` |
| [github.com/aws/aws-sdk-go-v2/service/route53](https://github.com/aws/aws-sdk-go-v2) | `1.65.6` | `1.65.8` |
| [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.44.4` | `1.44.6` |
| [github.com/consensys/gnark-crypto](https://github.com/consensys/gnark-crypto) | `0.20.1` | `0.21.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.54.0` | `0.55.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.40.0` | `0.41.0` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.43.4 to 1.43.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.4...v1.43.6)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.35 to 1.32.37
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.35...config/v1.32.37)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.34 to 1.19.36
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.34...credentials/v1.19.36)

Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.55.4 to 1.55.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.55.4...service/emr/v1.55.6)

Updates `github.com/aws/aws-sdk-go-v2/service/route53` from 1.65.6 to 1.65.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/fsx/v1.65.6...service/fsx/v1.65.8)

Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.44.4 to 1.44.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mgn/v1.44.4...service/ssm/v1.44.6)

Updates `github.com/consensys/gnark-crypto` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/consensys/gnark-crypto/releases)
- [Changelog](https://github.com/Consensys/gnark-crypto/blob/master/CHANGELOG.md)
- [Commits](Consensys-Incorporated/gnark-crypto@v0.20.1...v0.21.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0
- [Commits](golang/crypto@v0.54.0...v0.55.0)

Updates `golang.org/x/text` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.40.0...v0.41.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.43.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
  dependency-version: 1.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/route53
  dependency-version: 1.65.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
  dependency-version: 1.44.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/consensys/gnark-crypto
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 18, 2026
@YoshihitoAso
YoshihitoAso merged commit 1588546 into dev-2.8 Aug 19, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/all-dependencies-cee9728ac6 branch August 19, 2026 04:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant