fix(deps): update module github.com/quic-go/quic-go to v0.40.1 #235

Merged

renovate-bot merged 1 commit from renovate/github.com-quic-go-quic-go-0.x into master

2023-12-13 06:00:25 +00:00

renovate-bot commented

2023-12-13 05:00:28 +00:00

Collaborator

This PR contains the following updates:

Package	Type	Update	Change
github.com/quic-go/quic-go	require	patch	`v0.40.0` -> `v0.40.1`

Release Notes

quic-go/quic-go

`v0.40.1`

Compare Source

This release contains fixes for the Honeybadger vulnerability (CVE-2023-49295):

limit the number of queued PATH_RESPONSE frames to 256 (https://github.com/quic-go/quic-go/pull/4199)
don't retransmit PATH_CHALLENGE and PATH_RESPONSE frames (https://github.com/quic-go/quic-go/pull/4200)

Full Changelog: https://github.com/quic-go/quic-go/compare/v0.40.0...v0.40.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) | require | patch | `v0.40.0` -> `v0.40.1` | --- ### Release Notes <details> <summary>quic-go/quic-go</summary> ### [`v0.40.1`](https://github.com/quic-go/quic-go/releases/tag/v0.40.1) [Compare Source](https://github.com/quic-go/quic-go/compare/v0.40.0...v0.40.1) This release contains fixes for the Honeybadger vulnerability (CVE-2023-49295): - limit the number of queued PATH_RESPONSE frames to 256 (https://github.com/quic-go/quic-go/pull/4199) - don't retransmit PATH_CHALLENGE and PATH_RESPONSE frames (https://github.com/quic-go/quic-go/pull/4200) **Full Changelog**: https://github.com/quic-go/quic-go/compare/v0.40.0...v0.40.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2023-12-13 05:00:29 +00:00