chore(deps): bump github.com/ipfs/kubo from 0.29.0 to 0.30.0

[dependabot[bot]]

Bumps github.com/ipfs/kubo from 0.29.0 to 0.30.0.

Release notes

Sourced from github.com/ipfs/kubo's releases.

v0.30.0

• 💬 Discuss
• 🔦 Highlights
  • Improved P2P connectivity
  • Refactored Bitswap and dag-pb chunker
  • WebRTC-Direct Transport enabled by default
  • UnixFS 1.5: Mode and Modification Time Support
  • AutoNAT V2 Service Introduced Alongside V1
  • Automated ipfs version check
  • Version Suffix Configuration
  • /unix/ socket support in Addresses.API
  • Cleaned Up ipfs daemon Startup Log
  • Commands Preserve Specified Hostname
• 📝 Changelog
• 👨‍👩‍👧‍👦 Contributors

Overview

🔦 Highlights

This release took longer and is more packed with fixes and features than usual.

[!IMPORTANT] TLDR: update, it contains many, many fixes.

Improved P2P connectivity

This release comes with significant go-libp2p update from v0.34.1 to v0.36.3 (release notes).

It includes multiple fixes to key protocols: QUIC/Webtransport/WebRTC, Connection Upgrades through Relay (DCUtR), and Secure WebSockets.

Also, peers that are behind certain types of NAT will now be more reachable. For this alone, Kubo users are highly encouraged to upgrade.

Refactored Bitswap and dag-pb chunker

Some workloads may experience improved memory profile thanks to optimizations from Boxo SDK v0.23.0.

[!IMPORTANT] Storage providers should upgrade to take advantage of the Bitswap server fix, which resolves the issue of greedy peers depleting available wantlist slots for their PeerID, resulting in stalled downloads.

WebRTC-Direct Transport enabled by default

Kubo now ships with WebRTC Direct listener enabled by default: /udp/4001/webrtc-direct.

WebRTC Direct complements existing /wss (Secure WebSockets) and /webtransport transports. Unlike /wss, which requires a domain name and a CA-issued TLS certificate, WebRTC Direct works with IPs and can be enabled by default on all Kubo nodes.

Learn more: Swarm.Transports.Network.WebRTCDirect

[!NOTE] Kubo 0.30 includes a migration for existing users that adds /webrtc-direct listener on the same UDP port as /udp/{port}/quic-v1. This supports the WebRTC-Direct rollout by reusing preexisting UDP firewall settings and port mappings created for QUIC.

... (truncated)

Commits

• 846c5cc Merge pull request #10490 from ipfs/release-v0.30.0
• aa355da docs: changelog cleanup
• b0812d8 docs: changelog and contributors
• 89df952 chore: set version to 0.30.0
• 2b1af8d chore: bump CurrentVersionNumber
• c228935 chore: boxo v0.23.0 and go-libp2p v0.36.3 (#10507)
• b50e029 fix: switch back to go 1.22 (#10502)
• 467fc69 chore: update go-unixfsnode, cmds, and boxo (#10494)
• 3bb09f8 fix(cli): preserve hostname specified with --api in http request headers (#10...
• 2b245e0 chore: upgrade to go 1.23 (#10486)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[graphite-app[bot]]

Your org has enabled the Graphite merge queue for merging into develop

Add the label “merge-queue” to the PR and Graphite will automatically add it to the merge queue when it’s ready to merge.

You must have a Graphite account and log in to Graphite in order to use the merge queue. Sign up using this link.

[dependabot[bot]]

Superseded by #1148.