Merge pull request #10930 from ipfs/release-v0.37.0

Release v0.37.0

Author: lidel

.codespell-ignore

@@ -0,0 +1,6 @@
+ignoreWords:
+  - childs # This spelling is used in the files command
+  - NodeCreater # This spelling is used in the fuse dependency
+  - Boddy # One of the contributors to the project - Chris Boddy
+  - Botto # One of the contributors to the project - Santiago Botto
+  - cose # dag-cose

.cspell.yml

@@ -15,3 +15,23 @@ LICENSE text eol=auto
 # Binary assets
 assets/init-doc/*          binary
 core/coreunix/test_data/** binary
+test/cli/migrations/testdata/** binary
+
+# Generated test data
+test/cli/migrations/testdata/** linguist-generated=true
+test/cli/autoconf/testdata/** linguist-generated=true
+test/cli/fixtures/** linguist-generated=true
+test/sharness/t0054-dag-car-import-export-data/** linguist-generated=true
+test/sharness/t0109-gateway-web-_redirects-data/** linguist-generated=true
+test/sharness/t0114-gateway-subdomains/** linguist-generated=true
+test/sharness/t0115-gateway-dir-listing/** linguist-generated=true
+test/sharness/t0116-gateway-cache/** linguist-generated=true
+test/sharness/t0119-prometheus-data/** linguist-generated=true
+test/sharness/t0165-keystore-data/** linguist-generated=true
+test/sharness/t0275-cid-security-data/** linguist-generated=true
+test/sharness/t0280-plugin-dag-jose-data/** linguist-generated=true
+test/sharness/t0280-plugin-data/** linguist-generated=true
+test/sharness/t0280-plugin-git-data/** linguist-generated=true
+test/sharness/t0400-api-no-gateway/** linguist-generated=true
+test/sharness/t0701-delegated-routing-reframe/** linguist-generated=true
+test/sharness/t0702-delegated-routing-http/** linguist-generated=true

.gitattributes

@@ -29,12 +29,12 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Setup Go
       uses: actions/setup-go@v5
       with:
-        go-version: 1.24.x
+        go-version: 1.25.x
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,62 @@
+# This workflow performs a quick Docker build check on PRs and pushes to master.
+# It builds the Docker image and runs a basic smoke test to ensure the image works.
+# This is a lightweight check - for full multi-platform builds and publishing, see docker-image.yml
+name: Docker Check
+
+on:
+  workflow_dispatch:
+  pull_request:
+    paths-ignore:
+      - '**/*.md'
+  push:
+    branches:
+      - 'master'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event_name == 'push' && github.sha || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    if: github.repository == 'ipfs/kubo' || github.event_name == 'workflow_dispatch'
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v5
+      - uses: hadolint/hadolint-action@v3.1.0
+        with:
+          dockerfile: Dockerfile
+          failure-threshold: warning
+          verbose: true
+          format: tty
+
+  build:
+    if: github.repository == 'ipfs/kubo' || github.event_name == 'workflow_dispatch'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    env:
+      IMAGE_NAME: ipfs/kubo
+      WIP_IMAGE_TAG: wip
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@v5
+      
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      
+      - name: Build Docker image with BuildKit
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: false
+          load: true
+          tags: ${{ env.IMAGE_NAME }}:${{ env.WIP_IMAGE_TAG }}
+          cache-from: |
+            type=gha
+            type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=gha,mode=max
+      
+      - name: Test Docker image
+        run: docker run --rm $IMAGE_NAME:$WIP_IMAGE_TAG --version

.github/workflows/docker-build.yml

@@ -1,3 +1,7 @@
+# This workflow builds and publishes official Docker images to Docker Hub.
+# It handles multi-platform builds (amd64, arm/v7, arm64/v8) and pushes tagged releases.
+# This workflow is triggered on tags, specific branches, and can be manually dispatched.
+# For quick build checks during development, see docker-check.yml
 name: Docker Push
 
 on:
@@ -38,21 +42,19 @@ jobs:
       LEGACY_IMAGE_NAME: ipfs/go-ipfs
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Cache Docker layers
-        uses: actions/cache@v4
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
         with:
-          path: /tmp/.buildx-cache
-          key: ${{ runner.os }}-buildx-${{ github.sha }}
-          restore-keys: |
-            ${{ runner.os }}-buildx-
+          username: ${{ vars.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Get tags
         id: tags
@@ -63,12 +65,6 @@ jobs:
           echo "EOF" >> $GITHUB_OUTPUT
         shell: bash
 
-      - name: Log in to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ vars.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
-
       # We have to build each platform separately because when using multi-arch
       # builds, only one platform is being loaded into the cache. This would
       # prevent us from testing the other platforms.
@@ -81,8 +77,10 @@ jobs:
           load: true
           file: ./Dockerfile
           tags: ${{ env.IMAGE_NAME }}:linux-amd64
-          cache-from: type=local,src=/tmp/.buildx-cache
-          cache-to: type=local,dest=/tmp/.buildx-cache-new
+          cache-from: |
+            type=gha
+            type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=gha,mode=max
 
       - name: Build Docker image (linux/arm/v7)
         uses: docker/build-push-action@v6
@@ -93,8 +91,10 @@ jobs:
           load: true
           file: ./Dockerfile
           tags: ${{ env.IMAGE_NAME }}:linux-arm-v7
-          cache-from: type=local,src=/tmp/.buildx-cache
-          cache-to: type=local,dest=/tmp/.buildx-cache-new
+          cache-from: |
+            type=gha
+            type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=gha,mode=max
 
       - name: Build Docker image (linux/arm64/v8)
         uses: docker/build-push-action@v6
@@ -105,8 +105,10 @@ jobs:
           load: true
           file: ./Dockerfile
           tags: ${{ env.IMAGE_NAME }}:linux-arm64-v8
-          cache-from: type=local,src=/tmp/.buildx-cache
-          cache-to: type=local,dest=/tmp/.buildx-cache-new
+          cache-from: |
+            type=gha
+            type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=gha,mode=max
 
       # We test all the images on amd64 host here. This uses QEMU to emulate
       # the other platforms.
@@ -132,12 +134,9 @@ jobs:
           push: true
           file: ./Dockerfile
           tags: "${{ github.event.inputs.tags || steps.tags.outputs.value }}"
-          cache-from: type=local,src=/tmp/.buildx-cache-new
-          cache-to: type=local,dest=/tmp/.buildx-cache-new
-
-      # https://github.com/docker/build-push-action/issues/252
-      # https://github.com/moby/buildkit/issues/1896
-      - name: Move cache to limit growth
-        run: |
-          rm -rf /tmp/.buildx-cache
-          mv /tmp/.buildx-cache-new /tmp/.buildx-cache
+          cache-from: |
+            type=gha
+            type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
+          cache-to: |
+            type=gha,mode=max
+            type=registry,ref=${{ env.IMAGE_NAME }}:buildcache,mode=max

.github/workflows/docker-check.yml

@@ -49,12 +49,12 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.24.x
+          go-version: 1.25.x
       - uses: protocol/cache-go-action@v1
         with:
           name: ${{ github.job }}
       - name: Checkout kubo-gateway
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           path: kubo-gateway
       - name: Build kubo-gateway
@@ -136,12 +136,12 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.24.x
+          go-version: 1.25.x
       - uses: protocol/cache-go-action@v1
         with:
           name: ${{ github.job }}
       - name: Checkout kubo-gateway
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           path: kubo-gateway
       - name: Build kubo-gateway

.github/workflows/docker-image.yml

@@ -30,8 +30,8 @@ jobs:
     steps:
       - uses: actions/setup-go@v5
         with:
-          go-version: 1.24.x
-      - uses: actions/checkout@v4
+          go-version: 1.25.x
+      - uses: actions/checkout@v5
       - run: make cmd/ipfs-try-build
         env:
           TEST_FUSE: 1

.github/workflows/gateway-conformance.yml

@@ -22,12 +22,12 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: recursive
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.24.x"
+          go-version: "1.25.x"
       - name: Check that go.mod is tidy
         uses: protocol/multiple-go-modules@v1.4
         with: