Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 3 updates - #55

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-3f6f5283b7
Closed

chore(deps): bump the go-dependencies group across 1 directory with 3 updates#55
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-3f6f5283b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the go-dependencies group with 3 updates in the / directory: github.com/quic-go/quic-go, github.com/xtaci/smux and golang.org/x/net.

Updates github.com/quic-go/quic-go from 0.62.0 to 0.63.0

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.63.0

This release improves HTTP/3 request handling and error reporting.

Breaking Changes

  • http3: non-CONNECT server requests now leave URL.Scheme and URL.Host empty, matching net/http: #5839
  • http3: Extended CONNECT now leaves URL.Scheme and URL.Host empty and sets RequestURI to :path: #5841
  • http3: stream APIs now return QUIC stream and application errors as *http3.Error: #5852

Notable Fixes

  • http3: :path must start with /; only OPTIONS allows *: #5842
  • quicvarint: complete varints now decode successfully when returned alongside io.EOF or another reader error: #5876

Notable Changes

  • http3.Error now supports unwrapping the underlying QUIC stream or application error: #5873
  • http3.ClientConn now exposes LocalAddr and RemoteAddr: #5871

Changelog

Full Changelog: quic-go/quic-go@v0.62.0...v0.63.0

Commits
  • 9d085cc quicvarint: handle data returned with errors when reading and peeking (#5876)
  • 02fba56 http3: allow unwrapping stream and application errors (#5873)
  • 3c2c36b fix issue and pull request template (#5874)
  • 9f98c6a add an AI policy (#5870)
  • 43213a3 http3: add LocalAddr and RemoteAddr to ClientConn (#5871)
  • 7ff87de use more specific require assertions for errors (#5872)
  • 418c938 fix flaky TestDial by closing transports in server tests (#5869)
  • 4edf5ee use more specific require assertions in tests (#5855)
  • 510e6fa http3: return consistent error types from stream APIs (#5852)
  • aeeb231 ci: bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#5866)
  • Additional commits viewable in compare view

Updates github.com/xtaci/smux from 1.5.27 to 1.5.57

Release notes

Sourced from github.com/xtaci/smux's releases.

v1.5.53

Full Changelog: xtaci/smux@v1.5.50...v1.5.53

Commits
  • 3b4ec04 fix typo
  • 9116214 go fix ./...
  • cf75cc7 perf(stream): cache window update threshold to reduce computation
  • 532973c perf(stream): optimize Read by hoisting version check out of loop
  • 8668391 perf: optimize bufferRing and shaperLoop for better throughput
  • 5c3cd51 add protocol validation
  • e36a5bf Merge branch 'dev'
  • 8261adb refactor: optimize performance with reduced lock contention and code deduplic...
  • a3d8abe Merge branch 'dev'
  • d4bebcc (test): Add internal stream unit tests covering waitRead, `sendWindowUpdate...
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits
  • 540d04c go.mod: update golang.org/x dependencies
  • 20eef7f quic: clear fast-path receive buffer on stream reset
  • c23af1b internal/http3: fix compilation error due to missed symbol name update
  • eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  • 12e0501 internal/http3: server header size limits
  • d89285e quic: add Stream.StopSending, and rework stream/application errors
  • d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  • 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  • b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  • 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 3…
bebb342 
… updates

Bumps the go-dependencies group with 3 updates in the / directory: [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go), [github.com/xtaci/smux](https://github.com/xtaci/smux) and [golang.org/x/net](https://github.com/golang/net).


Updates `github.com/quic-go/quic-go` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.62.0...v0.63.0)

Updates `github.com/xtaci/smux` from 1.5.27 to 1.5.57
- [Release notes](https://github.com/xtaci/smux/releases)
- [Commits](xtaci/smux@v1.5.27...v1.5.57)

Updates `golang.org/x/net` from 0.58.0 to 0.59.0
- [Commits](golang/net@v0.58.0...v0.59.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/xtaci/smux
  dependency-version: 1.5.57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 29, 2026
@dr-hoseyn

dr-hoseyn commented Oct 1, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Author

Sorry, only users with push access can use that command.

@dependabot @github

dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 6, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-dependencies-3f6f5283b7 branch October 6, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dr-hoseyn