[dependabot]

Bumps the go-dependencies group with 1 update: github.com/pion/dtls/v3.

Updates github.com/pion/dtls/v3 from 3.1.11 to 3.1.15

Release notes

Sourced from github.com/pion/dtls/v3's releases.

v3.1.15

Changelog

• 1293c7e8fe0dfeba4272dbde31d0f86fbee92910 Pace repeated cookie responses with backoff
• 56d6ef77dcc29cb2e417f3a5b10b60ab0c74aa71 Document unsafe v3 state restoration
• db6e8867c3b55186132d820815bcab7cecf50e13 Add TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256

v3.1.14

Changelog

• 66a9ff3c4f211853c3908ba06c7cd103f9a917da Retain the receive replay cutoff across Resume
• 9365bfd5256fb664dd964b4b5d7942b5180e1066 Reject resumption of incomplete connection state
• 1b7dd0b1ef6d239d340286e8f750612786d590ec Validate cookies before resuming server sessions
• 93a9fd1f709136e8eb1ab30d960aa8e1ecfa10d7 Authenticate peers again on session resumption
• ff414eb3e800a5be0f61df8bd194e5292d5635cd Recheck PSK credentials before resuming sessions
• a470668104cc3ca997a09cc3e27333dc23d8391a Preserve extended master secret on resumption
• 2b234cd7174fc758372de0e479fc66515f54f631 Bind cached sessions to role and cipher suite
• ce84b979bcb5449727b3ea5c57add4e1edb33284 Save sessions only after client authentication
• a3c79926a44d01e6174daad4249d3677c02f1990 Backport ALPN selection validation
• fe06b60c1c229da538cf65b68c649d14644f7f71 Backport late plaintext alert validation
• ffac271de323e9ea58ad5439f0fd8ae59f6fe1c8 Count UDP connections before exposing them to Accept
• 0c3b8c4c2e7f0c3e69d64fb1e1a72c99983c1a6f Reject unsupported DTLS record epochs
• ec46cde6e3ffe4203b9609ae578d5dc1ae0c14a5 Retransmit cookie challenges only for ClientHello retries
• a460d839d8541ca8c94ba88995811cc330d34712 Select cipher suites using the SNI certificate
• ad3c3e0a92de82d832e3f3aa026518e80a470baa Reject unrequested client certificates
• 7c422639dea5fed604e6925095fe60e5b0504344 Check server certificate keys against the cipher suite
• 9d0557bd1c655fd523024f9bb8d2ff2713b518f2 Distinguish RSA-PSS certificate signature schemes
• a1332dae516d6ce75cf711a19904c5dcfadbf538 Reject empty certificate entries
• 4a04e7c503194e8470b60dc27efebce1232f21fa Bound SNI processing during certificate selection
• a4f3e27909ec4d7ddeaeec750c0c8b6d1bf18622 Preserve IP server names for certificate verification
• 72b2865a4544aece68b0bbcee29733eb0eca8a83 Fix PSK identity-hint length overflow

v3.1.13

Changelog

• da75e4d43330019d54a93ce7d926cdc0325f3b32 Backport record-layer validation fixes
• fa6e8d38a3a61044117628bde1ac8c1318f34379 Limit peer RSA key sizes before signature verification
• 22bf92faa45ffdd49115de8bd8fed10d0a322fe6 Prevent early application data from blocking handshakes
• 37cd0b4d777a60a8d27cef7e4def4c6faf066a74 Reject unoffered curves in DTLS client key exchange
• ab433f039bd00e21e4cd96319844b5e27fce4a5b Verify client Finished in DTLS 1.2 full handshakes
• 80b6c18f5c0c2c9761d4b3bf71e5d066f3064b10 Negotiate DTLS parameters from the cookie CH
• 979ad79d96dacc69c6c2821808f9b079301067d4 Process the client cer flight once per handshake
• 252cf49eeb9e641a5cd316cdd85e1535dc2efb28 Honor local signature policy for CertificateVerify
• cb560535461a483f2930a91a474e72fa6b615b87 Validate handshake signature against certificate keys
• f444d0825ab34fed4b210607fa802dcf1edaf51f Bound handshake cache memory usage

v3.1.12

Changelog

• 240a1390bb3e0c52d1b93e8adcdd7c01d80bd7ab Retransmit server flight on repeated CH

Commits

• 1293c7e Pace repeated cookie responses with backoff
• 56d6ef7 Document unsafe v3 state restoration
• db6e886 Add TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256
• 66a9ff3 Retain the receive replay cutoff across Resume
• 9365bfd Reject resumption of incomplete connection state
• 1b7dd0b Validate cookies before resuming server sessions
• 93a9fd1 Authenticate peers again on session resumption
• ff414eb Recheck PSK credentials before resuming sessions
• a470668 Preserve extended master secret on resumption
• 2b234cd Bind cached sessions to role and cipher suite
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions