Skip to content

chore: upgrade quic#37

Merged
varonix0 merged 3 commits intomainfrom
daniel/patch-quic-cve
Oct 15, 2025
Merged

chore: upgrade quic#37
varonix0 merged 3 commits intomainfrom
daniel/patch-quic-cve

Conversation

@varonix0
Copy link
Member

Description 📣

Upgraded QUIC library to latest version for latest security patches.

Type ✨

  • Bug fix
  • New feature
  • Improvement
  • Breaking change
  • Documentation

@varonix0 varonix0 self-assigned this Oct 15, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Greptile Overview

Summary

Upgraded github.com/quic-go/quic-go from v0.50.1 to v0.54.1 to apply the latest security patches. The library is used in the gateway package for secure QUIC-based communication between the CLI and Infisical services.

  • Scope: Single dependency update in go.mod with corresponding checksum updates in go.sum
  • Usage: The library is used in gateway.go:187-193 for configuring QUIC listeners with TLS and datagram support
  • Impact: No breaking API changes - the update maintains backward compatibility with existing usage patterns
  • Testing: Verify gateway connection functionality and QUIC stream handling continue to work as expected

Confidence Score: 5/5

  • This PR is safe to merge with minimal risk - it's a straightforward security patch update
  • The change is a minor version bump (v0.50.1 → v0.54.1) of a well-maintained library for security patches. The quic-go API usage in gateway.go and connection.go remains unchanged, indicating backward compatibility. No code modifications were needed, only dependency version updates.
  • No files require special attention

Important Files Changed

File Analysis

Filename Score Overview
go.mod 5/5 Upgraded quic-go from v0.50.1 to v0.54.1 for security patches
go.sum 5/5 Updated checksums for quic-go v0.54.1 dependency

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant Dep as go.mod
    participant Pkg as quic-go Package
    participant GW as Gateway Service
    participant Sec as Security Patches
    
    Dev->>Dep: Update quic-go v0.50.1 → v0.54.1
    Dep->>Pkg: Pull updated package
    Pkg->>Sec: Apply security patches
    Note over Pkg,Sec: 4 minor version updates<br/>(v0.50.1 → v0.54.1)
    GW->>Pkg: Uses quic.Listen(), quic.Config
    Note over GW: No API changes required<br/>Backward compatible
    Pkg-->>GW: Enhanced security
    GW-->>Dev: Improved protection
Loading

2 files reviewed, no comments

Edit Code Review Agent Settings | Greptile

@varonix0 varonix0 merged commit 65ccc1d into main Oct 15, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants