Skip to content

bot: Bump github.com/quic-go/webtransport-go from 0.9.0 to 0.10.0#4509

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/github.com/quic-go/webtransport-go-0.10.0
Open

bot: Bump github.com/quic-go/webtransport-go from 0.9.0 to 0.10.0#4509
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/github.com/quic-go/webtransport-go-0.10.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 12, 2026

Bumps github.com/quic-go/webtransport-go from 0.9.0 to 0.10.0.

Release notes

Sourced from github.com/quic-go/webtransport-go's releases.

v0.10.0

This release updates webtransport-go to use the new API introduced in quic-go v0.59.0 (#221): Instead of "hijacking" streams from the HTTP/3 layer, the underlying QUIC connection is now owned by WebTransport, and webtransport-go dispatches incoming streams to either the HTTP/3 layer or an existing or new WebTransport session.

New Features

Breaking Changes

  • Session.ConnectionState was renamed to SessionState: #189
  • The StreamID method was removed from Stream, SendStream and ReceiveStream: #226
  • The Server now embeds the http3.Server as a pointer (instead of by value): #215

Other Changes

  • The Stream and the SendStream now expose a Context method: #176 (thanks to @​Sicilica)
  • Delayed streams for already closed sessions are immediately reset: #235
  • The Session context now uses the request or dial context, allowing the application to attach values to the context: #199
  • When a WebTransport session is closed, streams are reset using the WT_SESSION_GONE error. Stream Read and Write now wait for the WT_CLOSE_SESSION capsule on the CONNECT stream to return a meaningful error: #213

Notable Fixes

  • Closed sessions are now properly cleaned up: #198 (thanks to @​rolaechea), #230
  • Session errors are now properly propagated to the stream Read and Write calls: #207
  • The length limit for WT_CLOSE_SESSION capsules is now enforced: #202
  • The dial timeout is now respected while waiting for the server's HTTP/3 settings: #216
  • A 10ms deadline is applied before attempting the WT_CLOSE_SESSION capsule, preventing Session.Close from blocking any longer than 10ms: #224
  • errors.Is error comparisons were fixed for StreamError and SessionError: #204, #205
  • The underlying QUIC connection is now closed when establishing a WebTransport session fails: #236

Changelog

... (truncated)

Commits
  • 9d448b1 enable and use the QUIC Stream Resets with Partial Delivery extension (#239)
  • 128538a update quic-go to v0.59.0 (#240)
  • 5d8d3c4 immediately reject streams for closed sessions (#235)
  • af56b7f close client’s QUIC connection on WebTransport session close or failure (#236)
  • 093f58b move connection management to client and server (#231)
  • 9154cfc ci: update golangci-lint to v2.7.2 (#234)
  • acca676 add a security policy (#233)
  • f2622e1 remove stray TODO from Session (#232)
  • 58df38a simplify stream buffering logic in the session manager (#230)
  • 3b5a3df README: add list of notable projects and a release policy (#225)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [github.com/quic-go/webtransport-go](https://github.com/quic-go/webtransport-go) from 0.9.0 to 0.10.0.
- [Release notes](https://github.com/quic-go/webtransport-go/releases)
- [Commits](quic-go/webtransport-go@v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/webtransport-go
  dependency-version: 0.10.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Related to dependencies label Feb 12, 2026
@codecov
Copy link

codecov bot commented Feb 12, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 55.06%. Comparing base (7641819) to head (e7e32e3).

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff              @@
##           develop    #4509       +/-   ##
============================================
- Coverage    75.65%   55.06%   -20.59%     
============================================
  Files          519      362      -157     
  Lines        41682    34339     -7343     
============================================
- Hits         31533    18908    -12625     
- Misses        7704    13861     +6157     
+ Partials      2445     1570      -875     
Flag Coverage Δ
all-tests 55.06% <ø> (-20.59%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 335 files with indirect coverage changes


Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7641819...e7e32e3. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Related to dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants