Skip to content

chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.61.0 - #6

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/quic-go/quic-go-0.60.0
Open

chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.61.0#6
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/quic-go/quic-go-0.60.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps github.com/quic-go/quic-go from 0.59.0 to 0.61.0.

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.61.0

This release adds new stream APIs intended for application protocols that perform their own flow-control accounting, such as WebTransport:

  • SendStream and Stream now expose TryWriteAll, which queues an entire buffer without blocking or returns ErrWouldBlock without queueing anything: #5704
  • SendStream and Stream now expose WriteWithLimit, allowing higher-level protocols to apply an additional send limit while data is packetized: #5753
  • ReceiveStream and Stream now expose SetReceiveFinalSizeCallback, which reports the final receive-side stream size once it is learned from a FIN or RESET_STREAM frame: #5752

Support for the RESET_STREAM_AT extension was updated to draft-09, while retaining support for the draft-07 codepoint for backwards compatibility: #5724

Breaking Changes

  • http3: ParseCapsule was replaced by the stateful CapsuleParser and CapsuleReader APIs. Each capsule payload must now be consumed or discarded before advancing to the next capsule: #5729
  • The StreamID.Type and StreamID.InitiatedBy methods were removed because they exposed internal types: #5744
  • qlog: datagram IDs were replaced by CRC32c payload checksums. The JSON field is now datagram_payload_checksum instead of datagram_id, and the corresponding exported qlog types were renamed: #5758

Notable Fixes

  • Transport parameter parsing is around 27% faster and now reliably rejects duplicate transport parameters: #5712
  • Session tickets containing unknown transport parameters are now rejected during restoration, preventing 0-RTT resumption when an endpoint no longer understands an extension recorded in the ticket: #5714
  • RESET_STREAM_AT negotiation is now applied correctly to streams opened before transport parameters are received during 0-RTT: #5715
  • RESET_STREAM_AT support is now cleared after 0-RTT rejection, preventing new streams from inheriting the rejected connection's setting: #5716
  • Pending stream control frames from a rejected 0-RTT attempt are now discarded instead of being sent after rejection: #5717
  • Remembered RESET_STREAM_AT support is now validated across 0-RTT resumption: #5722
  • http3: receiving a GOAWAY now unblocks pending OpenStreamSync calls and prevents new request streams from being opened: #5730
  • http3: invalid header values are no longer included in validation errors, avoiding accidental exposure of sensitive values when errors are logged: #5742

Changelog

... (truncated)

Commits
  • 579ee19 add SendStream.WriteWithLimit for higher-level flow control (#5753)
  • b1e850a guard qlogger when dropping malformed short-header packets (#5759)
  • 2d093f1 qlog: replace datagram IDs with CRC32c payload checksums (#5758)
  • 4e52cbd replace receive stream final size wait with callback (#5752)
  • 353abe2 ci: bump actions/setup-go from 6 to 7 (#5756)
  • fbfa1d5 fix flaky TestDatagramSizeLimitWithMTUDiscovery (#5751)
  • 124e085 rename ReceiveStream.WaitForFinalSize to WaitForReceiveFinalSize (#5750)
  • a8ac06a update golang.org/x/crypto to v0.54.0 (#5749)
  • bc8d524 ci: run Codspeed on pull requests and on master (#5748)
  • dab2973 rename SendStream.WriteImmediately to TryWriteAll (#5747)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 8, 2026
@dependabot dependabot Bot mentioned this pull request Jun 8, 2026
Closed
@m0wfo

m0wfo commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.61.0
e66e120 
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.59.0 to 0.61.0.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.59.0...v0.61.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.60.0 chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.61.0 Aug 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/quic-go/quic-go-0.60.0 branch from 5ab6bd9 to e66e120 Compare August 27, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@m0wfo