Skip to content

chore(deps): bump quinn-proto from 0.11.14 to 0.11.16 - #2907

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/quinn-proto-0.11.16
Open

chore(deps): bump quinn-proto from 0.11.14 to 0.11.16#2907
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/quinn-proto-0.11.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps quinn-proto from 0.11.14 to 0.11.16.

Release notes

Sourced from quinn-proto's releases.

quinn-proto-0.11.16

What's Changed

quinn-proto 0.11.15, quinn 0.11.11

This release fixes a remote memory exhaustion issue in the quinn-proto Assembler. See GHSA-4w2j-m93h-cj5j for more details and #2694 for the fix.

Two sponsoring organizations participated in coordinated disclosure. If this is relevant to your organization, please contact us to keep support Quinn maintenance.

What's Changed

Commits
  • a96949f Take semver-compatible update for anyhow
  • 5429f60 udp: bump version to 0.5.15
  • 262a493 proto: bump version to 0.11.16
  • c19b63a Upgrade rustls-platform-verifier to 0.7
  • aff3652 Disable default features for fastbloom
  • 01b2eee Upgrade fastbloom to 0.17
  • 2c82013 Switch BBR RNG to PCG
  • 544dd9e Upgrade to rand 0.10.1
  • a7499b8 Bump versions for release
  • 7c1970f proto: yield error on too many gaps in assembler
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 28, 2026
@dependabot dependabot Bot mentioned this pull request Jul 28, 2026
Closed
@github-actions

github-actions Bot commented Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor
Test Old New Diff
p256_test_recover_pubkey_infinity 97138 97138 0.0000 %
k256_test_recover_pubkey_infinity 102032 102032 0.0000 %
bls12_381_tests_test_inverse_fp_100 1205483 1205483 0.0000 %
bn_test_bn_test_fr_inverse_100 824131 824131 0.0000 %
bn_test_bn_test_g1_msm_edge 411941 411941 0.0000 %
bn_test_bn_test_g1_add_neg 299549 299549 0.0000 %
bls12_381_tests_test_inverse_fp2_100 2230063 2230063 0.0000 %
curve25519_dalek_ng_test_decompressed_noncanonical 195347 195347 0.0000 %
bls12_381_tests_test_bls_add_100 10376534 10376534 0.0000 %
bls12_381_tests_test_sqrt_fp_100 849816 792123 -6.7889 %
bn_test_bn_test_fq_sqrt_100 804031 804031 0.0000 %
bls12_381_tests_test_bls_double_100 6310230 6310230 0.0000 %
curve25519_dalek_test_decompressed_expected_value 4481239 4599490 2.6388 %
rust_crypto_rsa_test_pkcs_verify_100 28943881 29080444 0.4718 %
k256_test_schnorr_verify 5724339 5713627 -0.1871 %
curve25519_dalek_test_add_then_multiply 2905033 3138154 8.0247 %
k256_test_point_ops_edge_cases 32652 32652 0.0000 %
bn_test_bn_test_fq_inverse_100 805631 805631 0.0000 %
sha_test_sha3_expected_digest_lte_100_times 1198750 1198901 0.0126 %
k256_test_recover_high_hash_high_recid 2164783 2181183 0.7576 %
curve25519_dalek_ng_test_zero_msm 125094 125094 0.0000 %
rustcrypto_bigint_test_bigint_mul_mod_special 1785802 1785802 0.0000 %
p256_test_verify_rand_lte_100 12011531 12020528 0.0749 %
bn_test_bn_test_g1_double_100 735518 735539 0.0029 %
bls12_381_tests_test_sqrt_fp2_100 1915316 1738656 -9.2235 %
p256_test_recover_high_hash_high_recid 6405690 6262028 -2.2427 %
rustcrypto_bigint_test_bigint_mul_add_residue 1747305 1747305 0.0000 %
secp256k1_program_test_recover_rand_lte_100 5528428 5536318 0.1427 %
secp256k1_program_test_verify_rand_lte_100 17074990 17117619 0.2497 %
sha_test_sha2_v0_10_6_expected_digest_lte_100_times 1358012 1355041 -0.2188 %
curve25519_dalek_ng_test_add_then_multiply 4477460 3821130 -14.6585 %
curve25519_dalek_test_decompressed_noncanonical 7851 7851 0.0000 %
curve25519_dalek_test_zero_msm 83313 83313 0.0000 %
k256_test_verify_rand_lte_100 11742931 11726261 -0.1420 %
bn_test_bn_test_g1_add_100 998825 998839 0.0014 %
bn_test_bn_test_g1_mul_zero 48333 48333 0.0000 %
p256_test_recover_rand_lte_100 15797612 15799393 0.0113 %
k256_test_recover_rand_lte_100 4574579 4577027 0.0535 %
keccack_test_expected_digest_lte_100 1721756 1726523 0.2769 %
curve25519_dalek_ng_test_zero_mul 107715 107715 0.0000 %
secp256k1_program_test_recover_v0_30_0_rand_lte_100 5484288 5494146 0.1797 %
curve25519_dalek_test_zero_mul 71736 71736 0.0000 %
secp256k1_program_test_verify_v0_30_0_rand_lte_100 17121777 17127236 0.0319 %
sha_test_sha2_v0_10_8_expected_digest_lte_100_times 1357607 1359476 0.1377 %
sha_test_sha2_v0_10_9_expected_digest_lte_100_times 1358244 1357079 -0.0858 %
curve25519_dalek_test_ed25519_verify 13352749 13351956 -0.0059 %
bn_test_bn_test_fq_partial_ord 186343 186343 0.0000 %
sha_test_sha2_v0_9_9_expected_digest_lte_100_times 1267620 1268079 0.0362 %

@dependabot
dependabot Bot force-pushed the dependabot/cargo/quinn-proto-0.11.16 branch from 19b1c36 to b12c452 Compare August 8, 2026 00:11
@dependabot
chore(deps): bump quinn-proto from 0.11.14 to 0.11.16
f6648a1 
Bumps [quinn-proto](https://github.com/quinn-rs/quinn) from 0.11.14 to 0.11.16.
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.14...quinn-proto-0.11.16)

---
updated-dependencies:
- dependency-name: quinn-proto
  dependency-version: 0.11.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/quinn-proto-0.11.16 branch from b12c452 to f6648a1 Compare August 12, 2026 13:22

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants