fix(deps): update module github.com/quic-go/quic-go to v0.59.0 - autoclosed - #322
Closed
renovate[bot] wants to merge 1 commit into
Closed
fix(deps): update module github.com/quic-go/quic-go to v0.59.0 - autoclosed#322renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
Contributor
Author
ℹ️ Artifact update noticeFile name: lib/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.52.0→v0.59.0Release Notes
quic-go/quic-go (github.com/quic-go/quic-go)
v0.59.0Compare Source
This release adds a couple of new features:
ReceiveStreamandStream: #5501Breaking Changes
ClientHelloInfo: #5497ConnectionTracingIDandConnectionTracingKey: #5521ConnectionStatenow reports both the local and the remote status of the QUIC Datagram and Reliable Stream Reset extensions: #5533Other Notable Fixes
RecordEventandClose: #5523Changelog
Full Changelog: quic-go/quic-go@v0.58.0...v0.59.0
v0.58.1Compare Source
This patch release backports fixes for a bug in the PTO queueing logic that could lead to an infinite loop of PING packets.
Bug Fixes
v0.58.0Compare Source
This release optimizes the QUIC handshake:
Other notable changes
datagram_idonpacket_sent,packet_receivedandpacket_bufferedevents, using the CRC32 of the packet: #5455Changelog
Full Changelog: quic-go/quic-go@v0.57.0...v0.58.0
v0.57.1Compare Source
This release resolves a panic during the server handshake when using the upcoming Go 1.26 toolchain, specifically occurring with TLS session tickets disabled (#5462). This issue does not impact builds on Go 1.25 or earlier versions.
v0.57.0Compare Source
This release contains a fix for CVE-2025-64702 by reworking the HTTP/3 header processing logic:
Breaking Changes
Transport.MaxResponseBytesis now anint(before:int64): #5433Notable Fixes
What's Changed
New Contributors
Full Changelog: quic-go/quic-go@v0.56.0...v0.57.0
v0.56.0Compare Source
This release introduces qlog support for HTTP/3 (#5367, #5372, #5374, #5375, #5376, #5381, #5383).
For this, we completely changed how connection tracing works. Instead of a general-purpose
logging.ConnectionTracer(which we removed entirely), we now have a qlog-specific tracer (#5356, #5417). quic-go users can now implement their own qlog events.It also removes the Prometheus-based metrics collection. Please comment on the tracking issue (#5294) if you rely on metrics and are interested in seeing metrics brought back in a future release.
Notable Changes
Behind the Scenes
Go 1.25 introduced support for testing concurrent code using
testing/synctest. We've been working on transitioning tests to use synctest (#5357, #5391, #5393, #5397, #5398, #5403, #5414, #5415), using @MarcoPolo's simnet package to simulate a network in memory.Using synctest makes test execution more reliable (reducing flakiness). The use of a synthetic clock leads to a massive speedup; the execution time of some integration tests was reduced from 20s to less than 1ms. The work will continue for the next release (see tracking issue: #5386).
Changelog
New Contributors
Full Changelog: quic-go/quic-go@v0.55.0...v0.56.0
v0.55.0Compare Source
This release contains a number of improvements and fixes, and it updates the supported Go versions to 1.24 and 1.25.
Optimizations
When sending packets on a QUIC connection, RFC 9002 requires us to save the timestamp for every packet sent. In #5344, we implemented a memory-optimized drop-in replacement for
time.Time, which reduces the memory required from 24 to 8 bytes, and vastly speeds up timer calculations (which happen very frequently).New Features
Conn.ConnectionStats, thanks to @MarcoPoloNotable Fixes
Transport: #5324, thanks to @GloneeTransport.Roundtripcalls: #5323, thanks to @GloneeBehind the Scenes
We have started transitioning tests to make use of the new
synctestpackage that was added in Go 1.25 (and was available as aGOEXPERIMENTin Go 1.24): #5291, #5296, #5298, #5299, #5302, #5304, #5305, #5306, #5317. This is a lot of work, but it makes the test execution both faster and more reliable.Changelog
interface{}withanyby @marten-seemann in #5290go mod tidy -diffto check for tidiedgo.modby @marten-seemann in #5303New Contributors
Full Changelog: quic-go/quic-go@v0.54.0...v0.55.0
v0.54.1Compare Source
v0.54.0Compare Source
This release adds support for QUIC Stream Resets with Partial Delivery, a QUIC extension that allows resetting a stream, while guaranteeing delivery of stream data up to a certain byte offset (#5155, #5158, #5160, #5235, #5242, #5243). This extension is a requirement of newer versions of WebTransport over HTTP/3.
Other Notable Changes
wire.Frame) for common frame types (STREAM, DATAGRAM, ACK), speeding up STREAM frame parsing by ~18%: #5253, #5227, thanks to @jannis-seemannFixes
TransportwhenDialAddrfails: #5259, thanks to @rbqvqChangelog
New Contributors
Full Changelog: quic-go/quic-go@v0.53.0...v0.54.0
v0.53.0Compare Source
This release introduces a massive overhaul of the quic-go API. See this blog post for more details about the motivation. Most users will need to make some changes when upgrading to this version.
Connectioninterface was removed in favor of aConnstruct (#5195).ReceiveStream,SendStreamandStreaminterfaces were replaced with structs of the same name (#5149, #5172, #5173, #5214).In most cases, migrating downstream code should be fairly straightforward. For example, a method that used to accept a
quic.Connectionas a parameter now needs to accept a*quic.Conn, and a function handling aquic.Streamnow needs to handle a*quic.Stream. Of course, consumers of quic-go are free to define their own interfaces.Similarly, on the HTTP/3 layer:
Connectioninterface was replaced with aConnstruct (#5204).RequestStreaminterface was converted to a struct (#5153, #5216).Streaminterface was converted to a struct (#5154).We expect that most HTTP/3 users won't need to adjust their code, if they use the package to run an HTTP/3 server and dial HTTP/3 connection. More advanced use cases, such as WebTransport and the various MASQUE protocols, will require updates. We have already released new versions of webtransport-go and masque-go to support these changes.
Other Breaking Changes
SingleDestinationRoundTripperwas removed (#5217)Notable Fixes and Improvements
ClientConn.Context,CloseWithErrorandConn: #5219RequestStreamcould be misused in many different ways, that's why we tightened the error checks (#5231)Behind The Scenes
We've completed the migration of the entire test suite away from Ginkgo (#3652) and towards standard Go tests (#5084, #5150, #5151, #5193, #5194, #5196, #5198). This was a major undertaking, spanning roughly 9 months and resulting in a complete rewrite of quic-go's test suite (> 40,000 lines of code!). Users will now benefit from a significantly slimmed-down dependency tree when upgrading.
Changelog
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.