Skip to content

chore(deps): bump the libp2p-ecosystem group with 3 updates - #11485

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/go_modules/libp2p-ecosystem-1e207fd1fd
Open

dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/go_modules/libp2p-ecosystem-1e207fd1fd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the libp2p-ecosystem group with 3 updates: github.com/libp2p/go-libp2p, github.com/libp2p/go-libp2p-kad-dht and github.com/libp2p/go-libp2p-pubsub.

Updates github.com/libp2p/go-libp2p from 0.50.0 to 0.51.0

Release notes

Sourced from github.com/libp2p/go-libp2p's releases.

v0.51.0

What's Changed

Small release bumping quic-go.

Full Changelog: libp2p/go-libp2p@v0.50.0...v0.51.0

Commits

Updates github.com/libp2p/go-libp2p-kad-dht from 0.42.2 to 0.43.0

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.43.0

Highlights

Routing table persists across restarts (#1299)

The DHT now saves its routing table peers, with their addresses, to its Datastore, and dials them the next time its routing table is empty. A restarting node no longer depends only on the bootstrap peers to rejoin the network: a node joining the Amino DHT reached 100 routing table peers in about 2s instead of 11–22s, with fewer file descriptors and connections.

  • RoutingTablePersistence(interval) sets how often the snapshot is saved (hourly by default, and once more on Close). RoutingTablePersistence(0) turns persistence off.
  • BootstrapOrder picks what the DHT dials first when its routing table is empty: BootstrapFirst (default, saved peers as a fallback), PersistedFirst, or Concurrent.
  • Saved peers are only dialed. They join the routing table through the usual checks and IP diversity limits.
  • dual turns persistence off for the LAN DHT. fullrt is unchanged.

Behavior changes: persistence is on by default and writes one key, /kad-dht/routing-table/<protocol ID>, to the Datastore the DHT is given. A DHT with no bootstrap peers but a datastore that survives restarts now dials its saved peers after a restart, where it used to dial nothing. Use RoutingTablePersistence(0) to keep the old behavior.

What's Changed

Full Changelog: libp2p/go-libp2p-kad-dht@v0.42.2...v0.43.0

Commits

Updates github.com/libp2p/go-libp2p-pubsub from 0.17.0 to 0.19.0

Release notes

Sourced from github.com/libp2p/go-libp2p-pubsub's releases.

v0.19.0

What's Changed

Small release adding a tracer hook to better track outbound bandwidth.

Breaking Change

  • This release adds a method to the RawTracer interface
	SendRPCCompleted(rpc *RPC, p peer.ID, writeDuration time.Duration)

Implementations of RawTracer interface will have to implement this method. See #736 for details.

Full Changelog: libp2p/go-libp2p-pubsub@v0.18.0...v0.19.0

v0.18.0

What's Changed

Full Changelog: libp2p/go-libp2p-pubsub@v0.17.0...v0.18.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the libp2p-ecosystem group with 3 updates: [github.com/libp2p/go-libp2p](https://github.com/libp2p/go-libp2p), [github.com/libp2p/go-libp2p-kad-dht](https://github.com/libp2p/go-libp2p-kad-dht) and [github.com/libp2p/go-libp2p-pubsub](https://github.com/libp2p/go-libp2p-pubsub).


Updates `github.com/libp2p/go-libp2p` from 0.50.0 to 0.51.0
- [Release notes](https://github.com/libp2p/go-libp2p/releases)
- [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md)
- [Commits](libp2p/go-libp2p@v0.50.0...v0.51.0)

Updates `github.com/libp2p/go-libp2p-kad-dht` from 0.42.2 to 0.43.0
- [Release notes](https://github.com/libp2p/go-libp2p-kad-dht/releases)
- [Commits](libp2p/go-libp2p-kad-dht@v0.42.2...v0.43.0)

Updates `github.com/libp2p/go-libp2p-pubsub` from 0.17.0 to 0.19.0
- [Release notes](https://github.com/libp2p/go-libp2p-pubsub/releases)
- [Commits](libp2p/go-libp2p-pubsub@v0.17.0...v0.19.0)

---
updated-dependencies:
- dependency-name: github.com/libp2p/go-libp2p
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libp2p-ecosystem
- dependency-name: github.com/libp2p/go-libp2p-kad-dht
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libp2p-ecosystem
- dependency-name: github.com/libp2p/go-libp2p-pubsub
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libp2p-ecosystem
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 1, 2026 21:33
@socket-security

socket-security Bot commented Nov 1, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​libp2p/​go-libp2p@​v0.50.0 ⏵ v0.51.07410010075100
Updatedgithub.com/​libp2p/​go-libp2p-pubsub@​v0.17.0 ⏵ v0.19.098 +1100100100100
Updatedgithub.com/​libp2p/​go-libp2p-kad-dht@​v0.42.2 ⏵ v0.43.0100 +1100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants