[dependabot]

Bumps the all-go-deps group with 1 update in the / directory: filippo.io/sunlight.

Updates filippo.io/sunlight from 0.9.0 to 0.10.2

Release notes

Sourced from filippo.io/sunlight's releases.

Sunlight v0.10.2

No release notes provided.

Sunlight v0.10.1

No release notes provided.

Sunlight v0.10.0

Breaking changes

The go.mod now requires Go 1.27.0.

Witnesses now require localdirectory or s3bucket.

Running Sunlight or Skylight behind a reverse proxy now requires setting the new trustreverseproxy option. The use of reverse proxies is not recommended.

Sunlight

The deduplication cache now keeps all interior pages in memory, up to 1 GiB per connection (two per log).

The deduplication cache is now checkpointed every sequencing round. On ZFS this uses synchronous=OFF, which is sufficiently safe and cheap. Elsewhere it fsyncs every round, and a warning is logged. We recommend storing the cache on a dedicated ZFS dataset with recordsize=4K, separate from the log data.

A source (an IPv4 address or an IPv6 /64) can now submit at most 3 × poolsize low-priority entries that are already in the log per minute. Beyond that, its low-priority submissions are rejected with 429. The new GET /debug/sourcelimit endpoint lists the most limited sources.

Sunlight is now more resilient to slow deduplication cache reads and high traffic. Sunlight is designed to run on hardware where deduplication cache read latency is below 500 microseconds.

The executable is now locked in memory at startup to avoid thrashing under memory pressure. This requires RLIMIT_MEMLOCK to accommodate the size of the executable, which is larger than the systemd default of 8 MiB (set LimitMEMLOCK=infinity in the unit file).

503 responses no longer include a Retry-After header.

The new homehtml option includes an HTML file in the home page.

/health and /metrics are now served on the witness host.

Sunlight no longer exits if only a witness is configured.

The new GET /debug/heavyhitter/useragents-bytes and GET /debug/heavyhitter/ips-bytes endpoints rank clients by response bytes.

New metrics: sequencing_phase_duration_seconds, cache_checkpoint_duration_seconds, cache_checkpoint_busy_total, cache_checkpoint_errors_total, cache_wal_frames, cache_database_bytes, and cache_put_entries_total.

Skylight

Clients are now classified into families by User-Agent, exposed as a new family label on the HTTP metrics. The new distinct_clients, client_paths_distinct, and client_paths_requests metrics estimate the number of distinct clients and of distinct (client, path) pairs.

Partial tile fetches by Certstream Server Go before v1.10.0-beta.1 are now held up to 25s instead of rejected. See d-Rickyy-b/certstream-server-go#104. Reverse proxies need an upstream timeout above 25s.

Skylight now closes connections immediately on shutdown instead of attempting a graceful drain.

partial-aftersun

partial-aftersun no longer stats every tile, which on ZFS and systemd could pin enough metadata to starve the ARC, if the openzfs/zfs@a7a144e fix was not applied. We recommend updating ZFS anyway.

... (truncated)

Commits

• 5e015ed internal/witness: update sign-subtree to tlog-witness@v1.1.0
• b6b5b69 internal/clientaddr: coalesce Tor exit nodes into a single source
• aeba583 cmd/sunlight: block known SPKIs by default
• 902df1e cmd/sunlight,internal/ctlog: add support for blocked SPKIs
• 42d2b79 internal/witness: use uint8 origin lengths in add-entries (#73)
• 571eaf4 .github: update sandboxed-step to v1.2.2
• e2fd058 cmd/skylight,cmd/sunlight: add trustreverseproxy option
• 5e6e121 internal/ctlog: fix staticcheck errors
• 9b16ffc all: update google.golang.org/grpc for a govulncheck false positive
• 477ca61 all: update filippo.io/torchwood
• Additional commits viewable in compare view