build(deps): bump the all-dependencies group with 2 updates

[dependabot]

Bumps the all-dependencies group with 2 updates: github.com/ipfs/boxo and go.sia.tech/renterd/v2.

Updates github.com/ipfs/boxo from 0.30.0 to 0.31.0

Release notes

Sourced from github.com/ipfs/boxo's releases.

v0.31.0

What's Changed

Added

• bitswap/httpnet: New option WithMaxDontHaveErrors(int) (defaults to 100) will trigger disconnections from bitswap peers that cannot provide any of the blocks that are requested for the given number of requests in a row.. This is meant to limit bitswap HTTP-based optimistic requests for blocks to discovered endpoints, which were before considered permanently peered upon discovery.

Changed

• upgrade to go-libp2p-kad-dht v0.33.1
• deprecated WithPeerLedger option for bitswap server. Will remove option in next release. See [issue #928](ipfs/boxo#928)
• gateway: update backend car traversal to use go-car/v2 #925
  • This change may prohibit fetching DAGs from CAR files that have no roots.

Full Changelog: ipfs/boxo@v0.30.0...v0.31.0

Changelog

Sourced from github.com/ipfs/boxo's changelog.

[v0.31.0]

Added

• bitswap/httpnet: New option WithMaxDontHaveErrors(int) (defaults to 100) will trigger disconnections from bitswap peers that cannot provide any of the blocks that are requested for the given number of requests in a row.. This is meant to limit bitswap HTTP-based optimistic requests for blocks to discovered endpoints, which were before considered permanently peered upon discovery.

Changed

• upgrade to go-libp2p-kad-dht v0.33.1
• deprecated WithPeerLedger option for bitswap server. Will remove option in next release. See [issue #928](ipfs/boxo#928)
• gateway: update backend car traversal to use go-car/v2 #925
  • This change may prohibit fetching DAGs from CAR files that have no roots.

Commits

• 1ef7a48 Merge pull request #934 from ipfs/releaase-v0.31.0
• 7203cc3 bump version
• 5f2eea0 Release v0.31.0
• a956869 update go-unixfsnode (#932)
• 452c1af Revert "Remove an unused timestamp from traceability.Block" (#931)
• 041fe27 update changelog (#930)
• a3bb071 Deprecate WithPeerLedger option for bitswap server (#929)
• 3b7d580 refactor: use a more efficient querying method (#921)
• 4c89fad Use go-car/v2 for reading CAR files in gateway backend (#927)
• 4a9325b Upgrade gto o-libp2p-kad-dht v0.33.1 (#924)
• Additional commits viewable in compare view

Updates go.sia.tech/renterd/v2 from 2.2.0 to 2.2.1

Release notes

Sourced from go.sia.tech/renterd/v2's releases.

v2.2.1

Fixes

• Cap endheight for contract formation of v1 contracts to 1 block before v2 require height.

Changelog

Sourced from go.sia.tech/renterd/v2's changelog.

2.2.1 (2025-05-29)

Fixes

• Cap endheight for contract formation of v1 contracts to 1 block before v2 require height.

Commits

• 349a9f9 chore: prepare release 2.2.1 (#1899)
• 0a2d14a chore: prepare release 2.2.1
• 1cbf4dc chore(deps): bump the all-dependencies group with 3 updates (#1900)
• fe31bfb chore(deps): bump the all-dependencies group with 3 updates
• fb9b024 Cap contract formation at require height (#1897)
• ec1ae55 update hostd dependency
• 1a2afc4 update hostd
• 4467b87 add changeset file
• dd9e455 add test
• 0323065 cap contract formation at require height
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions