fix(deps): update module github.com/quic-go/quic-go to v0.57.1 - autoclosed #81

renovate · 2025-10-16T16:41:25Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/quic-go/quic-go	`v0.54.1` -> `v0.57.1`

Release Notes

quic-go/quic-go (github.com/quic-go/quic-go)

`v0.57.1`

Compare Source

This release resolves a panic during the server handshake when using the upcoming Go 1.26 toolchain, specifically occurring with TLS session tickets disabled (#5462). This issue does not impact builds on Go 1.25 or earlier versions.

`v0.57.0`

Compare Source

This release reworks the HTTP/3 header processing logic:

Both client and server now send their respective header size constraints using the SETTINGS_MAX_FIELD_SECTION_SIZE setting: #5431
For any QPACK-related errors, the correct error code (QPACK_DECOMPRESSION_FAILED) is now used: #5439
QPACK header parsing is now incremental (instead of parsing all headers at once), which is ~5-10% faster and reduces allocations: #5435 (and quic-go/qpack#67)
The server now sends a 431 status code (Request Header Fields Too Large) when encountering HTTP header fields exceeding the size constraint: #5452

Breaking Changes

http3: Transport.MaxResponseBytes is now an int (before: int64): #5433

Notable Fixes

qlogwriter: fix storing of event schemas (this prevented qlog event logging from working for HTTP/3): #5430
http3: errors sending the request are now ignored, instead, the response from the server is read (thereby allowing the client to read the status code, for example): #5432

What's Changed

build(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #5426
qlogwriter: fix storing of event schemas by @marten-seemann in #5430
http3: send SETTINGS_MAX_FIELD_SECTION_SIZE in the SETTINGS frame by @marten-seemann in #5431
http3: read response after encountering error sending the request by @marten-seemann in #5432
http3: make Transport.MaxResponseBytes an int by @marten-seemann in #5433
http3: add a benchmark for header parsing by @marten-seemann in #5435
update qpack to v0.6.0 by @marten-seemann in #5434
http3: use QPACK_DECOMPRESSION_FAILED for QPACK errors by @marten-seemann in #5439
add documentation for Conn.NextConnection by @marten-seemann in #5442
ackhandler: don’t generate an immediate ACK for the first packet by @marten-seemann in #5447
don’t arm connection timer for connection ID retirement by @marten-seemann in #5449
README: add nodepass to list of projects by @yosebyte in #5448
qlogwriter: use synctest to make tests deterministic by @marten-seemann in #5454
http3: limit size of decompressed headers by @marten-seemann in #5452

New Contributors

@yosebyte made their first contribution in #5448

Full Changelog: quic-go/quic-go@v0.56.0...v0.57.0

`v0.56.0`

Compare Source

This release introduces qlog support for HTTP/3 (#5367, #5372, #5374, #5375, #5376, #5381, #5383).

For this, we completely changed how connection tracing works. Instead of a general-purpose logging.ConnectionTracer (which we removed entirely), we now have a qlog-specific tracer (#5356, #5417). quic-go users can now implement their own qlog events.

It also removes the Prometheus-based metrics collection. Please comment on the tracking issue (#5294) if you rely on metrics and are interested in seeing metrics brought back in a future release.

Notable Changes

replaced the unmaintained gojay with a custom, performance-optimized JSON encoder (#5353, #5371)
quicvarint: improved panic message for numbers larger than 2^62 (#5410)

Behind the Scenes

Go 1.25 introduced support for testing concurrent code using testing/synctest. We've been working on transitioning tests to use synctest (#5357, #5391, #5393, #5397, #5398, #5403, #5414, #5415), using @MarcoPolo's simnet package to simulate a network in memory.

Using synctest makes test execution more reliable (reducing flakiness). The use of a synthetic clock leads to a massive speedup; the execution time of some integration tests was reduced from 20s to less than 1ms. The work will continue for the next release (see tracking issue: #5386).

Changelog

qlog: implement a minimal jsontext-like JSON encoder by @marten-seemann in #5353
ci: remove 386 (32 bit x86) by @MarcoPolo in #5352
use synctest in more connection tests by @marten-seemann in #5357
qlog: split serializiation and event definitions, remove logging abstraction by @marten-seemann in #5356
qlogwriter: implement the draft-12 trace header by @marten-seemann in #5360
qlogwriter: add support for event_schemas in the trace header by @marten-seemann in #5361
qlogwriter: pass the event time to Event.Encode by @marten-seemann in #5362
ackhandler: fix qlogging of alarm timer expiration time by @marten-seemann in #5363
qlog: privatize Encode functions of non-Event structs by @marten-seemann in #5364
fix qlogging of the short header payload length by @marten-seemann in #5365
ci: include OS and Go version in Codecov test report upload by @marten-seemann in #5370
http3: add basic server-side qlog support by @marten-seemann in #5367
jsontext: add support for encoding null by @marten-seemann in #5371
qlog: use PathEndpointInfo in connection_started by @marten-seemann in #5368
http3: fix qlog encoding of frame_parsed and frame_created events by @marten-seemann in #5372
http3: add basic client-side qlog support by @marten-seemann in #5374
readme: update oss-fuzz link by @kriztalz in #5377
http3: qlog sent and received GOAWAY frames by @marten-seemann in #5376
http3: qlog sent and received DATAGRAMs by @marten-seemann in #5375
http3: move qlogging of frames into the frame parser by @marten-seemann in #5378
http3: qlog sent and received SETTINGS frames by @marten-seemann in #5379
http3: qlog the frame length and payload length of parsed frames by @marten-seemann in #5380
http3: qlog reserved, unsupported and unknown frames by @marten-seemann in #5381
http3: add the qlog event schema to trace header by @marten-seemann in #5383
use default RTT (100ms) for 0-RTT if no prior estimate by @marten-seemann in #5388
congestion: avoid overflows when calculating pacer budget by @marten-seemann in #5390
add simnet package to simulate a net.PacketConn in memory by @marten-seemann in #5385
use synctest for transport tests by @marten-seemann in #5391
use simnet in CONNECTION_CLOSE retransmission test by @marten-seemann in #5395
use synctest for the packet drop test by @marten-seemann in #5393
use synctest for the handshake drop test by @marten-seemann in #5397
use synctest for the datagram test by @marten-seemann in #5398
use synctest for the timeout tests by @marten-seemann in #5403
fix flaky TestConnectionUnpackFailureDropped by @Copilot in #5382
fix flaky TestServerTransportClose by @Copilot in #5407
ci: use gcassert to check that quicvarint.Len is inlined by @marten-seemann in #5409
quicvarint: improve panic message for numbers larger 2^62 by @marten-seemann in #5410
ci: bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #5411
ci: update golangci-lint to v2.6.0 by @marten-seemann in #5412
qlog: rename owner to initiator by @marten-seemann in #5416
use synctest for the stateless reset tests by @marten-seemann in #5415
ackhandler: fix qlogging of RTT values by @marten-seemann in #5418
qlog: rework the ConnectionClosed event by @marten-seemann in #5417
qlog: split the PTO count updates ouf of the MetricsUpdated event by @marten-seemann in #5421

New Contributors

@kriztalz made their first contribution in #5377
@Copilot made their first contribution in #5382

Full Changelog: quic-go/quic-go@v0.55.0...v0.56.0

`v0.55.0`

Compare Source

This release contains a number of improvements and fixes, and it updates the supported Go versions to 1.24 and 1.25.

Optimizations

When sending packets on a QUIC connection, RFC 9002 requires us to save the timestamp for every packet sent. In #5344, we implemented a memory-optimized drop-in replacement for time.Time, which reduces the memory required from 24 to 8 bytes, and vastly speeds up timer calculations (which happen very frequently).

New Features

Basic connection statistics are now exposed via Conn.ConnectionStats, thanks to @MarcoPolo
On some links, packet reordering can lead to spurious detections of packet loss when using the loss detection logic specified in RFC 9002. #5355 adds logic detect when packet loss is detected spuriously.

Notable Fixes

http3: don't allow usage of closed Transport: #5324, thanks to @Glonee
http3: fix race in concurrent Transport.Roundtrip calls: #5323, thanks to @Glonee
improve and fix connection timer logic: #5339, thanks to @sukunrt for a very comprehensive code review

Behind the Scenes

We have started transitioning tests to make use of the new synctest package that was added in Go 1.25 (and was available as a GOEXPERIMENT in Go 1.24): #5291, #5296, #5298, #5299, #5302, #5304, #5305, #5306, #5317. This is a lot of work, but it makes the test execution both faster and more reliable.

Changelog

wire: implement parsing and writing of the ACK_FREQUENCY frame by @marten-seemann in #5264
wire: implement parsing and writing of the IMMEDIATE_ACK frame by @marten-seemann in #5265
fuzzing: fix timeout in frame parser by @jannis-seemann in #5268
wire: add support for the min_ack_delay transport parameter by @marten-seemann in #5266
fix missing log statement for STREAM, DATAGRAM and ACK by @jannis-seemann in #5273
qlog: add support for ACK_FREQUENCY and IMMEDIATE_ACK frames by @marten-seemann in #5276
ackhandler: remove unused time from receivedPacketHandler.ReceivedPacket by @marten-seemann in #5277
quicvarint: extend benchmark to use quicvarint.Reader by @marten-seemann in #5278
quicvarint: tolerate empty reads of the underlying io.Reader by @bemasc in #5275
http3: fix documentation for Server.ServeListener by @WeidiDeng in #5282
expose connection stats via Conn.ConnectionStats by @marten-seemann in #5281
ackhandler: generalize check for missing packets below threshold by @marten-seemann in #5260
update to Go 1.25, drop Go 1.23, use go tool for gomock by @marten-seemann in #5283
replace interface{} with any by @marten-seemann in #5290
use testing.B.Loop in all benchmark tests by @marten-seemann in #5285
build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #5293
use synctest to make receive stream tests fully deterministc by @marten-seemann in #5291
use synctest to make streams map tests fully deterministic by @marten-seemann in #5296
ci: cache the Go build cache for cross-compilation workflow by @marten-seemann in #5297
ci: fix cache save and restore logic for cross compile workflow by @marten-seemann in #5300
restore previously deleted TestStreamsMapConcurrent test by @marten-seemann in #5301
use synctest to make the send queue tests fully deterministic by @marten-seemann in #5302
use synctest to make the send stream tests fully deterministic by @marten-seemann in #5298
ci: use go mod tidy -diff to check for tidied go.mod by @marten-seemann in #5303
use synctest to make the datagram queue tests fully deterministic by @marten-seemann in #5305
utils: use synctest to make the timer tests fully deterministic by @marten-seemann in #5306
ackhandler: fix resetting of packet.isPathProbePacket by @marten-seemann in #5310
ackhandler: use an iterator to process received packet ranges by @marten-seemann in #5309
ackhandler: use a typed mock for the ECNHandler by @marten-seemann in #5311
ackhandler: immediately clear ackedPacket slice after processing ACK by @marten-seemann in #5313
ci: improve cache key generation for the cross compilation job by @marten-seemann in #5315
ci: fix cache paths in cross compile workflow by @marten-seemann in #5318
ackhandler: avoid storing packet number in packet struct by @marten-seemann in #5312
ackhandler: store skipped packet numbers separately by @marten-seemann in #5314
ackhandler: account for skipped packets in packet threshold calculation by @marten-seemann in #5316
ackhandler: store the last four skipped packets by @marten-seemann in #5322
http3: fix data race in Transport by @Glonee in #5323
qlog: add a benchmark for the ConnectionTracer by @marten-seemann in #5328
qlog: merge event category and name by @marten-seemann in #5329
http3: don't allow usage of closed Transport by @Glonee in #5324
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #5330
fix: return stream frames to pool on error paths by @lidel in #5327
ackhandler: add a benchmark for sending and acknowledging packets by @marten-seemann in #5333
implement a memory-optimized time.Time replacement by @marten-seemann in #5334
add a benchmark test for data transfers by @marten-seemann in #5335
improve connection timer logic by @marten-seemann in #5339
use synctest to make the connection tests fully deterministic by @marten-seemann in #5317
drop initial packets when the handshake is confirmed by @marten-seemann in #5354
protocol: optimize ConnectionID.String by @marten-seemann in #5351
fix missing tracing of restored transport parameters by @marten-seemann in #5349
ackhandler: track lost packets and detect spurious losses by @marten-seemann in #5355

New Contributors

@bemasc made their first contribution in #5275
@lidel made their first contribution in #5327

Full Changelog: quic-go/quic-go@v0.54.0...v0.55.0

renovate · 2025-10-16T16:41:26Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`go.uber.org/mock`	`v0.5.0` -> `v0.5.2`

coderabbitai · 2025-10-16T16:41:51Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

renovate · 2025-11-08T08:49:31Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.9-20250912141014-52f32327d4b0.1
go: downloading github.com/planetscale/vtprotobuf v0.6.1-0.20250313105119-ba97887b0a25
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20251014184007-4626949a642f
go: downloading google.golang.org/genproto v0.0.0-20251014184007-4626949a642f
go: downloading google.golang.org/grpc v1.75.1
go: downloading google.golang.org/protobuf v1.36.10
go: downloading connectrpc.com/connect v1.19.1
go: downloading golang.org/x/crypto v0.42.0
go: downloading golang.org/x/sys v0.36.0
go: downloading github.com/warthog618/go-gpiocdev v0.9.1
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/nats-io/nats.go v1.46.0
go: downloading cirello.io/oversight/v2 v2.0.0-20250811221607-2b357433924f
go: downloading github.com/nats-io/nats-server/v2 v2.12.0
go: downloading github.com/rs/zerolog v1.34.0
go: downloading github.com/samber/slog-multi v1.5.0
go: downloading github.com/samber/slog-zerolog/v2 v2.7.3
go: downloading go.opentelemetry.io/contrib/bridges/otelslog v0.13.0
go: downloading go.opentelemetry.io/otel/log v0.14.0
go: downloading go.opentelemetry.io/otel v1.38.0
go: downloading github.com/qmuntal/stateless v1.7.2
go: downloading go.opentelemetry.io/otel/trace v1.38.0
go: downloading go.opentelemetry.io/otel/metric v1.38.0
go: downloading go.einride.tech/pid v0.1.3
go: downloading github.com/arunsworld/nursery v0.6.0
go: downloading connectrpc.com/cors v0.1.0
go: downloading connectrpc.com/grpchealth v1.4.0
go: downloading connectrpc.com/grpcreflect v1.3.0
go: downloading connectrpc.com/otelconnect v0.8.0
go: downloading connectrpc.com/validate v0.3.0
go: downloading connectrpc.com/vanguard v0.3.0
go: downloading github.com/lorenzosaino/go-sysctl v0.3.1
go: downloading github.com/quic-go/quic-go v0.57.1
go: downloading github.com/rs/cors v1.11.1
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0
go: downloading golang.org/x/net v0.44.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20251007200510-49b9836ed3ff
go: downloading github.com/nats-io/nuid v1.0.1
go: downloading github.com/antithesishq/antithesis-sdk-go v0.4.3-default-no-op
go: downloading github.com/klauspost/compress v1.18.0
go: downloading github.com/minio/highwayhash v1.0.3
go: downloading github.com/nats-io/jwt/v2 v2.8.0
go: downloading github.com/nats-io/nkeys v0.4.11
go: downloading golang.org/x/time v0.13.0
go: downloading github.com/mattn/go-colorable v0.1.13
go: downloading github.com/samber/lo v1.51.0
go: downloading github.com/samber/slog-common v0.19.0
go: downloading github.com/go-logr/logr v1.4.3
go: downloading buf.build/go/protovalidate v0.14.0
go: downloading golang.org/x/lint v0.0.0-20210508222113-6edffad5e616
go: downloading honnef.co/go/tools v0.3.2
go: downloading github.com/quic-go/qpack v0.6.0
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading golang.org/x/text v0.29.0
go: downloading github.com/google/go-tpm v0.9.5
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.1.0
go: downloading github.com/google/cel-go v0.26.0
go: downloading cel.dev/expr v0.24.0
go: downloading golang.org/x/tools v0.36.0
go: downloading golang.org/x/exp/typeparams v0.0.0-20220613132600-b0d781184e0d
go: downloading golang.org/x/exp v0.0.0-20250718183923-645b1fa84792
go: downloading github.com/stoewer/go-strcase v1.3.1
go: downloading github.com/antlr4-go/antlr/v4 v4.13.1
go: downloading golang.org/x/sync v0.17.0
go: downloading github.com/BurntSushi/toml v1.1.0
go: downloading golang.org/x/mod v0.27.0
go: github.com/u-bmc/u-bmc/service/websrv imports
	github.com/quic-go/quic-go/logging: cannot find module providing package github.com/quic-go/quic-go/logging

renovate bot force-pushed the renovate/github.com-quic-go-quic-go-0.x branch from 4752b9b to 451dceb Compare November 8, 2025 08:49

renovate bot requested a review from a team as a code owner November 8, 2025 08:49

renovate bot changed the title ~~fix(deps): update module github.com/quic-go/quic-go to v0.55.0~~ fix(deps): update module github.com/quic-go/quic-go to v0.56.0 Nov 8, 2025

renovate bot force-pushed the renovate/github.com-quic-go-quic-go-0.x branch from 451dceb to b0085f6 Compare November 21, 2025 12:56

renovate bot changed the title ~~fix(deps): update module github.com/quic-go/quic-go to v0.56.0~~ fix(deps): update module github.com/quic-go/quic-go to v0.57.0 Nov 21, 2025

fix(deps): update module github.com/quic-go/quic-go to v0.57.1

1673304

renovate bot force-pushed the renovate/github.com-quic-go-quic-go-0.x branch from b0085f6 to 1673304 Compare November 26, 2025 09:59

renovate bot changed the title ~~fix(deps): update module github.com/quic-go/quic-go to v0.57.0~~ fix(deps): update module github.com/quic-go/quic-go to v0.57.1 Nov 26, 2025

renovate bot changed the title ~~fix(deps): update module github.com/quic-go/quic-go to v0.57.1~~ fix(deps): update module github.com/quic-go/quic-go to v0.57.1 - autoclosed Dec 11, 2025

renovate bot closed this Dec 11, 2025

renovate bot deleted the renovate/github.com-quic-go-quic-go-0.x branch December 11, 2025 22:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update module github.com/quic-go/quic-go to v0.57.1 - autoclosed #81

fix(deps): update module github.com/quic-go/quic-go to v0.57.1 - autoclosed #81

Uh oh!

renovate bot commented Oct 16, 2025 •

edited

Loading

Uh oh!

renovate bot commented Oct 16, 2025

Uh oh!

coderabbitai bot commented Oct 16, 2025

Review skipped

Uh oh!

renovate bot commented Nov 8, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

fix(deps): update module github.com/quic-go/quic-go to v0.57.1 - autoclosed #81

fix(deps): update module github.com/quic-go/quic-go to v0.57.1 - autoclosed #81

Uh oh!

Conversation

renovate bot commented Oct 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.57.1

v0.57.0

Breaking Changes

Notable Fixes

What's Changed

New Contributors

v0.56.0

Notable Changes

Behind the Scenes

Changelog

New Contributors

v0.55.0

Optimizations

New Features

Notable Fixes

Behind the Scenes

Changelog

New Contributors

Uh oh!

renovate bot commented Oct 16, 2025

ℹ Artifact update notice

File name: go.mod

Uh oh!

coderabbitai bot commented Oct 16, 2025

Review skipped

Uh oh!

renovate bot commented Nov 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Oct 16, 2025 •

edited

Loading

`v0.57.1`

`v0.57.0`

`v0.56.0`

`v0.55.0`

renovate bot commented Nov 8, 2025 •

edited

Loading