Skip to content

build(deps): bump quinn-proto from 0.11.13 to 0.11.16 - #35

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/quinn-proto-0.11.16
Open

build(deps): bump quinn-proto from 0.11.13 to 0.11.16#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/quinn-proto-0.11.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown

Bumps quinn-proto from 0.11.13 to 0.11.16.

Release notes

Sourced from quinn-proto's releases.

quinn-proto-0.11.16

What's Changed

quinn-proto 0.11.14

@​jxs reported a denial of service issue in quinn-proto 5 days ago:

We coordinated with them to release this version to patch the issue. Unfortunately the maintainers missed these issues during code review and we did not have enough fuzzing coverage -- we regret the oversight and have added an additional fuzzing target.

Organizations that want to participate in coordinated disclosure can contact us privately to discuss terms.

What's Changed

Commits
  • a96949f Take semver-compatible update for anyhow
  • 5429f60 udp: bump version to 0.5.15
  • 262a493 proto: bump version to 0.11.16
  • c19b63a Upgrade rustls-platform-verifier to 0.7
  • aff3652 Disable default features for fastbloom
  • 01b2eee Upgrade fastbloom to 0.17
  • 2c82013 Switch BBR RNG to PCG
  • 544dd9e Upgrade to rand 0.10.1
  • a7499b8 Bump versions for release
  • 7c1970f proto: yield error on too many gaps in assembler
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 23, 2026
@dependabot dependabot Bot changed the title build(deps): bump quinn-proto from 0.11.13 to 0.11.16 build(deps): Bump quinn-proto from 0.11.13 to 0.11.16 Jul 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/quinn-proto-0.11.16 branch from 0db60fd to 5d322f4 Compare July 25, 2026 22:35
Bumps [quinn-proto](https://github.com/quinn-rs/quinn) from 0.11.13 to 0.11.16.
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.13...quinn-proto-0.11.16)

---
updated-dependencies:
- dependency-name: quinn-proto
  dependency-version: 0.11.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): Bump quinn-proto from 0.11.13 to 0.11.16 build(deps): bump quinn-proto from 0.11.13 to 0.11.16 Jul 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/quinn-proto-0.11.16 branch from 5d322f4 to b19da7c Compare July 26, 2026 05:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants