Skip to content

Conversation

@KaloyanTanev
Copy link
Collaborator

There were vulnerabilities in the QUIC package. libp2p latest version fixes those.

category: misc
ticket: none

@pinebit
Copy link
Collaborator

pinebit commented Dec 18, 2025

FYI: I disabled the flakey TestSyncFlow (in main already), as it warrants complete redesign.
If you rebase this branch, it shall be all green.

@sonarqubecloud
Copy link

@KaloyanTanev KaloyanTanev added the do not merge Indicate to bulldozer bot that this PR should not be merged label Dec 18, 2025
@KaloyanTanev
Copy link
Collaborator Author

I have removed the ActivationThresh variable, as it had data race. It did seem like it was a part of a discv5 protocol, which was removed long time ago.

I would like first to test this change in a cluster though.

@codecov
Copy link

codecov bot commented Dec 18, 2025

Codecov Report

❌ Patch coverage is 0% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 56.94%. Comparing base (2cbb4b2) to head (da819ec).

Files with missing lines Patch % Lines
dkg/pedersen/reshare.go 0.00% 2 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4184      +/-   ##
==========================================
+ Coverage   56.91%   56.94%   +0.02%     
==========================================
  Files         235      235              
  Lines       30461    30457       -4     
==========================================
+ Hits        17338    17343       +5     
+ Misses      10907    10899       -8     
+ Partials     2216     2215       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@KaloyanTanev KaloyanTanev changed the title deps: bump golibp2p vulnerabilities deps: update libp2p Dec 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do not merge Indicate to bulldozer bot that this PR should not be merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants