chore(deps): bump bls from v7.0.1 to v8.1.3 in /native/bls_nif

[dependabot]

Bumps bls from v7.0.1 to v8.1.3.

Release notes

Sourced from bls's releases.

Noob-Noob

Summary

⚠️ Lighthouse v8.1.3 is a high-priority patch release with further security-critical fixes atop v8.1.2.

This is a mandatory upgrade for all users running any prior version. All prior Lighthouse releases including v8.1.2 are affected by vulnerabilities. All Lighthouse beacon nodes should be upgraded as soon as possible. There will be CVEs announced for these vulnerabilities in the coming days. For the CVEs patched in v8.1.1 and v8.1.2, please see the Previous Security Advisories section later in these release notes.

We greatly appreciate your diligence in keeping Ethereum secure.

Other Changes

• 🎉 Set the Fulu fork epoch for Gnosis Chain. Slot 27435008, Tue Apr 14 2026 12:06:20 UTC. All Gnosis users must update BN+VC before this time.
• Optimised state root computation to address a performance regression causing 10x slowdowns: sigp/lighthouse#9017. Block processing times are a lot smoother in v8.1.3, which helps with attestation performance.

Breaking Changes

There are no breaking changes in this release. If you are upgrading from prior to v8.1.0 we recommend reading the release notes for v8.1.0, v8.1.1 and v8.1.2.

Update Priority

This release contains several security fixes. All users running prior versions of Lighthouse BN should upgrade immediately.

User Class	Beacon Node	Validator Client
Staking Users	High	High for Gnosis, Low otherwise
Non-Staking Users	High	---

See Update Priorities for more information about this table.

Previous Security Advisories

We can now reveal the vulnerabilities that were patched in Lighthouse v8.1.1 and v8.1.2:

• rust-yamux (v8.1.1): GHSA-4w32-2493-32g7
• rust-yamux (v8.1.2): GHSA-vxx9-2994-q338
• rust-libp2p (v8.1.2): GHSA-gc42-3jg7-rxr2
• quinn-proto (v8.1.2): GHSA-6xvm-j4wr-6v98

All Changes

• Release v8.1.3
• Bump c-kzg
• Bump libp2p
• Bump yamux
• Bump quinn
• Schedule Fulu fork for Gnosis mainnet (#9007)
• Use BTreeMap for state.validators pending updates (#9017)
• Scrap redundant docker builds on releases (#8999)
• Bump rustls and ignore unpatched version due to Warp (#9010)

... (truncated)

Commits

• 176cce5 Release v8.1.3
• 7ca91b8 Bump c-kzg
• dfd715b Bump libp2p
• e5facc2 Bump yamux
• 5d6f787 Bump quinn
• 91c2579 Schedule Fulu fork for Gnosis mainnet (#9007)
• c451ae7 Use BTreeMap for state.validators pending updates (#9017)
• e210533 Scrap redundant docker builds on releases (#8999)
• 8f9c1ca Bump rustls and ignore unpatched version due to Warp (#9010)
• 3deab9b Release v8.1.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)