Skip to content

chore(deps): update docker dependency updates#308

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/docker-dependency-updates
Open

chore(deps): update docker dependency updates#308
renovate[bot] wants to merge 1 commit intomainfrom
renovate/docker-dependency-updates

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate bot commented Apr 2, 2026

This PR contains the following updates:

Package Update Change
chainsafe/lodestar minor v1.40.0v1.41.1
consensys/teku (source) minor 26.3.026.4.0
grafana/alloy minor v1.14.0v1.15.0
grafana/grafana patch 12.4.112.4.2
grafana/loki minor 3.6.73.7.1
grafana/tempo patch 2.10.22.10.3
nethermind/nethermind patch 1.36.11.36.2
offchainlabs/prysm-validator patch v7.1.2v7.1.3
prom/prometheus minor v3.10.0v3.11.1
prysmaticlabs/prysm-beacon-chain patch v7.1.2v7.1.3
sifrai/grandine patch 2.0.32.0.4

Release Notes

Consensys/teku (consensys/teku)

v26.4.0

Compare Source

This is a required update for Gnosis nodes, containing the Fulu fork schedule (Apr 14 2026 12:06:20 GMT+0000), optional otherwise.

Downloads
  • Available as 26.4.0 on Dockerhub
  • Download the binary distribution:
    • tar.gz (sha256: 886bc142c9b40b6e2b5ca71e4803069c1c62274536240f573f17bb26efcc7fc1)
    • zip (sha256: 9c3c95cc659fea6f2bfddf0509d93a8e0f1a140ab5a6ccefdce12a134e294550)
Additions and Improvements
  • Implemented PostPtcDuties rest api endpoint (gloas api).
  • Added /eth/v2/node/version endpoint to retrieve structured version information for both beacon node and execution client.
  • Added deprecation warning on startup for any leveldb database types.
  • Increased default timeout of Engine API Get Payload requests to 2 seconds.
Upcoming Breaking Changes
  • Teku will be moving to Java JDK 25 in a future release.
grafana/alloy (grafana/alloy)

v1.15.0

Compare Source

⚠ BREAKING CHANGES
  • otelcol: Upgrade to OTel Collector v0.147.0 (#​5784)
  • Renamed undocumented metrics that was previously prefixed with <component_id><metric_name> to loki_source_awsfirehose<metric_name>
Features 🌟
Bug Fixes 🐛
Chores

Upgrading

Read the release notes for specific instructions on upgrading from older versions:

Installation

Refer to our installation guide for how to install Grafana Alloy.

v1.14.2

Compare Source

Bug Fixes 🐛

Upgrading

Read the release notes for specific instructions on upgrading from older versions:

Installation

Refer to our installation guide for how to install Grafana Alloy.

v1.14.1

Compare Source

Bug Fixes 🐛
  • Correctly handle the deprecated topic field in otelcol.receiver.kafka configuration [backport] (#​5730) (4393054)
    (@​thampiotr)
  • deps: Update module golang.org/x/net to v0.51.0 [SECURITY] [backport] (#​5690) (9e8616c)
  • loki.process: Protect against json that does not look like docker json format [backport] (#​5773) (a0f1f8a)
    (@​kalleep)
  • loki.source.file: Keep positions for compressed files when reading is finished [backport] (#​5741) (4f6d548)
    (@​kalleep)
  • otelcol.receiver.datadog: Expose intake proxy and trace_id_cache_size settings [backport] (#​5785) (6d99ab5)
    (@​thampiotr)
  • prometheus.scrape: Update arguments and targets even if scrape_native_histograms and extra_metrics are updated [backport] (#​5792) (76d398f) (@​ptodev)
Upgrading

Read the release notes for specific instructions on upgrading from older versions:

Installation

Refer to our installation guide for how to install Grafana Alloy.

grafana/grafana (grafana/grafana)

v12.4.2

Compare Source

Features and enhancements
Bug fixes
prysmaticlabs/prysm (offchainlabs/prysm-validator)

v7.1.3

Compare Source

This release brings extensive Gloas (next fork) groundwork, a major logging infrastructure overhaul, and numerous performance optimizations across the beacon chain. A security update to go-ethereum v1.16.8 is also included.

Release highlights:

  • Gloas fork preparation: Builder registry, bid processing, payload attestation, proposer slashing, slot processing, block API endpoints, and duty timing intervals are all wired up.
  • Logging revamp: New ephemeral debug logfile (24h retention, enabled by default), per-package loggers with CI enforcement, per-hook verbosity control (--log.vmodule), and a version banner at startup.
  • Performance: Forkchoice updates moved to background, post-Electra attestation data cached per slot, parallel data column cache warmup, reduced heap allocations in SSZ marshaling and MixInLength, and proposer preprocessing behind a feature flag.
  • Validator client: gRPC fallback now matches the REST API implementation — both connect only to fully synced nodes. The gRPC health endpoint returns an error on syncing/optimistic status.
  • Security: go-ethereum updated to v1.16.8; fixed an authentication bypass on /v2/validator/* endpoints.
  • State storage: Initial support for the hdiff state-diff feature — migration-to-cold and DB initialization are now available behind feature flags.

There are no known security issues in this release. Operators can update at their convenience.

Added
  • Use the head state to validate attestations for the previous epoch if head is compatible with the target checkpoint. [PR]
  • Added separate logrus hooks for handling the formatting and output of terminal logs vs log-file logs, instead of the. [PR]
  • Batch publish data columns for faster data propogation. [PR]
  • --disable-get-blobs-v2 flag. [PR]
  • Update spectests to v1.7.0-alpha.0. [PR]
  • Added basic Gloas builder support (Builder message and BeaconStateGloas builders/next_withdrawal_builder_index fields). [PR]
  • Added an ephemeral debug logfile that for beacon and validator nodes that captures debug-level logs for 24 hours. It. [PR]
  • Add a feature flag to pass spectests with low validator count. [PR]
  • Add feature flag --enable-proposer-preprocessing to process the block and verify signatures before proposing. [PR]
  • Add ProofByFieldIndex to generalize merkle proof generation for BeaconState. [PR]
  • Update spectests to v1.7.0-alpha-1. [PR]
  • Add feature flag to use hashtree instead of gohashtre. [PR]
  • Migrate to cold with the hdiff feature. [PR]
  • Adding basic fulu fork transition support for mainnet and minimal e2e tests (multi scenario is not included). [PR]
  • commitment_count_in_gossip_processed_blocks gauge metric to track the number of blob KZG commitments in processed beacon blocks. [PR]
  • Add Gloas latest execution bid processing. [PR]
  • Added shell completion support for beacon-chain and validator CLI tools. [PR]
  • add pending payments processing and quorum threshold, plus spectests and state hooks (rotate/append). [PR]
  • Add slot processing with execution payload availability updates. [PR]
  • Implement modified proposer slashing for gloas. [PR]
  • Added missing beacon config in fulu so that the presets don't go missing in /eth/v1/config/spec beacon api. [PR]
  • Close opened file in data_column.go. [PR]
  • Flag --log.vmodule to set per-package verbosity levels for logging. [PR]
  • Added a version log at startup to display the version of the build. [PR]
  • gloas block return support for /eth/v2/beacon/blocks/{block_id} and /eth/v1/beacon/blocks/{block_id}/root endpoints. [PR]
  • Add Gloas process payload attestation. [PR]
  • Initialize db with state-diff feature flag. [PR]
  • Gloas-specific timing intervals for validator attestation, aggregation, and sync duties. [PR]
  • Added new proofCollector type to ssz-query. [PR]
  • Added README for maintaining specrefs. [PR]
  • The ability to download the nightly reference tests from a specific day. [PR]
  • Set beacon node options after reading the config file. [PR]
  • Implement finalization-based eviction for CheckpointStateCache. [PR]
Changed
  • Performance improvement in ProcessConsolidationRequests: Use more performance HasPendingBalanceToWithdraw instead of PendingBalanceToWithdraw as no need to calculate full total pending balance. [PR]
  • Extend httperror analyzer to more functions. [PR]
  • Do not check block signature on state transition. [PR]
  • Notify the engine about forkchoice updates in the background. [PR]
  • Use a separate context when updating the slot cache. [PR]
  • Data column sidecars cache warmup: Process in parallel all sidecars for a given epoch. [PR]
  • Use lookahead to validate data column sidecar proposer index. [PR]
  • Summarize DEBUG log corresponding to incoming via gossip data column sidecar. [PR]
  • Added a log.go file for every important package with a logger variable containing a package field set to the package. [PR]
  • Added a CI check to ensure every important package has a log.go file with the correct package field. [PR]
  • Changed the log formatter to use this package field instead of the previous prefix field. [PR]
  • Replaced time.Sleep with require.Eventually polling in tests to fix flaky behavior caused by race conditions between goroutines and assertions. [PR]
  • changed IsHealthy check to IsReady for validator client's interpretation from /eth/v1/node/health, 206 will now return false as the node is syncing. [PR]
  • Performance improvement in state (MarshalSSZTo): use copy() instead of byte-by-byte loop which isn't required. [PR]
  • Moved verbosity settings to be configurable per hook, rather than just globally. This allows us to control the. [PR]
  • updated go ethereum to 1.16.7. [PR]
  • Use dependent root and target root to verify data column proposer index. [PR]
  • post electra we now call attestation data once per slot and use a cache for subsequent requests. [PR]
  • Avoid unnessary heap allocation while calling MixInLength. [PR]
  • Log commitments instead of indices in missingCommitError. [PR]
  • Added some defensive checks to prevent overflows in block batch requests. [PR]
  • gRPC health endpoint will now return an error on syncing or optimistic status showing that it's unavailable. [PR]
  • Sample PTC per committee to reduce allocations. [PR]
  • gRPC fallback now matches rest api implementation and will also check and connect to only synced nodes. [PR]
  • Improved node fallback logs. [PR]
  • Improved integrations with ethspecify so specrefs can be used throughout the codebase. [PR]
  • Fixed the logging issue described in #​16314. [PR]
Removed
  • removed github.com/MariusVanDerWijden/FuzzyVM and github.com/MariusVanDerWijden/tx-fuzz due to lack of support post 1.16.7, only used in e2e for transaction fuzzing. [PR]
  • Remove unused delay parameter from fetchOriginDataColumnSidecars function. [PR]
  • Batching of KZG verification for incoming via gossip data column sidecars. [PR]
  • --disable-get-blobs-v2 flag from help. [PR]
  • gRPC resolver for load balancing, the new implementation matches rest api's so we should remove the resolver so it's handled the same way for consistency. [PR]
Fixed
  • avoid panic when fork schedule is empty #​16175. [PR]
  • Fix validation logic for --backfill-oldest-slot, which was rejecting slots newer than 1056767. [PR]
  • Don't call trace.WithMaxExportBatchSize(trace.DefaultMaxExportBatchSize) twice. [PR]
  • When adding the --[semi-]supernode flag, update the ealiest available slot accordingly. [PR]
  • fixed broken and old links to actual. [PR]
  • stop SlotIntervalTicker goroutine leaks #​16241. [PR]
  • Fix prysmctl testnet generate-genesis to use the timestamp from --geth-genesis-json-in when --genesis-time is not explicitly provided. [PR]
  • Prevent authentication bypass on direct /v2/validator/* endpoints by enforcing auth checks for non-public routes. [PR]
  • Fixed a typo: AggregrateDueBPS -> AggregateDueBPS. [PR]
  • Fixed a bug in hack/check-logs.sh where untracked files were ignored. [PR]
  • Fix hashtree release builds. [PR]
  • Fix Bazel build failure on macOS x86_64 (darwin_amd64) (adds missing assembly stub to hashtree patch). [PR]
  • a potential race condition when switching hosts quickly and reconnecting to same host on an old connection. [PR]
  • Fixed a bug where cmd/beacon-chain/execution was being ignored by hack/gen-logs.sh due to a .gitignore rule. [PR]
Security
  • Update go-ethereum to v1.16.8. [PR]
prometheus/prometheus (prom/prometheus)

v3.11.1

Compare Source

v3.11.0: 3.11.0 / 2026-04-02

Compare Source

  • [CHANGE] Hetzner SD: The __meta_hetzner_datacenter label is deprecated for the role robot but kept for backward compatibility, use the __meta_hetzner_robot_datacenter label instead. For the role hcloud, the label is deprecated and will stop working after the 1 July 2026. #​17850
  • [CHANGE] Hetzner SD: The __meta_hetzner_hcloud_datacenter_location and __meta_hetzner_hcloud_datacenter_location_network_zone labels are deprecated, use the __meta_hetzner_hcloud_location and __meta_hetzner_hcloud_location_network_zone labels instead. #​17850
  • [CHANGE] Promtool: Redirect debug output to stderr to avoid interfering with stdout-based tool output. #​18346
  • [FEATURE] AWS SD: Add Elasticache Role. #​18099
  • [FEATURE] AWS SD: Add RDS Role. #​18206
  • [FEATURE] Azure SD: Add support for Azure Workload Identity authentication method. #​17207
  • [FEATURE] Discovery: Introduce prometheus_sd_last_update_timestamp_seconds metric to track the last time a service discovery update was sent to consumers. #​18194
  • [FEATURE] Kubernetes SD: Add support for node role selectors for pod roles. #​18006
  • [FEATURE] Kubernetes SD: Introduce pod-based labels for deployment, cronjob, and job controller names: __meta_kubernetes_pod_deployment_name, __meta_kubernetes_pod_cronjob_name and __meta_kubernetes_pod_job_name, respectively. #​17774
  • [FEATURE] PromQL: Add </ and >/ operators for trimming observations from native histograms. #​17904
  • [FEATURE] PromQL: Add experimental histogram_quantiles variadic function for computing multiple quantiles at once. #​17285
  • [FEATURE] TSDB: Add storage.tsdb.retention.percentage configuration to configure the maximum percent of disk usable for TSDB storage. #​18080
  • [FEATURE] TSDB: Add an experimental fast-startup feature flag that writes a series_state.json file to the WAL directory to track active series state across restarts. #​18303
  • [FEATURE] TSDB: Add an experimental st-storage feature flag. When enabled, Prometheus stores ingested start timestamps (ST, previously called Created Timestamp) from scrape or OTLP in the TSDB and Agent WAL, and exposes them via Remote Write 2. #​18062
  • [FEATURE] TSDB: Add an experimental xor2-encoding feature flag for the new TSDB block float sample chunk encoding that is optimized for scraped data and allows encoding start timestamps. #​18062
  • [ENHANCEMENT] HTTP client: Add AWS external_id support for sigv4. #​17916
  • [ENHANCEMENT] Kubernetes SD: Deduplicate deprecation warning logs from the Kubernetes API to reduce noise. #​17829
  • [ENHANCEMENT] TSDB: Remove old temporary checkpoints when creating a Checkpoint. #​17598
  • [ENHANCEMENT] UI: Add autocomplete support for experimental first_over_time and ts_of_first_over_time PromQL functions. #​18318
  • [ENHANCEMENT] Vultr SD: Upgrade govultr library from v2 to v3 for continued security patches and maintenance. #​18347
  • [PERF] PromQL: Improve performance and reduce heap allocations in joins (VectorBinop)/And/Or/Unless. #​17159
  • [PERF] PromQL: Partially address performance regression in native histogram aggregations due to using KahanAdd. #​18252
  • [PERF] Remote write: Optimize WAL watching used for RW sending to reuse internal buffers. #​18250
  • [PERF] TSDB: Optimize LabelValues intersection performance for matchers. #​18069
  • [PERF] UI: Skip restacking on hover in stacked series charts. #​18230
  • [BUGFIX] AWS SD: Fix EC2 SD ignoring the configured endpoint option, a regression from the AWS SDK v2 migration. #​18133
  • [BUGFIX] AWS SD: Fix panic in EC2 SD when DescribeAvailabilityZones returns nil ZoneName or ZoneId. #​18133
  • [BUGFIX] Agent: Fix memory leak caused by duplicate SeriesRefs being loaded as active series. #​17538
  • [BUGFIX] Alerting: Fix alert state incorrectly resetting to pending when the FOR period is increased in the config file. #​18244
  • [BUGFIX] Azure SD: Fix system-assigned managed identity not working when client_id is empty. #​18323
  • [BUGFIX] Consul SD: Fix filter parameter not being applied to health service endpoint, causing Node and Node.Meta filters to be ignored. #​17349
  • [BUGFIX] Kubernetes SD: Fix duplicate targets generated by *DualStack EndpointSlices policies. #​18192
  • [BUGFIX] OTLP: Fix ErrTooOldSample being returned as HTTP 500 instead of 400 in PRW v2 histogram write paths, preventing infinite client retry loops. #​18084
  • [BUGFIX] OTLP: Fix exemplars getting mixed between incorrect parts of a histogram. #​18056
  • [BUGFIX] PromQL: Do not skip histogram buckets in queries where histogram trimming is used. #​18263
  • [BUGFIX] Remote write: Fix prometheus_remote_storage_sent_batch_duration_seconds measuring before the request was sent. #​18214
  • [BUGFIX] Rules: Fix alert state restoration when rule labels contain Go template expressions. #​18375
  • [BUGFIX] Scrape: Fix panic when parsing bare label names without an equal sign in brace-only metric notation. #​18229
  • [BUGFIX] TSDB: Fail early when use-uncached-io feature flag is set on unsupported environments. #​18219
  • [BUGFIX] TSDB: Fall back to CLI flag values when retention is removed from config file. #​18200
  • [BUGFIX] TSDB: Fix memory leaks in buffer pools by clearing reference fields before returning buffers to pools. #​17895
  • [BUGFIX] TSDB: Fix missing mmap of histogram chunks during WAL replay. #​18306
  • [BUGFIX] TSDB: Fix storage.tsdb.retention.time unit mismatch in file causing retention to be 1e6 times longer than configured. #​18200
  • [BUGFIX] Tracing: Fix missing traceID in query log when tracing is enabled, previously only spanID was emitted. #​18189
  • [BUGFIX] UI: Fix tooltip Y-offset drift when using multiple graph panels. #​18228
  • [BUGFIX] UI: Update retention display in runtime info when config is reloaded. #​18200

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/docker-dependency-updates branch from 7cc7c1d to c6d6f63 Compare April 7, 2026 17:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants