build(deps): bump the patch-updates group with 4 updates

[dependabot]

Bumps the patch-updates group with 4 updates: github.com/evstack/ev-node, golang.org/x/net, google.golang.org/genproto/googleapis/api and google.golang.org/grpc.

Updates github.com/evstack/ev-node from 1.1.1 to 1.1.4

Release notes

Sourced from github.com/evstack/ev-node's releases.

v1.1.3

This is a targeted bugfix release addressing a transaction queue backlog issue under heavy load. Operators running sequencer nodes with high transaction throughput are strongly encouraged to upgrade.

Full Changelog

For a complete list of all changes including new features, improvements, and bug fixes, see CHANGELOG.md.

Images

• ghcr.io/evstack/ev-node-evm:v1.1.3
• ghcr.io/evstack/ev-node-grpc:v1.1.3
• ghcr.io/evstack/ev-node-testapp:v1.1.3

v1.1.2

This is a maintenance and improvement release that includes performance optimizations, new observability and connectivity features, and breaking changes to the gRPC execution layer. Operators running execution/grpc integrations must review the changes below before upgrading.

Full Changelog

For a complete list of all changes including new features, improvements, and bug fixes, see CHANGELOG.md.

Images

• ghcr.io/evstack/ev-node-evm:v1.1.2
• ghcr.io/evstack/ev-node-grpc:v1.1.2
• ghcr.io/evstack/ev-node-testapp:v1.1.2

Changelog

Sourced from github.com/evstack/ev-node's changelog.

v1.1.4

Fixed

• DA client falls back to HTTP polling with Retrieve when the WebSocket connection fails, instead of trying to use the WS-only Subscribe over HTTP. A background goroutine retries WS every 30s so transient outages don't force a permanent downgrade #3361

v1.1.3

Fixed

• Drain the pending tx queue in merged batches with a durable WAL-backed ack, fixing severe queue backlog under heavy tx load. Tx dedup moved from the reaper cache into the sequencer queue #3351

v1.1.2

Changes

• Add max bytes contraints in simple solo sequnecer #3312
• Add support for otlp in execution/grpc. #3300
• Optimization of mutex usage in cache for reaper #3286
• Add Unix domain socket support for gRPC execution endpoints via unix:///path/to/socket #3297
• BREAKING: (execution/grpc)
  • Move execution service where it belongs in execution/grpc. #3302
  • Replace legacy gRPC execution txs payload fields with tx_batch so clients and servers use contiguous transaction buffers #3297
• Optimize metadata writes by making it async in cache store #3298
• Reduce tx cache retention to avoid OOM under (really) heavy tx load #3299

Fixed

• Increase P2P pubsub max message size to match DefaultMaxBlobSize, preventing fullnode desync on large blocks #3344.

Commits

• 8fc70f0 chore: hotfix #3361 to v1.1.x (#3362)
• d208cd0 chore: prep ev-node v1.1.3 (#3353)
• 85119a6 fix: drain pending tx queue in batches with durable ack (#3351)
• 3fed700 feat(loadgen): adding loadgen binary (#3335)
• 29e8542 build(deps): Bump codecov/codecov-action from 6 to 7 (#3348)
• 74efee3 Add locad devnet guide (#3350)
• 89c7fe8 chore: bring back dev replaces (#3347)
• 056bf5a chore: bump ev-node in apps (#3346)
• c3ed3a5 chore: prep 1.1.2 (#3345)
• 8846ed3 fix: increase P2P pubsub max message size to match blob size limit (#3344)
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.53.0 to 0.55.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260401024825-9d38bb4040a9 to 0.0.0-20260526163538-3dc84a4a5aaa

Commits

• See full diff in compare view

Updates google.golang.org/grpc from 1.81.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
  • Special Thanks: @​al4an444

Bug Fixes

• otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Commits

• caf0772 Change version from 1.81.1-dev to 1.81.1 (#9122)
• 6ccbeeb Cherry-pick #9111 into v1.81.x (#9121)
• b33c29e Cherry-pick #9081 into v1.81.x (#9102)
• c45fae6 Change version to 1.81.1-dev (#9063)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: T:dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml