chore(deps): Bump github.com/ipfs/boxo from 0.13.1 to 0.15.0 (#2903)

Bumps [github.com/ipfs/boxo](https://github.com/ipfs/boxo) from 0.13.1
to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ipfs/boxo/releases">github.com/ipfs/boxo's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.0</h2>
<h2>Changed</h2>
<ul>
<li>🛠 Bumped to <a
href="https://github.com/libp2p/go-libp2p/releases/tag/v0.32.0"><code>go-libp2p</code>
0.32</a>.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Merge Release v0.14.0 by <a
href="https://github.com/hacdias"><code>@​hacdias</code></a> in <a
href="https://redirect.github.com/ipfs/boxo/pull/501">ipfs/boxo#501</a></li>
<li>chore: bump to [email protected] by <a
href="https://github.com/hacdias"><code>@​hacdias</code></a> in <a
href="https://redirect.github.com/ipfs/boxo/pull/503">ipfs/boxo#503</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ipfs/boxo/compare/v0.14.0...v0.15.0">https://github.com/ipfs/boxo/compare/v0.14.0...v0.15.0</a></p>
<h2>v0.14.0</h2>
<h3>Added</h3>
<ul>
<li><code>boxo/gateway</code>:
<ul>
<li>A new <code>WithResolver(...)</code> option can be used with
<code>NewBlocksBackend(...)</code> allowing the user to pass their
custom <code>Resolver</code> implementation.</li>
<li>The gateway now sets a <code>Cache-Control</code> header for
requests under the <code>/ipns/</code> namespace if the TTL for the
corresponding IPNS Records or DNSLink entities is known.</li>
</ul>
</li>
<li><code>boxo/bitswap/client</code>:
<ul>
<li>A new <code>WithoutDuplicatedBlockStats()</code> option can be used
with <code>bitswap.New</code> and <code>bsclient.New</code>. This
disable accounting for duplicated blocks, which requires a
<code>blockstore.Has()</code> lookup for every received block and thus,
can impact performance.</li>
</ul>
</li>
<li>✨ Migrated repositories into Boxo
<ul>
<li><a
href="https://pkg.go.dev/github.com/ipfs/kubo/peering"><code>github.com/ipfs/kubo/peering</code></a>
=&gt; <a
href="https://github.com/ipfs/boxo/blob/HEAD/peering"><code>https://github.com/ipfs/boxo/blob/HEAD/peering</code></a>
A service which establish, overwatch and maintain long lived
connections.</li>
<li><a
href="https://pkg.go.dev/github.com/ipfs/kubo/core/bootstrap"><code>github.com/ipfs/kubo/core/bootstrap</code></a>
=&gt; <a
href="https://github.com/ipfs/boxo/blob/HEAD/bootstrap">`https://github.com/ipfs/boxo/blob/HEAD/bootstrap</a>
A service that maintains connections to a number of bootstrap
peers.</li>
</ul>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>boxo/gateway</code>
<ul>
<li>🛠 The <code>IPFSBackend</code> interface was updated to make the
responses of the <code>Head</code> method more explicit. It now returns
a <code>HeadResponse</code> instead of a <code>files.Node</code>.</li>
</ul>
</li>
<li><code>boxo/routing/http/client.Client</code> is now exported. This
means you can now pass it around functions, or add it to a struct if you
want.</li>
<li>🛠 The <code>path</code> package has been massively refactored. With
this refactor, we have condensed the different path-related and/or
Kubo-specific packages under a single generic one. Therefore, there are
many breaking changes. Please consult the <a
href="https://pkg.go.dev/github.com/ipfs/boxo/path">documentation</a>
for more details on how to use the new package.
<ul>
<li>Note: content paths created with <code>boxo/path</code> are
automatically normalized:
<ul>
<li>Replace multiple slashes with a single slash.</li>
<li>Eliminate each <code>.</code> path name element (the current
directory).</li>
<li>Eliminate each inner <code>..</code> path name element (the parent
directory) along with the non-<code>..</code> element that precedes
it.</li>
<li>Eliminate <code>..</code> elements that begin a rooted path: that
is, replace &quot;<code>/..</code>&quot; by &quot;<code>/</code>&quot;
at the beginning of a path.</li>
</ul>
</li>
</ul>
</li>
<li>🛠 The signature of <code>CoreAPI.ResolvePath</code> in
<code>coreiface</code> has changed to now return the remainder segments
as a second return value, matching the signature of
<code>resolver.ResolveToLastNode</code>.</li>
<li>🛠 <code>routing/http/client.FindPeers</code> now returns
<code>iter.ResultIter[types.PeerRecord]</code> instead of
<code>iter.ResultIter[types.Record]</code>. The specification indicates
that records for this method will always be Peer Records.</li>
<li>🛠 The <code>namesys</code> package has been refactored. The
following are the largest modifications:
<ul>
<li>The options in <code>coreiface/options/namesys</code> have been
moved to <code>namesys</code> and their names have been made more
consistent.</li>
<li>Many of the exported structs and functions have been renamed in
order to be consistent with the remaining packages.</li>
<li><code>namesys.Resolver.Resolve</code> now returns a TTL, in addition
to the resolved path. If the TTL is unknown, 0 is returned.
<code>IPNSResolver</code> is able to resolve a TTL, while
<code>DNSResolver</code> is not.</li>
<li><code>namesys/resolver.ResolveIPNS</code> has been moved to
<code>namesys.ResolveIPNS</code> and now returns a TTL
in addition to the resolved path.</li>
</ul>
</li>
<li>✨ <code>boxo/ipns</code> record defaults follow recommendations from
<a href="https://specs.ipfs.tech/ipns/ipns-record/#ipns-record">IPNS
Record Specification</a>:
<ul>
<li><code>DefaultRecordTTL</code> is now set to <code>1h</code></li>
<li><code>DefaultRecordLifetime</code> follows the increased expiration
window of Amino DHT (<a
href="https://redirect.github.com/libp2p/go-libp2p-kad-dht/pull/793">go-libp2p-kad-dht#793</a>)
and is set to <code>48h</code></li>
</ul>
</li>
<li>🛠 The <code>gateway</code>'s <code>IPFSBackend.ResolveMutable</code>
is now expected to return a TTL in addition to the resolved path. If the
TTL is unknown, 0 should be returned.</li>
</ul>
<h3>Removed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ipfs/boxo/blob/main/CHANGELOG.md">github.com/ipfs/boxo's
changelog</a>.</em></p>
<blockquote>
<h2>[v0.15.0]</h2>
<h3>Changed</h3>
<ul>
<li>🛠 Bumped to <a
href="https://github.com/libp2p/go-libp2p/releases/tag/v0.32.0"><code>go-libp2p</code>
0.32</a>.</li>
</ul>
<h2>[v0.14.0]</h2>
<h3>Added</h3>
<ul>
<li><code>boxo/gateway</code>:
<ul>
<li>A new <code>WithResolver(...)</code> option can be used with
<code>NewBlocksBackend(...)</code> allowing the user to pass their
custom <code>Resolver</code> implementation.</li>
<li>The gateway now sets a <code>Cache-Control</code> header for
requests under the <code>/ipns/</code> namespace if the TTL for the
corresponding IPNS Records or DNSLink entities is known.</li>
</ul>
</li>
<li><code>boxo/bitswap/client</code>:
<ul>
<li>A new <code>WithoutDuplicatedBlockStats()</code> option can be used
with <code>bitswap.New</code> and <code>bsclient.New</code>. This
disable accounting for duplicated blocks, which requires a
<code>blockstore.Has()</code> lookup for every received block and thus,
can impact performance.</li>
</ul>
</li>
<li>✨ Migrated repositories into Boxo
<ul>
<li><a
href="https://pkg.go.dev/github.com/ipfs/kubo/peering"><code>github.com/ipfs/kubo/peering</code></a>
=&gt; <a
href="https://github.com/ipfs/boxo/blob/main/peering"><code>https://github.com/ipfs/boxo/blob/main/peering</code></a>
A service which establish, overwatch and maintain long lived
connections.</li>
<li><a
href="https://pkg.go.dev/github.com/ipfs/kubo/core/bootstrap"><code>github.com/ipfs/kubo/core/bootstrap</code></a>
=&gt; <a
href="https://github.com/ipfs/boxo/blob/main/bootstrap">`https://github.com/ipfs/boxo/blob/main/bootstrap</a>
A service that maintains connections to a number of bootstrap
peers.</li>
</ul>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>boxo/gateway</code>
<ul>
<li>🛠 The <code>IPFSBackend</code> interface was updated to make the
responses of the
<code>Head</code> method more explicit. It now returns a
<code>HeadResponse</code> instead of a
<code>files.Node</code>.</li>
</ul>
</li>
<li><code>boxo/routing/http/client.Client</code> is now exported. This
means you can now pass
it around functions, or add it to a struct if you want.</li>
<li>🛠 The <code>path</code> package has been massively refactored. With
this refactor, we have
condensed the different path-related and/or Kubo-specific packages under
a single generic one. Therefore, there
are many breaking changes. Please consult the <a
href="https://pkg.go.dev/github.com/ipfs/boxo/path">documentation</a>
for more details on how to use the new package.
<ul>
<li>Note: content paths created with <code>boxo/path</code> are
automatically normalized:
<ul>
<li>Replace multiple slashes with a single slash.</li>
<li>Eliminate each <code>.</code> path name element (the current
directory).</li>
<li>Eliminate each inner <code>..</code> path name element (the parent
directory) along with the non-<code>..</code> element that precedes
it.</li>
<li>Eliminate <code>..</code> elements that begin a rooted path: that
is, replace &quot;<code>/..</code>&quot; by &quot;<code>/</code>&quot;
at the beginning of a path.</li>
</ul>
</li>
</ul>
</li>
<li>🛠 The signature of <code>CoreAPI.ResolvePath</code> in
<code>coreiface</code> has changed to now return
the remainder segments as a second return value, matching the signature
of <code>resolver.ResolveToLastNode</code>.</li>
<li>🛠 <code>routing/http/client.FindPeers</code> now returns
<code>iter.ResultIter[types.PeerRecord]</code> instead of
<code>iter.ResultIter[types.Record]</code>. The specification indicates
that records for this method will always be Peer Records.</li>
<li>🛠 The <code>namesys</code> package has been refactored. The
following are the largest modifications:
<ul>
<li>The options in <code>coreiface/options/namesys</code> have been
moved to <code>namesys</code> and their names
have been made more consistent.</li>
<li>Many of the exported structs and functions have been renamed in
order to be consistent with
the remaining packages.</li>
<li><code>namesys.Resolver.Resolve</code> now returns a TTL, in addition
to the resolved path. If the
TTL is unknown, 0 is returned. <code>IPNSResolver</code> is able to
resolve a TTL, while <code>DNSResolver</code>
is not.</li>
<li><code>namesys/resolver.ResolveIPNS</code> has been moved to
<code>namesys.ResolveIPNS</code> and now returns a TTL</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ipfs/boxo/commit/521f8d49a3fb0b73c0dabf707aa2abad4b2011b6"><code>521f8d4</code></a>
Merge pull request <a
href="https://redirect.github.com/ipfs/boxo/issues/505">#505</a> from
ipfs/release-v0.15.0</li>
<li><a
href="https://github.com/ipfs/boxo/commit/5af54b2f5e4c2fbb93ba0df078d0b454a3c23fb3"><code>5af54b2</code></a>
chore: release 0.15.0</li>
<li><a
href="https://github.com/ipfs/boxo/commit/75ca06eaae7c37543071cc646fb6bb31b1e696c3"><code>75ca06e</code></a>
docs: release notes for 0.15.0</li>
<li><a
href="https://github.com/ipfs/boxo/commit/3982cdc4496ddb534da6f3398063f3a14c651978"><code>3982cdc</code></a>
chore: bump to [email protected]</li>
<li><a
href="https://github.com/ipfs/boxo/commit/9c228122b7b869570a77540bff43a1aa82bc4a9a"><code>9c22812</code></a>
Merge pull request <a
href="https://redirect.github.com/ipfs/boxo/issues/501">#501</a> from
ipfs/release</li>
<li><a
href="https://github.com/ipfs/boxo/commit/07c57196b1d3c8b42c3f13b20c2f67103f9d834c"><code>07c5719</code></a>
Merge pull request <a
href="https://redirect.github.com/ipfs/boxo/issues/500">#500</a> from
ipfs/release-v0.14.0</li>
<li><a
href="https://github.com/ipfs/boxo/commit/50f0e2c6e631a03f493fc8ddd60b7830e95d8bec"><code>50f0e2c</code></a>
chore: bump version to 0.14.0</li>
<li><a
href="https://github.com/ipfs/boxo/commit/66c76e5aa17b9d6a4f0a364e8517048d14a60bcc"><code>66c76e5</code></a>
docs: update changelog for 0.14.0</li>
<li><a
href="https://github.com/ipfs/boxo/commit/08b11e5df06e411114781fcff276338baefb0806"><code>08b11e5</code></a>
Merge pull request <a
href="https://redirect.github.com/ipfs/boxo/issues/474">#474</a> from
ipfs/chore/migrate-bootstrap</li>
<li><a
href="https://github.com/ipfs/boxo/commit/45426dbd133ae7eaa473d4bc3e5eff88ea6d113f"><code>45426db</code></a>
Update bootstrap/bootstrap.go</li>
<li>Additional commits viewable in <a
href="https://github.com/ipfs/boxo/compare/v0.13.1...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/ipfs/boxo&package-manager=go_modules&previous-version=0.13.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

go.mod

@@ -28,17 +28,17 @@ require (
 	github.com/hashicorp/go-retryablehttp v0.7.4
 	github.com/hashicorp/golang-lru/v2 v2.0.7
 	github.com/imdario/mergo v0.3.16
-	github.com/ipfs/boxo v0.13.1
+	github.com/ipfs/boxo v0.15.0
 	github.com/ipfs/go-block-format v0.2.0
 	github.com/ipfs/go-cid v0.4.1
 	github.com/ipfs/go-datastore v0.6.0
 	github.com/ipfs/go-ipld-cbor v0.1.0
 	github.com/ipfs/go-ipld-format v0.6.0
 	github.com/ipfs/go-log/v2 v2.5.1
 	github.com/ipld/go-car v0.6.2
-	github.com/libp2p/go-libp2p v0.31.0
+	github.com/libp2p/go-libp2p v0.32.0
 	github.com/libp2p/go-libp2p-kad-dht v0.25.1
-	github.com/libp2p/go-libp2p-pubsub v0.9.3
+	github.com/libp2p/go-libp2p-pubsub v0.10.0
 	github.com/libp2p/go-libp2p-record v0.2.0
 	github.com/libp2p/go-libp2p-routing-helpers v0.7.3
 	github.com/mitchellh/go-homedir v1.1.0
@@ -67,7 +67,7 @@ require (
 	go.uber.org/fx v1.20.1
 	go.uber.org/zap v1.26.0
 	golang.org/x/crypto v0.14.0
-	golang.org/x/exp v0.0.0-20230905200255-921286631fa9
+	golang.org/x/exp v0.0.0-20231006140011-7918f672742d
 	golang.org/x/sync v0.5.0
 	golang.org/x/text v0.14.0
 	google.golang.org/grpc v1.59.0
@@ -84,6 +84,7 @@ require (
 	github.com/ethereum/c-kzg-4844 v0.3.1 // indirect
 	github.com/mmcloughlin/addchain v0.4.0 // indirect
 	github.com/supranational/blst v0.3.11 // indirect
+	go.uber.org/mock v0.3.0 // indirect
 	rsc.io/tmplfunc v0.0.3 // indirect
 )
 
@@ -175,7 +176,7 @@ require (
 	github.com/google/go-cmp v0.5.9 // indirect
 	github.com/google/gopacket v1.1.19 // indirect
 	github.com/google/orderedcode v0.0.1 // indirect
-	github.com/google/pprof v0.0.0-20230821062121-407c9e7a662f // indirect
+	github.com/google/pprof v0.0.0-20231023181126-ff6d637d2a7b // indirect
 	github.com/google/s2a-go v0.1.4 // indirect
 	github.com/google/uuid v1.3.1 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.2.4 // indirect
@@ -229,7 +230,7 @@ require (
 	github.com/jmespath/go-jmespath v0.4.0 // indirect
 	github.com/jmhodges/levigo v1.0.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
-	github.com/klauspost/compress v1.16.7 // indirect
+	github.com/klauspost/compress v1.17.2 // indirect
 	github.com/klauspost/cpuid/v2 v2.2.5 // indirect
 	github.com/klauspost/reedsolomon v1.11.8 // indirect
 	github.com/koron/go-ssdp v0.0.4 // indirect
@@ -249,9 +250,9 @@ require (
 	github.com/manifoldco/promptui v0.9.0 // indirect
 	github.com/marten-seemann/tcp v0.0.0-20210406111302-dfbc87cc63fd // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
-	github.com/mattn/go-isatty v0.0.19 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
-	github.com/miekg/dns v1.1.55 // indirect
+	github.com/miekg/dns v1.1.56 // indirect
 	github.com/mikioh/tcpinfo v0.0.0-20190314235526-30a79bb1804b // indirect
 	github.com/mikioh/tcpopt v0.0.0-20190314235656-172688c1accc // indirect
 	github.com/mimoo/StrobeGo v0.0.0-20210601165009-122bf33a46e0 // indirect
@@ -265,9 +266,9 @@ require (
 	github.com/multiformats/go-multiaddr-fmt v0.1.0 // indirect
 	github.com/multiformats/go-multibase v0.2.0 // indirect
 	github.com/multiformats/go-multicodec v0.9.0 // indirect
-	github.com/multiformats/go-multistream v0.4.1 // indirect
+	github.com/multiformats/go-multistream v0.5.0 // indirect
 	github.com/multiformats/go-varint v0.0.7 // indirect
-	github.com/onsi/ginkgo/v2 v2.11.0 // indirect
+	github.com/onsi/ginkgo/v2 v2.13.0 // indirect
 	github.com/opencontainers/runtime-spec v1.1.0 // indirect
 	github.com/opentracing/opentracing-go v1.2.0 // indirect
 	github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58 // indirect
@@ -283,9 +284,9 @@ require (
 	github.com/prometheus/procfs v0.11.1 // indirect
 	github.com/pyroscope-io/godeltaprof v0.1.2 // indirect
 	github.com/quic-go/qpack v0.4.0 // indirect
-	github.com/quic-go/qtls-go1-20 v0.3.3 // indirect
-	github.com/quic-go/quic-go v0.38.1 // indirect
-	github.com/quic-go/webtransport-go v0.5.3 // indirect
+	github.com/quic-go/qtls-go1-20 v0.3.4 // indirect
+	github.com/quic-go/quic-go v0.39.3 // indirect
+	github.com/quic-go/webtransport-go v0.6.0 // indirect
 	github.com/rakyll/statik v0.1.7 // indirect
 	github.com/raulk/go-watchdog v1.3.0 // indirect
 	github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
@@ -319,14 +320,14 @@ require (
 	go.opentelemetry.io/otel/exporters/otlp/otlpmetric v0.42.0 // indirect
 	go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.15.1 // indirect
 	go.uber.org/atomic v1.11.0 // indirect
-	go.uber.org/dig v1.17.0 // indirect
+	go.uber.org/dig v1.17.1 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/mod v0.12.0 // indirect
+	golang.org/x/mod v0.13.0 // indirect
 	golang.org/x/net v0.17.0 // indirect
 	golang.org/x/oauth2 v0.11.0 // indirect
 	golang.org/x/sys v0.13.0 // indirect
 	golang.org/x/term v0.13.0 // indirect
-	golang.org/x/tools v0.13.0 // indirect
+	golang.org/x/tools v0.14.0 // indirect
 	golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
 	gonum.org/v1/gonum v0.13.0 // indirect
 	google.golang.org/api v0.128.0 // indirect