From 6c6407d782b6bb51df487517974d690c435f63d3 Mon Sep 17 00:00:00 2001 From: Teodor Calin Date: Wed, 29 Jul 2026 15:16:42 +0300 Subject: [PATCH] deps: bump to the released fixes, for a v1.13.8 that actually carries them MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Six modules were released today with fixes for defects found in a codebase-wide sweep, but this repo still pinned the versions from before them. Tagging a release in that state would have shipped a binary carrying none of the fixes — the versions would move and nothing would change. handshake v0.2.6 -> v0.2.7 port 444 leaked a goroutine + 64 KiB per accepted connection; Close appeared nowhere in the file beacon v0.2.8 -> v0.2.9 dstNodes grew unbounded from unauthenticated datagrams and was in no sweep rendezvous v0.2.7 -> v0.2.8 RateLimiter.Allow had ZERO call sites, so the per-IP tier was dead code and pilot_ratelimit_denied_total{kind=ip} was structurally always zero dataexchange beta -> v0.2.1 peer-chosen transfer ids opened an *os.File each with no cap -> FD exhaustion eventstream v0.2.2 -> v0.2.3 time.After per subscriber per event pinned up to 500*S timers runtime already v0.3.2 (bumped with #435; listed for completeness) trustedagents, policy and webhook are deliberately NOT bumped: their newest tags are betas and this repo tracks stable. Verified the fixes are actually in the resolved modules rather than trusting version strings — grepped the module cache for the close-on-exit defer, maxConcurrentTransfers, the dstNodes sweep, the NewTimer replacement and the rateLimiter.Allow call site. All present. Built and tested with GOWORK=off so resolution matches CI rather than the local go.work overlay: build clean, vet clean, pkg/daemon suite green. Co-Authored-By: Claude Opus 5 --- go.mod | 10 +++++----- go.sum | 10 ++++++++++ 2 files changed, 15 insertions(+), 5 deletions(-) diff --git a/go.mod b/go.mod index 647f9069..bb8798c4 100644 --- a/go.mod +++ b/go.mod @@ -5,14 +5,14 @@ go 1.25.12 require ( github.com/coder/websocket v1.8.15 github.com/pilot-protocol/app-store v1.0.2 - github.com/pilot-protocol/beacon v0.2.8 + github.com/pilot-protocol/beacon v0.2.9 github.com/pilot-protocol/common v0.5.11 - github.com/pilot-protocol/dataexchange v0.2.1-beta.1.0.20260615113607-fac933edea98 - github.com/pilot-protocol/eventstream v0.2.2 - github.com/pilot-protocol/handshake v0.2.6 + github.com/pilot-protocol/dataexchange v0.2.1 + github.com/pilot-protocol/eventstream v0.2.3 + github.com/pilot-protocol/handshake v0.2.7 github.com/pilot-protocol/nameserver v0.2.1 github.com/pilot-protocol/policy v0.2.3 - github.com/pilot-protocol/rendezvous v0.2.7 + github.com/pilot-protocol/rendezvous v0.2.8 github.com/pilot-protocol/runtime v0.3.2 github.com/pilot-protocol/skillinject v0.2.4-0.20260717204101-902f745138da github.com/pilot-protocol/trustedagents v0.2.5 diff --git a/go.sum b/go.sum index 42518fb4..ea039de5 100644 --- a/go.sum +++ b/go.sum @@ -239,20 +239,30 @@ github.com/pilot-protocol/app-store v1.0.2 h1:oK7cNl3e/gfxVhhkUFKNLRN256+7sDSBw8 github.com/pilot-protocol/app-store v1.0.2/go.mod h1:deltPnaQkiTgMcxWU+honz3+Bl2R1cthhuZra4pQ4PI= github.com/pilot-protocol/beacon v0.2.8 h1:7jLnHTMVYwFMIFUyZd3/IDPRXcQ6xlbBVCE2tx4assU= github.com/pilot-protocol/beacon v0.2.8/go.mod h1:DE8masXGku/IwfHL8lN/4CUTe5YsxMXFe2fRGJcH7w8= +github.com/pilot-protocol/beacon v0.2.9 h1:VqXAtRKl4YhZVkDmJzuNhS1bfpK0n9qbGKOGLfVYSyo= +github.com/pilot-protocol/beacon v0.2.9/go.mod h1:DE8masXGku/IwfHL8lN/4CUTe5YsxMXFe2fRGJcH7w8= github.com/pilot-protocol/common v0.5.11 h1:gaPOT2v3/FUAx61lqPw7yRsrzmDSRWL4+LRuQh8mrqs= github.com/pilot-protocol/common v0.5.11/go.mod h1:Ybc6f1A37s3ShoEh1nBMVL9DPyYlxvkqPTvtbxaNWg4= github.com/pilot-protocol/dataexchange v0.2.1-beta.1.0.20260615113607-fac933edea98 h1:Bqgnf4CZC7aZJyDzz/E7agwXotArJg2FvFlNDqouhLo= github.com/pilot-protocol/dataexchange v0.2.1-beta.1.0.20260615113607-fac933edea98/go.mod h1:tM9eyyruBdnxhhUtViasUjnAElwF/r5PQvCYKLdlTLY= +github.com/pilot-protocol/dataexchange v0.2.1 h1:MZFoNQjX0zVbJC5Dd7zaR8nmoVGwDRA5yt8nYjD2h+c= +github.com/pilot-protocol/dataexchange v0.2.1/go.mod h1:nPmp1OecisHVBslh1AO/7l9L2FUj3ymT/UrtBo91oSU= github.com/pilot-protocol/eventstream v0.2.2 h1:E0IjveK7K+dsIbE/5hD3N821FkHzxVsx1tiAORMzt8k= github.com/pilot-protocol/eventstream v0.2.2/go.mod h1:gUjoMEItW1SRJYEq39VlcIeDe2LcE5B18/4bcaUJNrs= +github.com/pilot-protocol/eventstream v0.2.3 h1:vdb3j7EvL31ZwwB0rKxhPOCa3v6eiyIyIJ6ctLUvOEs= +github.com/pilot-protocol/eventstream v0.2.3/go.mod h1:ssPYhU4SfIrtNiHonHcVn5zeg4PvzIlWJOm8loBYAd4= github.com/pilot-protocol/handshake v0.2.6 h1:DmUL8NEbNOKMRgg5seAfRnwoZgayzqQ1ksi+U7yu6RM= github.com/pilot-protocol/handshake v0.2.6/go.mod h1:Vkz+02DEAyPL++maW7oHHu/DKriPhL3/+BGY+dlHKrQ= +github.com/pilot-protocol/handshake v0.2.7 h1:ItFXRqCYVLy4g+bwEXTJIXIkwOXb2sra7t6JZiKUz9A= +github.com/pilot-protocol/handshake v0.2.7/go.mod h1:Vkz+02DEAyPL++maW7oHHu/DKriPhL3/+BGY+dlHKrQ= github.com/pilot-protocol/nameserver v0.2.1 h1:ACCa6WVkEoDZVctEe09WB24Lfobt/JoLDGIqX2MEnss= github.com/pilot-protocol/nameserver v0.2.1/go.mod h1:ze4VFe74xdbyqu5oFPt0YGRrRMMnHWb/AczJhirG+h4= github.com/pilot-protocol/policy v0.2.3 h1:sonEBL82oGjj1zyMQjJJ5cw+0KQdjS1sgHiLmIVWb8g= github.com/pilot-protocol/policy v0.2.3/go.mod h1:ALQdPalluwdzd3AbqbR+iNU5jJc/aG79n9ym0vhhF7w= github.com/pilot-protocol/rendezvous v0.2.7 h1:676cSBYGpkkg5FK6AioGLarixPrTwlky5b13LSpqY/4= github.com/pilot-protocol/rendezvous v0.2.7/go.mod h1:sv0TuqAosOCe3f3EIuZ9lmrNaHJTqyy5k/UGFqHskB4= +github.com/pilot-protocol/rendezvous v0.2.8 h1:GRJyNplqNrfhPuCUgOAaY5Dg5En4G2aO+W2oCNKuIlo= +github.com/pilot-protocol/rendezvous v0.2.8/go.mod h1:sv0TuqAosOCe3f3EIuZ9lmrNaHJTqyy5k/UGFqHskB4= github.com/pilot-protocol/runtime v0.3.1 h1:+W9ww0dZY/FgOBtCmIOV3w5L5Z4Upt/RIsrYElXZ1zs= github.com/pilot-protocol/runtime v0.3.1/go.mod h1:GfFEIji0w7H9SSNR9Wl2q72pd2OYN3PHY9Qhcbvyrqk= github.com/pilot-protocol/runtime v0.3.2 h1:21lgUfYNvpls0Vd3V2v9lfs13G7mT8pcT3D2QzcMueE=