Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Merged by Bors] - Make dependabot ignore libp2p libs #6018

Closed
wants to merge 3 commits into from

Conversation

ivan4th
Copy link
Contributor

@ivan4th ivan4th commented Jun 6, 2024

Motivation

libp2p/go-libp2p#2793 broke observed address handling and consequently routing discovery mechanism, too.
This is not the first time we're having problems because of (semi-)automatic libp2p dependency updates.
Prerequisite for re-enabling automatic updates of libp2p libs: QUIC and routing discovery systests

Description

Add dependabot exception for libp2p libraries

Following observed address mechanism breakage in libp2p/go-libp2p#2793
disable automatic libp2p dependency bumps.
Prerequisite for re-enabling automatic updates of libp2p libs: QUIC
and routing discovery systests
@fasmat
Copy link
Member

fasmat commented Jun 6, 2024

Please add a comment to the dependabot file and add an issue for adding system tests with QUIC such that we enable it again. I want to avoid falling too far behind with dependency updates.

Has the problem been reported to libp2p? I don't see an issue that mentions that problem in the libp2p repository?

Copy link

codecov bot commented Jun 6, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 81.3%. Comparing base (ddceb98) to head (b2e2a29).

Additional details and impacted files
@@            Coverage Diff            @@
##           develop   #6018     +/-   ##
=========================================
- Coverage     81.3%   81.3%   -0.1%     
=========================================
  Files          296     296             
  Lines        31683   31683             
=========================================
- Hits         25789   25781      -8     
- Misses        4212    4218      +6     
- Partials      1682    1684      +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@pigmej
Copy link
Member

pigmej commented Jun 7, 2024

@fasmat libp2p/go-libp2p#2825 :)

@fasmat
Copy link
Member

fasmat commented Jun 7, 2024

@pigmej well there were a few hours between my comment and the creation of the PR 😉

then this PR isn't needed any more is it? the fix was already approved and will (probably) land in the next libp2p release. We only need to downgrade it now, close the PR dependabot creates for v0.34.0 to ignore that version and integrate the next version of libp2p?

@ivan4th
Copy link
Contributor Author

ivan4th commented Jun 7, 2024

This PR is still needed as that's not the first instance of a libp2p update breaking go-spacemesh.
I've added a comment to dependabot.yml regarding when we can re-enable dependabot for libp2p libraries

Copy link
Member

@fasmat fasmat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we don't have it already we should also create an issue to create the systests we need and include the information to enable libp2p updates again when they are implemented 🙂

@ivan4th
Copy link
Contributor Author

ivan4th commented Jun 7, 2024

If we don't have it already we should also create an issue to create the systests we need and include the information to enable libp2p updates again when they are implemented 🙂

Done: #6025

@fasmat
Copy link
Member

fasmat commented Jun 7, 2024

bors merge

spacemesh-bors bot pushed a commit that referenced this pull request Jun 7, 2024
## Motivation

libp2p/go-libp2p#2793 broke observed address handling and consequently routing discovery mechanism, too.
This is not the first time we're having problems because of (semi-)automatic libp2p dependency updates.
Prerequisite for re-enabling automatic updates of libp2p libs: QUIC and routing discovery systests
@spacemesh-bors
Copy link

spacemesh-bors bot commented Jun 7, 2024

Build failed:

@ivan4th
Copy link
Contributor Author

ivan4th commented Jun 7, 2024

bors merge

spacemesh-bors bot pushed a commit that referenced this pull request Jun 7, 2024
## Motivation

libp2p/go-libp2p#2793 broke observed address handling and consequently routing discovery mechanism, too.
This is not the first time we're having problems because of (semi-)automatic libp2p dependency updates.
Prerequisite for re-enabling automatic updates of libp2p libs: QUIC and routing discovery systests
@spacemesh-bors
Copy link

spacemesh-bors bot commented Jun 7, 2024

Pull request successfully merged into develop.

Build succeeded:

@spacemesh-bors spacemesh-bors bot changed the title Make dependabot ignore libp2p libs [Merged by Bors] - Make dependabot ignore libp2p libs Jun 7, 2024
@spacemesh-bors spacemesh-bors bot closed this Jun 7, 2024
@spacemesh-bors spacemesh-bors bot deleted the fix/no-libp2p-auto-updates branch June 7, 2024 22:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants