fix(deps): update module github.com/quic-go/quic-go to v0.64.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/quic-go/quic-go	v0.63.0 → v0.64.0

---

Release Notes

quic-go/quic-go (github.com/quic-go/quic-go)

v0.64.0

Compare Source

This release improves congestion control and performance, especially on paths with packet reordering:

• Slow-start pacing now uses twice the estimated bandwidth, allowing the sending rate to double each RTT: #​5882
• Application-data loss detection now disables packet-threshold detection after a spurious loss, avoiding repeated unnecessary retransmissions caused by packet reordering: #​5905
• Application-data loss detection now uses an adaptive time threshold that increases after spurious losses, allowing more time for reordered packets to arrive: #​5925
• The congestion controller now restores its congestion window and recovery state after a reduction caused entirely by spurious packet loss: #​5923

Notable Fixes

• Congestion recovery now respects send order across Initial, Handshake and application-data packets, fixing incorrect recovery decisions caused by comparing packet numbers from different spaces: #​5920
• Connections now fall back to 1200-byte Initial packets on EMSGSIZE when Config.InitialPacketSize is unset, allowing handshakes over paths with smaller MTUs: #​5911
• Oversized packets are now rejected before serialization, including Initial packets with excessively large address-validation tokens: #​5937
• Path MTU discovery now restarts correctly after connection migration and NAT rebinding: #​5887
• Servers now retry unanswered PATH_CHALLENGEs with exponential backoff as more packets arrive on the candidate path, preventing path validation from stalling when a challenge is acknowledged but no PATH_RESPONSE arrives: #​5930
• Servers now continue responding to PATH_CHALLENGEs on existing candidate paths when the candidate path limit is reached: #​5929
• Writes after closing a SendStream or Stream now return quic.ErrStreamClosed, which is also used as the stream context's cancellation cause: #​5885
• Conn.SendDatagram now returns the connection's close error after shutdown, instead of accepting datagrams that will be silently dropped: #​5880
• http3: SendDatagram now immediately returns an error after the stream's send side closes, including after STOP_SENDING or connection shutdown: #​5884
• http3: request header, response header and trailer buffers now grow as data arrives, avoiding large allocations based solely on a peer's advertised HEADERS frame length: #​5886
• Spurious losses are now detected when an ACK only acknowledges packets previously declared lost: #​5895
• Spurious losses are now detected when ACKs arrive out of order: #​5900
• Path migration now clears the old path's loss history, preventing stale spurious-loss reports and recovery adjustments: #​5903
• MTU and path probes no longer trigger spurious-loss reports or adaptive loss-recovery changes: #​5906

Notable Changes

• ConnectionStats now exposes CongestionWindow, reporting the local sender's congestion window on the active network path in bytes: #​5901
• http3.Stream and http3.RequestStream now expose QlogTrace, allowing applications to add events to the underlying connection's qlog trace: #​5935
• http3/qlog.RedactHeaders allows applications to redact HTTP/3 header and trailer values, including pseudo-headers, before they are written to qlog: #​5932
• qlog: locally dropped QUIC datagrams are now recorded with quic:datagram_dropped, including drops caused by a full receive buffer or an oversized outgoing datagram: #​5907
• qlog: quic:recovery_parameters_set now records initial recovery parameters and changes to loss-detection thresholds, including resets after path migration: #​5926

Changelog

• return an error from Conn.SendDatagram when the connection is closed by @​marten-seemann in #​5880
• http3: fail SendDatagram as soon as the send side is closed by @​marten-seemann in #​5884
• use ErrStreamClosed instead of context.Canceled for closed streams by @​marten-seemann in #​5885
• congestion: pass the pacing rate explicitly to the pacer by @​marten-seemann in #​5881
• congestion: increase slow start pacing factor to 2 by @​marten-seemann in #​5882
• http3: grow header block buffers as data arrives by @​marten-seemann in #​5886
• ackhandler: use a fixed cap for tracked lost packets by @​marten-seemann in #​5888
• ackhandler: detect spurious loss when only lost packets are ACKed by @​marten-seemann in #​5895
• ackhandler: avoid floating point math for time threshold calculations by @​marten-seemann in #​5896
• ackhandler: move MaxAckDelay constant from the protocol package by @​marten-seemann in #​5892
• ackhandler: don’t store MaxAckDelay on the appDataReceivedPacketTracker by @​marten-seemann in #​5893
• congestion: move MinPacingDelay constant from the protocol package by @​marten-seemann in #​5889
• handshake: move the KeyUpdateInterval from the protocol package by @​marten-seemann in #​5891
• ackhandler: detect spurious losses in reordered ACKs by @​marten-seemann in #​5900
• move 0-RTT queue constants from the protocol package by @​marten-seemann in #​5890
• remove the fixed size cap on post-handshake CRYPTO frames by @​marten-seemann in #​5902
• ackhandler: clear lost packet history on path migration by @​marten-seemann in #​5903
• ackhandler: move packet number skipping consts from the protocol package by @​marten-seemann in #​5904
• expose the sender's congestion window in ConnectionStats by @​marten-seemann in #​5901
• ackhandler: disable packet-threshold loss detection on spurious losses by @​marten-seemann in #​5905
• ackhandler: exclude MTU and path probes from lost packet tracking by @​marten-seemann in #​5906
• fix MTU probing after path changes by @​marten-seemann in #​5887
• qlog locally dropped QUIC datagrams by @​marten-seemann in #​5907
• ci: bump CodSpeedHQ/action from 5.2.1 to 5.4.0 by @​dependabot[bot] in #​5912
• ci: update golangci-lint to v2.14.0 by @​marten-seemann in #​5919
• utils: use uint32 for random number generation by @​marten-seemann in #​5916
• ackhandler: use a uint32 countdown for packet number skipping by @​marten-seemann in #​5917
• introduce a dedicated type for packet number spaces by @​marten-seemann in #​5921
• use packet numbers from a single packet number space by @​marten-seemann in #​5920
• restore congestion control state after spurious packet loss by @​marten-seemann in #​5923
• ackhandler: increase the time threshold after spurious losses by @​marten-seemann in #​5925
• fall back to 1200 bytes initial packet size on EMSGSIZE by @​marten-seemann in #​5911
• qlog initial recovery parameters and loss threshold updates by @​marten-seemann in #​5926
• README: link OSS-Fuzz badge to the introspector by @​marten-seemann in #​5928
• http3/qlog: implement redacting of header fields by @​marten-seemann in #​5932
• http3: expose the connection's qlog trace on streams by @​marten-seemann in #​5935
• reject oversized packets before serialization by @​marten-seemann in #​5937
• only enforce the candidate path limit for new paths by @​marten-seemann in #​5929
• retry server path challenges with exponential backoff by @​marten-seemann in #​5930

Full Changelog: quic-go/quic-go@v0.63.0...v0.64.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.04%. Comparing base (741910f) to head (74a6e7a).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #571      +/-   ##
==========================================
- Coverage   83.04%   83.04%   -0.01%     
==========================================
  Files        1200     1200              
  Lines      123542   123542              
==========================================
- Hits       102599   102597       -2     
- Misses      20935    20937       +2     
  Partials        8        8              

see 12 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.