Release v0.49.0 - #3531
Merged
Merged
Conversation
sukunrt
force-pushed
the
release-v0490
branch
3 times, most recently
from
July 27, 2026 17:18
893aed5 to
ba6ff9c
Compare
lidel
approved these changes
Jul 27, 2026
lidel
left a comment
lidel
left a comment
Member
There was a problem hiding this comment.
LGTM.
@sukunrt Interop will stay red without the .github/workflows/interop-test.yml change from #3532: the webtransport-go v0.11.1 bump stops go-libp2p-head dialing go-v0.47 and go-v0.48 over WebTransport. Rationale and evidence are in that PR. Probably easiest to merge it first and rebase, or cherry-pick 9d53e84.
|
Suggested tag: Changes in configuration file(s): diff --git a/go.mod b/go.mod
index 709e0f01..260f00d9 100644
--- a/go.mod
+++ b/go.mod
@@ -52,17 +52,18 @@ require (
github.com/pion/webrtc/v4 v4.1.2
github.com/prometheus/client_golang v1.22.0
github.com/prometheus/client_model v0.6.2
- github.com/quic-go/quic-go v0.59.0
- github.com/quic-go/webtransport-go v0.10.0
+ github.com/quic-go/quic-go v0.60.0
+ github.com/quic-go/webtransport-go v0.11.1
github.com/stretchr/testify v1.11.1
go.uber.org/fx v1.24.0
go.uber.org/goleak v1.3.0
go.uber.org/mock v0.5.2
- golang.org/x/crypto v0.48.0
- golang.org/x/sync v0.19.0
- golang.org/x/sys v0.41.0
+ golang.org/x/crypto v0.51.0
+ golang.org/x/net v0.55.0
+ golang.org/x/sync v0.20.0
+ golang.org/x/sys v0.45.0
golang.org/x/time v0.12.0
- golang.org/x/tools v0.41.0
+ golang.org/x/tools v0.44.0
google.golang.org/protobuf v1.36.6
)
@@ -100,10 +101,9 @@ require (
go.uber.org/multierr v1.11.0 // indirect
go.uber.org/zap v1.27.0 // indirect
golang.org/x/exp v0.0.0-20250606033433-dcc06ee1d476 // indirect
- golang.org/x/mod v0.32.0 // indirect
- golang.org/x/net v0.50.0 // indirect
- golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2 // indirect
- golang.org/x/text v0.34.0 // indirect
+ golang.org/x/mod v0.35.0 // indirect
+ golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa // indirect
+ golang.org/x/text v0.37.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
lukechampine.com/blake3 v1.4.1 // indirect
)diff --git a/examples/go.mod b/examples/go.mod
index 1e5e5315..3178379d 100644
--- a/examples/go.mod
+++ b/examples/go.mod
@@ -1,42 +1,36 @@
module github.com/libp2p/go-libp2p/examples
-go 1.24
+go 1.25.7
require (
- github.com/caddyserver/certmagic v0.21.6
+ github.com/caddyserver/certmagic v0.25.3
github.com/gogo/protobuf v1.3.2
github.com/google/uuid v1.6.0
- github.com/ipfs/go-datastore v0.6.0
- github.com/ipfs/go-log/v2 v2.5.1
- github.com/ipshipyard/p2p-forge v0.5.0
- github.com/libp2p/go-libp2p v0.41.1
+ github.com/ipfs/go-datastore v0.9.1
+ github.com/ipfs/go-log/v2 v2.9.2
+ github.com/ipshipyard/p2p-forge v0.9.1
+ github.com/libp2p/go-libp2p v0.48.0
github.com/libp2p/go-libp2p-kad-dht v0.28.1
- github.com/multiformats/go-multiaddr v0.15.0
- github.com/prometheus/client_golang v1.21.1
+ github.com/multiformats/go-multiaddr v0.16.1
+ github.com/prometheus/client_golang v1.23.2
)
require (
+ filippo.io/bigmod v0.1.1-0.20260103110540-f8a47775ebe5 // indirect
+ filippo.io/keygen v0.0.0-20260114151900-8e2790ea4c5b // indirect
github.com/benbjohnson/clock v1.3.5 // indirect
github.com/beorn7/perks v1.0.1 // indirect
- github.com/caddyserver/zerossl v0.1.3 // indirect
+ github.com/caddyserver/zerossl v0.1.5 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
- github.com/containerd/cgroups v1.1.0 // indirect
- github.com/coreos/go-systemd/v22 v22.5.0 // indirect
- github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/davidlazar/go-crypto v0.0.0-20200604182044-b73af7476f6c // indirect
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
- github.com/docker/go-units v0.5.0 // indirect
- github.com/elastic/gosigar v0.14.3 // indirect
+ github.com/dunglas/httpsfv v1.1.0 // indirect
github.com/flynn/noise v1.1.0 // indirect
- github.com/francoispqt/gojay v1.2.13 // indirect
- github.com/go-logr/logr v1.4.2 // indirect
+ github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
- github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
- github.com/godbus/dbus/v5 v5.1.0 // indirect
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
github.com/google/gopacket v1.1.19 // indirect
- github.com/google/pprof v0.0.0-20250208200701-d0013a598941 // indirect
- github.com/gorilla/websocket v1.5.3 // indirect
+ github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
github.com/hashicorp/golang-lru v1.0.2 // indirect
@@ -46,11 +40,9 @@ require (
github.com/ipld/go-ipld-prime v0.21.0 // indirect
github.com/jackpal/go-nat-pmp v1.0.2 // indirect
github.com/jbenet/go-temp-err-catcher v0.1.0 // indirect
- github.com/jbenet/goprocess v0.1.4 // indirect
- github.com/klauspost/compress v1.18.0 // indirect
- github.com/klauspost/cpuid/v2 v2.2.10 // indirect
- github.com/koron/go-ssdp v0.0.5 // indirect
- github.com/libdns/libdns v0.2.2 // indirect
+ github.com/klauspost/cpuid/v2 v2.3.0 // indirect
+ github.com/koron/go-ssdp v0.0.6 // indirect
+ github.com/libdns/libdns v1.1.1 // indirect
github.com/libp2p/go-buffer-pool v0.1.0 // indirect
github.com/libp2p/go-cidranger v1.1.0 // indirect
github.com/libp2p/go-flow-metrics v0.2.0 // indirect
@@ -59,84 +51,80 @@ require (
github.com/libp2p/go-libp2p-record v0.2.0 // indirect
github.com/libp2p/go-libp2p-routing-helpers v0.7.4 // indirect
github.com/libp2p/go-msgio v0.3.0 // indirect
- github.com/libp2p/go-netroute v0.2.2 // indirect
+ github.com/libp2p/go-netroute v0.4.0 // indirect
github.com/libp2p/go-reuseport v0.4.0 // indirect
- github.com/libp2p/go-yamux/v5 v5.0.0 // indirect
+ github.com/libp2p/go-yamux/v5 v5.0.1 // indirect
github.com/libp2p/zeroconf/v2 v2.2.0 // indirect
github.com/marten-seemann/tcp v0.0.0-20210406111302-dfbc87cc63fd // indirect
- github.com/mattn/go-isatty v0.0.20 // indirect
- github.com/mholt/acmez/v3 v3.0.0 // indirect
- github.com/miekg/dns v1.1.64 // indirect
+ github.com/mattn/go-isatty v0.0.22 // indirect
+ github.com/mholt/acmez/v3 v3.1.6 // indirect
+ github.com/miekg/dns v1.1.72 // indirect
github.com/mikioh/tcpinfo v0.0.0-20190314235526-30a79bb1804b // indirect
github.com/mikioh/tcpopt v0.0.0-20190314235656-172688c1accc // indirect
github.com/minio/sha256-simd v1.0.1 // indirect
- github.com/mr-tron/base58 v1.2.0 // indirect
+ github.com/mr-tron/base58 v1.3.0 // indirect
github.com/multiformats/go-base32 v0.1.0 // indirect
github.com/multiformats/go-base36 v0.2.0 // indirect
- github.com/multiformats/go-multiaddr-dns v0.4.1 // indirect
+ github.com/multiformats/go-multiaddr-dns v0.5.0 // indirect
github.com/multiformats/go-multiaddr-fmt v0.1.0 // indirect
- github.com/multiformats/go-multibase v0.2.0 // indirect
- github.com/multiformats/go-multicodec v0.9.0 // indirect
+ github.com/multiformats/go-multibase v0.3.0 // indirect
+ github.com/multiformats/go-multicodec v0.9.1 // indirect
github.com/multiformats/go-multihash v0.2.3 // indirect
- github.com/multiformats/go-multistream v0.6.0 // indirect
+ github.com/multiformats/go-multistream v0.6.1 // indirect
github.com/multiformats/go-varint v0.0.7 // indirect
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
- github.com/onsi/ginkgo/v2 v2.22.2 // indirect
- github.com/opencontainers/runtime-spec v1.2.0 // indirect
github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58 // indirect
github.com/pion/datachannel v1.5.10 // indirect
- github.com/pion/dtls/v2 v2.2.12 // indirect
- github.com/pion/dtls/v3 v3.0.4 // indirect
- github.com/pion/ice/v4 v4.0.8 // indirect
- github.com/pion/interceptor v0.1.37 // indirect
- github.com/pion/logging v0.2.3 // indirect
+ github.com/pion/dtls/v3 v3.1.2 // indirect
+ github.com/pion/ice/v4 v4.0.10 // indirect
+ github.com/pion/interceptor v0.1.40 // indirect
+ github.com/pion/logging v0.2.4 // indirect
github.com/pion/mdns/v2 v2.0.7 // indirect
github.com/pion/randutil v0.1.0 // indirect
- github.com/pion/rtcp v1.2.15 // indirect
- github.com/pion/rtp v1.8.11 // indirect
- github.com/pion/sctp v1.8.37 // indirect
- github.com/pion/sdp/v3 v3.0.10 // indirect
- github.com/pion/srtp/v3 v3.0.4 // indirect
- github.com/pion/stun v0.6.1 // indirect
- github.com/pion/stun/v3 v3.0.0 // indirect
- github.com/pion/transport/v2 v2.2.10 // indirect
+ github.com/pion/rtcp v1.2.16 // indirect
+ github.com/pion/rtp v1.8.19 // indirect
+ github.com/pion/sctp v1.8.39 // indirect
+ github.com/pion/sdp/v3 v3.0.18 // indirect
+ github.com/pion/srtp/v3 v3.0.6 // indirect
+ github.com/pion/stun/v3 v3.1.1 // indirect
github.com/pion/transport/v3 v3.0.7 // indirect
- github.com/pion/turn/v4 v4.0.0 // indirect
- github.com/pion/webrtc/v4 v4.0.10 // indirect
- github.com/pkg/errors v0.9.1 // indirect
+ github.com/pion/transport/v4 v4.0.1 // indirect
+ github.com/pion/turn/v4 v4.0.2 // indirect
+ github.com/pion/webrtc/v4 v4.1.2 // indirect
github.com/polydawn/refmt v0.89.0 // indirect
- github.com/prometheus/client_model v0.6.1 // indirect
- github.com/prometheus/common v0.62.0 // indirect
- github.com/prometheus/procfs v0.15.1 // indirect
- github.com/quic-go/qpack v0.5.1 // indirect
- github.com/quic-go/quic-go v0.50.1 // indirect
- github.com/quic-go/webtransport-go v0.8.1-0.20241018022711-4ac2c9250e66 // indirect
- github.com/raulk/go-watchdog v1.3.0 // indirect
+ github.com/prometheus/client_model v0.6.2 // indirect
+ github.com/prometheus/common v0.67.5 // indirect
+ github.com/prometheus/procfs v0.19.2 // indirect
+ github.com/quic-go/qpack v0.6.0 // indirect
+ github.com/quic-go/quic-go v0.59.0 // indirect
+ github.com/quic-go/webtransport-go v0.10.0 // indirect
github.com/spaolacci/murmur3 v1.1.0 // indirect
github.com/whyrusleeping/go-keyspace v0.0.0-20160322163242-5b898ac5add1 // indirect
github.com/wlynxg/anet v0.0.5 // indirect
github.com/zeebo/blake3 v0.2.4 // indirect
go.opencensus.io v0.24.0 // indirect
- go.opentelemetry.io/auto/sdk v1.1.0 // indirect
- go.opentelemetry.io/otel v1.33.0 // indirect
- go.opentelemetry.io/otel/metric v1.33.0 // indirect
- go.opentelemetry.io/otel/trace v1.33.0 // indirect
- go.uber.org/dig v1.18.0 // indirect
- go.uber.org/fx v1.23.0 // indirect
- go.uber.org/mock v0.5.0 // indirect
+ go.opentelemetry.io/auto/sdk v1.2.1 // indirect
+ go.opentelemetry.io/otel v1.43.0 // indirect
+ go.opentelemetry.io/otel/metric v1.43.0 // indirect
+ go.opentelemetry.io/otel/trace v1.43.0 // indirect
+ go.uber.org/dig v1.19.0 // indirect
+ go.uber.org/fx v1.24.0 // indirect
+ go.uber.org/mock v0.6.0 // indirect
go.uber.org/multierr v1.11.0 // indirect
- go.uber.org/zap v1.27.0 // indirect
+ go.uber.org/zap v1.28.0 // indirect
go.uber.org/zap/exp v0.3.0 // indirect
- golang.org/x/crypto v0.35.0 // indirect
- golang.org/x/exp v0.0.0-20250218142911-aa4b98e5adaa // indirect
- golang.org/x/mod v0.23.0 // indirect
- golang.org/x/net v0.35.0 // indirect
- golang.org/x/sync v0.11.0 // indirect
- golang.org/x/sys v0.30.0 // indirect
- golang.org/x/text v0.22.0 // indirect
- golang.org/x/time v0.8.0 // indirect
- golang.org/x/tools v0.30.0 // indirect
- gonum.org/v1/gonum v0.15.1 // indirect
- google.golang.org/protobuf v1.36.6 // indirect
- lukechampine.com/blake3 v1.4.0 // indirect
+ go.yaml.in/yaml/v2 v2.4.4 // indirect
+ golang.org/x/crypto v0.50.0 // indirect
+ golang.org/x/exp v0.0.0-20260209203927-2842357ff358 // indirect
+ golang.org/x/mod v0.35.0 // indirect
+ golang.org/x/net v0.53.0 // indirect
+ golang.org/x/sync v0.20.0 // indirect
+ golang.org/x/sys v0.43.0 // indirect
+ golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa // indirect
+ golang.org/x/text v0.36.0 // indirect
+ golang.org/x/time v0.15.0 // indirect
+ golang.org/x/tools v0.44.0 // indirect
+ gonum.org/v1/gonum v0.17.0 // indirect
+ google.golang.org/protobuf v1.36.11 // indirect
+ lukechampine.com/blake3 v1.4.1 // indirect
)
diff --git a/test-plans/go.mod b/test-plans/go.mod
index 888ab4dd..6b03313f 100644
--- a/test-plans/go.mod
+++ b/test-plans/go.mod
@@ -73,8 +73,8 @@ require (
github.com/prometheus/common v0.64.0 // indirect
github.com/prometheus/procfs v0.16.1 // indirect
github.com/quic-go/qpack v0.6.0 // indirect
- github.com/quic-go/quic-go v0.59.0 // indirect
- github.com/quic-go/webtransport-go v0.10.0 // indirect
+ github.com/quic-go/quic-go v0.60.0 // indirect
+ github.com/quic-go/webtransport-go v0.11.1 // indirect
github.com/spaolacci/murmur3 v1.1.0 // indirect
github.com/wlynxg/anet v0.0.5 // indirect
go.uber.org/dig v1.19.0 // indirect
@@ -82,16 +82,16 @@ require (
go.uber.org/mock v0.5.2 // indirect
go.uber.org/multierr v1.11.0 // indirect
go.uber.org/zap v1.27.0 // indirect
- golang.org/x/crypto v0.48.0 // indirect
+ golang.org/x/crypto v0.51.0 // indirect
golang.org/x/exp v0.0.0-20250606033433-dcc06ee1d476 // indirect
- golang.org/x/mod v0.32.0 // indirect
- golang.org/x/net v0.50.0 // indirect
- golang.org/x/sync v0.19.0 // indirect
- golang.org/x/sys v0.41.0 // indirect
- golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2 // indirect
- golang.org/x/text v0.34.0 // indirect
+ golang.org/x/mod v0.35.0 // indirect
+ golang.org/x/net v0.55.0 // indirect
+ golang.org/x/sync v0.20.0 // indirect
+ golang.org/x/sys v0.45.0 // indirect
+ golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa // indirect
+ golang.org/x/text v0.37.0 // indirect
golang.org/x/time v0.12.0 // indirect
- golang.org/x/tools v0.41.0 // indirect
+ golang.org/x/tools v0.44.0 // indirect
google.golang.org/protobuf v1.36.6 // indirect
lukechampine.com/blake3 v1.4.1 // indirect
)
Cutting a Release (and modifying code files)This PR is modifying both Automatically created GitHub ReleaseA draft GitHub Release has been created. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates deps and cuts a new release.
Not upgrading the webrtc stack since that's causing a bunch of regressions. There's one where connection establisment takes 200-400ms because of changes in the dialer logic. There's another where the connection tear down takes 400ms because of changes in the sctp connection abort logic. We can first fix these in pion and make a new release for go-libp2p.
Keeps quic-go at v0.60 since v0.61 isn't compatible with latest webtransport-go