Bump github.com/lucas-clemente/quic-go from 0.26.0 to 0.28.0

[dependabot[bot]]

Bumps github.com/lucas-clemente/quic-go from 0.26.0 to 0.28.0.

Release notes

Sourced from github.com/lucas-clemente/quic-go's releases.

v0.28.0

Most Notable Changes

This release adds support for QUIC v2 and adds an API for WebTransport to the http3 package.

What's Changed

• remove unneeded network from custom dial function used in HTTP/3 by @​marten-seemann in lucas-clemente/quic-go#3368
• extend the HTTP/3 API for WebTransport support by @​marten-seemann in lucas-clemente/quic-go#3362
• add LocalAddr and RemoteAddr functions to http3.StreamCreator by @​marten-seemann in lucas-clemente/quic-go#3384
• implement HTTP/3 unidirectional stream hijacking by @​hareku in lucas-clemente/quic-go#3389
• Expose quic server closed err by @​hareku in lucas-clemente/quic-go#3395
• protect against concurrent use of Stream.Read by @​marten-seemann in lucas-clemente/quic-go#3380
• protect against concurrent use of Stream.Write by @​marten-seemann in lucas-clemente/quic-go#3381
• reduce flakiness of deadline integration tests by @​marten-seemann in lucas-clemente/quic-go#3383
• fix deadlock on concurrent http3.Server.Serve and Close calls by @​marten-seemann in lucas-clemente/quic-go#3387
• update docs to reflect that we support RFC 9221 (Unreliable Datagrams) by @​marten-seemann in lucas-clemente/quic-go#3382
• fix parsing of request path for Extended CONNECT requests by @​marten-seemann in lucas-clemente/quic-go#3388
• remove warning comments of stable implementation by @​hareku in lucas-clemente/quic-go#3399
• Clone TLS conf in newClient by @​betamos in lucas-clemente/quic-go#3400
• don't set receive buffer if it is already large enough by @​dchaofei in lucas-clemente/quic-go#3407
• remove error return value from ComposeVersionNegotiation by @​dchaofei in lucas-clemente/quic-go#3410
• do not embed http.Server in http3.Server by @​tie in lucas-clemente/quic-go#3397
• don't close the request stream when http3.DataStreamer was used by @​marten-seemann in lucas-clemente/quic-go#3413
• introduce a http3.RoundTripOpt to prevent closing of request stream by @​marten-seemann in lucas-clemente/quic-go#3411
• don't send path MTU probe packets on a timer by @​marten-seemann in lucas-clemente/quic-go#3423
• don't ignore errors that occur when the TLS ClientHello is generated by @​marten-seemann in lucas-clemente/quic-go#3424
• make it possible to parse a varint at the end of a reader by @​marten-seemann in lucas-clemente/quic-go#3428
• add test for bidirectional stream hijacker by @​marten-seemann in lucas-clemente/quic-go#3434
• pass frame / stream type parsing errors to the hijacker callbacks by @​marten-seemann in lucas-clemente/quic-go#3429
• Change "HTTP/3" to "HTTP/3.0". by @​aaronriekenberg in lucas-clemente/quic-go#3439
• always reset header buffer, even when QPACK encoding fails by @​marten-seemann in lucas-clemente/quic-go#3436
• update qtls to include the recent session ticket changes to crypto/tls by @​marten-seemann in lucas-clemente/quic-go#3443
• remove the http3.DataStreamer by @​marten-seemann in lucas-clemente/quic-go#3435
• allow HTTP clients and servers to take over the request stream by @​marten-seemann in lucas-clemente/quic-go#3437
• implement QUIC v2 by @​marten-seemann in lucas-clemente/quic-go#3432
• make the keep alive interval configurable by @​nmldiegues in lucas-clemente/quic-go#3444
• fix flaky HTTP/3 request body test by @​marten-seemann in lucas-clemente/quic-go#3447
• only set DF for sockets that can handle it by @​nmldiegues in lucas-clemente/quic-go#3448
• dedupe Alt-Svc header values by @​mattrobenolt in lucas-clemente/quic-go#3461
• update for Go 1.19beta1 by @​marten-seemann in lucas-clemente/quic-go#3460

New Contributors

• @​betamos made their first contribution in lucas-clemente/quic-go#3400
• @​dchaofei made their first contribution in lucas-clemente/quic-go#3407
• @​tie made their first contribution in lucas-clemente/quic-go#3397
• @​nmldiegues made their first contribution in lucas-clemente/quic-go#3444
• @​mattrobenolt made their first contribution in lucas-clemente/quic-go#3461

Full Changelog: https://github.com/lucas-clemente/quic-go/compare/v0.27.0...v0.28.0

... (truncated)

Commits

• f29dd27 update for Go 1.19beta1 (#3460)
• 98b2587 dedupe Alt-Svc header values (#3461)
• 706a482 only set DF for sockets that can handle it (#3448)
• 6fbc6d9 fix flaky HTTP/3 request body test (#3447)
• 4c96cf7 make the keep alive interval configurable (#3444)
• 619fa9f Merge pull request #3432 from lucas-clemente/quicv2
• 9e1dfff Merge pull request #3437 from lucas-clemente/http-stream
• 3eed9d1 don't close the stream if it was hijacked
• 6fa7494 add a http3.HTTPStreamer, allowing users to take over the HTTP/3 stream
• 5fd6fa7 remove the StreamID method on the HTTP/3 response writer
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)