docs/changelogs/v0.42.md
<a href="https://ipshipyard.com/"></a>
This release was brought to you by the Shipyard team.
ipfs provide once--local-onlyProvide.DHT.Interval=0 no longer disables providingSwarm.AddrFiltersipfs provide onceipfs provide once <cid>... announces CIDs to the routing system immediately, without waiting for the next scheduled reprovide. Use it when you want fine-grained control over when specific CIDs are announced.
CIDs can be streamed in on stdin, so you can pipe arbitrarily large lists without growing daemon memory:
# Announce every locally pinned CID.
ipfs pin ls | awk '{print $1}' | ipfs provide once
# Announce every block reachable from a root (here, ~350 GiB of Wikipedia).
ipfs refs -r bafybeiaysi4s6lnjev27ln5icwm6tueaw2vdykrtjkwiphwekaywqhcjze | ipfs provide once
In a terminal, the command shows a running count of queued CIDs. With --enc=json it emits one {"Queued":"<cid>"} line per CID, so downstream scripts can consume events as they arrive.
ipfs routing provide keeps working but is deprecated. See ipfs provide once --help for usage and migration notes.
--local-onlyipfs dag export --local-only writes a CAR with only the blocks you have locally; any missing blocks (and their subtrees) are skipped instead of failing the export. ipfs dag import --local-only reads such a partial CAR without trying to pin its roots.
This is useful when:
--local-only sets the matching companion flag automatically: on export it implies --offline; on import it implies --pin-roots=false. See ipfs dag export --help and ipfs dag import --help for details.
Provide.DHT.Interval=0 no longer disables providingProvide.DHT.Interval=0 now disables only the periodic reprovide schedule. New CIDs still announce via fast-provide-root and ipfs provide once. To fully disable providing, set Provide.Enabled=false.
[!IMPORTANT] The daemon now refuses to start when
Provide.DHT.Interval=0is set without an explicitProvide.Enabled. Operators upgrading from an earlier kubo version must opt in to one of the two semantics:
Provide.Enabled=falseto fully disable providing (the previous behaviour ofInterval=0).Provide.Enabled=trueto keep ad-hoc providing while skipping the periodic reprovide schedule.The startup error names both options. Pick the one that matches your intent.
ipfs pin ls, ipfs add, and other pin-touching operations could block for hours on nodes running with Provide.Strategy set to pinned, roots, or pinned+mfs (including +unique / +entities variants). The pin index held a read lock for the entire reprovide cycle, which on large pinsets takes many hours. Any pin operation issued during that window blocked, and further pin ls / ipfs add calls piled up behind it until the cycle finished.
The pinner now snapshots the index under the read lock and releases it before the reprovider starts, so pin operations are no longer blocked by the reprovide cycle. The default Provide.Strategy=all was not affected.
The one-time migration for repos from go-ipfs or Kubo older than v0.27 now retries across several gateways with HTTP timeouts, so a single slow or blocked gateway no longer hangs the daemon. Set Migration.DownloadSources to use your own gateway list.
Sending SIGTERM or SIGINT to kubo could leave the daemon stuck "half-shutdown": internal subsystems had stopped, but the process kept running and answering the RPC API. Docker and Kubernetes health checks reported the node as healthy while it had quietly stopped serving content. Recovery required a manual docker restart. Separately, the pinner could log a pebble: closed panic trace when the datastore closed before ongoing pin operations finished.
What changed:
Bounded shutdown. A new Internal.ShutdownTimeout caps how long a stuck shutdown can run, so a zombie daemon recovers instead of staying half-alive. Routine shutdowns finish in seconds; this is a belt-and-suspenders ceiling against unknown bugs and future regressions. The 12-hour default is high enough that no real-world deployment hits it and low enough to recycle a stuck node well before its DHT provider records expire (22 hours). On expiry, the daemon logs which subsystem failed and exits with status 1. Set 0 to disable.
ipfs diag healthy subcommand. Returns non-zero as soon as shutdown begins, even if the RPC API still answers. The kubo Docker image's HEALTHCHECK now uses it, so under --restart=on-failure or a Kubernetes liveness probe a half-shutdown daemon is recycled within seconds.
Pinner shuts down cleanly. The pinner cancels and waits for ongoing pin work before the datastore closes, removing the pebble: closed panic trace from shutdown logs.
DHT provider deadlines. ipfs provide stat now returns promptly when the caller cancels, instead of blocking on a slow keystore lookup (previously seen at over an hour). Each provider record sent to a peer is capped by Provide.DHT.SendProviderRecordTimeout, so an unresponsive peer cannot stall a reprovide cycle.
Swarm.AddrFiltersIf you list a specific address in Addresses.Swarm and a rule in Swarm.AddrFilters blocks it, no incoming connection reaches that listener. Kubo now logs one ERROR per such listener, naming the listener, the matching rule, and the field to remove the rule from.
The common trigger: a /ip4/127.0.0.1/tcp/.../ws listener fronted by nginx or Caddy on a server-profile node. The profile adds /ip4/127.0.0.0/ipcidr/8 to Swarm.AddrFilters, which rejects every proxy connection over loopback. See the reverse-proxy override row for the fix.
Wildcard listens (/ip4/0.0.0.0, /ip6/::) stay out of the ERROR log. Even if their interface expansion lands inside a filtered CIDR, the listener still accepts traffic on the interfaces outside that CIDR, so the filter is working as intended. These matches log at DEBUG instead, so you can still trace which interfaces an AddrFilters rule strips when you need to.
Addresses.NoAnnounce matches also log at DEBUG. Hiding addresses there is the point of the field, but the log line helps when you ask "why isn't this interface in my identify or DHT records?" and the answer is a CIDR rule you forgot you set.
The Prometheus endpoint no longer emits the otel_scope_info metric. Each metric now carries otel_scope_name, otel_scope_version, and otel_scope_schema_url labels identifying the instrumentation library that produced it. Update dashboards or queries that read otel_scope_info to consume these labels instead. See docs/metrics.md for details.
ipfs add, ipfs cat, and ipfs get now hide their progress bar when stderr is piped or redirected, so a command like ipfs add file 2> log.txt no longer fills the log with progress-bar noise. Pass --progress=true to force the bar on, or --progress=false to hide it.
ipfs dag export and ipfs dag stat now correctly recognize MSYS2 and Git Bash terminals on Windows. Previously the bar was suppressed there even when running interactively.
go-libp2p-pubsub to v0.16.0go-libp2p-kad-dht to v0.40.0 (incl. v0.39.2)go-fuse/v2 to v2.10.1 (incl. v2.10.0)cheggaaa/pb to v3.1.7boxo to v0.40.0p2p-forge/client to v0.9.0 (incl. v0.8.1)ipfs provide once and support Interval=0 mode (#11321) (ipfs/kubo#11321)st_blocks and st_blksize (#11280) (ipfs/kubo#11280)car put-block command (#629) (ipld/go-car#629)supportsPartialsupportsPartial field in SubOpts| Contributor | Commits | Lines ยฑ | Files Changed |
|---|---|---|---|
| @lidel | 42 | +7059/-920 | 188 |
| @MarcoPolo | 43 | +5818/-2113 | 122 |
| @guillaumemichel | 8 | +1422/-165 | 17 |
| @ChayanDass | 2 | +421/-18 | 10 |
| @parkan | 1 | +339/-0 | 3 |
| @gammazero | 12 | +142/-135 | 28 |
| @Vinayak9769 | 1 | +145/-78 | 10 |
| @laciferin2024 | 1 | +209/-0 | 3 |
| @rvagg | 4 | +160/-18 | 6 |
| @Wondertan | 1 | +154/-4 | 4 |
| @cortze | 1 | +125/-19 | 5 |
| @sukunrt | 3 | +58/-27 | 5 |
| @davidebeatrici | 1 | +55/-30 | 4 |
| @hsanjuan | 1 | +33/-15 | 5 |
| @willscott | 1 | +10/-2 | 2 |