Skip to content

Deps: Bump the go-modules group with 4 updates - #270

Merged
mgoetzegb merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-16cac304c6
Oct 26, 2026
Merged

Deps: Bump the go-modules group with 4 updates#270
mgoetzegb merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-16cac304c6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 4 updates: github.com/gabriel-vasile/mimetype, github.com/klauspost/cpuid/v2, github.com/quic-go/quic-go and github.com/stretchr/objx.

Updates github.com/gabriel-vasile/mimetype from 1.4.15 to 1.4.16

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

improve CDF detection

What's Changed

New Contributors

Full Changelog: gabriel-vasile/mimetype@v1.4.15...v1.4.16

Commits

Updates github.com/klauspost/cpuid/v2 from 2.4.0 to 2.4.1

Release notes

Sourced from github.com/klauspost/cpuid/v2's releases.

v2.4.1

What's Changed

New Contributors

Full Changelog: klauspost/cpuid@v2.4.0...v2.4.1

Commits

Updates github.com/quic-go/quic-go from 0.63.0 to 0.64.0

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.64.0

This release improves congestion control and performance, especially on paths with packet reordering:

  • Slow-start pacing now uses twice the estimated bandwidth, allowing the sending rate to double each RTT: #5882
  • Application-data loss detection now disables packet-threshold detection after a spurious loss, avoiding repeated unnecessary retransmissions caused by packet reordering: #5905
  • Application-data loss detection now uses an adaptive time threshold that increases after spurious losses, allowing more time for reordered packets to arrive: #5925
  • The congestion controller now restores its congestion window and recovery state after a reduction caused entirely by spurious packet loss: #5923

Notable Fixes

  • Congestion recovery now respects send order across Initial, Handshake and application-data packets, fixing incorrect recovery decisions caused by comparing packet numbers from different spaces: #5920
  • Connections now fall back to 1200-byte Initial packets on EMSGSIZE when Config.InitialPacketSize is unset, allowing handshakes over paths with smaller MTUs: #5911
  • Oversized packets are now rejected before serialization, including Initial packets with excessively large address-validation tokens: #5937
  • Path MTU discovery now restarts correctly after connection migration and NAT rebinding: #5887
  • Servers now retry unanswered PATH_CHALLENGEs with exponential backoff as more packets arrive on the candidate path, preventing path validation from stalling when a challenge is acknowledged but no PATH_RESPONSE arrives: #5930
  • Servers now continue responding to PATH_CHALLENGEs on existing candidate paths when the candidate path limit is reached: #5929
  • Writes after closing a SendStream or Stream now return quic.ErrStreamClosed, which is also used as the stream context's cancellation cause: #5885
  • Conn.SendDatagram now returns the connection's close error after shutdown, instead of accepting datagrams that will be silently dropped: #5880
  • http3: SendDatagram now immediately returns an error after the stream's send side closes, including after STOP_SENDING or connection shutdown: #5884
  • http3: request header, response header and trailer buffers now grow as data arrives, avoiding large allocations based solely on a peer's advertised HEADERS frame length: #5886
  • Spurious losses are now detected when an ACK only acknowledges packets previously declared lost: #5895
  • Spurious losses are now detected when ACKs arrive out of order: #5900
  • Path migration now clears the old path's loss history, preventing stale spurious-loss reports and recovery adjustments: #5903
  • MTU and path probes no longer trigger spurious-loss reports or adaptive loss-recovery changes: #5906

Notable Changes

  • ConnectionStats now exposes CongestionWindow, reporting the local sender's congestion window on the active network path in bytes: #5901
  • http3.Stream and http3.RequestStream now expose QlogTrace, allowing applications to add events to the underlying connection's qlog trace: #5935
  • http3/qlog.RedactHeaders allows applications to redact HTTP/3 header and trailer values, including pseudo-headers, before they are written to qlog: #5932
  • qlog: locally dropped QUIC datagrams are now recorded with quic:datagram_dropped, including drops caused by a full receive buffer or an oversized outgoing datagram: #5907
  • qlog: quic:recovery_parameters_set now records initial recovery parameters and changes to loss-detection thresholds, including resets after path migration: #5926

Changelog

... (truncated)

Commits
  • 9abbbad retry server path challenges with exponential backoff (#5930)
  • 15baf53 only enforce the candidate path limit for new paths (#5929)
  • 8754e95 reject oversized packets before serialization (#5937)
  • 54cf12e http3: expose the connection's qlog trace on streams (#5935)
  • 4b404ee http3/qlog: implement redacting of header fields (#5932)
  • 432b156 README: link OSS-Fuzz badge to the introspector (#5928)
  • d4981bc qlog initial recovery parameters and loss threshold updates (#5926)
  • 99c7436 fall back to 1200 bytes initial packet size on EMSGSIZE (#5911)
  • 53a52d5 ackhandler: increase the time threshold after spurious losses (#5925)
  • 6b98bc9 restore congestion control state after spurious packet loss (#5923)
  • Additional commits viewable in compare view

Updates github.com/stretchr/objx from 0.5.3 to 0.8.0

Release notes

Sourced from github.com/stretchr/objx's releases.

v0.8.0

New features

  • Map.Delete removes values by selector. It takes one or more selectors in the same dot and bracket notation as Get and Set, removes the map keys or slice elements they point to, and returns the map so calls can be chained:

    m.Delete("books[1].chapters[2].title", "draft")

    Selectors run in order, so after a slice element is removed, later selectors see the shifted indexes. Missing paths and out-of-range indexes are ignored. Removing a slice element builds a new slice of the same type ([]string stays []string) and leaves the original backing array untouched. Maps along the path are modified in place. (#174)

What's Changed

New Contributors

Full Changelog: stretchr/objx@v0.7.0...v0.8.0

v0.7.0

Upgrade notes

Behavior changes

  • Has now reports keys whose value is nil. Map.Has used to return false both for missing keys and for keys set to nil, so the two couldn't be told apart. It now returns true whenever the selector exists, including nested keys, bracket keys and slice indexes that hold nil. If you relied on Has to mean "set and not nil", use !m.Get(selector).IsNil() instead. (#172)

Other

  • Added a contributing guide (#183), a security policy (#182) and issue templates (#184).
  • The Go workflow token is now restricted to read-only contents (#181).

What's Changed

New Contributors

Full Changelog: stretchr/objx@v0.6.0...v0.7.0

v0.6.0

Upgrade notes

Go 1.25 or later is now required (previously Go 1.20). (#175)

... (truncated)

Commits
  • 3af36f9 feat: add Delete method to Map by selector (#174)
  • be9331c Differentiate nil values from missing keys in Map.Has (#172)
  • 939338e Add bug report and feature request issue templates (#184)
  • a3ac3e0 Add a contributing guide (#183)
  • e1a4a14 Add a security policy (#182)
  • 3a6632b Restrict the Go workflow token to read-only contents (#181)
  • 7c54053 Fix Where* returning the items the decider rejected (#180)
  • 7b27248 Replace the browser-based codegen with go generate (#179)
  • 308c40d Cover nested URL values and keep repeated map-slice entries (#177)
  • a7f2e34 Enable more linters and the gofumpt and goimports formatters (#178)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Deps: Bump the go-modules group with 4 updates
c6c3dc8 
Bumps the go-modules group with 4 updates: [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype), [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid), [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) and [github.com/stretchr/objx](https://github.com/stretchr/objx).


Updates `github.com/gabriel-vasile/mimetype` from 1.4.15 to 1.4.16
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.15...v1.4.16)

Updates `github.com/klauspost/cpuid/v2` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/klauspost/cpuid/releases)
- [Commits](klauspost/cpuid@v2.4.0...v2.4.1)

Updates `github.com/quic-go/quic-go` from 0.63.0 to 0.64.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.63.0...v0.64.0)

Updates `github.com/stretchr/objx` from 0.5.3 to 0.8.0
- [Release notes](https://github.com/stretchr/objx/releases)
- [Commits](stretchr/objx@v0.5.3...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.16
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/cpuid/v2
  dependency-version: 2.4.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.64.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/stretchr/objx
  dependency-version: 0.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 21, 2026 04:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 21, 2026
@github-actions

github-actions Bot commented Oct 21, 2026

Copy link
Copy Markdown

Conventional Commits Report

Type Number
Dependencies 1

🚀 Conventional commits found.

@mgoetzegb
mgoetzegb merged commit 3d777b2 into main Oct 26, 2026
16 checks passed
@mgoetzegb
mgoetzegb deleted the dependabot/go_modules/go-modules-16cac304c6 branch October 26, 2026 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mgoetzegb mgoetzegb mgoetzegb approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mgoetzegb