Skip to content

build(deps): bump quinn-proto from 0.11.14 to 0.11.19 in the cargo group across 1 directory - #9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-726a5e896b
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-726a5e896b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown

Bumps the cargo group with 1 update in the / directory: quinn-proto.

Updates quinn-proto from 0.11.14 to 0.11.19

Release notes

Sourced from quinn-proto's releases.

quinn-proto 0.11.19

Fixes several advisories:

What's Changed

quinn-proto 0.11.18, quinn 0.11.12

Three more security issues were reported and fixed since 0.11.17:

What's Changed

quinn-proto 0.11.17

This release fixes three remote memory exhaustion issues. See GHSA-qfwj-vfxf-92j2, GHSA-2hv7-gw8g-gpq5, and GHSA-hmxj-32vh-65vr for more details, and quinn-rs/quinn#2789 for the fixes.

What's Changed

... (truncated)

Commits
  • 8192ed3 udp: bump version to 0.5.16
  • 6862d3d udp: backport receive error handling to 0.11.x
  • 78d30dc proto: bump version to 0.11.19
  • 73114d8 Check MAX_STREAM_DATA on remote bidi streams against limit
  • a6e78d1 proto: reserve close frame space after large Initial headers
  • 74c33ff proto: reject Initial tokens that prevent packet construction
  • f97fb5a quinn: Wake wait_idle when the endpoint driver is dropped
  • 8ada074 quinn-proto: Pad Initial datagrams to the configured minimum MTU
  • 16ecc70 fix: stale waker in blocked_readers
  • 12d7f07 fix: cleanup state if transmit failed
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 28, 2026
@dependabot dependabot Bot changed the title chore(deps): bump quinn-proto from 0.11.14 to 0.11.18 in the cargo group across 1 directory chore(deps): bump quinn-proto from 0.11.14 to 0.11.19 in the cargo group across 1 directory Oct 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-726a5e896b branch 2 times, most recently from bdf0f84 to 923a04a Compare October 3, 2026 15:11
Bumps the cargo group with 1 update in the / directory: [quinn-proto](https://github.com/quinn-rs/quinn).


Updates `quinn-proto` from 0.11.14 to 0.11.19
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.14...quinn-proto-0.11.19)

---
updated-dependencies:
- dependency-name: quinn-proto
  dependency-version: 0.11.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump quinn-proto from 0.11.14 to 0.11.19 in the cargo group across 1 directory build(deps): bump quinn-proto from 0.11.14 to 0.11.19 in the cargo group across 1 directory Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-726a5e896b branch from 923a04a to 4fbd424 Compare October 20, 2026 15:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants