Bump github.com/libp2p/go-libp2p-core from 0.2.3 to 0.3.0

[dependabot-preview]

Bumps github.com/libp2p/go-libp2p-core from 0.2.3 to 0.3.0.

Release notes

Sourced from github.com/libp2p/go-libp2p-core's releases.

v0.3.0

PeerIDs encoded as CIDs

In order to bring multibase support to peer IDs, we're slowly switching to encoding peer IDs as libp2p-key CIDs when formatted in text. They're currently formatted as raw base58 encoded multihashes.

This release:

• Adds support for encoding peer IDs as libp2p key CIDs (not used by default).
• Adds support for decoding libp2p key CIDs as peer IDs (enabled by default).

Go 1.13

This release depends on go 1.13 as it uses go's built-in ed25519 library. If you are unable to upgrade, please work with the go team to address your issues with 1.13 and/or hold off on upgrading this package.

P2P Multiaddrs

We've switched the default libp2p multiaddr format from /ipfs/Qm... to /p2p/Qm... (in text only). All libp2p implementations have supported parsing these addresses for quite a while now so we don't expect any issues.

See https://discuss.libp2p.io/t/multiaddr-format-change-ipfs-p2p/330.

Bug Fixes

As this is a release of the core package, there aren't all that many bug fixes. However:

• We've fixed an issue in our metrics library that would cause it to report nonsensical bandwidth spikes in some cases (https://github-redirect.dependabot.com/libp2p/go-libp2p-core/issues/65)
• We've regenerated our protobufs to fix some potential parsing issues.
• We've fixed some potential multiaddr parsing issues.

v0.2.5

This release fixes a bug in the insecure plaintext security protocol. The implementation now conforms to the spec by using varints to delimit messages instead of fixed-length integers.

Release v0.2.4

• Updates gogo/protobuf.
• Forbids <2048 bit RSA keys when compiling with OpenSSL. Previously, these were only forbidden with go's built in RSA implementation.

Commits

• f7f7248 Merge pull request #98 from libp2p/dependabot/go_modules/github.com/multiform...
• ee9d9da build(deps): bump github.com/multiformats/go-multiaddr
• ba9101b feat: support encoding/decoding peer IDs as CIDs in text (#41)
• 4184c18 Merge branch 'master' into feat/parse-cid-as-pid
• edd5242 Merge pull request #95 from libp2p/chore/update-rest
• af4f53a chore(dep): update btc (sekp) and openssl libraries
• c4d6359 Merge pull request #96 from libp2p/dependabot/go_modules/github.com/libp2p/go...
• a986079 build(deps): bump github.com/libp2p/go-openssl from 0.0.3 to 0.0.4
• f93c24d Merge pull request #94 from libp2p/feat/std-ed25519
• d25b480 docs(readme): specify minimum go version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in the .dependabot/config.yml file in this repo:

• Update frequency
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[status-im-auto]

Jenkins Builds

Click to see older builds (9)

❔	Commit	#️⃣	Finished (UTC)	Duration	Platform	Result
✔️	a245bd7	#1	2019-12-16 05:18:35	~48 sec	linux	📦zip
✔️	a245bd7	#1	2019-12-16 05:23:59	~6 min	ios	📦zip
✔️	a245bd7	#1	2019-12-16 05:25:58	~8 min	android	📦aar
❌	7eb839b	#2	2020-01-10 19:06:16	~1 min	android	📄log
✔️	7eb839b	#2	2020-01-10 19:06:23	~1 min	linux	📦zip
✔️	7eb839b	#2	2020-01-10 19:13:28	~8 min	ios	📦zip
❌	b20866a	#3	2020-01-15 07:31:06	~18 sec	android	📄log
✔️	b20866a	#3	2020-01-15 07:31:38	~48 sec	linux	📦zip
✔️	b20866a	#3	2020-01-15 07:34:27	~3 min	ios	📦zip

❔	Commit	#️⃣	Finished (UTC)	Duration	Platform	Result
❌	ed884ae	#4	2020-01-20 12:21:45	~38 sec	android	📄log
✔️	ed884ae	#4	2020-01-20 12:21:57	~46 sec	linux	📦zip
✔️	ed884ae	#4	2020-01-20 12:24:10	~3 min	ios	📦zip
❌	a3b6ebd	#5	2020-02-10 11:29:17	~21 sec	android	📄log
✔️	a3b6ebd	#5	2020-02-10 11:29:48	~50 sec	linux	📦zip
✔️	a3b6ebd	#5	2020-02-10 11:35:15	~6 min	ios	📦zip

[ghost]

Pull Request Checklist

• Have you updated the documentation, if impacted (e.g. docs.status.im)?

[dependabot-preview]

Superseded by #1873.