search

rsocket / rsocket-py

RSocket implementation in Python
MIT License
76 stars 23 forks source link

Bump aioquic from 0.9.25 to 1.2.0 #247

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 2 months ago

Bumps aioquic from 0.9.25 to 1.2.0.

Changelog

Sourced from aioquic's changelog.

1.2.0

  • Add support for compatible version handling as defined in :rfc:9368.
  • Add support for QUIC Version 2, as defined in :rfc:9369.
  • Drop support for draft QUIC versions which were obsoleted by :rfc:9000.
  • Improve datagram padding to allow better packet coalescing and reduce the number of roundtrips during connection establishement.
  • Fix server anti-amplification checks during address validation to take into account invalid packets, such as datagram-level padding.
  • Allow asyncio clients to make efficient use of 0-RTT by passing wait_connected=False to :meth:~aioquic.asyncio.connect.
  • Add command-line arguments to the http3_client example for client certificates and negotiating QUIC Version 2.

1.1.0

  • Improve path challenge handling and compliance with :rfc:9000.
  • Limit the amount of buffered CRYPTO data to avoid memory exhaustion.
  • Enable SHA-384 based signature algorithms and SECP384R1 key exchange.
  • Build binary wheels against OpenSSL_ 3.3.0.

1.0.0

  • Ensure no data is sent after a stream reset.
  • Make :class:~aioquic.h3.connection.H3Connection's :meth:~aioquic.h3.connection.H3Connection.send_datagram and :meth:~aioquic.h3.connection.H3Connection.send_push_promise methods raise an :class:~aioquic.h3.exceptions.InvalidStreamTypeError exception if an invalid stream ID is specified.
  • Improve the documentation for :class:~aioquic.asyncio.QuicConnectionProtocol's :meth:~aioquic.asyncio.QuicConnectionProtocol.transmit method.
  • Fix :meth:~datetime.datetime.utcnow deprecation warning on Python 3.12 by using cryptography_ 42.0 and timezone-aware :class:~datetime.datetime instances when validating TLS certificates.
  • Build binary wheels against OpenSSL_ 3.2.0.
  • Ignore any non-ASCII ALPN values received.
  • Perform more extensive HTTP/3 header validation in :class:~aioquic.h3.connection.H3Connection.
  • Fix exceptions when draining stream writers in the :doc:asyncio API <asyncio>.
  • Set the :class:~aioquic.quic.connection.QuicConnection idle timer according to :rfc:9000 section 10.1.
  • Implement fairer stream scheduling in :class:~aioquic.quic.connection.QuicConnection to avoid head-of-line blocking.
  • Only load certifi_ root certificates if none was specified in the :class:~aioquic.quic.configuration.QuicConfiguration.
  • Improve padding of UDP datagrams containing Initial packets to comply with :rfc:9000

... (truncated)

Commits
  • 9bc1e43 1.2.0
  • 7ee141f Try to fix retransmission test flakiness
  • 2f2a77a Allow 0-RTT data to be coalesced with the INITIAL using asyncio API
  • e189d29 Fix typing errors in examples, check with mypy
  • 7ad382f Allow the asyncio protocol to specify the close code / reason
  • 6987588 Improve padding of coalesced datagrams containing INITIAL
  • afe5525 During address validation, count the entire received datagram
  • 79a8caf Check Chosen Version matches the version in use by the connection
  • aadd4be Improve connection establishment tests
  • c411453 Add command line option for http3_client to negotiate QUIC v2
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)