chore(deps): bump the go_modules group across 7 directories with 8 updates

[dependabot]

Bumps the go_modules group with 4 updates in the /build/tools directory: github.com/ethereum/go-ethereum, github.com/docker/docker, github.com/rs/cors and google.golang.org/protobuf.
Bumps the go_modules group with 3 updates in the /contracts directory: github.com/ethereum/go-ethereum, github.com/rs/cors and google.golang.org/protobuf.
Bumps the go_modules group with 5 updates in the /cosmos directory:

Package	From	To
github.com/rs/cors	1.10.1	1.11.0
google.golang.org/protobuf	1.33.0	1.34.2
github.com/btcsuite/btcd	0.23.2	0.24.0
github.com/cometbft/cometbft	0.38.8-0.20240527104925-a38dbb2eef72	0.38.8
github.com/opencontainers/runc	1.1.5	1.1.12

Bumps the go_modules group with 4 updates in the /e2e/localnet directory: github.com/ethereum/go-ethereum, github.com/docker/docker, github.com/rs/cors and github.com/opencontainers/runc.
Bumps the go_modules group with 6 updates in the /e2e/precompile directory:

Package	From	To
github.com/ethereum/go-ethereum	1.13.10	1.13.15
github.com/docker/docker	24.0.7+incompatible	24.0.9+incompatible
github.com/rs/cors	1.10.1	1.11.0
google.golang.org/protobuf	1.33.0	1.34.2
github.com/cometbft/cometbft	0.38.8-0.20240527104925-a38dbb2eef72	0.38.8
github.com/opencontainers/runc	1.1.5	1.1.12

Bumps the go_modules group with 5 updates in the /e2e/testapp directory:

Package	From	To
github.com/rs/cors	1.10.1	1.11.0
google.golang.org/protobuf	1.33.0	1.34.2
github.com/btcsuite/btcd	0.23.2	0.24.0
github.com/cometbft/cometbft	0.38.8-0.20240527104925-a38dbb2eef72	0.38.8
github.com/hashicorp/go-getter	1.7.1	1.7.5

Bumps the go_modules group with 2 updates in the /eth directory: github.com/rs/cors and google.golang.org/protobuf.

Updates github.com/ethereum/go-ethereum from 1.13.10 to 1.13.15

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Ontamalca (v1.13.15)

Geth v1.13.15 is a maintenance-release that contains some fixes mainly to avoid snapsync-related data-corruption.

We recommend all users to upgrade to v1.13.15 as soon as possible.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Altaaya (v1.13.14)

Geth v1.13.14 is a small maintenance release with a handful of polishes to the blob pool:

• Disallow blob transactions below the protocol minimum of 1 wei to enter the pool (#29081).
• Reduce the blob pool's max capacity to 2.5GB for the rollout. (#29090).
• Fix gas estimation for blob transactions (#29085).

This release is NOT critical for the Cancun fork, but recommended to make Geth lighter in anticipation to unknown blob load.

Other fixes:

• Support overriding the basefee during tracing (#29051).
• Fix call tracers missing top level logs in top-only mode (#29068).
• Support unlimited gas for eth_createAccessList if --gascap=0 (#28846).

For a full rundown of the changes please consult the Geth 1.13.14 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Alsages (v1.13.13)

This is a minor release with fixes for several issues related to the upcoming Cancun mainnet fork. As such, it is recommended for all mainnet users.

Changes in this release:

• Block-building performance with blob transactions has been improved a lot. (#29026, #29008, #29005)
• A corner case in the EVM related to out-of-order fork scheduling has been fixed. (#29023)
• eth_fillTransaction has seen some bug fixes related to blob transactions as well. (#28929, #29037)
• A rare panic in the ethstats client related to chain reorgs is resolved. (#29020)
• The blobpool database will now recover from disk corruption faults instead of crashing geth on startup. (#29001)

... (truncated)

Commits

• c5ba367 params: release Geth v 1.13.15
• 35e0525 core, eth/protocols/snap, trie: fix cause for snap-sync corruption, implement...
• 7bcb553 eth/filters: enforce topic-limit early on filter criterias (#29535)
• e343ddf core/rawdb: add sanity-limit to header accessor (#29534)
• 5dcf503 eth/protocols/snap: skip retrieval for completed storages (#29378)
• 2bd6bd0 Merge branch 'master' into release/1.13
• 9038ba6 params: release Geth v1.13.14
• 51b479e core/txpool: elevate the 'already reserved' error into a constant (#29095)
• 5a0f468 eth/tracers: Fix callTracer logs on onlyTopCall == true (#29068)
• 45a272c core/txpool: no need to log loud rotate if no local txs (#29083)
• Additional commits viewable in compare view

Updates github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v24.0.9

24.0.9

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 24.0.9 milestone
• moby/moby, 24.0.9 milestone

Security

This release contains security fixes for the following CVEs affecting Docker Engine and its components.

CVE	Component	Fix version	Severity
CVE-2024-21626	runc	1.1.12	High, CVSS 8.6
CVE-2024-24557	Docker Engine	24.0.9	Medium, CVSS 6.9

Important ⚠️

Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit:

• CVE-2024-23651
• CVE-2024-23652
• CVE-2024-23653
• CVE-2024-23650

To address these vulnerabilities, upgrade to Docker Engine v25.0.2.

For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the blog post. For details about each vulnerability, see the relevant security advisory:

• CVE-2024-21626
• CVE-2024-24557

Packaging updates

• Upgrade runc to v1.1.12. moby/moby#47269
• Upgrade containerd to v1.7.13 (static binaries only). moby/moby#47280

v24.0.8

24.0.8

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 24.0.8 milestone
• moby/moby, 24.0.8 milestone

Bug fixes and enhancements

• Live restore: Containers with auto remove (docker run --rm) are no longer forcibly removed on engine restart. moby/moby#46857

... (truncated)

Commits

• fca702d Merge pull request from GHSA-xw73-rw38-6vjc
• f78a772 Merge pull request #47281 from thaJeztah/24.0_backport_bump_containerd_binary...
• 61afffe Merge pull request #47270 from thaJeztah/24.0_backport_bump_runc_binary_1.1.12
• b38e74c Merge pull request #47276 from thaJeztah/24.0_backport_bump_runc_1.1.12
• dac5663 update containerd binary to v1.7.13
• 20e1af3 vendor: github.com/opencontainers/runc v1.1.12
• 858919d update runc binary to v1.1.12
• 141ad39 Merge pull request #47266 from vvoland/ci-fix-makeps1-templatefail-24
• db968c6 hack/make.ps1: Fix go list pattern
• 61c51fb Merge pull request #47221 from vvoland/pkg-pools-close-noop-24
• Additional commits viewable in compare view

Updates github.com/rs/cors from 1.10.1 to 1.11.0

Commits

• 4c32059 Normalize allowed request headers and store them in a sorted set (fixes #170)...
• 8d33ca4 Complete documentation; deprecate AllowOriginRequestFunc in favour of AllowOr...
• af821ae Merge branch 'jub0bs-master'
• 0bcf73f Update benchmark
• eacc8e8 Fix skewed middleware benchmarks (#165)
• 9297f15 Respect the documented precedence of options (#163)
• 73f81b4 Fix readme benchmark rendering (#161)
• See full diff in compare view

Updates google.golang.org/protobuf from 1.33.0 to 1.34.2

Updates github.com/ethereum/go-ethereum from 1.13.10 to 1.13.15

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Ontamalca (v1.13.15)

Geth v1.13.15 is a maintenance-release that contains some fixes mainly to avoid snapsync-related data-corruption.

We recommend all users to upgrade to v1.13.15 as soon as possible.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Altaaya (v1.13.14)

Geth v1.13.14 is a small maintenance release with a handful of polishes to the blob pool:

• Disallow blob transactions below the protocol minimum of 1 wei to enter the pool (#29081).
• Reduce the blob pool's max capacity to 2.5GB for the rollout. (#29090).
• Fix gas estimation for blob transactions (#29085).

This release is NOT critical for the Cancun fork, but recommended to make Geth lighter in anticipation to unknown blob load.

Other fixes:

• Support overriding the basefee during tracing (#29051).
• Fix call tracers missing top level logs in top-only mode (#29068).
• Support unlimited gas for eth_createAccessList if --gascap=0 (#28846).

For a full rundown of the changes please consult the Geth 1.13.14 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Alsages (v1.13.13)

This is a minor release with fixes for several issues related to the upcoming Cancun mainnet fork. As such, it is recommended for all mainnet users.

Changes in this release:

• Block-building performance with blob transactions has been improved a lot. (#29026, #29008, #29005)
• A corner case in the EVM related to out-of-order fork scheduling has been fixed. (#29023)
• eth_fillTransaction has seen some bug fixes related to blob transactions as well. (#28929, #29037)
• A rare panic in the ethstats client related to chain reorgs is resolved. (#29020)
• The blobpool database will now recover from disk corruption faults instead of crashing geth on startup. (#29001)

... (truncated)

Commits

• c5ba367 params: release Geth v 1.13.15
• 35e0525 core, eth/protocols/snap, trie: fix cause for snap-sync corruption, implement...
• 7bcb553 eth/filters: enforce topic-limit early on filter criterias (#29535)
• e343ddf core/rawdb: add sanity-limit to header accessor (#29534)
• 5dcf503 eth/protocols/snap: skip retrieval for completed storages (#29378)
• 2bd6bd0 Merge branch 'master' into release/1.13
• 9038ba6 params: release Geth v1.13.14
• 51b479e core/txpool: elevate the 'already reserved' error into a constant (#29095)
• 5a0f468 eth/tracers: Fix callTracer logs on onlyTopCall == true (#29068)
• 45a272c core/txpool: no need to log loud rotate if no local txs (#29083)
• Additional commits viewable in compare view

Updates github.com/rs/cors from 1.10.1 to 1.11.0

Commits

• 4c32059 Normalize allowed request headers and store them in a sorted set (fixes #170)...
• 8d33ca4 Complete documentation; deprecate AllowOriginRequestFunc in favour of AllowOr...
• af821ae Merge branch 'jub0bs-master'
• 0bcf73f Update benchmark
• eacc8e8 Fix skewed middleware benchmarks (#165)
• 9297f15 Respect the documented precedence of options (#163)
• 73f81b4 Fix readme benchmark rendering (#161)
• See full diff in compare view

Updates google.golang.org/protobuf from 1.32.0 to 1.33.0

Updates github.com/rs/cors from 1.10.1 to 1.11.0

Commits

• 4c32059 Normalize allowed request headers and store them in a sorted set (fixes #170)...
• 8d33ca4 Complete documentation; deprecate AllowOriginRequestFunc in favour of AllowOr...
• af821ae Merge branch 'jub0bs-master'
• 0bcf73f Update benchmark
• eacc8e8 Fix skewed middleware benchmarks (#165)
• 9297f15 Respect the documented precedence of options (#163)
• 73f81b4 Fix readme benchmark rendering (#161)
• See full diff in compare view

Updates google.golang.org/protobuf from 1.33.0 to 1.34.2

Updates github.com/btcsuite/btcd from 0.23.2 to 0.24.0

Release notes

Sourced from github.com/btcsuite/btcd's releases.

btcd v0.24.0

This release is a major release that includes several general bug fixes, security bug fixes (please update!), and also a series of performance improvements that dramatically reduce the time for initial block download from ~45 hours+ to around 6 hours! With this release,btcd now also supports BIP 155 and has gained support for pruning (--prune=MiB).

Verifying the Release

In order to verify the release, you'll need to have gpg or gpg2 installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys that have signed this release if you haven't done so already:

curl https://raw.githubusercontent.com/lightningnetwork/lnd/master/scripts/keys/roasbeef.asc | gpg --import

Once you have the required PGP keys, you can verify the release (assuming manifest-roasbeef-v0.24.0.sig and manifest-v0.24.0.txt are in the current directory) with:

gpg --verify manifest-roasbeef-v0.24.0.sig manifest-v0.24.0.txt

You should see the following if the verification was successful:

gpg: Signature made Sat Dec 30 17:11:22 2023 PST
gpg:                using RSA key 60A1FA7DA5BFF08BDCBBE7903BBD59E99B280306
gpg: Good signature from "Olaoluwa Osuntokun <[email protected]>" [ultimate]

That will verify the signature of the manifest file, which ensures integrity and authenticity of the archive you've downloaded locally containing the binaries. Next, depending on your operating system, you should then re-compute the sha256 hash of the archive with shasum -a 256 <filename>, compare it with the corresponding one in the manifest file, and ensure they match exactly.

What's Changed

• Musig2: Update to 1.0.0.rc2 by @​sputn1ck in btcsuite/btcd#1913
• btcec/schnorr/musig2: fix BenchmarkPartialVerify by @​Roasbeef in btcsuite/btcd#1920
• base58: fix decoding issue by @​guggero in btcsuite/btcd#1923
• Update Docker documentation towards building your own image by @​guiand888 in btcsuite/btcd#1925
• chainhash: JSON marshal hash as string by @​ffranr in btcsuite/btcd#1932
• Update Dockerfile to Alpine 3.16 by @​guiand888 in btcsuite/btcd#1924
• Fix memory leak in connmanager by @​hxw in btcsuite/btcd#1576
• Update mining.md by @​jagottsicher in btcsuite/btcd#1938
• Sighash taproot keyspend bug fix by @​Roasbeef in btcsuite/btcd#1941
• btcutil/psbt: export helper functions, fix/add encoding of unknown fields by @​guggero in btcsuite/btcd#1942
• docs: Update Go version as per the Readme. by @​hristog in btcsuite/btcd#1944
• txscript: Fix typo in IsUnspendable() comment by @​kcalvinalvin in btcsuite/btcd#1945
• txscript: allow script builder capacity to be specified by @​guggero in btcsuite/btcd#1954
• Export MakeScritpNum, AsSmallInt, and IsSmallInt by @​martonp in btcsuite/btcd#1956
• chainhash: JSON Unmarshal hash from appropriate string. by @​LindenWang01 in btcsuite/btcd#1952
• psbt: add verification method for utxo data by @​ziggie1984 in btcsuite/btcd#1964
• txscript: fix typos by @​hieblmi in btcsuite/btcd#1957
• chaincfg: Update checkpoints by @​kcalvinalvin in btcsuite/btcd#1968
• btcd: Add memory profiling flag by @​kcalvinalvin in btcsuite/btcd#1953
• blockchain: Use slices when fetching utxos by @​kcalvinalvin in btcsuite/btcd#1972
• main: Update README.md's minimum go version by @​kcalvinalvin in btcsuite/btcd#1977

... (truncated)

Commits

• b1b9420 Merge pull request #2082 from btcsuite/btcd-24
• 4ec8f01 rpcclient: fix race condition in doDisconnect
• 8d2ab63 build: bump version to btcd v0.24
• 3c24785 chaincfg: update mainnet block hashes
• bf23715 btcd: add SECURITY.md
• d64de4a build: update to btcutil v1.1.5
• 16684f6 Merge pull request #2073 from Roasbeef/wire-opts
• 790c570 Merge pull request #2081 from Roasbeef/dont-serialize-tx-for-txhash
• b0e9636 wire: consistently use defer for returning scratch buffers
• e102a81 btcutil: add benchmarks for Hash + WitnessHash
• Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 0.38.8-0.20240527104925-a38dbb2eef72 to 0.38.8

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.8

See the CHANGELOG for this release.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.8

June 27, 2024

This release contains a few bug fixes and performance improvements.

BREAKING CHANGES

• [mempool] Add to the Mempool interface a new method PreUpdate(). This method should be called before acquiring the mempool lock, to signal that a new update is coming. Also add to ErrMempoolIsFull a new field RecheckFull. (#3314)

BUG FIXES

• [mempool] Fix data race when rechecking with async ABCI client (#1827)
• [consensus] Fix a race condition in the consensus timeout ticker. Race is caused by two timeouts being scheduled at the same time. (#3092)
• [types] Do not batch verify a commit if the validator set keys have different types. (#3195

IMPROVEMENTS

• [blockstore] Added peer banning in blockstore (#ABC-0013)
• [blockstore] Send correct error message when vote extensions do not align with received packet (#ABC-0014)
• [config] Added recheck_timeout mempool parameter to set how much time to wait for recheck responses from the app (only applies to non-local ABCI clients). (#1827)
• [rpc] Add a configurable maximum batch size for RPC requests. (#2867).
• [event-bus] Remove the debug logs in PublishEventTx, which were noticed production slowdowns. (#2911)
• [state/execution] Cache the block hash computation inside of the Block Type, so we only compute it once. (#2924)
• [consensus/state] Remove a redundant VerifyBlock call in FinalizeCommit (#2928)
• [p2p/channel] Speedup ProtoIO writer creation time, and thereby speedup channel writing by 5%. (#2949)
• [p2p/conn] Minor speedup (3%) to connection.WritePacketMsgTo, by removing MinInt calls. (#2952)
• [internal/bits] 10x speedup creating initialized bitArrays, which speedsup extendedCommit.BitArray(). This is used in consensus vote gossip. (#2959).
• [blockstore] Remove a redundant Header.ValidateBasic call in LoadBlockMeta, 75% reducing this time. (#2964)
• [p2p/conn] Speedup connection.WritePacketMsgTo, by reusing internal buffers rather than re-allocating. (#2986)
• [blockstore] Use LRU caches in blockstore, significiantly improving consensus gossip routine performance

... (truncated)

Commits

• See full diff in compare view

Updates github.com/opencontainers/runc from 1.1.5 to 1.1.12

Release notes

Sourced from github.com/opencontainers/runc's releases.

runc 1.1.12 -- "Now you're thinking with Portals™!"

This is the twelfth patch release in the 1.1.z release branch of runc. It fixes a high-severity container breakout vulnerability involving leaked file descriptors, and users are strongly encouraged to update as soon as possible.

• Fix CVE-2024-21626, a container breakout attack that took advantage of a file descriptor that was leaked internally within runc (but never leaked to the container process).

  In addition to fixing the leak, several strict hardening measures were added to ensure that future internal leaks could not be used to break out in this manner again.

  Based on our research, while no other container runtime had a similar leak, none had any of the hardening steps we've introduced (and some runtimes would not check for any file descriptors that a calling process may have leaked to them, allowing for container breakouts due to basic user error).

Static Linking Notices

The runc binary distributed with this release are statically linked with the following GNU LGPL-2.1 licensed libraries, with runc acting as a "work that uses the Library":

• libseccomp

The versions of these libraries were not modified from their upstream versions, but in order to comply with the LGPL-2.1 (§6(a)), we have attached the complete source code for those libraries which (when combined with the attached runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages or download them from the authoritative upstream sources, especially since these libraries are related to the security of your containers.

Thanks to all of the contributors who made this release possible:

• Aleksa Sarai [email protected]
• hang.jiang [email protected]
• lfbzhm [email protected]

Signed-off-by: Aleksa Sarai [email protected]

... (truncated)

Changelog

Sourced from github.com/opencontainers/runc's changelog.

[1.1.12] - 2024-01-31

Now you're thinking with Portals™!

Security

• Fix CVE-2024-21626, a container breakout attack that took advantage of a file descriptor that was leaked internally within runc (but never leaked to the container process). In addition to fixing the leak, several strict hardening measures were added to ensure that future internal leaks could not be used to break out in this manner again. Based on our research, while no other container runtime had a similar leak, none had any of the hardening steps we've introduced (and some runtimes would not check for any file descriptors that a calling process may have leaked to them, allowing for container breakouts due to basic user error).

[1.1.11] - 2024-01-01

Happy New Year!

Fixed

• Fix several issues with userns path handling. (#4122, #4124, #4134, #4144)

Changed

• Support memory.peak and memory.swap.peak in cgroups v2. Add swapOnlyUsage in MemoryStats. This field reports swap-only usage. For cgroupv1, Usage and Failcnt are set by subtracting memory usage from memory+swap usage. For cgroupv2, Usage, Limit, and MaxUsage are set. (#4000, #4010, #4131)
• build(deps): bump github.com/cyphar/filepath-securejoin. (#4140)

[1.1.10] - 2023-10-31

Śruba, przykręcona we śnie, nie zmieni sytuacji, jaka panuje na jawie.

Added

• Support for hugetlb.<pagesize>.rsvd limiting and accounting. Fixes the issue of postres failing when hugepage limits are set. (#3859, #4077)

Fixed

• Fixed permissions of a newly created directories to not depend on the value of umask in tmpcopyup feature implementation. (#3991, #4060)
• libcontainer: cgroup v1 GetStats now ignores missing kmem.limit_in_bytes (fixes the compatibility with Linux kernel 6.1+). (#4028)

... (truncated)

Commits

• 51d5e94 VERSION: release 1.1.12
• 2a4ed3e merge 1.1-GHSA-xr7r-f8xq-vfvv into release-1.1
• e9665f4 init: don't special-case logrus fds
• 683ad2f libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
• b6633f4 cgroup: plug leaks of /sys/fs/cgroup handle
• 284ba30 init: close internal fds before execve
• fbe3eed setns init: do explicit lookup of execve argument early
• 0994249 init: verify after chdir that cwd is inside the container
• 506552a Fix File to Close
• 099ff69 merge #4177 into opencontainers/runc:release-1.1
• Additional commits viewable in compare view

Updates github.com/ethereum/go-ethereum from 1.13.10 to 1.13.15

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Ontamalca (v1.13.15)

Geth v1.13.15 is a maintenance-release that contains some fixes mainly to avoid snapsync-related data-corruption.

We recommend all users to upgrade to v1.13.15 as soon as possible.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Altaaya (v1.13.14)

Geth v1.13.14 is a small maintenance release with a handful of polishes to the blob pool:

• Disallow blob transactions below the protocol minimum of 1 wei to enter the pool (#29081).
• Reduce the blob pool's max capacity to 2.5GB for the rollout. (#29090).
• Fix gas estimation for blob transactions (#29085).

This release is NOT critical for the Cancun fork, but recommended to make Geth lighter in anticipation to unknown blob load.

Other fixes:

• Support overriding the basefee during tracing (#29051).
• Fix call tracers missing top level logs in top-only mode (#29068).
• Support unlimited gas for eth_createAccessList if --gascap=0 (#28846).

For a full rundown of the changes please consult the Geth 1.13.14 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Alsages (v1.13.13)

This is a minor release with fixes for several issues related to the upcoming Cancun mainnet fork. As such, it is recommended for all mainnet users.

Changes in this release:

• Block-building performance with blob transactions has been improved a lot. (#29026, #29008, #29005)
• A corner case in the EVM related to out-of-order fork scheduling has been fixed. (#29023)
• eth_fillTransaction has seen some bug fixes related to blob transactions as well. (#28929, #29037)
• A rare panic in the ethstats client related to chain reorgs is resolved. (#29020)
• The blobpool database will now recover from disk corruption faults instead of crashing geth on startup. (#29001)

... (truncated)

Commits

• c5ba367 params: release Geth v 1.13.15
• 35e0525 core, eth/protocols/snap, trie: fix cause for snap-sync corruption, implement...
• 7bcb553 eth/filters: enforce topic-limit early on filter criterias (#29535)
• e343ddf core/rawdb: add sanity-limit to header accessor (#29534)
• 5dcf503 eth/protocols/snap: skip retrieval for completed storages (#29378)
• 2bd6bd0 Merge branch 'master' into release/1.13
• 9038ba6 params: release Geth v1.13.14
• 51b479e core/txpool: elevate the 'already reserved' error into a constant (#29095)
• 5a0f468 eth/tracers: Fix callTracer logs on onlyTopCall == true (#29068)
• 45a272c core/txpool: no need to log loud rotate if no local txs (#29083)
• Additional commits viewable in compare view

Updates github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v24.0.9

24.0.9

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 24.0.9 milestone
• moby/moby, 24.0.9 milestone

Security

This release contains security fixes for the following CVEs affecting Docker Engine and its components.

CVE	Component	Fix version	Severity
CVE-2024-21626	runc	1.1.12	High, CVSS 8.6
CVE-2024-24557	Docker Engine	24.0.9	Medium, CVSS 6.9

Important ⚠️

Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit:

• CVE-2024-23651
• CVE-2024-23652
• CVE-2024-23653
• CVE-2024-23650

To address these vulnerabilities, upgrade to Docker Engine v25.0.2.

For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the blog post. For details about each vulnerability, see the relevant security advisory:

• CVE-2024-21626
• CVE-2024-24557

Packaging updates

• Upgrade runc to v1.1.12. moby/moby#47269
• Upgrade containerd to v1.7.13 (static binaries only). moby/moby#47280

v24.0.8

24.0.8

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 24.0.8 milestone
• moby/moby, 24.0.8 milestone

Bug fixes and enhancements

• Live restore: Containers with auto remove (docker run --rm) are no longer forcibly removed on engine restart. moby/moby#46857

... (truncated)

Commits

• fca702d Merge pull request from GHSA-xw73-rw38-6vjc
• f78a772 Merge pull request #47281 from thaJeztah/24.0_backport_bump_containerd_binary...
• 61afffe Merge pull request #47270 from thaJeztah/24.0_backport_bump_runc_binary_1.1.12
• b38e74c Merge pull request #47276 from thaJeztah/24.0_backport_bump_runc_1.1.12
• dac5663 update containerd binary to v1.7.13
• 20e1af3 vendor: github.com/opencontainers/runc v1.1.12
• 858919d update runc binary to v1.1.12
• 141ad39 Merge pull request #47266 from vvoland/ci-fix-makeps1-templatefail-24
• db968c6 hack/make.ps1: Fix go list pattern
• 61c51fb Merge pull request #47221 from vvoland/pkg-pools-close-noop-24
• Additional commits viewable in compare view

Updates github.com/rs/cors from 1.10.1 to 1.11.0

Commits

• 4c32059 Normalize allowed request headers and store them in a sorted set (fixes #170)...
• 8d33ca4 Complete documentation; deprecate AllowOriginRequestFunc in favour of AllowOr...
• af821ae Merge branch 'jub0bs-master'
• 0bcf73f Update benchmark
• eacc8e8 Fix skewed middleware benchmarks (#165)
• 9297f15 Respect the documented precedence of options (#163)
• 73f81b4 Fix readme benchmark rendering (#161)
• See full diff in compare view

Updates github.com/opencontainers/runc from 1.1.5 to 1.1.12

Release notes

Sourced from github.com/opencontainers/runc's releases.

runc 1.1.12 -- "Now you're thinking with Portals™!"

This is the twelfth patch release in the 1.1.z release branch of runc. It fixes a high-severity container breakout vulnerability involving leaked file descriptors, and users are strongly encouraged to update as soon as possible.

• Fix CVE-2024-21626, a container breakout attack that took advantage of a file descriptor that was leaked internally within runc (but never leaked to the container process).

  In addition to fixing the leak, several strict hardening measures were added to ensure that future internal leaks could not be used to break out in this manner again.

  Based on our research, while no other container runtime had a similar leak,...

  Description has been truncated

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share

• X
• Mastodon
• Reddit
• LinkedIn

Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai generate interesting stats about this repository and render them as a table.
  • @coderabbitai show all the console.log statements in this repository.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.