Skip to content

chore(deps): bump github.com/tempoxyz/tempo-go from 0.4.1 to 0.5.0 in the go-deps group - #97

Merged
brendanjryan merged 1 commit into
mainfrom
dependabot/go_modules/go-deps-b097c3e280
Jul 28, 2026
Merged

chore(deps): bump github.com/tempoxyz/tempo-go from 0.4.1 to 0.5.0 in the go-deps group#97
brendanjryan merged 1 commit into
mainfrom
dependabot/go_modules/go-deps-b097c3e280

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 1 update: github.com/tempoxyz/tempo-go.

Updates github.com/tempoxyz/tempo-go from 0.4.1 to 0.5.0

Release notes

Sourced from github.com/tempoxyz/tempo-go's releases.

v0.5.0

What's Changed

New Contributors

Full Changelog: tempoxyz/tempo-go@v0.4.1...v0.5.0

Changelog

Sourced from github.com/tempoxyz/tempo-go's changelog.

github.com/tempoxyz/tempo-go@0.5.0

Minor Changes

  • Add T5 AccountKeychain TIP-1053 witness bindings: AuthorizeKeyWithWitness(), BurnKeyAuthorizationWitness(), IsKeyAuthorizationWitnessBurned(), and matching selector constants.
  • Add T5 integration coverage for key-authorization witness burn, read, and authorize flows gated by TEMPO_HARDFORK=T5. (by @​figtracer, #56)

Patch Changes

  • Accept legacy Ethereum recovery ID values {27, 28} in 65-byte secp256k1 signature envelopes during transaction deserialization, normalizing them to internal yParity {0, 1}. Structured RLP signature tuples remain strict and serialization continues to emit canonical yParity only. (by @​BrendanRyan, #57)
  • Correlate JSON-RPC batch responses by request ID so reordered success and error responses remain associated with their requests. (by @​BrendanRyan, #75)
  • Detect and remove only genuine fee-payer trailers, preserving transaction data that ends with the trailer marker. (by @​BrendanRyan, #76)
  • Preserve the fee-payer sponsorship marker when cloning transactions so sender signing payloads remain valid. (by @​BrendanRyan, #77)
  • Reject malformed fee-payer signature lists in transaction field 11 instead of accepting unsupported tuple shapes. (by @​BrendanRyan, #74)
Commits
  • 1a3c9b5 Release github.com/tempoxyz/tempo-go@0.5.0 (#60)
  • 914d5de test(transaction): cover malformed fee payer field lists (#74)
  • 93f660d test(transaction): cover sponsored clone signing fields (#77)
  • 1257303 test(transaction): cover sponsored fee payer trailer decoding (#76)
  • c0770b6 test(client): cover reordered batch error responses (#75)
  • 7262d98 chore(deps): bump github.com/ethereum/go-ethereum from 1.17.3 to 1.17.4 in /e...
  • fde8f87 chore(deps): bump the actions group across 1 directory with 4 updates (#72)
  • eed790a feat: add TIP-1049 tx-embedded key authorizations (#63)
  • a348022 feat: add TIP-1028 receive policies (#64)
  • 5b34097 feat: add TIP-1049 admin key support (#62)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 1 update: [github.com/tempoxyz/tempo-go](https://github.com/tempoxyz/tempo-go).


Updates `github.com/tempoxyz/tempo-go` from 0.4.1 to 0.5.0
- [Release notes](https://github.com/tempoxyz/tempo-go/releases)
- [Changelog](https://github.com/tempoxyz/tempo-go/blob/main/CHANGELOG.md)
- [Commits](tempoxyz/tempo-go@v0.4.1...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/tempoxyz/tempo-go
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 21, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​tempoxyz/​tempo-go@​v0.4.1 ⏵ v0.5.099 +1100100100100

View full report

@brendanjryan
brendanjryan merged commit 9430e28 into main Jul 28, 2026
17 of 19 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-deps-b097c3e280 branch July 28, 2026 00:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant