Skip to content

build: raise the Go floor to 1.26 with boxo v0.43 and go-libp2p v0.49 - #25

Merged
amirradjou merged 3 commits into
orbitdb:mainfrom
amirradjou:deps/go-1.26-floor
Sep 26, 2026
Merged

amirradjou merged 3 commits into
orbitdb:mainfrom
amirradjou:deps/go-1.26-floor

Conversation

@amirradjou

Copy link
Copy Markdown
Collaborator

Takes Dependabot's go-deps group (#23) and makes it pass.

#23 moves boxo to v0.43 and go-libp2p to v0.49, which require Go 1.26, so its Go 1.25 jobs failed. Go 1.27 is out and 1.25 is no longer supported, so this raises the floor instead of pinning the old releases:

Verified locally: go test -race ./..., the live interop tests, staticcheck, govulncheck (nothing reachable) and go mod tidy -diff.

dependabot Bot and others added 3 commits September 26, 2026 02:47
Bumps the go-deps group with 4 updates: [github.com/ipfs/boxo](https://github.com/ipfs/boxo), [github.com/ipfs/go-ipld-format](https://github.com/ipfs/go-ipld-format), [github.com/libp2p/go-libp2p](https://github.com/libp2p/go-libp2p) and [github.com/stretchr/testify](https://github.com/stretchr/testify).


Updates `github.com/ipfs/boxo` from 0.41.0 to 0.43.0
- [Release notes](https://github.com/ipfs/boxo/releases)
- [Changelog](https://github.com/ipfs/boxo/blob/main/CHANGELOG.md)
- [Commits](ipfs/boxo@v0.41.0...v0.43.0)

Updates `github.com/ipfs/go-ipld-format` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/ipfs/go-ipld-format/releases)
- [Commits](ipfs/go-ipld-format@v0.6.3...v0.6.4)

Updates `github.com/libp2p/go-libp2p` from 0.48.0 to 0.49.0
- [Release notes](https://github.com/libp2p/go-libp2p/releases)
- [Changelog](https://github.com/libp2p/go-libp2p/blob/master/CHANGELOG.md)
- [Commits](libp2p/go-libp2p@v0.48.0...v0.49.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

---
updated-dependencies:
- dependency-name: github.com/ipfs/boxo
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/ipfs/go-ipld-format
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/libp2p/go-libp2p
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
…eps-88cfcdb459

Bump the go-deps group with 4 updates
Go 1.27 is out, so the supported releases are 1.27 and 1.26 and 1.25 no
longer gets security fixes. boxo v0.43 and go-libp2p v0.49 (merged from
the Dependabot group above) require Go 1.26, so the CI floor job and the
README move to it.

Dependabot now skips Helia major versions for the interop peer:
@orbitdb/core 4 is built against Helia 6, and with Helia 7 createOrbitDB
fails with NotStartedError before any replication happens.
@amirradjou
amirradjou merged commit 4aae905 into orbitdb:main Sep 26, 2026
6 checks passed
@amirradjou
amirradjou deleted the deps/go-1.26-floor branch September 26, 2026 03:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant