Skip to content

chore(deps): bump quinn-proto from 0.11.14 to 0.11.17 in /tee-worker/omni-executor - #4078

Merged
Kailai-Wang merged 1 commit into
devfrom
dependabot/cargo/tee-worker/omni-executor/quinn-proto-0.11.16
Aug 21, 2026
Merged

chore(deps): bump quinn-proto from 0.11.14 to 0.11.17 in /tee-worker/omni-executor#4078
Kailai-Wang merged 1 commit into
devfrom
dependabot/cargo/tee-worker/omni-executor/quinn-proto-0.11.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps quinn-proto from 0.11.14 to 0.11.17.

Release notes

Sourced from quinn-proto's releases.

quinn-proto 0.11.17

This release fixes three remote memory exhaustion issues. See GHSA-qfwj-vfxf-92j2, GHSA-2hv7-gw8g-gpq5, and GHSA-hmxj-32vh-65vr for more details, and quinn-rs/quinn#2789 for the fixes.

What's Changed

Full Changelog: quinn-rs/quinn@quinn-proto-0.11.16...quinn-proto-0.11.17

quinn-proto-0.11.16

What's Changed

quinn-proto 0.11.15, quinn 0.11.11

This release fixes a remote memory exhaustion issue in the quinn-proto Assembler. See GHSA-4w2j-m93h-cj5j for more details and #2694 for the fix.

Two sponsoring organizations participated in coordinated disclosure. If this is relevant to your organization, please contact us to keep support Quinn maintenance.

What's Changed

Commits
  • 0343120 proto: bump version to 0.11.17
  • d7bf3d0 Limit total memory used to buffer outgoing datagrams
  • 31ca5d2 Limit total memory used to buffer incoming datagrams
  • 3a78b60 Factor out DatagramBuffer for queues in either direction
  • b37ced3 proto: check limits when processing already retired CIDs
  • 6a984b8 proto: extract method for checking CID retirements
  • 499dba8 proto: bound assembler chunk count regardless of over-allocation
  • 33ce0c2 congestion: saturate CUBIC window increment to avoid overflow
  • c8ad7e6 fix(ci): fix clippy lints
  • a96949f Take semver-compatible update for anyhow
  • Additional commits viewable in compare view

@vercel

vercel Bot commented Jul 26, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
heima-aa-demo-app Ignored Ignored Aug 21, 2026 8:57pm

Request Review

Bumps [quinn-proto](https://github.com/quinn-rs/quinn) from 0.11.14 to 0.11.17.
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.14...quinn-proto-0.11.17)

---
updated-dependencies:
- dependency-name: quinn-proto
  dependency-version: 0.11.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump quinn-proto from 0.11.14 to 0.11.16 in /tee-worker/omni-executor chore(deps): bump quinn-proto from 0.11.14 to 0.11.17 in /tee-worker/omni-executor Aug 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/tee-worker/omni-executor/quinn-proto-0.11.16 branch from 8b0b527 to 72acded Compare August 21, 2026 20:57
@Kailai-Wang
Kailai-Wang enabled auto-merge (squash) August 21, 2026 20:59
@Kailai-Wang
Kailai-Wang merged commit 43d5eb7 into dev Aug 21, 2026
15 checks passed
@Kailai-Wang
Kailai-Wang deleted the dependabot/cargo/tee-worker/omni-executor/quinn-proto-0.11.16 branch August 21, 2026 21:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant