Skip to content

build(deps): bump github.com/stellar/go-stellar-sdk from 0.5.0 to 0.7.2 - #828

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/stellar/go-stellar-sdk-0.7.2
Open

build(deps): bump github.com/stellar/go-stellar-sdk from 0.5.0 to 0.7.2#828
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/stellar/go-stellar-sdk-0.7.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/stellar/go-stellar-sdk from 0.5.0 to 0.7.2.

Release notes

Sourced from github.com/stellar/go-stellar-sdk's releases.

v0.7.2

What's Changed

Full Changelog: stellar/go-stellar-sdk@v0.7.1...v0.7.2

v0.7.1

What's Changed

Full Changelog: stellar/go-stellar-sdk@v0.7.0...v0.7.1

v0.7.0

What's Changed

New Contributors

Full Changelog: stellar/go-stellar-sdk@v0.6.0...v0.7.0

v0.6.1

What's Changed

Full Changelog: stellar/go-stellar-sdk@v0.6.0...v0.6.1

v0.6.0

Adds Support for Protocol 27

What's Changed

... (truncated)

Changelog

Sourced from github.com/stellar/go-stellar-sdk's changelog.

Changelog

This repository adheres to Go module Versioning.

This monorepo contains a number of sdk's:

Official project releases may be found here: https://github.com/stellar/go-stellar-sdk/releases

Pending

New Features

  • protocols/rpc: Add LatestLedgerCloseTime and OldestLedgerCloseTime to GetHealthResponse, exposing the latest and oldest ledgers' close times (unix seconds) on the getHealth response (#5958)

Breaking Changes

  • strkey: Decode and DecodeAny now validate the payload length against the version byte per SEP-23. Fixed-length keys (account ID, seed, muxed account, contract, liquidity pool, claimable balance, hashTx, hashX) must decode to their exact canonical size, and signed payloads must carry a declared payload length of 1–64 bytes matched by their zero padding. Inputs with a valid checksum but a wrong-length payload — previously accepted by Decode, DecodeAny, and every IsValid* helper — are now rejected. (#5977)
    • NewSignedPayload rejects empty payloads, matching CAP-40 (the protocol fails such signers with SET_OPTIONS_BAD_SIGNER/txMALFORMED) and keeping SignedPayload.Encode output decodable.
    • Length re-checks that Decode now subsumes were removed from xdr.AccountId.SetAddress, xdr.MuxedAccount.SetAddress, xdr.SignerKey.SetAddress, xdr.ClaimableBalanceId.DecodeFromStrkey, strkey.DecodeMuxedAccount, strkey.MuxedAccount.SetAccountID, and txnbuild contract-address parsing. For wrong-length inputs, the xdr and txnbuild callers now return strkey's invalid payload length error instead of their own; the strkey muxed-account helpers keep their generic invalid muxed account / invalid ed25519 public key errors; xdr.MuxedAccount.SetAddress is unchanged (it rejects on encoded string length before decoding).
    • keypair.ParseAddress wraps every decode failure with ErrInvalidKey, so errors.Is(err, ErrInvalidKey) keeps matching wrong-length keys (and now also matches checksum/encoding failures, which previously returned the bare strkey error).
    • DecodeSignedPayload delegates structure validation to Decode; structurally invalid inputs now uniformly error with invalid signed payload (previously signed payload too short: ... or invalid signed payload padding).
  • xdr: Asset.LessThan now orders assets the way the protocol does — by the raw 32-byte issuer key — instead of by base32 strkey text, and xdr.NewPoolId requires strictly a < b, rejecting reversed and identical pairs (#5974)
  • txnbuild: liquidity pool operations reject asset pairs that are not strictly ordered; see the txnbuild changelog (#5974)

Bug Fixes

  • processors/token_transfer: trustline revocation now compares liquidity pool assets by value instead of pointer identity, fixing wrong-leg selection when burning pool shares (#5974)

[0.7.0]

New Features

  • xdr: Protocol 28 support (CAP-0083, CAP-0085). XDR regenerated from stellar-xdr@9c9c1459, the commit stellar-core 28.0.0 pins; both CAPs are ungated upstream so XDR_FEATURES is now empty.

[0.6.0] - 2026-06-09

Adds support for Protocol 27 (CAP-0071).

New Features

  • xdr: Protocol 27 (CAP-0071) XDR (#5945, #5947)
  • xdr: Added zero-copy XDR view types and code generator (#5937)
  • ingest/ledgerbackend: Integrated XDR views into the buffered storage backend and added GetLedgerRaw (#5941)
  • ingest/ledgerbackend: Added LedgerStream streaming ingestion API (#5944)
  • ingest/loadtest: Added stellar-core apply-load tooling (#5940)
  • apiclient: Support non-JSON responses via ResponseType (#5939)

Bug Fixes

... (truncated)

Commits
  • b46a463 strkey: enforce SEP-23 payload lengths in Decode and DecodeAny (#5977)
  • f8cd5df txnbuild: consolidate liquidity pool ordering guards; xdr and ingest cleanups...
  • d2f530f xdr: compare assets by their XDR encoding, and use Equals for asset equality ...
  • 3114a80 ingest: one ledger walk — ExtractLedgerTxParts + EventsFromTxParts/FeesFromTx...
  • 3c3872f stellartoml: validate domain in GetStellarToml for parity with sibling (#5970)
  • 2b16db0 Protocol 28 Support (#5969)
  • e5d0cb9 Merge main into protocol-next ahead of the Protocol 28 GA merge
  • 149b994 Finalize Protocol 28: pin stellar-xdr @ 9c9c1459 (#5968)
  • 82df764 Protocol 28 (CAP-0085) XDR regeneration (#5965)
  • 8dd9cad Update captive-core-pubnet.cfg: swap SP with Obsrvr (#5963)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/stellar/go-stellar-sdk](https://github.com/stellar/go-stellar-sdk) from 0.5.0 to 0.7.2.
- [Release notes](https://github.com/stellar/go-stellar-sdk/releases)
- [Changelog](https://github.com/stellar/go-stellar-sdk/blob/main/CHANGELOG.md)
- [Commits](stellar/go-stellar-sdk@v0.5.0...v0.7.2)

---
updated-dependencies:
- dependency-name: github.com/stellar/go-stellar-sdk
  dependency-version: 0.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 17, 2026 18:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants