build(deps): bump github.com/ethereum/go-ethereum from 1.13.5 to 1.16.4

[dependabot]

Bumps github.com/ethereum/go-ethereum from 1.13.5 to 1.16.4.

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Bioelectric Infusers (v1.16.4)

This release enables the Osaka (Fusaka) fork on testnets. We also enable two blob-parameter only (BPO) forks for the testnets.

• Holesky

  • Osaka at time 1759308480 (2025-10-01 08:48:00 UTC)
  • BPO1 at time 1759800000 (2025-10-07 01:20:00 UTC)
  • BPO2 at time 1760389824 (2025-10-13 21:10:24 UTC)

• Sepolia

  • Osaka at time 1760427360 (2025-10-14 07:36:00 UTC)
  • BPO1 at time 1761017184 (2025-10-21 03:26:24 UTC)
  • BPO2 at time 1761607008 (2025-10-27 23:16:48 UTC)

• Hoodi

  • Osaka at time 1761677592 (2025-10-28 18:53:12 UTC)
  • BPO1 at time 1762365720 (2025-11-05 18:02:00 UTC)
  • BPO2 at time 1762955544 (2025-11-12 13:52:24 UTC)

With BPO1 and BPO2, the blob capacity of these networks will increase as follows:

• BPO1: max blobs/block: 15, target: 10
• BPO2: max blobs/block: 21, target: 14

As of this release, the default block gas limit is set to 60M gas. This is the recommended limit that we, as client authors, feel comfortable with.

CLI commands

• geth snapshot and related commands no longer fail due to not finding the trie journal file. (#32531)
• A regression in geth snapshot dump and geth export-preimages is resolved. (#32650)
• We have added an experimental zkVM 'guest program', keeper, to the source tree. (#32543, #32638, #32736)

RPC

• eth_call and related operations were fixed to not apply the EIP-7825 per-transaction gas limit when executing under Osaka fork rules. (#32641)
• For eth_getLogs and other log filtering operations, it is now possible to configure the number of addresses allowed in the filter using the --rpc.logquerylimit flag. (#32327)
• Starting Geth with the --state.size-tracking option enables collection of precise state size numbers, which can be read using the debug_stateSize endpoint. (#32362)
• The new debug_executionWitness and debug_executionWitnessByHash methods create a block witness for stateless execution. (#32216)

Tracing & ABIGEN

• There is a new CodeChangeV2 hook, with a CodeChangeReason parameter. (#32525, #32535)
• In certain corner-cases related to SELFDESTRUCT, OnBalanceChange was not invoked. (#32526)
• BoundContract in accounts/abi/bind/v2 now exposes an Address method. (#32559)

Core

• The EVM MODEXP precompiled account has seen some optimizations to improve performance for worst-case inputs. We are especially grateful for @​GottfriedHerold's work on improving the underlying math/big library. (#32527, #32553, #32568, #32576)

... (truncated)

Commits

• 41714b4 Merge branch 'master' into release/1.16
• b964b65 version: release go-ethereum v1.16.4 stable
• 0977a02 params: schedule Osaka/BPO1/BPO2 for testnets (#32735)
• 7d8ccdd all: refactor to use builtin max/min (#32694)
• bacc150 core/txpool: add eip2681 check for incoming transactions (#32726)
• ad484fc build: upgrade to execution-spec-tests v5.1.0 (#32742)
• 89158aa core/txpool/blobpool: convert and add one-by-one (#32718)
• 965ffff all: add bpo1 and bpo2 overrides (#32737)
• 7611f35 accounts/abi/bind: fix data race in TestWaitDeployedCornerCases (#32740)
• 1c706d1 accounts/keystore: use ticker to avoid timer allocations (#32732)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)