Skip to content

chore(deps): bump quinn-proto from 0.11.13 to 0.11.16 in /examples - #2905

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/examples/quinn-proto-0.11.16
Open

chore(deps): bump quinn-proto from 0.11.13 to 0.11.16 in /examples#2905
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/examples/quinn-proto-0.11.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps quinn-proto from 0.11.13 to 0.11.16.

Release notes

Sourced from quinn-proto's releases.

quinn-proto-0.11.16

What's Changed

quinn-proto 0.11.15, quinn 0.11.11

This release fixes a remote memory exhaustion issue in the quinn-proto Assembler. See GHSA-4w2j-m93h-cj5j for more details and #2694 for the fix.

Two sponsoring organizations participated in coordinated disclosure. If this is relevant to your organization, please contact us to keep support Quinn maintenance.

What's Changed

quinn-proto 0.11.14

@​jxs reported a denial of service issue in quinn-proto 5 days ago:

We coordinated with them to release this version to patch the issue. Unfortunately the maintainers missed these issues during code review and we did not have enough fuzzing coverage -- we regret the oversight and have added an additional fuzzing target.

Organizations that want to participate in coordinated disclosure can contact us privately to discuss terms.

What's Changed

Commits
  • a96949f Take semver-compatible update for anyhow
  • 5429f60 udp: bump version to 0.5.15
  • 262a493 proto: bump version to 0.11.16
  • c19b63a Upgrade rustls-platform-verifier to 0.7
  • aff3652 Disable default features for fastbloom
  • 01b2eee Upgrade fastbloom to 0.17
  • 2c82013 Switch BBR RNG to PCG
  • 544dd9e Upgrade to rand 0.10.1
  • a7499b8 Bump versions for release
  • 7c1970f proto: yield error on too many gaps in assembler
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/examples/quinn-proto-0.11.16 branch from 7ff96ef to 44ece22 Compare August 8, 2026 00:11
@github-actions

github-actions Bot commented Aug 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor
Test Old New Diff
sha_test_sha2_v0_9_9_expected_digest_lte_100_times 1272293 1267483 -0.3781 %
k256_test_recover_high_hash_high_recid 2050097 2127271 3.7644 %
rustcrypto_bigint_test_bigint_mul_add_residue 1747305 1747305 0.0000 %
p256_test_recover_rand_lte_100 15755357 15754504 -0.0054 %
bn_test_bn_test_g1_add_neg 299549 299549 0.0000 %
bn_test_bn_test_fq_partial_ord 186343 186343 0.0000 %
keccack_test_expected_digest_lte_100 1719828 1723104 0.1905 %
secp256k1_program_test_recover_rand_lte_100 5532443 5548155 0.2840 %
curve25519_dalek_ng_test_decompressed_noncanonical 195347 195347 0.0000 %
k256_test_schnorr_verify 5714603 5712998 -0.0281 %
sha_test_sha2_v0_10_9_expected_digest_lte_100_times 1352095 1356568 0.3308 %
bls12_381_tests_test_inverse_fp_100 1205483 1205483 0.0000 %
curve25519_dalek_test_decompressed_noncanonical 7851 7851 0.0000 %
curve25519_dalek_ng_test_add_then_multiply 3984217 4772160 19.7766 %
curve25519_dalek_test_add_then_multiply 3072410 3329671 8.3733 %
curve25519_dalek_test_zero_mul 71736 71736 0.0000 %
bls12_381_tests_test_bls_double_100 6310230 6310230 0.0000 %
secp256k1_program_test_verify_rand_lte_100 17100888 17066191 -0.2029 %
sha_test_sha2_v0_10_6_expected_digest_lte_100_times 1355658 1355616 -0.0031 %
p256_test_verify_rand_lte_100 12014539 11965306 -0.4098 %
k256_test_verify_rand_lte_100 11742452 11728118 -0.1221 %
bn_test_bn_test_g1_add_100 998825 998839 0.0014 %
curve25519_dalek_ng_test_zero_msm 125094 125094 0.0000 %
k256_test_recover_rand_lte_100 4560906 4574411 0.2961 %
sha_test_sha2_v0_10_8_expected_digest_lte_100_times 1356926 1353538 -0.2497 %
k256_test_recover_pubkey_infinity 102032 102032 0.0000 %
curve25519_dalek_test_zero_msm 83313 83313 0.0000 %
secp256k1_program_test_verify_v0_30_0_rand_lte_100 17108532 17107332 -0.0070 %
bls12_381_tests_test_inverse_fp2_100 2230063 2230063 0.0000 %
bls12_381_tests_test_sqrt_fp_100 786449 792125 0.7217 %
curve25519_dalek_test_ed25519_verify 13350986 13352203 0.0091 %
k256_test_point_ops_edge_cases 32652 32652 0.0000 %
bls12_381_tests_test_sqrt_fp2_100 1891672 1982100 4.7803 %
bn_test_bn_test_fr_inverse_100 824131 824131 0.0000 %
p256_test_recover_high_hash_high_recid 6539819 4921469 -24.7461 %
curve25519_dalek_test_decompressed_expected_value 4561440 4641641 1.7582 %
rustcrypto_bigint_test_bigint_mul_mod_special 1785802 1785802 0.0000 %
bn_test_bn_test_g1_mul_zero 48333 48333 0.0000 %
bn_test_bn_test_fq_inverse_100 805631 805631 0.0000 %
rust_crypto_rsa_test_pkcs_verify_100 28761037 29028271 0.9292 %
secp256k1_program_test_recover_v0_30_0_rand_lte_100 5476445 5482066 0.1026 %
bn_test_bn_test_g1_msm_edge 411941 411941 0.0000 %
sha_test_sha3_expected_digest_lte_100_times 1199066 1198959 -0.0089 %
bn_test_bn_test_g1_double_100 735518 735518 0.0000 %
bn_test_bn_test_fq_sqrt_100 804031 804031 0.0000 %
p256_test_recover_pubkey_infinity 97138 97138 0.0000 %
bls12_381_tests_test_bls_add_100 10376534 10376534 0.0000 %
curve25519_dalek_ng_test_zero_mul 107715 107715 0.0000 %

@dependabot
chore(deps): bump quinn-proto from 0.11.13 to 0.11.16 in /examples
70f5d69 
Bumps [quinn-proto](https://github.com/quinn-rs/quinn) from 0.11.13 to 0.11.16.
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.13...quinn-proto-0.11.16)

---
updated-dependencies:
- dependency-name: quinn-proto
  dependency-version: 0.11.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/examples/quinn-proto-0.11.16 branch from 44ece22 to 70f5d69 Compare August 12, 2026 13:21

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants