build(deps): bump github.com/stellar/go-stellar-sdk from 0.7.1 to 0.7.2 in the go-stellar-sdk group

[dependabot]

Bumps the go-stellar-sdk group with 1 update: github.com/stellar/go-stellar-sdk.

Updates github.com/stellar/go-stellar-sdk from 0.7.1 to 0.7.2

Release notes

Sourced from github.com/stellar/go-stellar-sdk's releases.

v0.7.2

What's Changed

• xdr: compare assets by their XDR encoding, and use Equals for asset equality by @​karthikiyer56 in stellar/go-stellar-sdk#5974
• txnbuild: consolidate liquidity pool ordering guards; xdr and ingest cleanups by @​karthikiyer56 in stellar/go-stellar-sdk#5978
• strkey: enforce SEP-23 payload lengths in Decode and DecodeAny by @​karthikiyer56 in stellar/go-stellar-sdk#5977

Full Changelog: stellar/go-stellar-sdk@v0.7.1...v0.7.2

Changelog

Sourced from github.com/stellar/go-stellar-sdk's changelog.

[0.7.2] - 2026-08-14

Breaking Changes

• strkey: Decode and DecodeAny now validate the payload length against the version byte per SEP-23. Fixed-length keys (account ID, seed, muxed account, contract, liquidity pool, claimable balance, hashTx, hashX) must decode to their exact canonical size, and signed payloads must carry a declared payload length of 1–64 bytes matched by their zero padding. Inputs with a valid checksum but a wrong-length payload — previously accepted by Decode, DecodeAny, and every IsValid* helper — are now rejected. (#5977)
  • NewSignedPayload rejects empty payloads, matching CAP-40 (the protocol fails such signers with SET_OPTIONS_BAD_SIGNER/txMALFORMED) and keeping SignedPayload.Encode output decodable.
  • Length re-checks that Decode now subsumes were removed from xdr.AccountId.SetAddress, xdr.MuxedAccount.SetAddress, xdr.SignerKey.SetAddress, xdr.ClaimableBalanceId.DecodeFromStrkey, strkey.DecodeMuxedAccount, strkey.MuxedAccount.SetAccountID, and txnbuild contract-address parsing. For wrong-length inputs, the xdr and txnbuild callers now return strkey's invalid payload length error instead of their own; the strkey muxed-account helpers keep their generic invalid muxed account / invalid ed25519 public key errors; xdr.MuxedAccount.SetAddress is unchanged (it rejects on encoded string length before decoding).
  • keypair.ParseAddress wraps every decode failure with ErrInvalidKey, so errors.Is(err, ErrInvalidKey) keeps matching wrong-length keys (and now also matches checksum/encoding failures, which previously returned the bare strkey error).
  • DecodeSignedPayload delegates structure validation to Decode; structurally invalid inputs now uniformly error with invalid signed payload (previously signed payload too short: ... or invalid signed payload padding).
• xdr: Asset.LessThan now orders assets the way the protocol does — by the raw 32-byte issuer key — instead of by base32 strkey text, and xdr.NewPoolId requires strictly a < b, rejecting reversed and identical pairs (#5974)
• txnbuild: liquidity pool operations reject asset pairs that are not strictly ordered; see the txnbuild changelog (#5974, #5978)

Bug Fixes

• processors/token_transfer: trustline revocation now compares liquidity pool assets by value instead of pointer identity, fixing wrong-leg selection when burning pool shares (#5974)
• ingest: ApplyLedgerMetadata now closes the datastore and the ledger backend, and returns the PrepareRange error instead of discarding it — an early return previously stranded one goroutine per configured worker and a failed prepare went unnoticed (#5974)

Updates

• go.mod: Bumped github.com/stellar/go-xdr to dc590f1, normalizing the schema bound in mergeInputLenAndMaxSize so a variable-length field whose length prefix ends the input keeps both its schema and input-length bounds. Every generated type decodes through this decoder (#5974)

Commits

• b46a463 strkey: enforce SEP-23 payload lengths in Decode and DecodeAny (#5977)
• f8cd5df txnbuild: consolidate liquidity pool ordering guards; xdr and ingest cleanups...
• d2f530f xdr: compare assets by their XDR encoding, and use Equals for asset equality ...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.