Skip to content

build(deps): bump github.com/BoltzExchange/boltz-client/v2 from 2.11.3 to 2.12.0#2349

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/BoltzExchange/boltz-client/v2-2.12.0
Open

build(deps): bump github.com/BoltzExchange/boltz-client/v2 from 2.11.3 to 2.12.0#2349
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/BoltzExchange/boltz-client/v2-2.12.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 15, 2026

Bumps github.com/BoltzExchange/boltz-client/v2 from 2.11.3 to 2.12.0.

Release notes

Sourced from github.com/BoltzExchange/boltz-client/v2's releases.

v2.12.0 - Goodbye

Summary

This release marks the final removal of the GDK wallet library. Remaining legacy wallets will be migrated automatically if they used the default subaccount. Watch out for warnings in the logs or getinfo CLI command after upgrading setups with old wallets.

Highlights

Full Changelog: BoltzExchange/boltz-client@v2.11.3...v2.12.0

Verifying the Release

In order to verify the release, you'll need to have gpg or gpg2 installed on your system. You'll first need to import the keys that have signed this release if you haven't done so already:

curl https://boltz.exchange/static/boltz.asc | gpg --import

Once you have the required PGP keys, you can verify the release (assuming boltz-client-manifest-v2.12.0.txt.sig and boltz-client-manifest-v2.12.0.txt are in the current directory) with:

gpg --verify boltz-client-manifest-v2.12.0.txt.sig boltz-client-manifest-v2.12.0.txt

You should see the following if the verification was successful:

gpg: Signature made Mon Dec 15 16:00:38 2025 CET
gpg:                using RSA key 8918FFBFFB49E93EF256D930542A7F22A3BD9CB0
gpg: Good signature from "Boltz (Boltz signing key) <admin@bol.tz>" [unknown]
Primary key fingerprint: 8918 FFBF FB49 E93E F256  D930 542A 7F22 A3BD 9CB0

You should also verify that the hashes still match with the archive you've downloaded.

sha256sum --ignore-missing -c boltz-client-manifest-v2.12.0.txt

If your archive is valid, you should see the following output (depending on the archive you've downloaded):

boltz-client-linux-amd64-v2.12.0.tar.gz: OK
Changelog

Sourced from github.com/BoltzExchange/boltz-client/v2's changelog.

[v2.12.0] - 2026-05-12

Fix

  • prettier in docs
  • run integration tests in serial
  • populate claim addresses from wallets (#673)

Refactor

  • remove GDK (#671)
  • wallet unique constrant (#672)

Commits
  • 9bf31be chore: bump version to v2.12.0
  • 77c7d8b fix: prettier in docs
  • ac71c17 refactor: remove GDK (#671)
  • 554f1ea chore: bump vulnerable dependencies (#681)
  • f94888d chore(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 (#663)
  • 4a8bcbc chore: fix prettier in docs
  • 0bdf267 Merge pull request #680 from BoltzExchange/chore/bump-go
  • 8966fcd chore: rm deprecated old compat.Dockerfile
  • 43294e6 chore: bump go toolchain
  • 17bc7c1 Merge pull request #679 from BoltzExchange/chore/improve-ci-flakes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/BoltzExchange/boltz-client/v2](https://github.com/BoltzExchange/boltz-client) from 2.11.3 to 2.12.0.
- [Release notes](https://github.com/BoltzExchange/boltz-client/releases)
- [Changelog](https://github.com/BoltzExchange/boltz-client/blob/master/CHANGELOG.md)
- [Commits](BoltzExchange/boltz-client@v2.11.3...v2.12.0)

---
updated-dependencies:
- dependency-name: github.com/BoltzExchange/boltz-client/v2
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 15, 2026
@rolznz rolznz added this to the v1.23.0 milestone May 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant