chore(deps): update dependency filecoin-project/curio to v1.28.3 - #168
Merged
Conversation
beck-8
approved these changes
Aug 10, 2026
github-project-automation
Bot
moved this from 📌 Triage
to ✔️ Approved by reviewer
in FOC
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.28.2→v1.28.3Release Notes
filecoin-project/curio (filecoin-project/curio)
v1.28.3Compare Source
Curio v1.28.3
✨ Overview
Curio v1.28.3 is a stable release focused on production hardening across both PoRep and PDP, alongside a major overhaul of Harmony task scheduling. It improves how Curio selects and starts work across active pipelines, strengthens PDP proving and recovery, improves payment settlement reliability, and expands operator alerting and dashboard visibility.
This release is recommended for all Curio Storage Providers. Database migrations are applied automatically. Operators running Curio behind a reverse proxy should review the client-IP change in the upgrade preparation section before deploying.
v1.28.3v1.28.2...v1.28.3🚀 Highlights
Harmony task scheduling overhaul
Harmony task scheduling has been redesigned to start work faster and make better use of shared resources. Curio now reacts to task events instead of depending primarily on frequent database polling, can start multiple eligible tasks in a scheduling pass, and prioritizes older work and downstream pipeline stages to reduce task starvation.
Time-sensitive work can also interrupt other tasks when resources are required. This improves progress across multiple active pipelines and makes scheduling of critical work, including WinningPoSt, more reliable. (github.com)
PDP production hardening and scaling
PDP proving and state management are now more resilient to restarts, chain watcher gaps, temporary chain failures, contract reverts, and incomplete local state. Curio can recover create and add-piece operations that completed on-chain, repair missing piece records, and retry non-terminal proving failures instead of incorrectly treating datasets as unrecoverable.
Database queries and indexes used by large PDP deployments have also been optimized to maintain performance as operational tables grow. (github.com)
Reliable Filecoin Pay settlement
Curio can now process large Filecoin Pay settlement backlogs without repeatedly attempting a settlement that exceeds transaction gas limits. It selects a smaller valid target, confirms that the intended epoch was settled, and continues making progress through the remaining backlog.
FWSS settlements now target valid closed proving-period boundaries. Ethereum gas and fee selection have also been hardened to reduce proving and payment messages becoming stuck when network fees increase. Settlement failures are surfaced through Curio alerts. (github.com)
Reverse-proxy client IP handling
Curio now trusts
X-Forwarded-Foronly when the immediate connection comes from a loopback proxy. A proxy connecting through a Docker bridge, container network, separate host, or another non-loopback address will be treated as the client.In these configurations, users behind the proxy may share the same rate-limit and abuse-control bucket. Operators using a non-loopback reverse proxy should review their network topology before upgrading. (github.com)
60-day payment-lockup grace period
Curio now waits 60 days before a dataset becomes eligible for lockup-based termination. This gives clients more time to replenish their payment lockup, but also means an SP may continue serving unpaid data for longer.
Storage Providers should account for this increased exposure in their payment monitoring and retention policies. (github.com)
🐛 Bug fixes
market add-urlfile mode, deal ingestion, MK20 DDO duration, pull URL handling, and PDP offering updates.🔧 Improvements
HEADandGETrequests, configurable garbage collection, batched removal, on-disk deletion, and PODSI indexing.FIL_PROOFS_MULTICORE_SDR_PRODUCERS, allowing Harmony scheduling to reflect the configured SDR parallelism.Contributors
Thanks to @BigLep, @LexLuthr, @TippyFlitsUK, @ZenGround0, @beck-8, @frrist, @hyunmoon, @rjan90, @rvagg, and @snadrus for contributing to this release.
#fil-curio-helpWhat's Changed
New Contributors
Full Changelog: filecoin-project/curio@v1.28.2...v1.28.3
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.