Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025

Bumps github.com/bsv-blockchain/go-sdk from 1.1.22 to 1.2.9.

Release notes

Sourced from github.com/bsv-blockchain/go-sdk's releases.

Release v1.2.9

Added

  • Codecov integration for automated code coverage reporting and analysis
  • New auth/authpayload package with HTTP request/response serialization
  • AuthFetch config options and methods
  • BRC104 HTTP headers support (auth/brc104/auth_http_headers.go)

Changed

  • Added auth/authpayload package
  • Updated dependencies
  • Minor documentation corrections

Fixed

  • AuthFetch communication flow issues and hanging processes during handshake
  • HTTP request payload preparation in auth client
  • SPV verification now properly handles invalid merkle paths by returning error instead of fallback to input verification
  • Headers client BlockByHeight now includes bounds check for empty headers array

Release v1.2.8

Added

  • Documented using SetSourceTxOutput to address (#218)
    • Added example docs/examples/set_source_tx_output/ with set_source_tx_output.go and README
    • Added cross-implementation test vectors

Changed

  • Replaced log.Logger with slog.Logger in AuthFetch and Peer (#215)
    • Auth HTTP client now accepts an optional *slog.Logger in its constructor (authhttp.New(..., logger...))
    • Prefer constructor injection over setters; SetLogger is deprecated
    • Structured logging for improved observability

Fixed

  • Shamir key split: enforce non-zero, unique x-coordinates in ToKeyShares and add tests to prevent regressions. Refactor Shamir logic into primitives/ec/shamir.go for clarity.

Release v1.2.7

Added

  • Implemented RevealCounterpartyKeyLinkage and RevealSpecificKeyLinkage methods in ProtoWallet (#219)
  • Added Schnorr zero-knowledge proof primitive in primitives/schnorr package
  • Added BRC-2 and BRC-3 compliance test vectors
  • Added TestWallet implementation for testing with comprehensive certificate management
  • Added WalletKeys interface and implementation for standardized key operations
  • Added test certificate manager in wallet/testcertificates package
  • Added NewPrivateKeyFromInt method to create private keys from integer values
  • Added Pad method to SymmetricKey for zero-padding keys to 32 bytes

Changed

  • Updated RevealSpecificSecret in KeyDeriver to use compressed shared secret for HMAC computation
  • Standardized proof serialization format to use compressed points (98 bytes total)
  • Improved auth fetch process to prevent hanging and fix certificate exchange between peers (#217, #220)
  • Refactored certificate validation logic with enhanced error handling

... (truncated)

Changelog

Sourced from github.com/bsv-blockchain/go-sdk's changelog.

[1.2.9] - 2025-09-07

Added

  • Codecov integration for automated code coverage reporting and analysis
  • New auth/authpayload package with HTTP request/response serialization
  • AuthFetch config options and methods
  • BRC104 HTTP headers support (auth/brc104/auth_http_headers.go)

Changed

  • Added auth/authpayload package
  • Updated dependencies
  • Minor documentation corrections

Fixed

  • AuthFetch communication flow issues and hanging processes during handshake
  • HTTP request payload preparation in auth client
  • SPV verification now properly handles invalid merkle paths by returning error instead of fallback to input verification
  • Headers client BlockByHeight now includes bounds check for empty headers array

[1.2.8] - 2025-08-07

Added

  • Documented using SetSourceTxOutput to address (#218)
    • Added example docs/examples/set_source_tx_output/ with set_source_tx_output.go and README
    • Added cross-implementation test vectors

Changed

  • Replaced log.Logger with slog.Logger in AuthFetch and Peer (#215)
    • Auth HTTP client now accepts an optional *slog.Logger in its constructor (authhttp.New(..., logger...))
    • Prefer constructor injection over setters; SetLogger is deprecated
    • Structured logging for improved observability

Fixed

  • Shamir key split: enforce non-zero, unique x-coordinates in ToKeyShares and add tests to prevent regressions. Refactor Shamir logic into primitives/ec/shamir.go for clarity.

[1.2.7] - 2025-08-05

Added

  • Implemented RevealCounterpartyKeyLinkage and RevealSpecificKeyLinkage methods in ProtoWallet (#219)
  • Added Schnorr zero-knowledge proof primitive in primitives/schnorr package
  • Added BRC-2 and BRC-3 compliance test vectors
  • Added TestWallet implementation for testing with comprehensive certificate management
  • Added WalletKeys interface and implementation for standardized key operations
  • Added test certificate manager in wallet/testcertificates package
  • Added NewPrivateKeyFromInt method to create private keys from integer values
  • Added Pad method to SymmetricKey for zero-padding keys to 32 bytes

Changed

  • Updated RevealSpecificSecret in KeyDeriver to use compressed shared secret for HMAC computation
  • Standardized proof serialization format to use compressed points (98 bytes total)

... (truncated)

Commits
  • d7b55d1 Merge pull request #237 from bsv-blockchain/fix-auth-fetch-general-messages
  • bba30b8 Merge remote-tracking branch 'upstream/fix/spv-merkle-path-validation' into f...
  • bd0e188 update changelog
  • e587c1f update dependencies
  • a4d7678 docs: Add changelog entry for version 1.2.9
  • 7753740 chore: Apply go fmt to fix formatting
  • 430a3b9 fix: Add bounds check for empty headers array in BlockByHeight
  • e44c288 fix: Throw error when merkle path validation fails in SPV verification
  • 0ed3548 fix: AuthFetch communication
  • 70128b9 fix: fail to prepare http request from payload
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/bsv-blockchain/go-sdk](https://github.com/bsv-blockchain/go-sdk) from 1.1.22 to 1.2.9.
- [Release notes](https://github.com/bsv-blockchain/go-sdk/releases)
- [Changelog](https://github.com/bsv-blockchain/go-sdk/blob/master/CHANGELOG.md)
- [Commits](bsv-blockchain/go-sdk@v1.1.22...v1.2.9)

---
updated-dependencies:
- dependency-name: github.com/bsv-blockchain/go-sdk
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the update General updates label Sep 8, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 17, 2025

Superseded by #154.

@dependabot dependabot bot closed this Sep 17, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/master/github.com/bsv-blockchain/go-sdk-1.2.9 branch September 17, 2025 10:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

update General updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant