chore(deps): bump github.com/ethereum/go-ethereum from 1.17.7 to 1.17.8 in /conformance

[dependabot]

Bumps github.com/ethereum/go-ethereum from 1.17.7 to 1.17.8.

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Protein Sludge Pack (v1.17.8)

This is a security-focused release, fixing several DoS risk issues ❤️‍🩹 . Note most of the the fixes related to bugs which only become possible after the activation of the Amsterdam fork. There are also some general correctness improvements.

This release is recommended for all users.

All Changes

Security

• In the eth and snap p2p protocol handler, DoS resistance has been improved for multiple packet handlers (#35862, #35883, #35859, #35857, #35904, #35856)
• JUMPDEST analysis caching has been hardened for attack cases after Amsterdam fork (#35881)
• The IP address predictor now requires IP verification before accepting statements (#35861)
• A post-Amsterdam DoS vector related to BAL accounts is resolved (#35865)
• A rogue STUN server could crash the node with an invalid response (#35863)

RPC

• eth_createAccessList now works when the sender account has no balance (#35397)
• eth_simulateV1 has been fixed to correctly report ETH transfer logs post-Amsterdam (#35617)
• eth_simulateV1 virtual blocks are now aligned with the Amsterdam spec (#35668)
• eth_capabilities reports the availability of receipts bounded by the transaction hash index (#35878)
• For eth_call and related operations, the transaction gas limit is no longer applied (after Amsterdam fork) (#35845)
• A post-Amsterdam crash in journaled live tracers core/tracing: handle creator nonce change without an open frame (#35896)
• An edge case in processing beacon chain head updates after unclean shutdown is resolved (#35804)
• abigen will now use sequential nonces when deploying library dependencies of a contract (#35888)

Core Library

• The hard-coded Hoodi testnet beacon chain genesis time was incorrect (#35876)
• blsync could get stuck if the server was unresponsive or overloaded (#35872)

P2P

• A correctness issue in the EIP-8070 Sparse Blobpool (Amsterdam fork) implementation is fixed (#35860)
• The dial scheduler now handles IPv4 <> IPv6 transitions for DNS-resolved static nodes (#35880)

Build

• The PPA now publishes for Ubuntu 26.04 "Resolute Raccoon" (#35854)

---

For a full rundown of the changes please consult the Geth 1.17.8 release milestone.

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go (use "stable" tag).
• Ubuntu packages in our Launchpad PPA repository.
• macOS packages in our Homebrew Tap repository.

Commits

• a579077 version: go-ethereum v1.17.8 stable
• b10c4ec eth/protocols/eth: add size checks for receipts (#35904)
• acdb0c6 eth/catalyst: don't treat a forward canonical update as a reorg (#35804)
• 21f1eb2 node: fix flaky jwt too new auth test (#35889)
• 0ef7a39 accounts/abi/abigen: chain nonces when deploying library dependencies (#35888)
• eedeb03 core/tracing: handle creator nonce change without an open frame (#35896)
• 0b468a8 eth/protocols/eth: verify block shape before hashing (#35862)
• fd37587 eth/protocols/eth: limit getCells lookup (#35883)
• 4f9ca6d eth: fix cells response to use index major (#35860)
• defbdf7 internal/ethapi, core: align eth_simulateV1 blocks with the Amsterdam spec (#...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)