fix(deps): update module github.com/libp2p/go-libp2p to v0.49.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/libp2p/go-libp2p	v0.48.0 → v0.49.0

---

Release Notes

libp2p/go-libp2p (github.com/libp2p/go-libp2p)

v0.49.0

Compare Source

What's Changed

• fix: relay candidate added into backoff list even if reservation on that relay candidate success by @​chiragsoni81245 in #​3482
• feat: NonPublicAddrPublishing option by @​lidel in #​3489
• fix(routing): prevent QueryEvent publish races by @​lidel in #​3490
• fix(peer): drop empty addrs in peer records by @​lidel in #​3494
• fix(peerstore): replace stale addrs on newer signed peer record by @​lidel in #​3487
• feat(pstore): cap unconnected addrs per peer by @​lidel in #​3486
• fix(config): emit fx DI registration events at debug level by @​rvagg in #​3498
• Interrupt websocket reads during close by @​MarcoPolo in #​3496
• fix(webrtc): cap remote addresses per ufrag by @​lidel in #​3500
• Add ability to pass through TLS options to the QUIC transport. by @​MarcoPolo in #​3481
• p2p/protocol/identify: bound the number of protocols accepted from peers by @​Sahil-4555 in #​3501
• fix holepunch shutdown deadlock on canceled address discovery by @​Sahil-4555 in #​3504
• refactor(swarm): move the connected / disconnected callbacks into the events emitter by @​sukunrt in #​3503
• feat(autonatv2): expose AllowPrivateAddrs via an Option by @​gmelodie in #​3513
• feat(websocket): share port with HTTP handler by @​lidel in #​3509
• http/auth: close intermediate peer ID auth handshake responses by @​Sahil-4555 in #​3510
• feat(webrtc): stable /certhash across restarts by @​lidel in #​3512
• chore: update autotls example to p2p-forge v0.9.1 by @​lidel in #​3521
• feat(webrtc): support webrtc-direct v2 by @​lidel in #​3520
• fix: resolve concurrency bugs in eventbus and webtransport by @​Sahil-4555 in #​3518
• fix(basichost): sort confirmed addrs by @​lidel in #​3526
• fix(basichost): fix some bugs in addrs reachability manager by @​sukunrt in #​3528

New Contributors

• @​chiragsoni81245 made their first contribution in #​3482
• @​rvagg made their first contribution in #​3498
• @​Sahil-4555 made their first contribution in #​3501
• @​gmelodie made their first contribution in #​3513

Full Changelog: libp2p/go-libp2p@v0.48.0...v0.49.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 23 additional dependencies were updated

Details:

Package	Change
filippo.io/keygen	v0.0.0-20260114151900-8e2790ea4c5b -> v1.0.0
github.com/ipfs/go-cid	v0.6.1 -> v0.6.2
github.com/ipfs/go-datastore	v0.9.1 -> v0.9.2
github.com/klauspost/cpuid/v2	v2.3.0 -> v2.4.0
github.com/koron/go-ssdp	v0.0.6 -> v0.9.1
github.com/multiformats/go-multiaddr-dns	v0.5.0 -> v0.6.0
github.com/prometheus/client_golang	v1.23.2 -> v1.24.1
github.com/prometheus/common	v0.67.5 -> v0.70.1
github.com/prometheus/procfs	v0.20.1 -> v0.21.1
github.com/quic-go/quic-go	v0.59.1 -> v0.60.0
github.com/quic-go/webtransport-go	v0.10.0 -> v0.11.1
go.opentelemetry.io/otel	v1.42.0 -> v1.44.0
go.opentelemetry.io/otel/metric	v1.42.0 -> v1.44.0
go.opentelemetry.io/otel/trace	v1.42.0 -> v1.44.0
go.uber.org/mock	v0.5.2 -> v0.6.0
golang.org/x/crypto	v0.53.0 -> v0.54.0
golang.org/x/exp	v0.0.0-20260410095643-746e56fc9e2f -> v0.0.0-20260718201538-764159d718ef
golang.org/x/mod	v0.36.0 -> v0.38.0
golang.org/x/net	v0.56.0 -> v0.57.0
golang.org/x/sync	v0.21.0 -> v0.22.0
golang.org/x/telemetry	v0.0.0-20260508192327-42602be52be6 -> v0.0.0-20260717140457-bdb89881bb75
golang.org/x/text	v0.38.0 -> v0.40.0
golang.org/x/tools	v0.45.0 -> v0.48.0