[dependabot]

Bumps aioquic from 1.2.0 to 1.7.2.

Changelog

Sourced from aioquic's changelog.

1.7.2

• Fix data written to a stream returned by :meth:~aioquic.asyncio.QuicConnectionProtocol.create_stream being truncated when it was a :class:memoryview whose items are wider than one byte.
• Improve type annotations: all functions in the library are now annotated.
• Fix the demo application with Starlette 1.0.
• Remove the SiDUCK example, as the draft it implemented expired without being adopted.

1.7.1

• Fix streams which never ended when their FIN, written after all their data had been sent, did not fit in the packet being built: the FIN was never sent, so the peer kept waiting for it.
• Derive the keys for QUIC version 2 key updates with the quicv2 ku label, as :rfc:9369 requires. After its first key update, a QUIC version 2 connection could no longer exchange packets with a conforming peer.
• Reject a FIN or RESET_STREAM whose final size is below the data already received with FINAL_SIZE_ERROR, as :rfc:9000 recommends, instead of silently discarding the data beyond it.
• Drop 1-RTT packets which a server receives on a connection ID it never issued or which the client retired, as :rfc:9000 requires, instead of switching to that connection ID.
• Discard Retry packets which a client receives after processing a packet from the server, or whose Retry Token is empty, as :rfc:9000 requires. Such a Retry restarted the connection attempt, and broke an established connection.
• Discard 0-RTT keys once 1-RTT keys are in use, as :rfc:9001 requires: on servers when the first 1-RTT packet arrives, on clients when they install 1-RTT keys.

1.7.0

• Migrate clients to the server's preferred address, as :rfc:9000 allows.

  .. note::

  If you drive :class:~aioquic.quic.connection.QuicConnection with your own I/O, you must send each datagram to the address returned alongside it by datagrams_to_send(). That address may now differ from the one passed to connect(), so a connected UDP socket or a tunnel with a single fixed destination no longer works.

• Add :meth:~aioquic.quic.connection.QuicConnection.get_peer_address, which returns the address datagrams are currently sent to. It can change when

... (truncated)

Commits

• 101861a 1.7.2
• 7a8d5b2 Check for outdated Python idioms with ruff
• 3d4303f Use datetime.UTC and asyncio.create_task()
• d0e63da Use bytes.hex() and bytes.fromhex() instead of binascii
• e579376 Use f-strings instead of % and str.format()
• 175948f Use built-in generics and X | Y unions in annotations
• 2bef24f Add type annotations to the examples
• 76a1220 Stop installing type stubs for certifi and pyOpenSSL
• 13dec43 Disallow untyped functions in the library
• 2b03d97 Convert data written to a stream adapter to bytes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)