Bump libp2p from 0.29.1 to 0.33.0

[dependabot[bot]]

Bumps libp2p from 0.29.1 to 0.33.0.

Release notes

Sourced from libp2p's releases.

Version 0.30.0 [2020-11-09]

Among other changes, this release adds a requirement across all crates for multihash >= v0.11.3. Rust-libp2p versions in combination with multihash < v0.11.3 are vulnerable to DoS attacks. Given that e.g. PeerId::from_bytes is called with unsanitized data from possibly untrusted sources this call can panic with multihash < v0.11.3 see RustSec for details.

In case you run libp2p in untrusted environments please either (a) update to libp2p v0.30.0 or (b) make sure to run with multihash >=v0.11.3 via your downstream Cargo.lock file.

As always all other contained changes are listed in our CHANGELOG.md.

Changelog

Sourced from libp2p's changelog.

Version 0.33.0 [2020-12-17]

• Update libp2p-core and all dependent crates.

Version 0.32.2 [2020-12-10]

• Update libp2p-websocket.

Version 0.32.1 [2020-12-09]

• Update minimum patch version of libp2p-websocket.

Version 0.32.0 [2020-12-08]

• Update libp2p-request-response.

• Update to libp2p-mdns-0.26.

• Update libp2p-websocket minimum patch version.

Version 0.31.2 [2020-12-02]

• Bump minimum libp2p-core patch version.

Version 0.31.1 [2020-11-26]

• Bump minimum libp2p-tcp patch version.

Version 0.31.0 [2020-11-25]

• Update multistream-select and all dependent crates.

Version 0.30.1 [2020-11-11]

• Update libp2p-plaintext.

Version 0.30.0 [2020-11-09]

• Update libp2p-mdns, libp2p-tcp and libp2p-uds as well as libp2p-core and all its dependers.

Commits

• dd9f56e *CHANGELOG.md: Prepare v0.33.0 release (#1895)
• 22817b5 swarm: Remove NotifyHandler::All (#1880)
• 6c970f0 Update pin-project requirement from 0.4.17 to 1.0.2 (#1894)
• 6d3e2b5 Cargo.toml: Add deflate and pnet to workspace (#1893)
• 447b2d3 *: Update Cargo tomls and changelogs for libp2p-pnet v0.20.0
• 80a1ac8 fix(pns): patch salsa20 dependency (#1892)
• 0968b04 protocols/request-response: Derive Clone for {Inbound,Outbound}Failure (#1891)
• 3af5ba4 protocols/request-response: Emit InboundFailure::ConnectionClosed (#1886)
• 23b0aa0 Stack allocated PeerId (#1874)
• a26f6aa Update async-tls requirement from 0.10.2 to 0.11.0 (#1884)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

[dependabot[bot]]

Superseded by #3476.