Skip to content

fix(deps): update all dependencies#261

Merged
paralin merged 1 commit intomasterfrom
renovate/all
Jun 29, 2025
Merged

fix(deps): update all dependencies#261
paralin merged 1 commit intomasterfrom
renovate/all

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 24, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
github.com/quic-go/quic-go v0.52.0 -> v0.53.0 age adoption passing confidence require minor
github/codeql-action v3.29.0 -> v3.29.1 age adoption passing confidence action patch
prettier (source) 3.6.0 -> 3.6.2 age adoption passing confidence devDependencies patch

Release Notes

quic-go/quic-go (github.com/quic-go/quic-go)

v0.53.0

Compare Source

This release introduces a massive overhaul of the quic-go API. See this blog post for more details about the motivation. Most users will need to make some changes when upgrading to this version.

  • The Connection interface was removed in favor of a Conn struct (#​5195).
  • The ReceiveStream, SendStream and Stream interfaces were replaced with structs of the same name (#​5149, #​5172, #​5173, #​5214).

In most cases, migrating downstream code should be fairly straightforward. For example, a method that used to accept a quic.Connection as a parameter now needs to accept a *quic.Conn, and a function handling a quic.Stream now needs to handle a *quic.Stream. Of course, consumers of quic-go are free to define their own interfaces.

Similarly, on the HTTP/3 layer:

  • The Connection interface was replaced with a Conn struct (#​5204).
  • The RequestStream interface was converted to a struct (#​5153, #​5216).
  • The Stream interface was converted to a struct (#​5154).

We expect that most HTTP/3 users won't need to adjust their code, if they use the package to run an HTTP/3 server and dial HTTP/3 connection. More advanced use cases, such as WebTransport and the various MASQUE protocols, will require updates. We have already released new versions of webtransport-go and masque-go to support these changes.

Other Breaking Changes

  • http3: the deprecated SingleDestinationRoundTripper was removed (#​5217)

Notable Fixes and Improvements

  • fix Goroutine leak when receiving a Version Negotiation packets race with dial context cancellation (#​5203)
  • drain the server accept queue when closing the transport (#​5237), thanks to @​sukunrt
  • fix a race condition when closing transport (#​5220), thanks to @​sukunrt
  • quicvarint: speed up parsing of 1, 2 and 4-byte varints (~12.5% for 1 and 2 bytes, ~1% for 4 bytes) (#​5229), thanks to @​jannis-seemann
  • http3: expose ClientConn.Context, CloseWithError and Conn: #​5219
  • http3: RequestStream could be misused in many different ways, that's why we tightened the error checks (#​5231)

Behind The Scenes

We've completed the migration of the entire test suite away from Ginkgo (#​3652) and towards standard Go tests (#​5084, #​5150, #​5151, #​5193, #​5194, #​5196, #​5198). This was a major undertaking, spanning roughly 9 months and resulting in a complete rewrite of quic-go's test suite (> 40,000 lines of code!). Users will now benefit from a significantly slimmed-down dependency tree when upgrading.

Changelog

New Contributors

Full Changelog: quic-go/quic-go@v0.52.0...v0.53.0

github/codeql-action (github/codeql-action)

v3.29.1

Compare Source

prettier/prettier (prettier)

v3.6.2

Compare Source

diff

Markdown: Add missing blank line around code block (#​17675 by @​fisker)
<!-- Input -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

<!-- Prettier 3.6.1 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```
   1. Another
   2. List

<!-- Prettier 3.6.2 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

v3.6.1

Compare Source

diff

TypeScript: Allow const without initializer (#​17650, #​17654 by @​fisker)
// Input
export const version: string;

// Prettier 3.6.0 (--parser=babel-ts)
SyntaxError: Unexpected token (1:21)
> 1 | export const version: string;
    |                     ^

// Prettier 3.6.0 (--parser=oxc-ts)
SyntaxError: Missing initializer in const declaration (1:14)
> 1 | export const version: string;
    |              ^^^^^^^^^^^^^^^

// Prettier 3.6.1
export const version: string;
Miscellaneous: Avoid closing files multiple times (#​17665 by @​43081j)

When reading a file to infer the interpreter from a shebang, we use the
n-readlines library to read the first line in order to get the shebang.

This library closes files when it reaches EOF, and we later try close the same
files again. We now close files only if n-readlines did not already close
them.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title fix(deps): update module github.com/quic-go/quic-go to v0.53.0 fix(deps): update all dependencies Jun 25, 2025
@socket-security
Copy link

socket-security bot commented Jun 25, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​prettier@​3.6.0 ⏵ 3.6.299 +110010097 +3100

View full report

@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from fff4a4b to 847774a Compare June 27, 2025 12:12
@paralin paralin merged commit 1a8ee7f into master Jun 29, 2025
6 of 7 checks passed
@paralin paralin deleted the renovate/all branch June 29, 2025 23:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant