chore(deps): bump github.com/quic-go/quic-go from 0.40.0 to 0.40.1

[dependabot[bot]]

Bumps github.com/quic-go/quic-go from 0.40.0 to 0.40.1.

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.40.1

This release contains fixes for the Honeybadger vulnerability (CVE-2023-49295):

• limit the number of queued PATH_RESPONSE frames to 256 (quic-go/quic-go#4199)
• don't retransmit PATH_CHALLENGE and PATH_RESPONSE frames (quic-go/quic-go#4200)

Full Changelog: https://github.com/quic-go/quic-go/compare/v0.40.0...v0.40.1

Commits

• 554d543 don't retransmit PATH_CHALLENGE and PATH_RESPONSE frames (#4200)
• 3a9c18b limit the number of queued PATH_RESPONSE frames to 256 (#4199)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Ignored Deployment

| Name | Status | Preview | Comments | Updated (UTC) | | :--- | :----- | :------ | :------- | :------ | | **yomo** | ⬜️ Ignored ([Inspect](https://vercel.com/yomorun/yomo/9AdVGHaMezsK9w29qNKjaXUGgZhF)) | [Visit Preview](https://yomo-git-dependabot-gomodulesgithubcomquic-goqui-ca0d72-yomorun.vercel.app) | | Dec 18, 2023 4:11pm |

[codecov[bot]]

Codecov Report

Attention: 14 lines in your changes are missing coverage. Please review.

Comparison is base (097e9d2) 58.23% compared to head (21e62d9) 58.64%. Report is 2 commits behind head on master.

Files	Patch %	Lines
core/server.go	76.47%	6 Missing and 2 partials :warning:
pkg/frame-codec/y3codec/handshake_frame.go	70.00%	2 Missing and 1 partial :warning:
options.go	0.00%	2 Missing :warning:
core/client.go	80.00%	0 Missing and 1 partial :warning:

Additional details and impacted files

```diff @@ Coverage Diff @@ ## master #688 +/- ## ========================================== + Coverage 58.23% 58.64% +0.41% ========================================== Files 35 36 +1 Lines 2641 2694 +53 ========================================== + Hits 1538 1580 +42 - Misses 1004 1012 +8 - Partials 99 102 +3 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.