Skip to content

build(deps): bump iroh from 1.0.3 to 1.3.0 in /fuzz - #36

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/fuzz/iroh-1.3.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/fuzz/iroh-1.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps iroh from 1.0.3 to 1.3.0.

Changelog

Sourced from iroh's changelog.

1.3.0 - 2026-09-28

⛰️ Features

🐛 Bug Fixes

  • (ci) Run release builds on ephemeral instances (#4559) - (4d93a44)
  • (iroh) Keep the remote actor responsive during Initial sends (#4512) - (887f180)
  • (iroh) Preserve protocol ordering in the router (#4533) - (3e3ba06)

🚜 Refactor

  • (iroh) Reduce log levels for connectivity issues (#4486) - (b3b571e)
  • (iroh) Simplify datagram send code and test setup (#4525) - (2ed94c8)

⚙️ Miscellaneous Tasks

  • Bump rustls for RUSTSEC-2026-0285 & fix android CI (#4535) - (78f66a2)
  • Fix qlog feature gate error (#4556) - (3c91282)

1.2.0 - 2026-09-09

⛰️ Features

  • (iroh) Add RelayStatus::auth_denied_reason and example (#4501) - (8d2d9e7)
  • (iroh-dns) Deprecate old nameserver builders (#4506) - (2b4de03)
  • Switch to n0-dns-resolver and make fallback nameservers configurable (#4419) - (1a68838)

🐛 Bug Fixes

  • (ci) Select the toolchain in the remaining hand-rolled rustup jobs (#4515) - (f82eff5)

🚜 Refactor

  • (iroh) Clean up mapped addresses constructions (#4498) - (00e016a)

⚙️ Miscellaneous Tasks

  • ()* Upgrade to noq, noq-proto, noq-udp v1.3.0 (#4518) - (cb5d12b)
  • (ci) Move minimal crates check out of tests (#4491) - (55e1d7b)
  • (ci) Select the toolchain the Windows test jobs request (#4514) - (f2d8d46)
  • Log line numbers in the transfer example (#4485) - (3677ec6)
  • Upgrade to non-yanked chacha20 version (#4499) - (cff1f79)
  • Bump n0-error version, remove patch (#4500) - (2581169)
  • Update PR template for API changes (#4507) - (7a561e6)

1.1.0 - 2026-08-25

... (truncated)

Commits
  • 0072d7d chore: release
  • fda4e5e docs: update changelog for v1.3.0
  • b29c0a4 feat(metrics): lookup/resolver stats (#4543)
  • 4d93a44 fix(ci): run release builds on ephemeral instances (#4559)
  • 3c91282 chore: fix qlog feature gate error (#4556)
  • a9c194f feat(iroh)!: expose batch datagram send/recv APIs (#4547)
  • 2af2834 Revert "feat(metrics): lookup/resolver stats" (#4542)
  • 3e3ba06 fix(iroh): Preserve protocol ordering in the router (#4533)
  • 78f66a2 deps: bump rustls for RUSTSEC-2026-0285 & fix android CI (#4535)
  • 2ed94c8 refactor(iroh): simplify datagram send code and test setup (#4525)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [iroh](https://github.com/n0-computer/iroh) from 1.0.3 to 1.3.0.
- [Release notes](https://github.com/n0-computer/iroh/releases)
- [Changelog](https://github.com/n0-computer/iroh/blob/main/CHANGELOG.md)
- [Commits](n0-computer/iroh@v1.0.3...v1.3.0)

---
updated-dependencies:
- dependency-name: iroh
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 5, 2026
@eshcheglov-aster

Copy link
Copy Markdown
Collaborator

Upgrading iroh is a good idea because it's one of the components that depend on an older version of netlink-packet-core, which we've had to patch and keep in third-party dir due to a vulnerability. I'm going to look into this.

@eshcheglov-aster

eshcheglov-aster commented Oct 5, 2026 •

Copy link
Copy Markdown
Collaborator

Okay, iroh depends on net-tools, which still depends on an older version of netlink-packet-core.
But the net-tools maintainers are preparing to bump the netlink-* package versions.

So it looks like all we need before we can stop maintaining own fork of netlink-packer-core is for this PR to be merged: n0-computer/net-tools#239

@m3binning

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like iroh is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 5, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/fuzz/iroh-1.3.0 branch October 5, 2026 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants