Skip to content

fix: bump the go-minor-and-patch group across 1 directory with 2 updates - #12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-c697cb5d24
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-c697cb5d24

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go-minor-and-patch group with 2 updates in the / directory: github.com/quic-go/quic-go and golang.org/x/net.

Updates github.com/quic-go/quic-go from 0.61.0 to 0.63.0

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.63.0

This release improves HTTP/3 request handling and error reporting.

Breaking Changes

  • http3: non-CONNECT server requests now leave URL.Scheme and URL.Host empty, matching net/http: #5839
  • http3: Extended CONNECT now leaves URL.Scheme and URL.Host empty and sets RequestURI to :path: #5841
  • http3: stream APIs now return QUIC stream and application errors as *http3.Error: #5852

Notable Fixes

  • http3: :path must start with /; only OPTIONS allows *: #5842
  • quicvarint: complete varints now decode successfully when returned alongside io.EOF or another reader error: #5876

Notable Changes

  • http3.Error now supports unwrapping the underlying QUIC stream or application error: #5873
  • http3.ClientConn now exposes LocalAddr and RemoteAddr: #5871

Changelog

Full Changelog: quic-go/quic-go@v0.62.0...v0.63.0

v0.62.0

This release adds support for stream priorities based on RFC 9218:

... (truncated)

Commits
  • 9d085cc quicvarint: handle data returned with errors when reading and peeking (#5876)
  • 02fba56 http3: allow unwrapping stream and application errors (#5873)
  • 3c2c36b fix issue and pull request template (#5874)
  • 9f98c6a add an AI policy (#5870)
  • 43213a3 http3: add LocalAddr and RemoteAddr to ClientConn (#5871)
  • 7ff87de use more specific require assertions for errors (#5872)
  • 418c938 fix flaky TestDial by closing transports in server tests (#5869)
  • 4edf5ee use more specific require assertions in tests (#5855)
  • 510e6fa http3: return consistent error types from stream APIs (#5852)
  • aeeb231 ci: bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#5866)
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits
  • 540d04c go.mod: update golang.org/x dependencies
  • 20eef7f quic: clear fast-path receive buffer on stream reset
  • c23af1b internal/http3: fix compilation error due to missed symbol name update
  • eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  • 12e0501 internal/http3: server header size limits
  • d89285e quic: add Stream.StopSending, and rework stream/application errors
  • d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  • 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  • b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  • 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 14, 2026
@dependabot dependabot Bot changed the title fix: bump the go-minor-and-patch group with 2 updates fix: bump the go-minor-and-patch group across 1 directory with 2 updates Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-minor-and-patch-c697cb5d24 branch from 68e4902 to 2061c82 Compare September 21, 2026 01:12
Bumps the go-minor-and-patch group with 2 updates in the / directory: [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) and [golang.org/x/net](https://github.com/golang/net).


Updates `github.com/quic-go/quic-go` from 0.61.0 to 0.63.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.61.0...v0.63.0)

Updates `golang.org/x/net` from 0.58.0 to 0.59.0
- [Commits](golang/net@v0.58.0...v0.59.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-minor-and-patch-c697cb5d24 branch from 2061c82 to 6127c18 Compare September 28, 2026 01:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants