Bump go.sia.tech/coreutils from 0.21.3 to 0.22.0 in the all-dependencies group

[dependabot]

Bumps the all-dependencies group with 1 update: go.sia.tech/coreutils.

Updates go.sia.tech/coreutils from 0.21.3 to 0.22.0

Release notes

Sourced from go.sia.tech/coreutils's releases.

0.22.0 (2026-05-12)

Breaking Changes

Add RHP4 pool RPC handlers, renter helpers, and Contractor interface methods for shared balance pools.

Hosts can now back accounts with shared balance pools so renters don't need to pre-fund and continually rebalance every account. A renter funds a pool once and attaches as many accounts as they want; debits drain the account's own balance first and fall through to attached pools, which keeps per-account allowances small and reduces the total capital sitting idle in account balances. This is the host-side companion to the new RHP4 pool RPCs.

Extends the RHP4 Contractor interface with PoolBalances, CreditPoolsWithContract, AttachPools, and DetachPools (existing implementations must be updated). Adds host-side handlers for the new pool RPCs and renter-side helpers RPCReplenishPools, RPCAttachPools, and RPCDetachPools. DebitAccount semantics are extended to drain the account's own balance first, then attached pools in attachment order.

Fixes

• Check downloaded data length in RPCReadSector before proof validation for a more meaningful error.
• Fix incorrect v2 pool index.
• Wrap client rpc errors in RPCError.

Changelog

Sourced from go.sia.tech/coreutils's changelog.

0.22.0 (2026-05-12)

Breaking Changes

Add RHP4 pool RPC handlers, renter helpers, and Contractor interface methods for shared balance pools.

Hosts can now back accounts with shared balance pools so renters don't need to pre-fund and continually rebalance every account. A renter funds a pool once and attaches as many accounts as they want; debits drain the account's own balance first and fall through to attached pools, which keeps per-account allowances small and reduces the total capital sitting idle in account balances. This is the host-side companion to the new RHP4 pool RPCs.

Extends the RHP4 Contractor interface with PoolBalances, CreditPoolsWithContract, AttachPools, and DetachPools (existing implementations must be updated). Adds host-side handlers for the new pool RPCs and renter-side helpers RPCReplenishPools, RPCAttachPools, and RPCDetachPools. DebitAccount semantics are extended to drain the account's own balance first, then attached pools in attachment order.

Fixes

• Check downloaded data length in RPCReadSector before proof validation for a more meaningful error.
• Fix incorrect v2 pool index.
• Wrap client rpc errors in RPCError.

Commits

• 36253a4 Merge pull request #426 from SiaFoundation/release
• c8cad8a chore: prepare release 0.22.0
• a820662 Merge pull request #427 from SiaFoundation/chris/wrap-client-error
• b081ba1 changeset
• 83ce27e Wrap client rpc errors in RPCError
• e0f827a Merge pull request #421 from SiaFoundation/nate/balance-pools
• a0b230a address comments
• 7e990b1 add account pools
• 1d28a32 build(deps): bump go.sia.tech/core
• 365fd5e build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	go.sia.tech/​coreutils@​v0.21.3 ⏵ v0.22.0	+1

View full report