Skip to content

chore(deps): bump github.com/stellar/go-stellar-sdk from 0.6.0 to 0.7.3 - #933

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/stellar/go-stellar-sdk-0.7.3
Open

chore(deps): bump github.com/stellar/go-stellar-sdk from 0.6.0 to 0.7.3#933
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/stellar/go-stellar-sdk-0.7.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps github.com/stellar/go-stellar-sdk from 0.6.0 to 0.7.3.

Release notes

Sourced from github.com/stellar/go-stellar-sdk's releases.

v0.7.3

What's Changed

New Contributors

Full Changelog: stellar/go-stellar-sdk@v0.7.2...v0.7.3

v0.7.2

What's Changed

Full Changelog: stellar/go-stellar-sdk@v0.7.1...v0.7.2

v0.7.1

What's Changed

Full Changelog: stellar/go-stellar-sdk@v0.7.0...v0.7.1

v0.7.0

What's Changed

New Contributors

Full Changelog: stellar/go-stellar-sdk@v0.6.0...v0.7.0

v0.6.1

What's Changed

... (truncated)

Changelog

Sourced from github.com/stellar/go-stellar-sdk's changelog.

Changelog

This repository adheres to Go module Versioning.

This monorepo contains a number of sdk's:

Official project releases may be found here: https://github.com/stellar/go-stellar-sdk/releases

Pending

New Features

  • xdr: Added LedgerCloseMetaView.LedgerHeader(), exposing the version-resolving header accessor that already backs LedgerSequence, LedgerCloseTime, LedgerHash, and PreviousLedgerHash (#5982)
  • rpcclient: Add Client.URL() to expose the configured RPC server URL (#5885)

Bug Fixes

  • processors/token_transfer: Accept a to_muxed_id bound to Void in V4 event data. CAP-0067 specifies that the key is simply absent when there is no muxed destination, and that form already parsed. Void is what a contract emits instead if it publishes its event data as a #[contracttype] struct with an Option field — the natural way to write it before CAP-0086's sparse maps, which omit the key. Such an event previously failed to parse and was dropped from the event stream entirely, silently (#5983)
  • processors/token_transfer: Report a to_muxed_id of type ScvBytes at the length the contract emitted. It was previously copied into a fixed 32-byte buffer, so a shorter value was right-padded with zeroes and a longer one truncated, reporting a muxed id that was never emitted. Only a classic transaction memo maps to a fixed 32 bytes here; a contract may put any byte string in to_muxed_id (#5984)

[0.7.2] - 2026-08-14

Breaking Changes

  • strkey: Decode and DecodeAny now validate the payload length against the version byte per SEP-23. Fixed-length keys (account ID, seed, muxed account, contract, liquidity pool, claimable balance, hashTx, hashX) must decode to their exact canonical size, and signed payloads must carry a declared payload length of 1–64 bytes matched by their zero padding. Inputs with a valid checksum but a wrong-length payload — previously accepted by Decode, DecodeAny, and every IsValid* helper — are now rejected. (#5977)
    • NewSignedPayload rejects empty payloads, matching CAP-40 (the protocol fails such signers with SET_OPTIONS_BAD_SIGNER/txMALFORMED) and keeping SignedPayload.Encode output decodable.
    • Length re-checks that Decode now subsumes were removed from xdr.AccountId.SetAddress, xdr.MuxedAccount.SetAddress, xdr.SignerKey.SetAddress, xdr.ClaimableBalanceId.DecodeFromStrkey, strkey.DecodeMuxedAccount, strkey.MuxedAccount.SetAccountID, and txnbuild contract-address parsing. For wrong-length inputs, the xdr and txnbuild callers now return strkey's invalid payload length error instead of their own; the strkey muxed-account helpers keep their generic invalid muxed account / invalid ed25519 public key errors; xdr.MuxedAccount.SetAddress is unchanged (it rejects on encoded string length before decoding).
    • keypair.ParseAddress wraps every decode failure with ErrInvalidKey, so errors.Is(err, ErrInvalidKey) keeps matching wrong-length keys (and now also matches checksum/encoding failures, which previously returned the bare strkey error).
    • DecodeSignedPayload delegates structure validation to Decode; structurally invalid inputs now uniformly error with invalid signed payload (previously signed payload too short: ... or invalid signed payload padding).
  • xdr: Asset.LessThan now orders assets the way the protocol does — by the raw 32-byte issuer key — instead of by base32 strkey text, and xdr.NewPoolId requires strictly a < b, rejecting reversed and identical pairs (#5974)
  • txnbuild: liquidity pool operations reject asset pairs that are not strictly ordered; see the txnbuild changelog (#5974, #5978)

Bug Fixes

  • processors/token_transfer: trustline revocation now compares liquidity pool assets by value instead of pointer identity, fixing wrong-leg selection when burning pool shares (#5974)
  • ingest: ApplyLedgerMetadata now closes the datastore and the ledger backend, and returns the PrepareRange error instead of discarding it — an early return previously stranded one goroutine per configured worker and a failed prepare went unnoticed (#5974)

Updates

  • go.mod: Bumped github.com/stellar/go-xdr to dc590f1, normalizing the schema bound in mergeInputLenAndMaxSize so a variable-length field whose length prefix ends the input keeps both its schema and input-length bounds. Every generated type decodes through this decoder (#5974)

[0.7.1] - 2026-08-04

New Features

  • ingest: Added ExtractLedgerTxParts plus EventsFromTxParts and FeesFromTxParts (experimental), a single-walk zero-copy extraction API that supersedes the earlier extractor bundles; see the ingest changelog (#5966)

Bug Fixes

  • clients/stellartoml: GetStellarToml validates the domain before requesting it, for parity with its sibling client (#5970)

[0.7.0]

... (truncated)

Commits
  • 83d7730 rpcclient: add Client.URL() to expose configured RPC server URL (#5973)
  • 968da50 processors/token_transfer: stop coercing a bytes to_muxed_id to 32 bytes (#5985)
  • a7921dd processors/token_transfer: accept a Void-encoded to_muxed_id in V4 event data...
  • 7cf2188 xdr: export LedgerCloseMetaView.LedgerHeader (#5982)
  • 91e2cdd changelog: cut the Pending section as 0.7.2, and record 0.7.1 (#5980)
  • b46a463 strkey: enforce SEP-23 payload lengths in Decode and DecodeAny (#5977)
  • f8cd5df txnbuild: consolidate liquidity pool ordering guards; xdr and ingest cleanups...
  • d2f530f xdr: compare assets by their XDR encoding, and use Equals for asset equality ...
  • 3114a80 ingest: one ledger walk — ExtractLedgerTxParts + EventsFromTxParts/FeesFromTx...
  • 3c3872f stellartoml: validate domain in GetStellarToml for parity with sibling (#5970)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
chore(deps): bump github.com/stellar/go-stellar-sdk from 0.6.0 to 0.7.3
4aa030d 
Bumps [github.com/stellar/go-stellar-sdk](https://github.com/stellar/go-stellar-sdk) from 0.6.0 to 0.7.3.
- [Release notes](https://github.com/stellar/go-stellar-sdk/releases)
- [Changelog](https://github.com/stellar/go-stellar-sdk/blob/main/CHANGELOG.md)
- [Commits](stellar/go-stellar-sdk@v0.6.0...v0.7.3)

---
updated-dependencies:
- dependency-name: github.com/stellar/go-stellar-sdk
  dependency-version: 0.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/stellar/go-stellar-sdk-0.7.3 branch from 142327c to 4aa030d Compare August 31, 2026 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants