GitLab

This patch adds a special, internal, "codependencies" package that allows us to
specify minimum required versions for modules we don't directly depend on.

Downside:

* Anyone using this module will also have to download these deprecated modules.

Upside:

* After upgrading this module, all "codependencies" will automatically be
  upgraded to compatible versions.
* If unused, codependencies will _not_ end up bloating the binary size. This is
  because "usage" is computed at the import/package layer, while module version
  requirements are computed at the module layer.

Bumps [github.com/multiformats/go-multiaddr](https://github.com/multiformats/go-multiaddr) from 0.2.0 to 0.2.1.
- [Release notes](https://github.com/multiformats/go-multiaddr/releases)
- [Commits](https://github.com/multiformats/go-multiaddr/compare/v0.2.0...v0.2.1)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/multiformats/go-multihash](https://github.com/multiformats/go-multihash) from 0.0.10 to 0.0.13.
- [Release notes](https://github.com/multiformats/go-multihash/releases)
- [Commits](https://github.com/multiformats/go-multihash/compare/v0.0.10...v0.0.13)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/multiformats/go-varint](https://github.com/multiformats/go-varint) from 0.0.1 to 0.0.2.
- [Release notes](https://github.com/multiformats/go-varint/releases)
- [Commits](https://github.com/multiformats/go-varint/compare/v0.0.1...v0.0.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/multiformats/go-multiaddr](https://github.com/multiformats/go-multiaddr) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/multiformats/go-multiaddr/releases)
- [Commits](https://github.com/multiformats/go-multiaddr/compare/v0.1.0...v0.2.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/multiformats/go-multihash](https://github.com/multiformats/go-multihash) from 0.0.8 to 0.0.10.
- [Release notes](https://github.com/multiformats/go-multihash/releases)
- [Commits](https://github.com/multiformats/go-multihash/compare/v0.0.8...v0.0.10)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Enforce minimal varint encoding when decoding multiaddrs.
* Ensure codecs fit in 32bit integers for compatibility. We can increase the
size, but we'd need to change the `Protocol.Codec` type from `int` to `uint64`.

This is a defacto standard and is used by js-libp2p.

Ported from https://github.com/multiformats/go-multiaddr-dns/pull/17.
This was decided in https://github.com/multiformats/multiaddr/issues/22.

So we don't have to import a DNS resolver just to parse dns multiaddrs.