chore: update deps and bump to v0.0.3 - #66
Conversation
Updates boxo, go-libp2p-kad-dht and go-libp2p to their latest releases. go-libp2p v0.49.0 pulls webtransport-go v0.11.1, which fixes CVE-2026-57497 (memory exhaustion from buffered unknown capsules). - boxo v0.41.0 -> v0.42.1 - go-libp2p-kad-dht v0.41.0 -> v0.42.1 - go-libp2p v0.48.0 -> v0.49.0 - dht_test: kad-dht v0.42.0 dropped the lifecycle context from constructors, so dht.New no longer takes a ctx
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #66 +/- ##
=======================================
Coverage 24.47% 24.47%
=======================================
Files 7 7
Lines 568 568
=======================================
Hits 139 139
Misses 390 390
Partials 39 39 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
|
Suggested tag:
Cutting a Release (and modifying code files)This PR is modifying both Automatically created GitHub ReleaseA draft GitHub Release has been created. |
Dependency update ahead of the next release:
kad-dht v0.42.0 dropped the lifecycle context from its constructors, so the
dht.Newcall inlib/dht_test.goloses itsctxargument. That is the only code change the updates needed, so just shipping as-is.