github.com/quic-go/webtransport-go

This release updates webtransport-go to draft-16, and adds support for WebTransport flow control and session pooling.

New Features

• Added WebTransport session flow control for stream counts (WT_MAX_STREAMS and WT_STREAMS_BLOCKED) and total stream data (WT_MAX_DATA and WT_DATA_BLOCKED). Configure initial receive limits with Config.MaxIncomingStreams, Config.MaxIncomingUniStreams, and Config.MaxIncomingData on Transport or Server. Flow control is negotiated only when both peers advertise it and is required for multiple sessions on one connection. Stream-count flow control: #293, #298, #300, #301, #304, #311, #312, #324, #325; data flow control: #329, #331, #332, #333, #340; protocol validation and session pooling: #305, #342
• Added ClientConn and Transport.NewClientConn, allowing applications to maintain multiple client QUIC connections and establish multiple concurrent WebTransport sessions on each connection. ClientConn also implements http.RoundTripper: #344

Breaking Changes

• Dialer was renamed to Transport: #343

Other Changes

• Stream, SendStream, and ReceiveStream now expose StreamID, returning the underlying QUIC stream ID: #347

Notable Fixes

• SendStream.Write now returns an error after Close or CancelWrite is called while the stream header is being sent asynchronously, preventing payload writes after the stream is closed or canceled: #328
• Malformed capsules now close the session with H3_DATAGRAM_ERROR: #299
• Client and server session setup now stops waiting for HTTP/3 SETTINGS when the QUIC connection closes: #346
• The client now waits for the QUIC handshake and rejects servers that don't support QUIC datagrams or stream reset partial delivery, returning a RequirementsNotMetError: #351

What's Changed

• avoid buffering skipped capsules by @marten-seemann in #290
• extract capsule parsing into a separate file by @marten-seemann in #289
• fix missing context cancelation in Session.Open{Uni}StreamSync by @marten-seemann in #297
• move stream handling into incoming and outgoing maps by @marten-seemann in #294
• implement parsing and serialization of WT_MAX_STREAMS capsules by @marten-seemann in #293
• use H3_DATAGRAM_ERROR when parsing a capsule fails by @marten-seemann in #299
• implement handling of the peer’s stream limit by @marten-seemann in #298
• implement parsing and serialization of WT_STREAMS_BLOCKED capsule by @marten-seemann in #300
• ci: bump actions/checkout from 6 to 7 by @dependabot[bot] in #302
• ci: fix race condition in example workflow by @marten-seemann in #303
• implement capsule sending logic in the session by @marten-seemann in #301
• reject WT_MAX_STREAM_DATA and WT_STREAM_DATA_BLOCKED capsules by @marten-seemann in #305
• add support for sending WT_STREAMS_BLOCKED capsules by @marten-seemann in #304
• ci: remove unneeded staticcheck rule for quic.ConnectionTracing{ID, Key} by @marten-seemann in #308
• use a generic implementation for the outgoing streams map by @marten-seemann in #307
• use a generic implementation for the incoming streams map by @marten-seemann in #309
• reject WT_MAX_STREAMS that decrease the stream limit by @marten-seemann in #312
• send WT_MAX_STREAMS capsules to grant new stream credit by @marten-seemann in #311
• Send CONNECTION_CLOSE before tearing down the listener on Close() (0.11 regression) by @ItalyPaleAle in #295
• ci: bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #322
• ci: bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #320
• ci: bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #321
• ci: bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #318
• ci: bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #319
• reject non-increasing WT_MAX_STREAMS limits by @marten-seemann in #324
• add a Config to set incoming and outgoing stream limits by @marten-seemann in #325
• move send and receive streams into separate files by @marten-seemann in #326
• reject stream writes while sending stream headers asynchronously by @marten-seemann in #328
• ci: run tests with race detector, fix race condition in test by @marten-seemann in #334
• ci: bump actions/setup-python from 6 to 7 by @dependabot[bot] in #336
• ci: bump actions/setup-go from 6 to 7 by @dependabot[bot] in #335
• split up unit and integration tests by @marten-seemann in #337
• README: add MediaMTX, any-sync and socket.io to notable users by @marten-seemann in #338
• README: update to draft-16 by @marten-seemann in #339
• update quic-go to v0.61.0, use the new capsule API by @marten-seemann in #323
• track total data sent on a WebTransport session by @marten-seemann in #329
• implement sending of WT_DATA_BLOCKED capsules by @marten-seemann in #331
• implement handling of WT_MAX_DATA capsules by @marten-seemann in #332
• implement sending of WT_MAX_DATA capsules by @marten-seemann in #333
• add data flow control to the Config, add an integration test by @marten-seemann in #340
• reject pooled sessions without flow control by @marten-seemann in #342
• rename the Dialer to Transport by @marten-seemann in #343
• introduce a ClientConn, make it possible to pool sessions by @marten-seemann in #344
• watch for connection closure while waiting for SETTINGS by @marten-seemann in #346
• expose QUIC stream IDs on WebTransport streams by @marten-seemann in #347
• ci: use deterministic Chrome versions for interop test by @marten-seemann in #350
• check server QUIC capabilities when dialing by @marten-seemann in #351
• ci: don’t cancel interop Docker image builds on master by @marten-seemann in #352
• ci: update ChromeDriver to 151.0.7922.47 for interop test by @marten-seemann in #349
• ci: bump docker/login-action from 4.4.0 to 4.5.1 by @dependabot[bot] in #354
• add an integration test for session pooling by @marten-seemann in #353

New Contributors

• @ItalyPaleAle made their first contribution in #295

Full Changelog: v0.11.0...v0.12.0

This patch release contains the following backports :

• Avoid buffering skipped capsules: #290
• Close active QUIC connections before tearing down the listener: #295
• Fix missing context cancelation in Session.OpenStreamSync and Session.OpenUniStreamSync: #297

Full Changelog: v0.11.0...v0.11.1

This release focuses on full compatibility with draft-15. The server keeps limited backwards compatibility with older draft clients where this is straightforward, but that compatibility is intentionally not comprehensive.

WebTransport flow control is not supported yet (see issue #256).

Breaking Changes

• webtransport-go now requires Go 1.25 or newer: #243

Protocol Changes

• Use SETTINGS_WT_ENABLED for WebTransport draft-version negotiation. The server continues to accept the old ENABLE_WEBTRANSPORT setting for compatibility with older clients: #254
• Send SETTINGS_WT_ENABLED from the client, as required by draft-15: #271 (thanks to @tobbee)
• Use webtransport-h3 as the Extended CONNECT :protocol token. The server continues to accept the legacy webtransport token for compatibility with older clients: #280 (thanks to @tomholford)
• Use the WT_REQUIREMENTS_NOT_MET error when the peer does not advertise the required HTTP/3 or WebTransport capabilities: #252
• Add support for the WT_ALPN_ERROR session error: #277
• Validate WebTransport session IDs before accepting incoming streams: #283
• Advertise SETTINGS values as required by Safari 26.4: #261 (thanks to @birros)

New Features

• Added a runnable example server and client, including browser-side JavaScript and certificate hash verification in the Go client: #285

Notable Fixes

• Fixed a stream close race condition where ReceiveStream.Read or SendStream.Write could block forever when the local and remote side closed a session concurrently: #267 (thanks to @aler9)
• Server.ListenAndServe now closes the UDP socket it creates: #274

What's Changed

• update to Go 1.26, drop Go 1.24 by @marten-seemann in #243
• build an image for the WebTransport Interop Runner by @marten-seemann in #244
• Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #249
• Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #250
• Bump docker/login-action from 3 to 4 by @dependabot[bot] in #251
• Bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #248
• use the WT_REQUIREMENTS_NOT_MET error by @marten-seemann in #252
• use SETTINGS_WT_ENABLED introduced in draft-15 by @marten-seemann in #254
• ci: bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in #260
• ci: bump nanasess/setup-chromedriver from 2 to 3 by @dependabot[bot] in #266
• ci: bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #268
• ci: pin non-GitHub-owned GitHub Actions by @marten-seemann in #270
• README: update to draft-15 by @marten-seemann in #273
• send SETTINGS_WT_ENABLED from the client by @tobbee in #271
• close UDP socket created by Server.ListenAndServe by @marten-seemann in #274
• run go fix across the entire codebase by @marten-seemann in #275
• ci: run go fix as part of the lint workflow by @marten-seemann in #276
• add support for the WT_ALPN_ERROR by @marten-seemann in #277
• fix stream close race condition on session close by @aler9 in #267
• fix flaky TestDatagrams by @marten-seemann in #278
• use webtransport-h3 as the :protocol upgrade token by @tomholford in #280
• implement validation of session IDs by @marten-seemann in #283
• add an example server and client by @marten-seemann in #285
• send WebTransport SETTINGS expected by Safari 26.4 by @birros in #261
• update quic-go to v0.60.0 by @marten-seemann in #287

New Contributors

• @tobbee made their first contribution in #271
• @aler9 made their first contribution in #267
• @tomholford made their first contribution in #280
• @birros made their first contribution in #261

Full Changelog: v0.10.0...v0.11.0

This release updates webtransport-go to use the new API introduced in quic-go v0.59.0 (#221): Instead of "hijacking" streams from the HTTP/3 layer, the underlying QUIC connection is now owned by WebTransport, and webtransport-go dispatches incoming streams to either the HTTP/3 layer or an existing or new WebTransport session.

New Features

• Implemented Application Protocol Negotiation: #190
• The QUIC Stream Resets with Partial Delivery is now used to enforce reliable delivery of the WebTransport stream header: #239

Breaking Changes

• Session.ConnectionState was renamed to SessionState: #189
• The StreamID method was removed from Stream, SendStream and ReceiveStream: #226
• The Server now embeds the http3.Server as a pointer (instead of by value): #215

Other Changes

• The Stream and the SendStream now expose a Context method: #176 (thanks to @Sicilica)
• Delayed streams for already closed sessions are immediately reset: #235
• The Session context now uses the request or dial context, allowing the application to attach values to the context: #199
• When a WebTransport session is closed, streams are reset using the WT_SESSION_GONE error. Stream Read and Write now wait for the WT_CLOSE_SESSION capsule on the CONNECT stream to return a meaningful error: #213

Notable Fixes

• Closed sessions are now properly cleaned up: #198 (thanks to @rolaechea), #230
• Session errors are now properly propagated to the stream Read and Write calls: #207
• The length limit for WT_CLOSE_SESSION capsules is now enforced: #202
• The dial timeout is now respected while waiting for the server's HTTP/3 settings: #216
• A 10ms deadline is applied before attempting the WT_CLOSE_SESSION capsule, preventing Session.Close from blocking any longer than 10ms: #224
• errors.Is error comparisons were fixed for StreamError and SessionError: #204, #205
• The underlying QUIC connection is now closed when establishing a WebTransport session fails: #236

Changelog

• ci: remove 386 (32 bit x86) by @marten-seemann in #180
• Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #178
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #177
• Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #179
• ci: use go mod tidy -diff to check for tidied go.mod by @marten-seemann in #181
• ci: fix setting of OS and Go envs for Codecov by @marten-seemann in #183
• ci: enable Codecov test analysis by @marten-seemann in #182
• update minimum Go version to 1.24, use 1.24 and 1.25 on CI by @marten-seemann in #184
• update quic-go to v0.56.0 by @marten-seemann in #185
• ci: remove unused code generation step from lint job by @marten-seemann in #186
• Bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #187
• README: remove unfunded status section by @marten-seemann in #188
• expose SendStream.Context and Stream.Context by @Sicilica in #176
• replace Session.ConnectionState with Session.SessionState by @marten-seemann in #189
• implement application protocol negotiation by @marten-seemann in #190
• ci: update Chrome to 142.0.7444.162 in interop test by @marten-seemann in #192
• remove header-based draft version negotiation by @marten-seemann in #191
• ci: define permissions for all workflows by @marten-seemann in #193
• Bump actions/checkout from 5 to 6 by @dependabot[bot] in #196
• update quic-go to v0.57.1 by @marten-seemann in #197
• remove closed session from session manager by @rolaechea in #198
• use the request / dial context on the session by @marten-seemann in #199
• implement length limit for error message in WT_CLOSE_SESSION capsule by @marten-seemann in #202
• update name of WT_BUFFERED_STREAM_REJECTED error by @marten-seemann in #203
• fix errors.Is for the StreamError by @marten-seemann in #204
• implement error comparison for the SessionError by @marten-seemann in #205
• use the WT_SESSION_GONE to reset the CONNECT stream by @marten-seemann in #206
• propagate the session close error to the stream read and write methods by @marten-seemann in #207
• fix error handling when sending the stream header by @marten-seemann in #210
• respect stream deadline when waititing for session close by @marten-seemann in #213
• embed the http3.Server in the Server as a pointer by @marten-seemann in #215
• respect the dial timeout when waiting for the server’s HTTP/3 settings by @marten-seemann in #216
• ci: use codecov-action instead of codecov/test-results-action by @Copilot in #219
• use new quic-go API by @marten-seemann in #221
• set a 10ms write deadline before sending the WT_CLOSE_SESSION capsule by @marten-seemann in #224
• remove StreamID method from Stream, SendStream and ReceiveStream by @marten-seemann in #226
• add documentation for the stream types and their methods by @marten-seemann in #227
• README: add list of notable projects and a release policy by @marten-seemann in #225
• simplify stream buffering logic in the session manager by @marten-seemann in #230
• remove stray TODO from Session by @marten-seemann in #232
• add a security policy by @marten-seemann in #233
• ci: update golangci-lint to v2.7.2 by @marten-seemann in #234
• move connection management to client and server by @marten-seemann in #231
• close client’s QUIC connection on WebTransport session close or failure by @marten-seemann in #236
• immediately reject streams for closed sessions by @marten-seemann in #235
• update quic-go to v0.59.0 by @marten-seemann in #240
• enable and use the QUIC Stream Resets with Partial Delivery extension by @marten-seemann in #239

New Contributors

• @Sicilica made their first contribution in #176
• @rolaechea made their first contribution in #198
• @Copilot made their first contribution in #219

Full Changelog: v0.9.0...v0.10.0

This release updates quic-go to v0.53.0.

What's Changed

• webtransport-go is unfunded by @marten-seemann in #156
• update quic-go to v0.48.0 by @marten-seemann in #163
• ci: uci/copy-templates by @web3-bot in #165
• bump Go version in go.mod to Go 1.23 by @marten-seemann in #167
• ci: define workflows in this repository by @marten-seemann in #168
• use standard library rand instead of golang.org/x/exp/rand in tests by @marten-seemann in #170
• ci: reenable Codecov comments on pull requests by @marten-seemann in #173
• simplify stream opening error handling when session is closed by @marten-seemann in #171
• avoid using mocks in tests by @marten-seemann in #172
• ci: switch to golangci-lint for linting by @marten-seemann in #175
• update quic-go to v0.52.0 by @marten-seemann in #174
• update quic-go v0.53.0, use the new API by @marten-seemann in #169

Full Changelog: v0.8.0...v0.9.0

Features

This release adds support for WebTransport Datagrams (#142). Datagrams are a required feature of WebTransport, therefore there’s no need to negotiate support for it. webtransport-go handles negotiation of QUIC and HTTP/3 datagram support.

Datagrams can be sent by calling SendDatagram on the Session, and received using ReceiveDatagram.

Breaking Changes

• rename ConnectionError to the SessionError (#134)
• add a Remote field to the StreamError (#139)

Other Notable Changes

• block calls to Server.Upgrade until the client’s SETTINGS were received, check for HTTP Datagram support (#146)
• check the server's SETTINGS before sending the Extended CONNECT request (#151)

quic-go.net: Launching a new Documentation Site

With this release, we're launching a new documentation site for the quic-go projects (quic-go itself, HTTP/3, webtransport-go, and soon, masque-go): quic-go.net.

The documentation site aims to explain the concepts and how they are made accessible using webtransport-go's API.

A lot of work has gone into the documentation already, but we're by no means done yet. The entire source is public in https://github.com/quic-go/docs/, and we're happy about community contributions.

webtransport-go needs your support!

Is your project / company relying on webtransport-go?
Please consider funding the project. Any support is highly appreciated!

Changelog

• rename the ConnectionError to SessionError by @marten-seemann in #134
• update quic-go, use the new HTTP/3 API by @marten-seemann in #138
• add a Remote field to the StreamError by @marten-seemann in #139
• remove custom qlogger implementation in tests by @marten-seemann in #143
• enable datagram support on the SingleDestinationRoundTripper by @marten-seemann in #144
• gitignore: ignore all qlog files by @marten-seemann in #145
• block Upgrade on HTTP SETTINGS, check for client datagram support by @marten-seemann in #146
• README: link to the new documentation site by @marten-seemann in #148
• update quic-go to v0.43.0 by @marten-seemann in #150
• ci: update ChromeDriver to 124.0.6367.62 in interop test by @marten-seemann in #152
• check the server's SETTINGS before sending the Extended CONNECT request by @marten-seemann in #151
• add support for datagrams by @marten-seemann in #142

Full Changelog: v0.7.0...v0.8.0

Breaking Changes

Before v0.7.0, the server (incorrectly) didn't advertise support the Extended CONNECT extension. With quic-go/quic-go#4341, it now does. The client now checks for Extended CONNECT support, and aborts the handshake if the server doesn't support it. This means that v0.7.0 clients are now incompatible with pre-v0.7.0 servers.

What's Changed

• close http3.RoundTripper after test by @hareku in #101
• update quic-go to v0.41.0 by @marten-seemann in #114
• set the H3 WebTransport setting on the client side by @marten-seemann in #105
• ci: update ChromeDriver to v114.0.5735.90 in interop test by @marten-seemann in #123
• enable Dependabot for GitHub Actions by @marten-seemann in #124
• Bump actions/checkout from 3 to 4 by @dependabot in #125
• Bump actions/setup-go from 3 to 5 by @dependabot in #127
• Bump nanasess/setup-chromedriver from 1 to 2 by @dependabot in #126
• Bump actions/setup-python from 4 to 5 by @dependabot in #128
• ci: uci/copy-templates by @web3-bot in #129
• update quic-go to v0.42.0 by @marten-seemann in #119
• check the server's HTTP/3 SETTINGS before initiating a session by @marten-seemann in #120

New Contributors

• @hareku made their first contribution in #101
• @dependabot made their first contribution in #125

Full Changelog: v0.6.0...v0.7.0