Skip to content

chore(deps): bump quinn-proto from 0.11.14 to 0.11.16 in /patch-testing - #2906

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/patch-testing/quinn-proto-0.11.16
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/patch-testing/quinn-proto-0.11.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps quinn-proto from 0.11.14 to 0.11.16.

Release notes

Sourced from quinn-proto's releases.

quinn-proto-0.11.16

What's Changed

quinn-proto 0.11.15, quinn 0.11.11

This release fixes a remote memory exhaustion issue in the quinn-proto Assembler. See GHSA-4w2j-m93h-cj5j for more details and #2694 for the fix.

Two sponsoring organizations participated in coordinated disclosure. If this is relevant to your organization, please contact us to keep support Quinn maintenance.

What's Changed

Commits
  • a96949f Take semver-compatible update for anyhow
  • 5429f60 udp: bump version to 0.5.15
  • 262a493 proto: bump version to 0.11.16
  • c19b63a Upgrade rustls-platform-verifier to 0.7
  • aff3652 Disable default features for fastbloom
  • 01b2eee Upgrade fastbloom to 0.17
  • 2c82013 Switch BBR RNG to PCG
  • 544dd9e Upgrade to rand 0.10.1
  • a7499b8 Bump versions for release
  • 7c1970f proto: yield error on too many gaps in assembler
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 28, 2026
@github-actions

github-actions Bot commented Jul 28, 2026 •

Copy link
Copy Markdown
Contributor
Test Old New Diff
curve25519_dalek_ng_test_add_then_multiply 4320161 4236144 -1.9448 %
rust_crypto_rsa_test_pkcs_verify_100 28947445 29066423 0.4110 %
bn_test_bn_test_fq_partial_ord 186343 186343 0.0000 %
p256_test_verify_rand_lte_100 11994930 11990925 -0.0334 %
sha_test_sha2_v0_10_9_expected_digest_lte_100_times 1357623 1359731 0.1553 %
curve25519_dalek_ng_test_decompressed_noncanonical 195347 195347 0.0000 %
k256_test_recover_pubkey_infinity 102032 102032 0.0000 %
sha_test_sha2_v0_10_6_expected_digest_lte_100_times 1358454 1363149 0.3456 %
curve25519_dalek_ng_test_zero_msm 125094 125094 0.0000 %
bn_test_bn_test_g1_msm_edge 411941 411941 0.0000 %
p256_test_recover_high_hash_high_recid 5965615 6270964 5.1185 %
bls12_381_tests_test_sqrt_fp2_100 1715043 1848609 7.7879 %
bls12_381_tests_test_bls_add_100 10376534 10376534 0.0000 %
curve25519_dalek_test_decompressed_noncanonical 7851 7851 0.0000 %
k256_test_verify_rand_lte_100 11684555 11722473 0.3245 %
keccack_test_expected_digest_lte_100 1724987 1723993 -0.0576 %
sha_test_sha2_v0_10_8_expected_digest_lte_100_times 1354612 1357038 0.1791 %
curve25519_dalek_test_zero_mul 71736 71736 0.0000 %
rustcrypto_bigint_test_bigint_mul_mod_special 1785802 1785802 0.0000 %
bls12_381_tests_test_inverse_fp_100 1205483 1205483 0.0000 %
sha_test_sha2_v0_9_9_expected_digest_lte_100_times 1266389 1269523 0.2475 %
bls12_381_tests_test_bls_double_100 6310230 6310230 0.0000 %
k256_test_recover_high_hash_high_recid 2269300 2352849 3.6817 %
p256_test_recover_pubkey_infinity 97138 97138 0.0000 %
bn_test_bn_test_g1_mul_zero 48333 48333 0.0000 %
curve25519_dalek_test_add_then_multiply 3182308 2724582 -14.3835 %
rustcrypto_bigint_test_bigint_mul_add_residue 1747305 1747305 0.0000 %
secp256k1_program_test_verify_rand_lte_100 17065132 17137337 0.4231 %
bn_test_bn_test_g1_add_100 998825 998832 0.0007 %
bls12_381_tests_test_inverse_fp2_100 2230063 2230063 0.0000 %
p256_test_recover_rand_lte_100 15754087 15786957 0.2086 %
bn_test_bn_test_g1_double_100 735518 735518 0.0000 %
k256_test_point_ops_edge_cases 32652 32652 0.0000 %
curve25519_dalek_test_zero_msm 83313 83313 0.0000 %
bn_test_bn_test_fq_sqrt_100 804031 804031 0.0000 %
curve25519_dalek_ng_test_zero_mul 107715 107715 0.0000 %
k256_test_schnorr_verify 5714426 5709299 -0.0897 %
secp256k1_program_test_recover_rand_lte_100 5523672 5527967 0.0778 %
secp256k1_program_test_verify_v0_30_0_rand_lte_100 17081978 17077886 -0.0240 %
bls12_381_tests_test_sqrt_fp_100 874585 786561 -10.0647 %
curve25519_dalek_test_decompressed_expected_value 4561440 4481239 -1.7582 %
bn_test_bn_test_fr_inverse_100 824131 824131 0.0000 %
secp256k1_program_test_recover_v0_30_0_rand_lte_100 5484169 5482231 -0.0353 %
sha_test_sha3_expected_digest_lte_100_times 1199038 1199026 -0.0010 %
k256_test_recover_rand_lte_100 4574322 4578575 0.0930 %
bn_test_bn_test_g1_add_neg 299549 299549 0.0000 %
bn_test_bn_test_fq_inverse_100 805631 805631 0.0000 %
curve25519_dalek_test_ed25519_verify 13354361 13355680 0.0099 %

@dependabot
dependabot Bot force-pushed the dependabot/cargo/patch-testing/quinn-proto-0.11.16 branch from 2540952 to 7b61111 Compare August 8, 2026 00:10
Bumps [quinn-proto](https://github.com/quinn-rs/quinn) from 0.11.14 to 0.11.16.
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.14...quinn-proto-0.11.16)

---
updated-dependencies:
- dependency-name: quinn-proto
  dependency-version: 0.11.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/patch-testing/quinn-proto-0.11.16 branch from 7b61111 to a9253a5 Compare August 12, 2026 13:22

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants