This release adds 1 notable feature for engineering teams evaluating rollout.
Published 4mo
Network Security
✓ No known CVEs patched
✓ No known CVEs patched in this version
Summary
AI summaryFixed the raw‑QUIC timeout regression restoring 1000‑stream lane completions from 950/1000 to 1000/1000 with lower tail latency.
Full changelog
- Aligned fast raw-QUIC and HTTP/3 client ownership so high-connection client lanes now reuse one worker and one local UDP port per bind family instead of scaling setup work with session count.
- Reduced
runtimeMode: 'auto'fallback churn by caching fast-path unavailability for the life of a process, so restricted Linux environments stop re-probingio_uringon every new connection attempt. - Added a repeatable cross-platform performance workflow with persisted host and Docker artifacts, Linux/macOS profiler wrappers, and attribution harnesses for quiche-direct, loopback, and Node mock-transport analysis.
- Fixed the raw-QUIC timeout/reap regression captured in the committed
quic-bottlenecksartifact set, returning the affected 1000-stream lane from950/1000completions with timeouts to1000/1000with lower tail latency. - Kept one important limit explicit: like-for-like HTTP/3 lanes still trail raw QUIC controls, so this release should be read as transport hardening and observability work rather than as proof that higher-layer overhead is gone.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Http3
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]