Skip to content

build(deps): bump github.com/quic-go/quic-go from 0.51.0 to 0.54.1 in the go_modules group across 1 directory#160

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go_modules-2d966540f9
Closed

build(deps): bump github.com/quic-go/quic-go from 0.51.0 to 0.54.1 in the go_modules group across 1 directory#160
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go_modules-2d966540f9

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 10, 2025

Bumps the go_modules group with 1 update in the / directory: github.com/quic-go/quic-go.

Updates github.com/quic-go/quic-go from 0.51.0 to 0.54.1

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.54.0

This release adds support for QUIC Stream Resets with Partial Delivery, a QUIC extension that allows resetting a stream, while guaranteeing delivery of stream data up to a certain byte offset (#5155, #5158, #5160, #5235, #5242, #5243). This extension is a requirement of newer versions of WebTransport over HTTP/3.

Other Notable Changes

  • http3: the package now doesn't depend on any internal quic-go packages: #5256
  • wire: return concrete structs (instead of a wire.Frame) for common frame types (STREAM, DATAGRAM, ACK), speeding up STREAM frame parsing by ~18%: #5253, #5227, thanks to @​jannis-seemann

Fixes

  • fix retransmission logic for path probing packets: #5241
  • close the Transport when DialAddr fails: #5259, thanks to @​rbqvq

Changelog

New Contributors

Full Changelog: quic-go/quic-go@v0.53.0...v0.54.0

v0.53.0

This release introduces a massive overhaul of the quic-go API. See this blog post for more details about the motivation. Most users will need to make some changes when upgrading to this version.

  • The Connection interface was removed in favor of a Conn struct (#5195).
  • The ReceiveStream, SendStream and Stream interfaces were replaced with structs of the same name (#5149, #5172, #5173, #5214).

In most cases, migrating downstream code should be fairly straightforward. For example, a method that used to accept a quic.Connection as a parameter now needs to accept a *quic.Conn, and a function handling a quic.Stream now needs to handle a *quic.Stream. Of course, consumers of quic-go are free to define their own interfaces.

Similarly, on the HTTP/3 layer:

  • The Connection interface was replaced with a Conn struct (#5204).
  • The RequestStream interface was converted to a struct (#5153, #5216).
  • The Stream interface was converted to a struct (#5154).

... (truncated)

Commits
  • 0264fbc drop initial packets when the handshake is confirmed
  • c2e784a wire: optimize parsing logic for STREAM, DATAGRAM and ACK frames (#5227)
  • 893a594 wire: improve frame parsing benchmarks (#5263)
  • afe01ef close Transport when DialAddr fails (#5259)
  • 0a9c6ea http3: remove dependency on quic internal packages (#5256)
  • fd32cf5 fix flaky TestPostQuantumClientHello (#5253)
  • 0eb237f add a Config and ConnectionState flag for RESET_STREAM_AT (#5243)
  • 61d2fa5 http3: fix flaky TestConnGoAwayFailures (#5252)
  • dadc8db fix flaky TestServerReceiveQueue (#5249)
  • 3f3d309 fix flaky TestDrainServerAcceptQueue (#5247)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the go_modules group with 1 update in the / directory: [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go).


Updates `github.com/quic-go/quic-go` from 0.51.0 to 0.54.1
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.51.0...v0.54.1)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.54.1
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 10, 2025
@zjkmxy zjkmxy mentioned this pull request Oct 12, 2025
@zjkmxy zjkmxy closed this in #161 Oct 13, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/go_modules/go_modules-2d966540f9 branch October 13, 2025 03:12
@pulsejet
Copy link
Collaborator

@zjkmxy curious why signals were red here but worked on the other PR fine ...

@zjkmxy
Copy link
Member

zjkmxy commented Oct 13, 2025

@zjkmxy curious why signals were red here but worked on the other PR fine ...

It seems related to my webtransport-go-patch repo. Since the upstream has updated, maybe let's move back to the upstream.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants