thetillhoff / webscan

Verifies web things
MIT License
1 stars 1 forks source link

Update module github.com/quic-go/quic-go to v0.47.0 #65

Closed renovate[bot] closed 1 week ago

renovate[bot] commented 1 week ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/quic-go/quic-go v0.46.0 -> v0.47.0 age adoption passing confidence

Release Notes

quic-go/quic-go (github.com/quic-go/quic-go) ### [`v0.47.0`](https://redirect.github.com/quic-go/quic-go/releases/tag/v0.47.0) [Compare Source](https://redirect.github.com/quic-go/quic-go/compare/v0.46.0...v0.47.0) #### New Features This release adds support for HTTP/3 Trailers, for both the server and the client side ([#​4581](https://redirect.github.com/quic-go/quic-go/issues/4581), [#​4630](https://redirect.github.com/quic-go/quic-go/issues/4630), [#​4656](https://redirect.github.com/quic-go/quic-go/issues/4656), [#​4639](https://redirect.github.com/quic-go/quic-go/issues/4639)). Trailers work exactly the same way as for HTTP/1.1 and HTTP/2. A big thank you to [@​sudorandom](https://redirect.github.com/sudorandom) for contributing this feature! #### Fixes - idle timeout calculation when the peer sends a `max_idle_timeout` of 0 (or omits the transport parameter): [#​4666](https://redirect.github.com/quic-go/quic-go/issues/4666) - fix handling of corrupted coalesced 1-RTT packets: [#​4663](https://redirect.github.com/quic-go/quic-go/issues/4663) - qpack: don't reject literal field lines with name references if `N` bit is set to 1: [https://github.com/quic-go/qpack/pull/52](https://redirect.github.com/quic-go/qpack/pull/52) - http3: correctly set the `http.Response.ContentLength` on responses that don't set the `Content-Length` header: [#​4645](https://redirect.github.com/quic-go/quic-go/issues/4645) - http3: reject connection-specific header fields (`Connection`, `Keep-Alive`, `Proxy-Connection`, `Transfer-Encoding`, `Upgrade` and `TE != "trailers"`): [#​4646](https://redirect.github.com/quic-go/quic-go/issues/4646), [#​4655](https://redirect.github.com/quic-go/quic-go/issues/4655) #### Breaking Changes - `quic.VersionNumber` and `logging.VersionNumber` were removed: [#​4627](https://redirect.github.com/quic-go/quic-go/issues/4627) #### Heads-Up [@​sukunrt](https://redirect.github.com/sukunrt) recently discovered and reported a race condition in the new `time.Timer` stopping logic introduced in Go 1.23. This manifests as a connection deadlock in quic-go. See [#​4659](https://redirect.github.com/quic-go/quic-go/issues/4659) and [https://github.com/golang/go/issues/69312](https://redirect.github.com/golang/go/issues/69312) for more details. The new behavior is enabled when compiling with Go 1.23.x, and when the Go version in `go.mod` is set to Go 1.23.x. Until this issue is fixed, it is recommended to either use Go 1.22.x, or to use `GODEBUG="asynctimerchan=1"` when compiling quic-go. #### Changelog - remove deprecated quic.VersionNumber and logging.VersionNumber by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4627](https://redirect.github.com/quic-go/quic-go/pull/4627) - ci: migrate race detector test to GitHub Actions by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4635](https://redirect.github.com/quic-go/quic-go/pull/4635) - bump Go version in go.mod, stop testing on Go 1.21 by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4633](https://redirect.github.com/quic-go/quic-go/pull/4633) - http3: add client-side HTTP Trailer support by [@​sudorandom](https://redirect.github.com/sudorandom) in [https://github.com/quic-go/quic-go/pull/4581](https://redirect.github.com/quic-go/quic-go/pull/4581) - http3: reject pseudo header fields in trailers by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4639](https://redirect.github.com/quic-go/quic-go/pull/4639) - http3: reject the Transfer-Encoding header field by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4646](https://redirect.github.com/quic-go/quic-go/pull/4646) - http3: set ContentLength to -1 if no Content-Length header is set by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4645](https://redirect.github.com/quic-go/quic-go/pull/4645) - interop: simplify API of http09.Server by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4651](https://redirect.github.com/quic-go/quic-go/pull/4651) - update qpack to v0.5.0 by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4653](https://redirect.github.com/quic-go/quic-go/pull/4653) - http3: reject connection-specific header fields, check value of TE by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4655](https://redirect.github.com/quic-go/quic-go/pull/4655) - interop: fix server setup for the HTTP/0.9 server by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4658](https://redirect.github.com/quic-go/quic-go/pull/4658) - protocol: use the packet number decoding / encoding logic from the RFC by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4661](https://redirect.github.com/quic-go/quic-go/pull/4661) - fix handling of corrupted coalesced 1-RTT packets by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4663](https://redirect.github.com/quic-go/quic-go/pull/4663) - http3: add HTTP Trailer support for servers by [@​sudorandom](https://redirect.github.com/sudorandom) in [https://github.com/quic-go/quic-go/pull/4630](https://redirect.github.com/quic-go/quic-go/pull/4630) - ci: control concurrency of the interop Docker image builder by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4665](https://redirect.github.com/quic-go/quic-go/pull/4665) - update qpack to v0.5.1 by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4664](https://redirect.github.com/quic-go/quic-go/pull/4664) - http3: initialize trailer map with empty trailer entries when parsing the header by [@​sudorandom](https://redirect.github.com/sudorandom) in [https://github.com/quic-go/quic-go/pull/4656](https://redirect.github.com/quic-go/quic-go/pull/4656) - http3: avoid re-parsing of the Content-Length header for responses by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4648](https://redirect.github.com/quic-go/quic-go/pull/4648) - fix calculation of idle timeout when the peer set max_idle_timeout to 0 by [@​marten-seemann](https://redirect.github.com/marten-seemann) in [https://github.com/quic-go/quic-go/pull/4666](https://redirect.github.com/quic-go/quic-go/pull/4666) #### New Contributors - [@​sudorandom](https://redirect.github.com/sudorandom) made their first contribution in [https://github.com/quic-go/quic-go/pull/4581](https://redirect.github.com/quic-go/quic-go/pull/4581) **Full Changelog**: https://github.com/quic-go/quic-go/compare/v0.46.0...v0.47.0

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] commented 1 week ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
github.com/quic-go/qpack v0.4.0 -> v0.5.1