Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(libp2p): k-0.52.11 bump #2296

Merged
merged 1 commit into from
Dec 18, 2024
Merged

chore(libp2p): k-0.52.11 bump #2296

merged 1 commit into from
Dec 18, 2024

Conversation

onur-ozkan
Copy link
Member

@onur-ozkan onur-ozkan commented Dec 17, 2024

Bumps libp2p to include KomodoPlatform/rust-libp2p@f949f65 for security reasons.

Fixes #771

Blocker for the next release.

@onur-ozkan onur-ozkan added improvement: resource usage Improvements made on resource usage on runtime or/and compile time improvement: security Improvements made on runtime security status: pending review priority: urgent Critical tasks requiring immediate action. labels Dec 17, 2024
@onur-ozkan onur-ozkan changed the title chore(libp2p): k-0.52.5 bump chore(libp2p): k-0.52.7 bump Dec 17, 2024
@onur-ozkan onur-ozkan changed the title chore(libp2p): k-0.52.7 bump chore(libp2p): k-0.52.8 bump Dec 17, 2024
@onur-ozkan onur-ozkan changed the title chore(libp2p): k-0.52.8 bump chore(libp2p): k-0.52.9 bump Dec 17, 2024
@onur-ozkan onur-ozkan changed the title chore(libp2p): k-0.52.9 bump chore(libp2p): k-0.52.10 bump Dec 17, 2024
@laruh
Copy link
Member

laruh commented Dec 17, 2024

I suggest next time we first review the PR in the repository we use as a dependency, and only after it is approved, review the PR in KDF that updates the dependency version. Otherwise, its hard to track code changes, especially if force push was used.

@laruh
Copy link
Member

laruh commented Dec 17, 2024

For the history, could you clarify why we dont need to check and remove topics with empty peers here?
KomodoPlatform/rust-libp2p@15b30da#diff-368386d6c30a7eb4d60fcddda689bba01e9e215451a387fa58ff93b12fb914deR2071
image

@onur-ozkan
Copy link
Member Author

I suggest next time we first review the PR in the repository we use as a dependency, and only after it is approved, review the PR in KDF that updates the dependency version. Otherwise, its hard to track code changes, especially if force push was used.

Sure, this is the first time our team decided to make review on libp2p changes, so I didn't know you guys wanted to make review on that.

For the history, could you clarify why we dont need to check and remove topics with empty peers here? KomodoPlatform/rust-libp2p@15b30da#diff-368386d6c30a7eb4d60fcddda689bba01e9e215451a387fa58ff93b12fb914deR2071 image

No big reason. @mariocynicys said doing that on disconnection should be enough and I didn't wanted to argue as it's not worth to discuss over that. Both are fine IMO.

Signed-off-by: onur-ozkan <[email protected]>
@onur-ozkan onur-ozkan changed the title chore(libp2p): k-0.52.10 bump chore(libp2p): k-0.52.11 bump Dec 18, 2024
Copy link
Member

@laruh laruh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the fix! LGTM!

@onur-ozkan onur-ozkan merged commit fe5a274 into dev Dec 18, 2024
16 of 25 checks passed
@onur-ozkan onur-ozkan deleted the libp2p-bump branch December 18, 2024 06:33
@laruh
Copy link
Member

laruh commented Dec 18, 2024

@mariocynicys if you think there are more places of improvements, I suggest you to open PR in https://github.com/KomodoPlatform/rust-libp2p/tree/debugging

@mariocynicys
Copy link
Collaborator

what if two seed peers are connected to each other? they will never delete the topic, no?

@onur-ozkan does the libp2p fix cover this case?

@onur-ozkan
Copy link
Member Author

Why would they delete topics if they are connected to each other?

@mariocynicys
Copy link
Collaborator

mariocynicys commented Dec 18, 2024

in light of the original issue: #771
maker - seed1 - seed2 - taker let's say this is how the messages for some swap are propagated, you can also replace seed1 - seed2 by any number of seeds in any configuration (not just a line): maker - p2p - taker.

if the maker and taker finish the swap and unsubscribe from it, doesn't this still leave us with intermediate nodes still subscribing?

@onur-ozkan
Copy link
Member Author

No it does not. Seed nodes do not subscribe/unsubscribe to topics. In your scenario seed nodes would only have maker and taker on the topic records without including the seed nodes.

@mariocynicys
Copy link
Collaborator

aha clear thanks

onur-ozkan added a commit that referenced this pull request Dec 19, 2024
* feat(LRAPI): add 1inch classic swap rpc (#2222)

This commit adds initial code to connect to 1inch Liquidity Routing API (LRAPI) provider and two new RPCs to use 1inch classic swap API. It also adds 'approve' and 'allowance' RPCs (for ERC20 tokens).

* chore(release): bump mm2 version to 2.3.0-beta (#2285)

* improvement(error-handling): main files (#2288)

Makes KDF to check main files (config/coins/etc..) before reading them to prevent potential panics.

* fix(rpc): remove character check blocking password input (#2287)

This commit removes check for <, >, & characters in RPC request bodies that was incorrectly blocking valid password characters in get_mnemonic RPC call. These special characters should be allowed in passwords.

This aligns native behavior with WASM implementation.

* don't rely on core (#2289)

Signed-off-by: onur-ozkan <[email protected]>

* chore(ctx): replace gstuff constructible with oncelock (#2267)

* chore(adex-cli): use "Komodo DeFi Framework" name in adex_cli  (#2290)

* bump libp2p (#2296)

Signed-off-by: onur-ozkan <[email protected]>

---------

Signed-off-by: onur-ozkan <[email protected]>
Co-authored-by: dimxy <[email protected]>
Co-authored-by: Onur Özkan <[email protected]>
Co-authored-by: Samuel Onoja <[email protected]>
Co-authored-by: DeckerSU <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
improvement: resource usage Improvements made on resource usage on runtime or/and compile time improvement: security Improvements made on runtime security priority: urgent Critical tasks requiring immediate action. status: pending review
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants