chore: bump ipfs/gateway-conformance from 0.4.1 to 0.8.3

[dependabot]

Bumps ipfs/gateway-conformance from 0.4.1 to 0.8.3.

Release notes

Sourced from ipfs/gateway-conformance's releases.

v0.8.3

Changed

• Added temporary support for legacy 200 with X-Stream-Error header behavior when missing blocks are detected during CAR streaming. This ensures compatibility with current boxo/gateway implementations that defer header setting. This third option will be removed once implementations ship with ipfs/boxo#1019. #245

v0.8.2

Changed

• Relaxed CAR tests to accept both HTTP 200 and 404 for non-existing paths. The response code now depends on implementation details such as locality and cost of path traversal checks. Implementations that can efficiently detect non-existing paths should return 404 (improved behavior per ipfs/boxo#458). Implementations focusing on stateless streaming and low latency may return 200 with partial CAR up to the missing link (legacy behavior). #244

This release was brought to you by the Shipyard team.

v0.8.1

Changed

• DAG-CBOR HTML preview pages previously had to be returned without Cache-Control headers. Now they can use Cache-Control headers similar to those used in generated UnixFS directory listings. #241

This release was brought to you by the Shipyard team.

v0.8.0

Changed

• Comprehensive tests for HTTP Range Requests over deserialized UnixFS files have been added. The --specs path-gateway now requires support for at least single-range requests. Deserialized range-requests can be skipped with --skip 'TestGatewayUnixFSFileRanges' #213
• Updated dependencies #236 & #239

This release was brought to you by the Shipyard team.

v0.7.1

Changed

• Expect all URL escapes to use uppercase hex #232

This release was brought to you by the Shipyard team.

v0.7.0

Changed

• Update dependencies #226 and #227
• Expect upper-case hex digits in escaped redirect URL #225

This release was brought to you by the Shipyard team.

v0.6.2

Changed

• Relaxed negative test of TAR response #221

... (truncated)

Changelog

Sourced from ipfs/gateway-conformance's changelog.

[0.8.3] - 2025-09-01

Changed

• Added temporary support for legacy 200 with X-Stream-Error header behavior when missing blocks are detected during CAR streaming. This ensures compatibility with current boxo/gateway implementations that defer header setting. This third option will be removed once implementations ship with ipfs/boxo#1019. #245

[0.8.2] - 2025-08-31

Changed

• Relaxed CAR tests to accept both HTTP 200 and 404 for non-existing paths. The response code now depends on implementation details such as locality and cost of path traversal checks. Implementations that can efficiently detect non-existing paths should return 404 (improved behavior per ipfs/boxo#458). Implementations focusing on stateless streaming and low latency may return 200 with partial CAR up to the missing link (legacy behavior). #244

[0.8.1] - 2025-06-17

Changed

• DAG-CBOR HTML preview pages previously had to be returned without Cache-Control headers. Now they can use Cache-Control headers similar to those used in generated UnixFS directory listings. #241

[0.8.0] - 2025-05-28

Changed

• Comprehensive tests for HTTP Range Requests over deserialized UnixFS files have been added. The --specs path-gateway now requires support for at least single-range requests. Deserialized range-requests can be skipped with --skip 'TestGatewayUnixFSFileRanges' #213
• Updated dependencies #236 & #239

[0.7.1] - 2025-01-03

Changed

• Expect all URL escapes to use uppercase hex #232

[0.7.0] - 2025-01-03

Changed

• Update dependencies #226 and #227
• Expect upper-case hex digits in escaped redirect URL #225

[0.6.2] - 2024-08-09

Changed

• Relaxed negative test of TAR response #221

[0.6.1] - 2024-07-29

Changed

• Support meaningful Cache-Control on generated UnixFS directory listing responses on /ipfs namespace

[0.6.0] - 2024-06-10

Changed

• Gateway URL
  • --gateway-url is no longer defaulting to predefined URL. User has to provide it via CLI or GATEWAY_URL environment variable or the test suite will refuse to start.
  • This aims to ensure no confusion about which gateway endpoint is being tested.
  • Docs and examples use --gateway-url http://127.0.0.1:8080 to ensure no confusion with localhost:8080 subdomain gateway feature in IPFS implementations like Kubo.
• Subdomain URL and UX related to subdomain tests
  • The --subdomain-url is no longer set by default.
  • User has to provide the origin of the subdomain gateway via CLI or SUBDOMAIN_GATEWAY_URL to be used during subdomain tests. This aims to ensure no confusion about which domain name is being tested.

... (truncated)

Commits

• 026cdc4 test: add third option for CAR non-existing path responses (#245)
• f766b67 feat: relax CAR tests to accept both 200 and 404 for non-existing paths (#244)
• 1a013ba ci: uci/update-go (#242)
• 5962ca0 fix: dag-index html cache-control matches dir-index html (#241)
• bb4780c test: range requests of deserialized files (#213)
• b5df2c0 chore: boxo v0.31 (#239)
• e782d03 update dependencies (#236)
• 437f867 ci: uci/update-go (#235)
• 63f1d22 chore: update upload-artifact action to v4
• cbb8832 Expect all URL escapes to use uppercase hex (#232)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.