npm smoldot v3.3.0

[lrubasze]

This is to:

• publish smoldot-v3.3.0 npm.
• publish crates smoldot-light v1.3.0, smoldot v2.0.0.

Changes

Added

• Add bitswap_unstable_stream / bitswap_unstable_unstream: fetch many Bitswap CIDs in one subscription, receiving each block (or per-CID error) via bitswap_unstable_streamEvent notifications as it arrives. (#3264)

Changed

• Rename bitswap_v1_get to bitswap_unstable_get (bitswap_v1_get kept as a legacy alias). (#3264)
• Discover peers via proper Kademlia walks, not only nodes with an open consensus stream, so smoldot keeps finding peers even when connected only to bootnodes with no free sync slots. (#3284)
• Start warp sync without waiting for a GrandPa notification, seeding each source's finalized height from its announced best block; especially speeds up WebRTC, where data-channel setup adds latency. (#3256)

Fixed

• Fix a deadlock in the multistream-select task loop. (#3256)

Release process

Also updates docs/RELEASING.md with three fixes found while cutting this release:

• npm lockfiles: discover every file:-linked project (e2e-tests/js, e2e-tests/browser, benchmarks/js) and refresh its lock, instead of hardcoding a list.
• Major crate cross: also bump path-dep version strings (full-node/, light-base/, wasm-node/rust/) when a crate crosses a major (here smoldot → 2.0.0).
• Signing: drop --no-gpg-sign so the release commit is signed.

Lockfiles

benchmarks/Cargo.lock also bumps zombienet-sdk 0.4.11 → 0.4.15 — stale on main (benchmarks isn't built --locked in CI), pulled current while resolving the version bump.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​zombienet-sdk@​0.4.11 ⏵ 0.4.15	-2

View full report