Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps the libp2p-ecosystem group with 1 update: github.com/libp2p/go-libp2p-kad-dht.

Updates github.com/libp2p/go-libp2p-kad-dht from 0.34.0 to 0.35.1

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.35.1

Provider Memory Optimizations

Memory optimizations for the provider.

What's Changed

Full Changelog: libp2p/go-libp2p-kad-dht@v0.35.0...v0.35.1

v0.35.0

[!NOTE] This release was brought to you by the Shipyard team.

🚀 Introducing the New Provider Package

We're excited to introduce the new provider package - a complete rethinking of content providing works in the DHT, using the Reprovide Sweep technique. Say goodbye to manual reprovide management! The provider package now handles both initial provides and periodic reprovides automatically.

🎯 Why This Matters

This package replaces the boxo provider with a significantly more efficient implementation that addresses key performance bottlenecks:

Intelligent Batching 🧠
Instead of providing records randomly, we now batch provides by keyspace distance. This means fewer DHT lookups, faster provides, and consistent reprovide scheduling.

Smooth Resource Usage 📊
Reprovides are evenly distributed over time rather than creating periodic traffic spikes. Your node's resource consumption is now predictable and steady.

⚠️ Early Access

This is the initial release of the provider package. While fully functional, we're continuing to add features and refine the API in upcoming releases. Expect interface changes as we iterate based on community feedback.

🔜 What's Next

Stay tuned for additional provider features in future releases. Check the provider package documentation for usage examples and current capabilities.

What's Changed

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the libp2p-ecosystem group with 1 update: [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht).


Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.34.0 to 0.35.1
- [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases)
- [Commits](libp2p/go-libp2p-kad-dht@v0.34.0...v0.35.1)

---
updated-dependencies:
- dependency-name: github.com/libp2p/go-libp2p-kad-dht
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libp2p-ecosystem
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 1, 2025
@github-project-automation github-project-automation bot moved this to 📌 Triage in FilOz Nov 1, 2025
@rvagg rvagg added the skip/changelog This change does not require CHANGELOG.md update label Nov 7, 2025
@github-project-automation github-project-automation bot moved this from 📌 Triage to ✔️ Approved by reviewer in FilOz Nov 7, 2025
@rvagg rvagg merged commit 93f41ba into master Nov 7, 2025
104 of 106 checks passed
@rvagg rvagg deleted the dependabot/go_modules/libp2p-ecosystem-5b01c6ccb7 branch November 7, 2025 11:46
@github-project-automation github-project-automation bot moved this from ✔️ Approved by reviewer to 🎉 Done in FilOz Nov 7, 2025
aceppaluni pushed a commit to aceppaluni/lotus that referenced this pull request Dec 2, 2025
…0.35.1 in the libp2p-ecosystem group (filecoin-project#13411)

build(deps): bump github.com/libp2p/go-libp2p-kad-dht

Bumps the libp2p-ecosystem group with 1 update: [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht).


Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.34.0 to 0.35.1
- [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases)
- [Commits](libp2p/go-libp2p-kad-dht@v0.34.0...v0.35.1)

---
updated-dependencies:
- dependency-name: github.com/libp2p/go-libp2p-kad-dht
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libp2p-ecosystem
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file skip/changelog This change does not require CHANGELOG.md update

Projects

Status: 🎉 Done

Development

Successfully merging this pull request may close these issues.

2 participants