[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/pion/dtls/v3	v3.1.5 → v3.1.15

---

Release Notes

pion/dtls (github.com/pion/dtls/v3)

v3.1.15

Compare Source

Changelog

• 1293c7e Pace repeated cookie responses with backoff
• 56d6ef7 Document unsafe v3 state restoration
• db6e886 Add TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256

v3.1.14

Compare Source

Changelog

• 66a9ff3 Retain the receive replay cutoff across Resume
• 9365bfd Reject resumption of incomplete connection state
• 1b7dd0b Validate cookies before resuming server sessions
• 93a9fd1 Authenticate peers again on session resumption
• ff414eb Recheck PSK credentials before resuming sessions
• a470668 Preserve extended master secret on resumption
• 2b234cd Bind cached sessions to role and cipher suite
• ce84b97 Save sessions only after client authentication
• a3c7992 Backport ALPN selection validation
• fe06b60 Backport late plaintext alert validation
• ffac271 Count UDP connections before exposing them to Accept
• 0c3b8c4 Reject unsupported DTLS record epochs
• ec46cde Retransmit cookie challenges only for ClientHello retries
• a460d83 Select cipher suites using the SNI certificate
• ad3c3e0 Reject unrequested client certificates
• 7c42263 Check server certificate keys against the cipher suite
• 9d0557b Distinguish RSA-PSS certificate signature schemes
• a1332da Reject empty certificate entries
• 4a04e7c Bound SNI processing during certificate selection
• a4f3e27 Preserve IP server names for certificate verification
• 72b2865 Fix PSK identity-hint length overflow

v3.1.13

Compare Source

Changelog

• da75e4d Backport record-layer validation fixes
• fa6e8d3 Limit peer RSA key sizes before signature verification
• 22bf92f Prevent early application data from blocking handshakes
• 37cd0b4 Reject unoffered curves in DTLS client key exchange
• ab433f0 Verify client Finished in DTLS 1.2 full handshakes
• 80b6c18 Negotiate DTLS parameters from the cookie CH
• 979ad79 Process the client cer flight once per handshake
• 252cf49 Honor local signature policy for CertificateVerify
• cb56053 Validate handshake signature against certificate keys
• f444d08 Bound handshake cache memory usage

v3.1.12

Compare Source

Changelog

• 240a139 Retransmit server flight on repeated CH

v3.1.11

Compare Source

Changelog

• 9439959 Honor configured elliptic curves on accept path (#​1153)
• 29aaee8 Validate MKI negotiation
• 28014a1 Return a copy of the remote SRTP MKI
• 62b354b Fix CCM length encoding of long additional data
• cb2da2c Fix empty 1.2 ECDHE-PSK identity hint
• 864822e Copy queued records only when they are queued
• b677d89 Copy queued records out of the pooled read buffer

v3.1.10

Compare Source

Changelog

• 2954d47 Allow PSK handshake if client certs are required
• 299134f Honor requested certificate types

v3.1.9

Compare Source

Changelog

• 678003b Count empty towards against limit
• a251bf0 Update to transport/v5 and Deadline.Context
• 14d97c2 Reassemble re-fragmented handshake retransmits

v3.1.8

Compare Source

Changelog

• 6371480 Close rejected listeners at Accept

v3.1.7

Compare Source

Changelog

• 52861e4 Fix packet connection leak

v3.1.6

Compare Source

Changelog

• 9311efd Fix panic unmarshaling ECDHE_PSK ClientKeyExchange

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on the first day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.45%. Comparing base (fe37065) to head (1d0547f).

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #679      +/-   ##
==========================================
- Coverage   83.53%   83.45%   -0.08%     
==========================================
  Files          78       78              
  Lines        5161     5161              
==========================================
- Hits         4311     4307       -4     
- Misses        850      854       +4     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/stretchr/testify	v1.11.1 -> v1.12.1

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 70c8714b-98d4-43d8-9a41-d0ece3d9b28c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud