deps(go): bump the libp2p group in /sdn-server with 2 updates by dependabot[bot] · Pull Request #6 · DigitalArsenal/space-data-network

dependabot · 2026-02-02T05:00:12Z

Bumps the libp2p group in /sdn-server with 2 updates: github.com/ipfs/go-log/v2 and github.com/libp2p/go-libp2p-kad-dht.

Updates github.com/ipfs/go-log/v2 from 2.9.0 to 2.9.1

Release notes

Sourced from github.com/ipfs/go-log/v2's releases.

v2.9.1

What's Changed

update go.uber.org/zap to v1.27.1 by @gammazero in ipfs/go-log#178

Full Changelog: ipfs/go-log@v2.9.0...v2.9.1

Commits

3fc6f96 new version (#179)
b84e9b5 update go.uber.org/zap to v1.27.1 (#178)
See full diff in compare view

Updates github.com/libp2p/go-libp2p-kad-dht from 0.36.0 to 0.37.1

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.37.1

What's Changed

fix(routing): add per-peer timeouts for PutValue and Provide by @lidel in libp2p/go-libp2p-kad-dht#1222

Update dependencies by @gammazero in libp2p/go-libp2p-kad-dht#1223

replace multierr with errors.Join by @gammazero in libp2p/go-libp2p-kad-dht#1224

Full Changelog: libp2p/go-libp2p-kad-dht@v0.37.0...v0.37.1

v0.37.0

[!NOTE] This release was brought to you by the Shipyard team.

Overview

This is a minor release focused on dependency updates and bug fixes. The most significant changes are:

Breaking change: The deprecated providers/ package has been removed. Users still importing from providers/ must migrate to records/.

Dependency update: Upgraded to go-libp2p v0.46.

Provider bug fixes: Several fixes to improve provider system stability, including proper handling of peers during keyspace exploration.

This release contains no major feature additions but improves overall reliability of the DHT implementation.

What's Changed

chore: bump go-libp2p to v0.46 by @guillaumemichel in libp2p/go-libp2p-kad-dht#1209

tests: fix flaky TestHandleRemotePeerProtocolChanges by @guillaumemichel in libp2p/go-libp2p-kad-dht#1212

tests: fix flaky TestOptimisticProvide by @guillaumemichel in libp2p/go-libp2p-kad-dht#1213

fix(records): clone addresses received from peerstore by @guillaumemichel in libp2p/go-libp2p-kad-dht#1210

fix(provider): don't discard peers if they all share CPL during exploration by @guillaumemichel in libp2p/go-libp2p-kad-dht#1216

chore: remove deprecated providers pkg by @guillaumemichel in libp2p/go-libp2p-kad-dht#1211

fix(provider): close worker pool before wg.Wait() by @lidel in libp2p/go-libp2p-kad-dht#1218

fix(provider): hold scheduleLk when reading schedule.Size() in test by @lidel in libp2p/go-libp2p-kad-dht#1219

fix(provider): keyspace exploration should succeed with a single peer by @guillaumemichel in libp2p/go-libp2p-kad-dht#1220

Full Changelog: libp2p/go-libp2p-kad-dht@v0.36.0...v0.37.0

Commits

b73c2d0 new version (#1225)
1a1e249 replace multierr with errors.Join (#1224)
bb7f4ce Update dependencies (#1223)
77a76e9 fix(routing): add per-peer timeouts for PutValue and Provide (#1222)
23423e3 chore: release v0.37.0 (#1221)
087717c fix(provider): keyspace exploration should succeed with a single peer (#1220)
015f632 fix(provider): hold scheduleLk when reading schedule.Size() in test (#1219)
6fee38f fix(provider): close worker pool before wg.Wait() (#1218)
e8e7cf5 chore: remove deprecated providers pkg (#1211)
0ad6ca5 fix(provider): don't discard peers if they all share CPL during exploration (...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…config

…ection String.replace() with a string replacement interprets $& as "insert the matched substring". The minified JS bundle contains many $& patterns (variable $ + bitwise &), causing the original <script src="..."></script> tag to be re-injected throughout the inlined code. This breaks the HTML by inserting </script> tags mid-stream, leading to SyntaxError: Identifier '$A' has already been declared. Using an arrow function as the replacement argument disables special pattern interpretation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…admin API - WASI plugin runtime (wasiplugin/runtime.go, httpbridge.go) with Wazero host imports - OrbPro license key broker plugin (wasmlicenseplugin/plugin.go) with P-256 ECDH - Plugin manager with UIProvider interface and manifest API (/api/v1/plugins/manifest) - Session-based auth system (handler, middleware, sessions, userstore, login page) - Admin peers API (internal/peers/admin.go) - WebUI Plugins page with card grid, iframe plugin UI, and navbar entry - JS SDK license client (sdn-js/src/license.ts) and HD wallet crypto additions - SpaceAware OrbPro loader updates for IPFS-path compatibility - Deploy script enhancements for license service provisioning Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Security: Switch sdn-server to hardened Emscripten WASI binary with Crypto++ constant-time operations, HMAC-DRBG entropy mixing, SecureAllocator, and optional FIPS mode. Fix Ed25519 sign/verify parameter order and mnemonic error code handling for hardened build API. Add hd_secure_dealloc support (wipe-before-free). Implement SLIP-10 Ed25519 derivation in pure Go. Storefront: Add payment chain verification, delivery hardening, and expanded store API with proper test coverage. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Update test fixtures to include uppercase characters as required by the password validation policy (12+ chars, uppercase, lowercase, digit). Add scripts/ci-local.sh to run CI checks locally when GitHub Actions minutes are exhausted, with pre-push hook for automatic validation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

… BIP-44 derivation - Fix /admin → /admin/ redirect so React SPA relative asset paths resolve correctly (root cause of CSS text/plain and JS 404 errors in production) - Change HD wallet derivation from custom coin type 1957 to standard BIP-44 Bitcoin (m/44'/0'/...) across Go server, JS SDK, and documentation - Add xpub-based TOFU auth with SDN extended public key format - Add frontend manager for admin-uploadable public homepage - Add local dev environment: config/dev.yaml, scripts/dev-local.sh, Dockerfile.dev, and docker-compose.dev.yaml with test wallet - Add pre-commit and post-commit git hooks for CI and auto-deploy Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Add demo WASM module (demo.c) with exported computation functions - Add build-demo-wasm.js encryption script (AES-256-GCM + per-domain KEK wrapper) - Add server-side demo API (GET /demo, /api/v1/demo/payload, /api/v1/demo/info) - Add browser-side P-256 ECDH key exchange demo with SubtleCrypto (zero deps) - Re-enable HTTP key exchange endpoints on the OrbPro key broker plugin - Add IPFS pinning support for demo payload (optional, via ipfs_api_url config) - Fix docs.html mobile responsiveness (overflow-x, word-break, responsive breakpoints) - Source demo/.demo-env in dev-local.sh for key broker secrets - Add demo secrets to .gitignore Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add overflow containment and white-space: nowrap throughout the wallet network card hierarchy so long blockchain addresses and derivation paths properly truncate with ellipsis instead of overflowing the viewport. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Replace inline flex styles with .arch-row-split class that switches from side-by-side to column layout at the 734px mobile breakpoint. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Bumps the libp2p group in /sdn-server with 2 updates: [github.com/ipfs/go-log/v2](https://github.com/ipfs/go-log) and [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht). Updates `github.com/ipfs/go-log/v2` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/ipfs/go-log/releases) - [Commits](ipfs/go-log@v2.9.0...v2.9.1) Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.36.0 to 0.37.1 - [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases) - [Commits](libp2p/go-libp2p-kad-dht@v0.36.0...v0.37.1) --- updated-dependencies: - dependency-name: github.com/ipfs/go-log/v2 dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: libp2p - dependency-name: github.com/libp2p/go-libp2p-kad-dht dependency-version: 0.37.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: libp2p ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-02-24T13:40:06Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

TJKoury and others added 30 commits February 28, 2024 19:32

Initial commit

2972795

updates

60d649a

updates

c791bef

update readme

de761f9

updates to arch

a9c3066

config

7b58922

port

2917436

update channel

45a0d36

update to use air

5d10cc9

update to method

32223f0

update to method

b05fd90

changed to variadic

ab05473

update deps

12cbf8d

updated deps

52399b2

address generation working

6a834d6

reorg

131257e

added test

300e7c9

update tests

763454b

setup

54ae350

update test

d756376

update test for database

821f6b0

added protocol test

472a4aa

pnm protocol working

0e295f9

response formatting

19966fc

remove file

8c5281b

remove tmp files

140cb54

remove tmp files

c8e4e9e

pnm protocol working

96f3541

start cli

bece201

stealth addr

091e162

TJKoury and others added 16 commits February 11, 2026 11:54

feat: add native admin TLS for direct Cloudflare origin

abba6f0

feat: default data APIs to flatbuffers stream with json fallback

35776d4

feat(sdn-js): integrate flatsql WASI runtime

e48f2e0

feat: add legacy sqlite import and indexed query updates

12824f7

feat: add SpaceAware single-file homepage package and server landing …

ba1d66f

…config

feat: migrate SpaceAware to Svelte 5 and lock admin routes

06873d3

fix: load OrbPro via static Build assets and redeploy path

9328ec0

chore: provision and verify license service during deploy

a190363

feat: make spaceaware OrbPro loading IPFS-path compatible

22d1fe8

feat: pluginize license service and runtime route registration

e893f11

Harden SDN auth and API surfaces

187722f

feat: add auth, trust, and wallet flows

315cf52

dependabot Bot force-pushed the dependabot/go_modules/sdn-server/libp2p-42e13299b8 branch from 2449479 to 9a16c08 Compare February 14, 2026 20:20

TJKoury and others added 6 commits February 15, 2026 11:51

Stack signing/encryption key boxes vertically on mobile

c373834

Replace inline flex styles with .arch-row-split class that switches from side-by-side to column layout at the 734px mobile breakpoint. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Remove identity derivation diagram section from landing page

e14d5ae

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

dependabot Bot force-pushed the dependabot/go_modules/sdn-server/libp2p-42e13299b8 branch 2 times, most recently from 7de7db5 to e1f5797 Compare February 23, 2026 04:58

TJKoury closed this Feb 24, 2026

TJKoury force-pushed the main branch from 4f0cabc to e284137 Compare February 24, 2026 13:40

TJKoury force-pushed the dependabot/go_modules/sdn-server/libp2p-42e13299b8 branch from e1f5797 to 7e60473 Compare February 24, 2026 13:40

dependabot Bot deleted the dependabot/go_modules/sdn-server/libp2p-42e13299b8 branch February 24, 2026 13:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps(go): bump the libp2p group in /sdn-server with 2 updates - #6

deps(go): bump the libp2p group in /sdn-server with 2 updates#6
dependabot[bot] wants to merge 246 commits into
mainfrom
dependabot/go_modules/sdn-server/libp2p-42e13299b8

dependabot Bot commented on behalf of github Feb 2, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Feb 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.9.1

What's Changed

v0.37.1

What's Changed

v0.37.0

Overview

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Feb 2, 2026 •

edited

Loading