Skip to content

build(deps): Bump github.com/quic-go/webtransport-go from 0.10.0 to 0.11.1 in /apps/evm#3406

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/apps/evm/github.com/quic-go/webtransport-go-0.11.1
Open

build(deps): Bump github.com/quic-go/webtransport-go from 0.10.0 to 0.11.1 in /apps/evm#3406
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/apps/evm/github.com/quic-go/webtransport-go-0.11.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/quic-go/webtransport-go from 0.10.0 to 0.11.1.

Release notes

Sourced from github.com/quic-go/webtransport-go's releases.

v0.11.1

This patch release contains the following backports :

  • Avoid buffering skipped capsules: #290
  • Close active QUIC connections before tearing down the listener: #295
  • Fix missing context cancelation in Session.OpenStreamSync and Session.OpenUniStreamSync: #297

Full Changelog: quic-go/webtransport-go@v0.11.0...v0.11.1

v0.11.0

This release focuses on full compatibility with draft-15. The server keeps limited backwards compatibility with older draft clients where this is straightforward, but that compatibility is intentionally not comprehensive.

WebTransport flow control is not supported yet (see issue #256).

Breaking Changes

  • webtransport-go now requires Go 1.25 or newer: #243

Protocol Changes

  • Use SETTINGS_WT_ENABLED for WebTransport draft-version negotiation. The server continues to accept the old ENABLE_WEBTRANSPORT setting for compatibility with older clients: #254
  • Send SETTINGS_WT_ENABLED from the client, as required by draft-15: #271 (thanks to @​tobbee)
  • Use webtransport-h3 as the Extended CONNECT :protocol token. The server continues to accept the legacy webtransport token for compatibility with older clients: #280 (thanks to @​tomholford)
  • Use the WT_REQUIREMENTS_NOT_MET error when the peer does not advertise the required HTTP/3 or WebTransport capabilities: #252
  • Add support for the WT_ALPN_ERROR session error: #277
  • Validate WebTransport session IDs before accepting incoming streams: #283
  • Advertise SETTINGS values as required by Safari 26.4: #261 (thanks to @​birros)

New Features

  • Added a runnable example server and client, including browser-side JavaScript and certificate hash verification in the Go client: #285

Notable Fixes

  • Fixed a stream close race condition where ReceiveStream.Read or SendStream.Write could block forever when the local and remote side closed a session concurrently: #267 (thanks to @​aler9)
  • Server.ListenAndServe now closes the UDP socket it creates: #274

What's Changed

... (truncated)

Commits
  • d03fbc3 fix missing context cancelation in Session.Open{Uni}StreamSync (#297)
  • f85ecfc close active QUIC connections before listener teardown (#295)
  • 3aecd11 avoid buffering skipped capsules (#290)
  • 683e220 update quic-go to v0.60.0 (#287)
  • 39cf509 send WebTransport SETTINGS expected by Safari 26.4 (#261)
  • c7ca10b add an example server and client (#285)
  • 1cdd8a0 implement validation of session IDs (#283)
  • 6b0bec9 use webtransport-h3 as the :protocol upgrade token (#280)
  • 81409ba fix flaky TestDatagrams (#278)
  • 041fa66 fix stream close race condition on session close (#267)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [github.com/quic-go/webtransport-go](https://github.com/quic-go/webtransport-go) from 0.10.0 to 0.11.1.
- [Release notes](https://github.com/quic-go/webtransport-go/releases)
- [Commits](quic-go/webtransport-go@v0.10.0...v0.11.1)

---
updated-dependencies:
- dependency-name: github.com/quic-go/webtransport-go
  dependency-version: 0.11.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown
Contributor

The latest Buf updates on your PR. Results from workflow CI / buf-check (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed⏩ skipped✅ passed⏩ skippedJul 25, 2026, 7:05 AM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants