feat: push compliance cids to prod

[AmeanAsad]

Changes

• Update caboose to v.0.0.4 - which introduces compliance cids to prod.
• Update compliance cid frequency for bifrost to be of 1 / 5 mirrored requests on avg.

[github-actions[bot]]

Suggested version: v0.0.14

Comparing to: v0.0.13 (diff)

Changes in go.mod file(s):

diff --git a/go.mod b/go.mod
index 8781520..f7c9f89 100644
--- a/go.mod
+++ b/go.mod
@@ -6,12 +6,14 @@ require (
    github.com/cskr/pubsub v1.0.2
    github.com/filecoin-saturn/caboose v0.0.3
    github.com/hashicorp/golang-lru/v2 v2.0.1
-   github.com/ipfs/boxo v0.10.2-0.20230627114119-8424cf4e020a
+   github.com/ipfs/boxo v0.11.0
    github.com/ipfs/go-block-format v0.1.2
    github.com/ipfs/go-cid v0.4.1
    github.com/ipfs/go-ipld-format v0.5.0
    github.com/ipfs/go-log/v2 v2.5.1
    github.com/ipfs/go-unixfsnode v1.7.1
+   github.com/ipld/go-car v0.6.0
+   github.com/ipld/go-car/v2 v2.10.2-0.20230622090957-499d0c909d33
    github.com/ipld/go-codec-dagpb v1.6.0
    github.com/ipld/go-ipld-prime v0.20.0
    github.com/libp2p/go-libp2p v0.26.3
@@ -23,13 +25,15 @@ require (
    github.com/prometheus/client_golang v1.15.1
    github.com/rs/dnscache v0.0.0-20211102005908-e0241e321417
    github.com/spf13/cobra v1.6.1
-   github.com/stretchr/testify v1.8.2
+   github.com/stretchr/testify v1.8.4
+   github.com/willscott/go-requestcontext v0.0.1
    go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.40.0
    go.opentelemetry.io/contrib/propagators/autoprop v0.40.0
    go.opentelemetry.io/otel v1.14.0
    go.opentelemetry.io/otel/sdk v1.14.0
    go.opentelemetry.io/otel/trace v1.14.0
    go.uber.org/atomic v1.10.0
+   go.uber.org/multierr v1.9.0
    go.uber.org/zap v1.24.0
 )

@@ -84,10 +88,9 @@ require (
    github.com/ipfs/go-ipld-legacy v0.2.1 // indirect
    github.com/ipfs/go-libipfs v0.6.0 // indirect
    github.com/ipfs/go-log v1.0.5 // indirect
-   github.com/ipfs/go-merkledag v0.10.1-0.20230601163447-eceea556e7d4 // indirect
+   github.com/ipfs/go-merkledag v0.11.0 // indirect
    github.com/ipfs/go-metrics-interface v0.0.1 // indirect
    github.com/ipfs/go-verifcid v0.0.2 // indirect
-   github.com/ipld/go-car v0.6.0 // indirect
    github.com/jackpal/go-nat-pmp v1.0.2 // indirect
    github.com/jbenet/go-temp-err-catcher v0.1.0 // indirect
    github.com/jbenet/goprocess v0.1.4 // indirect
@@ -166,7 +169,6 @@ require (
    go.opentelemetry.io/proto/otlp v0.19.0 // indirect
    go.uber.org/dig v1.15.0 // indirect
    go.uber.org/fx v1.18.2 // indirect
-   go.uber.org/multierr v1.9.0 // indirect
    golang.org/x/crypto v0.6.0 // indirect
    golang.org/x/exp v0.0.0-20230213192124-5e25df0256eb // indirect
    golang.org/x/mod v0.7.0 // indirect

gorelease says:

# github.com/ipfs/bifrost-gateway/lib
## incompatible changes
GraphGateway: old is comparable, new is not

# diagnostics
go.sum: one or more sums are missing. Run 'go mod tidy' to add missing sums.
required module github.com/microcosm-cc/bluemonday@v1.0.1 retracted by module author: Retract older versions as only latest is to be depended upon

# summary
Suggested version: v0.1.0

gocompat says:

Your branch is up to date with 'origin/main'.

Cutting a Release (and modifying non-markdown files)

This PR is modifying both version.json and non-markdown files. The Release Checker is not able to analyse files that are not checked in to main. This might cause the above analysis to be inaccurate. Please consider performing all the code changes in a separate PR before cutting the release.

Automatically created GitHub Release

A draft GitHub Release has been created. It is going to be published when this PR is merged. You can modify its' body to include any release notes you wish to include with the release.

[willscott]

this got deployed to staging yesterday. response code rates, timeouts, sizes all look good since then. Don't see anything concerning in advancing this to prod.