v0.30.0

What's Changed

• fix: guard qpack increment_acked against u64 overflow by @uwezkhan in #3684
• feat: replace Packets BTreeMap with VecDeque by @larseggert in #3686
• feat: skip streams with no data in SendStreams::write_frames by @larseggert in #3687
• Add WebTransport ExportKeyingMaterial backend by @jesup in #3464
• feat: store sent::Packet tokens inline, removing Rc by @larseggert in #3696
• Add support for GOAWAY draining events to support WebTransport by @jesup in #3465
• Get the negotiated protocol to support WebTransport by @jesup in #3466
• feat: Use FxHasher more by @larseggert in #3709
• Fix off-by-one in max_push_id computation by @martinthomson in #3707
• clamp webtransport datagram size to avoid prefix underflow by @uwezkhan in #3711
• fix: reject CR and LF in HTTP/3 field names by @uwezkhan in #3719
• fix: reject invalid NEW_CONNECTION_ID retire_prior and cid length by @uwezkhan in #3720
• fix: Allow >1 MSS of cwnd growth by @larseggert in #3648
• fix: make coalesce_acked_from_zero scale with count by @larseggert in #3724
• Add a client-side check for CONNECT_UDP by @martinthomson in #3729
• stats/cc: add new slow_start_exit stats by @omansfeld in #3716
• fix: reject max_ack_delay transport parameter of 2^14 or greater by @uwezkhan in #3730
• fix: reject STREAMS_BLOCKED limit above 2^60 by @uwezkhan in #3727
• Reject trailing data in HTTP/3 frames by @martinthomson in #3734
• fix: reject RETIRE_CONNECTION_ID for an unissued sequence number by @uwezkhan in #3731
• feat: fast path in RxStreamOrderer::inbound_frame by @larseggert in #3690
• fix: reject duplicate transport parameters by @uwezkhan in #3732
• fix: reject stream frames for the wrong unidirectional stream half by @uwezkhan in #3743
• Simplify use of datagram modifiers in test fixtures by @martinthomson in #3744
• chore: replace usize↔u64 casts with named helpers by @larseggert in #3738
• WebTransport sendGroup support (and improve sendOrder) by @jesup in #3467
• fix: reject DATAGRAM frame when max_datagram_frame_size is 0 by @uwezkhan in #3745
• reject CR, LF, and NUL in HTTP/3 field values by @uwezkhan in #3752
• fix: enforce qpack blocked stream limit in decode_header_block by @uwezkhan in #3755
• Suppress default-valued integer transport parameters by @martinthomson in #3746
• Revert "fix: do not suppress cwnd growth when pacing limits sends (#3640)" by @omansfeld in #3760
• Hex debugging improvements by @martinthomson in #3763
• fix: reject zero Insert Count Increment on QPACK decoder stream by @uwezkhan in #3762
• fix: reject reserved bits set in QUIC packet headers by @uwezkhan in #3749
• fix(transport/quic-datagram): remove inbound queue limit by @mxinden in #3761
• fix: reject qpack required insert count that reconstructs to zero by @uwezkhan in #3765

New Contributors

@uwezkhan made their first contribution in #3684. Thank you for all your work @uwezkhan. You have a long list of contributions in this release.

Full Changelog: v0.29.1...v0.30.0

v0.29.1

chore: neqo 0.29.1 (#3675)

v0.29.0

What's Changed

• fix: improve fuzzing workflow reliability and CI feature coverage by @larseggert in #3619
• chore: nss-rs@0.10.0 by @larseggert in #3620
• fix: limit QPACK header list size during decoding by @larseggert in #3618
• chore: Add new fuzzing corpus samples by @github-actions[bot] in #3622
• chore: rely on nss-rs for NSS initialization and test DB by @larseggert in #3621
• chore: Exclude mozilla/actions from Dependabot updates by @larseggert in #3624
• fix: grant discussions:read to Claude review workflow by @larseggert in #3626
• build(deps): bump CodSpeedHQ/action from 4.15.0 to 4.15.1 by @dependabot[bot] in #3625
• chore: Re-enable NetBSD in CI by @larseggert in #3627
• ci: add SBOM workflow for SSDLC compliance by @larseggert in #3628
• feat: use the nss-rs blapi feature by @larseggert in #3601
• build(deps): bump mozilla/actions/.github/workflows/claude-review.yml from 1.1.3 to 1.1.4 by @dependabot[bot] in #3631
• build(deps): bump mozilla/actions from 1.1.3 to 1.1.4 by @dependabot[bot] in #3630
• build(deps): bump mozilla/actions/.github/workflows/actionlint.yml from 1.1.3 to 1.1.4 by @dependabot[bot] in #3633
• build(deps): bump mozilla/actions/.github/workflows/semver.yml from 1.1.3 to 1.1.4 by @dependabot[bot] in #3634
• build(deps): bump mozilla/actions/.github/workflows/rustfmt.yml from 1.1.3 to 1.1.4 by @dependabot[bot] in #3632
• build(deps): bump mozilla/actions from 1.1.3 to 1.1.4 in /.github/actions/check-android by @dependabot[bot] in #3636
• build(deps): bump mozilla/actions from 1.1.3 to 1.1.4 in /.github/actions/quic-build by @dependabot[bot] in #3637
• build(deps): bump mozilla/actions from 1.1.3 to 1.1.4 in /.github/actions/build-neqo by @dependabot[bot] in #3635
• chore: nss-rs@0.12.2 by @larseggert in #3638
• fix: do not suppress cwnd growth when pacing limits sends by @larseggert in #3640
• fix: remove duplicate word in two source comments by @mvanhorn in #3647
• feat: Add a qlog plotter by @larseggert in #3644
• build(deps): bump mozilla/actions/.github/workflows/machete.yml from 1.1.3 to 1.1.4 by @dependabot[bot] in #3649
• build(deps): bump mozilla/actions/.github/workflows/dependency-review.yml from 1.1.3 to 1.1.4 by @dependabot[bot] in #3650
• build(deps): bump mozilla/actions/.github/workflows/deny.yml from 1.1.3 to 1.1.4 by @dependabot[bot] in #3651
• fix: Patches for Redox targets by @willnode in #3652
• fix: Handle ENOBUFS in UDP send by @larseggert in #3482
• chore(http3,qpack): remove leftover blapi feature by @mxinden in #3629
• feat: skip terminal-stream scan when no streams have completed by @larseggert in #3595
• fix: Fix semver CI check by @larseggert in #3657
• feat: Encode zoom parameter in qvis URL by @larseggert in #3656
• chore: Use Option for CC integers with magic sentinel values by @larseggert in #3660
• chore: Make blocked_at an Option by @larseggert in #3661
• chore: Bump deps and update lockfile by @larseggert in #3663
• chore: l -> block by @larseggert in #3664
• feat(transport): Expose negotiated QUIC version in transport Stats by @mxinden in #3665
• feat: Update nss-rs to 0.13.0 by @larseggert in #3658
• fix: improve congestion control and loss timer logging by @larseggert in #3643
• build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #3670
• build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in #3671
• build(deps): bump mozilla/actions/.github/workflows/machete.yml from 1.1.4 to 1.1.7 by @dependabot[bot] in #3672
• build(deps): bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #3669
• build(deps): bump lukemathwalker/cargo-chef from 00c3c07 to e606721 in /qns by @dependabot[bot] in #3668
• build(deps): bump mozilla/actions/.github/workflows/actionlint.yml from 1.1.4 to 1.1.7 by @dependabot[bot] in #3673
• chore: v0.29.0 by @larseggert in #3667

New Contributors

• @willnode made their first contribution in #3652

Full Changelog: v0.28.1...v0.29.0

v0.28.1

What's Changed

• chore: upgrade http@1.4.0 and bump version by @omansfeld in #3617

Full Changelog: v0.28.0...v0.28.1

v0.28.0

What's Changed

• refactor: Use nss-rs instead of neqo-crypto by @Not-Nik in #3399
• docs(README): add release documentation by @mxinden in #3586
• fix: cherry-pick of #3573 for Neqo main by @mxinden in #3575
• chore: Update nss-rs to 0.9.0 by @Not-Nik in #3590
• feat: drain instead of rotate+truncate in TxBuffer::mark_as_acked by @larseggert in #3591
• feat: add flow-control benchmark scenarios by @larseggert in #3596
• feat: cache effective retransmission priority in SendStream by @larseggert in #3592
• feat: use u64 arithmetic in Pacer instead of u128 by @larseggert in #3594
• chore: Avoid Box<dyn CongestionControl> by @larseggert in #3451
• feat(cc): SEARCH by @omansfeld in #3518
• feat: Define a path migration event by @martinthomson in #3598
• feat(cc/stats): Add stats for SEARCH slow start heuristic by @omansfeld in #3613
• chore: prepare v0.28.0 and revert http@1.4.0 by @omansfeld in #3615

New Contributors

• @Not-Nik made their first contribution in #3399

Full Changelog: v0.27.0...v0.28.0

v0.26.1

What's Changed

• fix: cherry-pick of #3573 for Neqo v0.26.1 by @mxinden in #3574

Full Changelog: v0.26.0...v0.26.1

v0.24.2

What's Changed

• fix: gate SCONE Initial padding on connection parameter by @mxinden in #3573

Full Changelog: v0.24.1...v0.24.2

v0.27.0

What's Changed

• fix: Enable keepalive for h09 client streams by @larseggert in #3554
• chore: Use Claude PR review from mozilla/actions by @larseggert in #3559
• chore: Add quic-zig to QNS matrix by @larseggert in #3556
• chore: Update actions by @larseggert in #3560
• Events for SCONE by @martinthomson in #3521
• chore: Update mozilla/actions and workflows by @larseggert in #3561
• fix: Improve build script idiomaticity per Cargo docs by @larseggert in #3558
• fix: Use Xcode's libclang on macOS by @larseggert in #3557
• chore: Use the cpu-tuning action again by @larseggert in #3562
• docs: add comprehensive documentation for logging API by @OhCaramba in #3555
• feat: Remove bindgen dependency for MTU crate by @larseggert in #3337
• chore: mtu@0.4.1 by @larseggert in #3563
• fix: Don't serve h09 requests before stream FIN by @larseggert in #3551
• feat(cc): add parameter to disable spurious congestion recovery by @omansfeld in #3564
• chore: Small CI fixes by @larseggert in #3566
• chore: Bump the competing stacks to latest versions by @larseggert in #3567
• chore: Fix clippy by @larseggert in #3571
• build(deps): bump lukemathwalker/cargo-chef from d5a1cca to 00c3c07 in /qns by @dependabot[bot] in #3568
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #3569
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in /.github/actions/check-vm by @dependabot[bot] in #3570
• feat: add contains_handshake and assert_contains_handshake helpers by @mvanhorn in #3533
• chore: http@1.4.0 by @larseggert in #3572

New Contributors

• @mvanhorn made their first contribution in #3533

Full Changelog: v0.26.0...v0.27.0

v0.26.0

What's Changed

• fix(cc): don't invoke cc reaction from not-in-flight packets by @omansfeld in #3520
• fix(cc): add connection parameter for alternative hystart css baseline by @omansfeld in #3507
• feat: Add --save-token/--load-token flags and cross-IP 0-RTT test script by @larseggert in #3523
• fix: Parse --ech command line arguments correctly by @larseggert in #3536
• refactor(cc): split up CongestionEvent enum by @omansfeld in #3553

New Contributors

• @OhCaramba made their first contribution in #3525

Full Changelog: v0.25.0...v0.26.0

v0.25.0

What's Changed

• fix(cc): HyStart++ rounds are now properly started when the old round ends by @omansfeld in #3506
• fix(cc): reset hystart sample count when entering CSS by @omansfeld in #3505
• feat: Enable the Apple fast datapath by @larseggert in #3455
• feat: emit pacing_rate and ssthresh in qlog by @larseggert in #3435

New Contributors

• @splint-disk-8i made their first contribution in #3502

Full Changelog: v0.24.1...v0.25.0