What's Changed

• Release v1.17.0 by @hsanjuan in #281
• feat: retrieval-timeout & max-concurrent-requests by @lidel in #285
• chore: boxo master with final boxo#994 by @lidel in #287
• Always upgrade pebble data format to latest by @gammazero in #288
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #290
• feat(config): AutoConf with "auto" placeholders by @lidel in #286

Full Changelog: v1.17.0...v1.18.0

Added

• Support for RAINBOW_HTTP_RETRIEVAL_MAX_DONT_HAVE_ERRORS, allows limiting
  the number of optimistic block requests performed against endpoints that
  fail to provide any of those blocks. See the Envirionment variables
  documentation for more details.
• Support for RAINBOW_HTTP_RETRIEVAL_METRICS_LABELS_FOR_ENDPOINTS which
  brings back the possiblity of tagging requests metrics with the endpoint the
  request is sent to. See the Envirionment variables documentation for more
  details.

Changed

• upgrade to Boxo v0.33.1

Fixed

• Fix an issue in HTTP retrievals: #283.
• Fix goroutine leak present in v1.16.0 (withdrawn) (#278).

Removed

Security

Full Changelog: v1.15.0...v1.17.0

[v1.15.0]

Added

Changed

• http-retrieval-enable is now enabled by default. HTTP Retrieval can be disabled with
  RAINBOW_HTTP_RETRIEVAL_ENABLE=false. #270
• upgrade to Boxo v0.33.1-0.20250716194104-2c5f80a98e46

Fixed

• Setting export RAINBOW_HTTP_RETRIEVAL_ALLOWLIST= allowed to enable HTTP
  retrieval with an empty allowlist, so no HTTP requests would be
  performed. This is a footgun, therefore from now on this is interpreted as
  no allowlist being set. HTTP Retrieval can be disabled with
  RAINBOW_HTTP_RETRIEVAL_ENABLE=false instead. #269
• Fix periodicGC that runs before the previous run has finished if the
  interval is too short #273.
• Fix issue where http retrievals silently stop (ipfs/boxo#979).

Removed

Security

Changed

• upgrade to Boxo v0.32.0

This release was brought to you by the Shipyard team.

What's Changed

Added

• New option --http-retrieval-denylist. It can be used to avoid connecting to disallowed hosts.

Changed

• upgrade to Boxo v0.30.0
• upgrade go-ds-xxx packages to support go-datastore v0.8.2 query API
• updated go-libp2p to v0.41.1

Fixed

• Fix exporting of routing http client metrics: the endpoint will now include ipfs_routing_http_client_* metrics routing clients are used. See docs/metrics.md for more details.

Security

• This release upgrades quic-go to v0.50.1. It contains a fix for a remote-triggered panic.

Full Changelog: v1.12.0...v1.13.0

This release was brought to you by the Shipyard team.

What's Changed

Added

• HTTP block retrieval support: rainbow can now use Trustless HTTP Gateways to perform block retrievals in parallel to Bitswap.
  • This takes advantage of peers with /tls + /http multiaddrs (HTTPS is required).
  • You can enable HTTP retrievals with --http-retrieval-enable, and limit it to urls of specific hostnames with --http-retrieval-allowlist <hostname>.
  • You can also ignore provider records from certain peer IDs with --routing-ignore-providers <peerID> (for example to ignore peer IDs from bitswap endpoints of providers that offer HTTP).
  • NOTE: this feature works in the same way as Bitswap: known HTTP-peers receive optimistic block requests even for content that they are not announcing. See Boxo's CHANGELOG for more information.

Full Changelog: v1.11.0...v1.12.0

This release was brought to you by the Shipyard team.

What's Changed

Changed

• The default DNSLink resolver for .eth TLD changed to https://dns.eth.limo/dns-query and .crypto one changed to https://resolver.unstoppable.io/dns-query #231
• Upgrade to Boxo v0.28.0
• Upgrade go-ds-pebble to v0.4.2 and pebble to v1.1.4
• updated go-libp2p to v0.40.0
• require minimum go version 1.24 in go.mod

Full Changelog: v1.10.1...v1.11.0

This release was brought to you by the Shipyard team.

What's Changed

• feat: custom dnslink resolvers by @aschmahmann in #224

Full Changelog: v1.10.0...v1.10.1

This release was brought to you by the Shipyard team.

What's Changed

• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.30.0 by @dependabot in #209
• chore(deps): bump github.com/multiformats/go-multiaddr from 0.13.0 to 0.14.0 by @dependabot in #208
• chore(deps): bump github.com/urfave/cli/v2 from 2.27.4 to 2.27.5 by @dependabot in #211
• chore(deps): bump github.com/dgraph-io/badger/v4 from 4.4.0 to 4.5.0 by @dependabot in #207
• chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 by @dependabot in #212
• Upgrade to Boxo v0.26.0 by @gammazero in #220
• chore(deps): bump go.opentelemetry.io/otel from 1.32.0 to 1.33.0 by @dependabot in #216
• [skip changelog] deps: bubble new version of nopfs by @hsanjuan in #213
• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.32.0 to 1.33.0 by @dependabot in #214

Full Changelog: v1.9.0...v1.10.0

This release was brought to you by the Shipyard team.

What's Changed

• feat: purge peer connections and information by @gammazero in #194
• chore: boxo v0.24.3 + kad-dht v0.28.1 by @aschmahmann in #200
• Error instead of dropping unauthorized headers by @aschmahmann in #201
• feat: increase routing limits by @aschmahmann in #154
• feat: add flags to configure bitswap tuning params by @gammazero in #203
• Update boxo by @gammazero in #204
• Upgrade to Boxo v0.25.0 by @gammazero in #205
• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.29.0 to 1.32.0 by @dependabot in #195
• chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.52.0 to 0.57.0 by @dependabot in #197
• chore(deps): bump go.opentelemetry.io/contrib/propagators/autoprop from 0.52.0 to 0.57.0 by @dependabot in #198

Full Changelog: v1.8.3...v1.9.0

This release was brought to you by the Shipyard team.