Skip to content

build(deps): bump github.com/quic-go/webtransport-go from 0.10.0 to 0.11.0#709

Merged
cheggaaa merged 1 commit into
mainfrom
dependabot/go_modules/github.com/quic-go/webtransport-go-0.11.0
Jun 16, 2026
Merged

build(deps): bump github.com/quic-go/webtransport-go from 0.10.0 to 0.11.0#709
cheggaaa merged 1 commit into
mainfrom
dependabot/go_modules/github.com/quic-go/webtransport-go-0.11.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/quic-go/webtransport-go from 0.10.0 to 0.11.0.

Release notes

Sourced from github.com/quic-go/webtransport-go's releases.

v0.11.0

This release focuses on full compatibility with draft-15. The server keeps limited backwards compatibility with older draft clients where this is straightforward, but that compatibility is intentionally not comprehensive.

WebTransport flow control is not supported yet (see issue #256).

Breaking Changes

  • webtransport-go now requires Go 1.25 or newer: #243

Protocol Changes

  • Use SETTINGS_WT_ENABLED for WebTransport draft-version negotiation. The server continues to accept the old ENABLE_WEBTRANSPORT setting for compatibility with older clients: #254
  • Send SETTINGS_WT_ENABLED from the client, as required by draft-15: #271 (thanks to @​tobbee)
  • Use webtransport-h3 as the Extended CONNECT :protocol token. The server continues to accept the legacy webtransport token for compatibility with older clients: #280 (thanks to @​tomholford)
  • Use the WT_REQUIREMENTS_NOT_MET error when the peer does not advertise the required HTTP/3 or WebTransport capabilities: #252
  • Add support for the WT_ALPN_ERROR session error: #277
  • Validate WebTransport session IDs before accepting incoming streams: #283
  • Advertise SETTINGS values as required by Safari 26.4: #261 (thanks to @​birros)

New Features

  • Added a runnable example server and client, including browser-side JavaScript and certificate hash verification in the Go client: #285

Notable Fixes

  • Fixed a stream close race condition where ReceiveStream.Read or SendStream.Write could block forever when the local and remote side closed a session concurrently: #267 (thanks to @​aler9)
  • Server.ListenAndServe now closes the UDP socket it creates: #274

What's Changed

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/quic-go/webtransport-go](https://github.com/quic-go/webtransport-go) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/quic-go/webtransport-go/releases)
- [Commits](quic-go/webtransport-go@v0.10.0...v0.11.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/webtransport-go
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 15, 2026
@github-actions

Copy link
Copy Markdown

New Coverage 58.0% of statements
Patch Coverage 0.0% of changed statements (0/0)

Coverage provided by https://github.com/seriousben/go-patch-cover-action

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​quic-go/​webtransport-go@​v0.10.0 ⏵ v0.11.094 -3100100100100

View full report

@cheggaaa cheggaaa merged commit 6315a1d into main Jun 16, 2026
4 checks passed
@cheggaaa cheggaaa deleted the dependabot/go_modules/github.com/quic-go/webtransport-go-0.11.0 branch June 16, 2026 12:36
@github-actions github-actions Bot locked and limited conversation to collaborators Jun 16, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant