build(deps): bump the all-dependencies group with 5 updates

[dependabot]

Bumps the all-dependencies group with 5 updates:

Package	From	To
github.com/ipfs/boxo	0.29.1	0.30.0
github.com/ipfs/go-block-format	0.2.0	0.2.1
github.com/libp2p/go-libp2p-kad-dht	0.31.0	0.32.0
go.sia.tech/jape	0.13.1	0.14.0
go.sia.tech/renterd/v2	2.0.2-0.20250429133416-0719be4614ed	2.1.0-beta.1

Updates github.com/ipfs/boxo from 0.29.1 to 0.30.0

Release notes

Sourced from github.com/ipfs/boxo's releases.

v0.30.0

What's Changed

Added

• Control over UnixFS DAG Width
  • We have made some changes to allow setting custom max width of UnixFS DAGs. This enables users to produce DAGs that follow current and future community conventions (see the related discussion).
  • ipld/unixfs: DagModifier now allows specifying file DAG Width (MaxLinks) #898
  • ipld/unixfs/io/directory: We have made some changes to unixfs directory tooling #906
    • We have exposed creator methods for new BasicDirectory and HAMTDirectory, that complement the existing NewDirectory() which creates dynamic directories.
    • We have added WithCidBuilder(...), WithMaxLinks(...), WithMaxHAMTFanout(...) and WithStat(...) as options to these new methods so that empty directories can be initilized as wished from the get-go.
    • WithMaxLinks(...) and WithMaxHAMTFanout(...) are new options that allow to set a limit to the number of children that a directory DAG node can have. For details on what they exactly do for each of the directory type, please check the documentation.
  • mfs supports as well the new MaxLinks and MaxHAMTFanout options. They have been made part of the MkdirOptions object and the methods NewEmptyDirectory() and NewEmptyRoot() have been added to facilitate the initialization of MFS objects. #906
• provider: added support for walking partial DAGs in offline mode #905
  • a KeyChanFunc that traverses DAGs from a given root (NewDAGProvider).
  • a KeyChanFunc that buffers all the CIDs in memory from another KeyChanFunc (NewBufferedProvider).
  • fetcher/impl/blockservice: new option SkipNotFound for the IPLD fetcher. It will skip not found nodes when traversing the DAG. This allows offline traversal of DAGs when using, for example, an offline blockservice.
  • This enables use case of providing lazy-loaded, partially local DAGs (like ipfs files in Kubo's MFS implementation, see kubo#10386)
• gateway: generated HTML with UnixFS directory listings now include a button for copying CIDs of child entities #899
• bitswap/server: Add ability to enable/disable bitswap server using WithServerEnabled bitswap option (#911)[https://redirect.github.com/feat(bitswap): add option to disable Bitswap server  ipfs/boxo#911]

Changed

• upgrade to go-libp2p v0.41.1
• bitswap/network: Add a new requests_in_flight metric gauge that measures how many bitswap streams are being written or read at a given time.
• improve speed of data onboarding by batching/bufering provider queue writes #888
• provider: providing queue is now independent from reprovides, speeding up initial provides #907
  • renamed provider.ReproviderStats.TotalProvides => provider.ReproviderStats.TotalReprovides
  • renamed provider.ReproviderStats.AvgProvideDuration => provider.ReproviderStats.AvgReprovideDuration
• provider/queue deduplicates CIDs #910

Fixed

• gateway: query parameters are now supported and preserved in redirects triggered by a _redirects file #886
• provider: adjusted first reprovide timing after node reboot #890
• gateway: validate configuration and warn when UseSubdomains=true is used with IP-based hostnames #903

Full Changelog: ipfs/boxo@v0.29.1...v0.30.0

Changelog

Sourced from github.com/ipfs/boxo's changelog.

[v0.30.0]

Added

• Control over UnixFS DAG Width
  • We have made some changes to allow setting custom max width of UnixFS DAGs. This enables users to produce DAGs that follow current and future community conventions (see the related discussion).
  • ipld/unixfs: DagModifier now allows specifying file DAG Width (MaxLinks) #898
  • ipld/unixfs/io/directory: We have made some changes to unixfs directory tooling #906
    • We have exposed creator methods for new BasicDirectory and HAMTDirectory, that complement the existing NewDirectory() which creates dynamic directories.
    • We have added WithCidBuilder(...), WithMaxLinks(...), WithMaxHAMTFanout(...) and WithStat(...) as options to these new methods so that empty directories can be initilized as wished from the get-go.
    • WithMaxLinks(...) and WithMaxHAMTFanout(...) are new options that allow to set a limit to the number of children that a directory DAG node can have. For details on what they exactly do for each of the directory type, please check the documentation.
  • mfs supports as well the new MaxLinks and MaxHAMTFanout options. They have been made part of the MkdirOptions object and the methods NewEmptyDirectory() and NewEmptyRoot() have been added to facilitate the initialization of MFS objects. #906
• provider: added support for walking partial DAGs in offline mode #905
  • a KeyChanFunc that traverses DAGs from a given root (NewDAGProvider).
  • a KeyChanFunc that buffers all the CIDs in memory from another KeyChanFunc (NewBufferedProvider).
  • fetcher/impl/blockservice: new option SkipNotFound for the IPLD fetcher. It will skip not found nodes when traversing the DAG. This allows offline traversal of DAGs when using, for example, an offline blockservice.
  • This enables use case of providing lazy-loaded, partially local DAGs (like ipfs files in Kubo's MFS implementation, see kubo#10386)
• gateway: generated HTML with UnixFS directory listings now include a button for copying CIDs of child entities #899
• bitswap/server: Add ability to enable/disable bitswap server using WithServerEnabled bitswap option (#911)[https://redirect.github.com/feat(bitswap): add option to disable Bitswap server  ipfs/boxo#911]

Changed

• upgrade to go-libp2p v0.41.1
• bitswap/network: Add a new requests_in_flight metric gauge that measures how many bitswap streams are being written or read at a given time.
• improve speed of data onboarding by batching/bufering provider queue writes #888
• provider: providing queue is now independent from reprovides, speeding up initial provides #907
  • renamed provider.ReproviderStats.TotalProvides => provider.ReproviderStats.TotalReprovides
  • renamed provider.ReproviderStats.AvgProvideDuration => provider.ReproviderStats.AvgReprovideDuration
• provider/queue deduplicates CIDs #910

Fixed

• gateway: query parameters are now supported and preserved in redirects triggered by a _redirects file #886
• provider: adjusted first reprovide timing after node reboot #890
• gateway: validate configuration and warn when UseSubdomains=true is used with IP-based hostnames #903

Commits

• a19e342 Merge pull request #915 from ipfs/release-v0.30.0
• b712c67 tidy changelog
• 0dfee28 Document additional changes
• cad6021 bump version
• 1d99797 Release v0.30.0
• 64141fd Update dependencies (#913)
• f54c309 feat(bitswap): add option to disable Bitswap server (#911)
• 95aa3f0 provider: dedicated provide queue (#907)
• bace665 provider: deduplicate cids in queue (#910)
• dc60fe7 feat(unixfs/mfs): support MaxLinks and MaxHAMTFanout (#906)
• Additional commits viewable in compare view

Updates github.com/ipfs/go-block-format from 0.2.0 to 0.2.1

Release notes

Sourced from github.com/ipfs/go-block-format's releases.

v0.2.1

What's Changed

• ci: uci/update-go by @​web3-bot in ipfs/go-block-format#49
• ci: uci/copy-templates by @​web3-bot in ipfs/go-block-format#50
• Update go-ipfs-util to use boxo by @​gammazero in ipfs/go-block-format#52
• ci: uci/update-go by @​web3-bot in ipfs/go-block-format#54
• ci: uci/update-go by @​web3-bot in ipfs/go-block-format#55
• ci: uci/copy-templates by @​web3-bot in ipfs/go-block-format#57
• Update dependencies by @​gammazero in ipfs/go-block-format#59

New Contributors

• @​gammazero made their first contribution in ipfs/go-block-format#52

Full Changelog: ipfs/go-block-format@v0.2.0...v0.2.1

Commits

• d812ab8 Update version (#60)
• 7332240 Update dependencies (#59)
• ff2e2f0 ci: uci/copy-templates (#57)
• a8ca084 chore!: bump go.mod to Go 1.23 and run go fix (#55)
• 9176289 chore: bump go.mod to Go 1.22 and run go fix (#54)
• b7a5c11 Update go-ipfs-util to use boxo (#52)
• 5f19216 ci: uci/copy-templates (#50)
• a7c33b9 ci: uci/update-go (#49)
• 6cf8e0a chore: Update .github/workflows/stale.yml [skip ci]
• See full diff in compare view

Updates github.com/libp2p/go-libp2p-kad-dht from 0.31.0 to 0.32.0

Release notes

Sourced from github.com/libp2p/go-libp2p-kad-dht's releases.

v0.32.0

What's Changed

• chore: bump go-log to v2 by @​guillaumemichel in libp2p/go-libp2p-kad-dht#1074
• chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in libp2p/go-libp2p-kad-dht#1075
• fix: use correct message type attribute in metrics by @​diogo464 in libp2p/go-libp2p-kad-dht#1076
• fix: netsize warning by @​guillaumemichel in libp2p/go-libp2p-kad-dht#1077
• chore: update deps by @​guillaumemichel in libp2p/go-libp2p-kad-dht#1078

New Contributors

• @​diogo464 made their first contribution in libp2p/go-libp2p-kad-dht#1076

Full Changelog: libp2p/go-libp2p-kad-dht@v0.31.0...v0.32.0

Commits

• 4304f67 chore: release v0.31.1 (#1079)
• 858fc2c chore: update deps (#1078)
• 8f175ae fix: netsize warning (#1077)
• 7cc3df8 fix: use correct message type attribute in metrics (#1076)
• 13968bd chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#1075)
• 31c3612 chore: bump go-log to v2 (#1074)
• See full diff in compare view

Updates go.sia.tech/jape from 0.13.1 to 0.14.0

Release notes

Sourced from go.sia.tech/jape's releases.

0.14.0 (2025-04-30)

Breaking Changes

Limit the default size of incoming request bodies to 10MB

Changelog

Sourced from go.sia.tech/jape's changelog.

0.14.0 (2025-04-30)

Breaking Changes

Limit the default size of incoming request bodies to 10MB

Add Context.DecodeLimit to override the size limit

Commits

• e597db5 Merge pull request #34 from SiaFoundation/release
• 4000f23 chore: prepare release 0.14.0
• 089575d Merge pull request #33 from SiaFoundation/nate/limit-request-bodies
• 6f6f964 fix lint
• 81d6902 add test, use http.MaxBytesReader
• 3deae90 fix lint
• c0ce14b limit default request bodie size
• See full diff in compare view

Updates go.sia.tech/renterd/v2 from 2.0.2-0.20250429133416-0719be4614ed to 2.1.0-beta.1

Release notes

Sourced from go.sia.tech/renterd/v2's releases.

v2.1.0-beta.1

Migrations

This release performs a migration of the consensus database which can take a couple of hours.

Features

• Add dl query param to download endpoint to be able to change the Content-Disposition to "attachment"

Fixes

• Fixes an issue where renterd gets stuck on the Zen testnet
• Add compate code to migrate the config from v1.1.1 to v2.0.1
• Add missing descriptions to all routes and schemas in openapi spec
• Include unconfirmed parents of transactions when broadcasting revisions for expired contracts
• Fix listing objects with a slash delimiter and similar paths across buckets.
• Fix missing inferred MimeType for objects uploaded via multipart uploads
• Fix out of bounds panic in alerts manager
• Fix renter expecting host putting up too much collateral for v2 contracts.
• Fixed a deadlock in the migration loop.
• Increase default number of migrator threads
• Redistribute wallet into 100 outputs instead of 10.
• Remove context from bus initialisation
• Split renewContractV2 up into renewContractV2 for renewals and refreshContractV2 for refreshes.
• Update go import path to v2
• Update jape dependency to v0.13.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.