Bump github.com/quic-go/quic-go from 0.48.1 to 0.48.2

[dependabot]

Bumps github.com/quic-go/quic-go from 0.48.1 to 0.48.2.

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.48.2

This patch release contains fixes for three bugs, including a patch for CVE-2024-53259 (details).

Changelog

• fix arming of keep-alive timer after sending PMTUD probe packets by @​marten-seemann in quic-go/quic-go#4716
• fix race condition in closed connection packet handling by @​glycerine (#4720)
• use IP_PMTUDISC_PROBE instead of IP_PMTUDISC_DO on Linux by @​marten-seemann (#4729)

Full Changelog: quic-go/quic-go@v0.48.1...v0.48.2

Commits

• 34157e6 use IP_PMTUDISC_PROBE instead of IP_PMTUDISC_DO on Linux (#4729)
• a6ced3a fix race condition in closed connection packet handling (#4720)
• 955506a fix arming of keep-alive timer after sending PMTUD probe packets (#4716)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[istio-policy-bot]

😊 Welcome! This is either your first contribution to the Istio documentation repo, or
it's been a while since you've been here. A few things you should know:

• You can learn about how we write and maintain documentation, our style guidelines,
  and the available web site features by visiting Contributing to the Docs.

• In the next few minutes, an automatic preview of your change will be built with
  a full copy of the istio.io website. You can find this preview by clicking on
  the Details link next to the deploy/netlify entry in the status section of this
  page.

• We care about quality, so we've put in place a number of checks to ensure our documentation
  is top-notch. We do spell checking, sanitize the Markdown, ensure all hyperlinks point to a
  valid location, and more. If your PR doesn't pass one of these checks, you'll see a red X in the
  lint_istio.io entry in the status section. Click on the Details link to get a list of the
  problems with your PR. Fix those problems and push an update; this will automatically re-run the
  tests. Hopefully this time everything will be perfect!

• Once your changes are accepted and merged into the repository, they will initially show up
  on https://preliminary.istio.io. The changes will be published to https://istio.io
  the next time we do a major release (which typically happens every 3 months or so).
  To publish them sooner, add a cherrypick/release-x.xx label, where x.xx is the current
  release of Istio.

Thanks for contributing!

Courtesy of your friendly welcome wagon.

[istio-testing]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a istio member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[craigbox]

/ok-to-test

This change looks over the top. Why are so many libraries being removed?
And do we need to make it here, or in common-files?

[istio-testing]

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
gencheck_istio.io	b964a3f	link	true	/test gencheck
doc.test.profile-ambient_istio.io	b964a3f	link	true	/test doc.test.profile-ambient
doc.test.profile-default_istio.io	b964a3f	link	true	/test doc.test.profile-default
doc.test.profile-demo_istio.io	b964a3f	link	true	/test doc.test.profile-demo
doc.test.multicluster_istio.io	b964a3f	link	true	/test doc.test.multicluster
doc.test.profile-minimal_istio.io	b964a3f	link	true	/test doc.test.profile-minimal
lint_istio.io	b964a3f	link	true	/test lint
doc.test.profile-none_istio.io	b964a3f	link	true	/test doc.test.profile-none
doc.test.dualstack_istio.io	b964a3f	link	true	/test doc.test.dualstack

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[craigbox]

figured

[dependabot]

Dependabot attempted to update this pull request, but because the branch dependabot/go_modules/github.com/quic-go/quic-go-0.48.2 is protected it was unable to do so.

[istio-testing]

PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.