Skip to content

chore(deps): bump github.com/consensys/gnark from 0.15.0 to 0.16.1 - #2203

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/consensys/gnark-0.16.1
Open

chore(deps): bump github.com/consensys/gnark from 0.15.0 to 0.16.1#2203
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/consensys/gnark-0.16.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/consensys/gnark from 0.15.0 to 0.16.1.

Release notes

Sourced from github.com/consensys/gnark's releases.

v0.16.1

gnark v0.16.1

This release focuses on in-circuit performance — a batch of lattice-based scalar-multiplication optimizations — plus a few correctness fixes and cleanups.


⚠️ Security

This release contains fixes for soundness issues affecting some circuits built with earlier versions of gnark. The corresponding security advisories (GHSA) will be published at a later date, and these notes will be updated to link them.

We strongly recommend all users upgrade to v0.16.0. If you cannot upgrade promptly and want to assess your exposure, contact us at the security contact listed in SECURITY.md.


Highlights

🚀 Performance

  • Lattice-based scalar decomposition across the board:
    • G2 GLV + FakeGLV scalar-mul (#1764)
    • Twisted Edwards double-base MSM (#1765)
    • Tighter scalar-mul bounds (#1763)
  • Randomized Schwartz–Zippel checks in native Fp6/Fp12 towers on BLS12-377 (#1760)
  • Cheaper Lookup2 and Xor(x, 0) (#1801)

✨ Features

  • Map-to-curve relations gadget, native and emulated (#1746)

🐛 Fixes

  • Validate PLONK proof structure against the verifying key before verification (#1787)
  • GLV subscalar range checks (#1778)
  • Don't discard the returned value in Miller loop precomputeLines (#1786)
  • GKR Poseidon serialization (#1770)

🗑️ Removed

  • FRI verifier gadget (#1777)

📦 Dependencies

  • gnark-crypto v0.21.0 (#1803)

Full Changelog: Consensys/gnark@v0.15.0...v0.16.0

v0.16.0

gnark v0.16.0

This release focuses on in-circuit performance — a batch of lattice-based scalar-multiplication optimizations — plus a few correctness fixes and cleanups.

... (truncated)

Changelog

Sourced from github.com/consensys/gnark's changelog.

[v0.16.0] - 2026-08-19

Build

  • deps: bump golang.org/x/crypto from 0.48.0 to 0.52.0 in the go_modules group across 1 directory (#1793)

Chore

  • update dependencies (gnark-crypto v0.21.0) (#1803)
  • remove FRI verifier gadget (#1777)
  • pin and update GitHub Actions to latest releases (#1784)

Feat

  • map-to-curve relations (#1746)

Fix

  • do not discard returned value in Miller loop precomputelines (#1786)
  • validate Plonk proof structure according to verifying key (#1787)
  • GLV subscalar range checks (#1778)
  • GKR Poseidon serialization (#1770)

Perf

  • optimize Lookup2 and Xor(x,0) (#1801)
  • twisted Edwards lattice-based double-base MSM (#1765)
  • G2 lattice-based GLV+FakeGLV scalar-mul (#1764)
  • use lattice scalar decomposition for tighter scalar-mul bounds (#1763)
  • bls12-377: randomized Schwartz-Zippel in native Fp6 and Fp12 (#1760)

Refactor

  • enforce least-privilege in GitHub Actions workflows (#1785)

Commits
  • 8558b82 fix: AddUnified for bw6-761 2-torsion points
  • e9d0ed2 fix: regenerate gkr_poseidon2 binary file
  • b03e257 chore: prepare v0.16.0 release
  • e3ce978 Merge branch 'pr-1797' into master
  • 48e4e4b chore: update dependencies (#1803)
  • c05c6a8 perf: optimize Lookup2 and Xor(x,0) (#1801)
  • c18da30 deps(actions)(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the core-ac...
  • 6c4ef41 deps(actions)(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#1799)
  • 2ea1515 perf: twisted Edwards lattice-based double-base MSM (#1765)
  • f70d47b deps(actions)(deps): bump the third-party-actions-minor-patch group across 1 ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/consensys/gnark](https://github.com/consensys/gnark) from 0.15.0 to 0.16.1.
- [Release notes](https://github.com/consensys/gnark/releases)
- [Changelog](https://github.com/Consensys/gnark/blob/master/CHANGELOG.md)
- [Commits](Consensys/gnark@v0.15.0...v0.16.1)

---
updated-dependencies:
- dependency-name: github.com/consensys/gnark
  dependency-version: 0.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants