Sourced from aioquic's changelog.

1.3.0

• Ensure PATH_CHALLENGE frames are sent before other frame types.
• Reclaim memory when HTTP/3 streams end.
• Limit the number of remote PATH_CHALLENGE stored per path.
• Avoid assertion error when receiving multiple STOP_SENDING frames.
• Improve type annotations.
• Make it possible to use LibreSSL instead of OpenSSL.
• Add support Python 3.13 and 3.14, drop support for Python 3.8 and 3.9.
• Build binary wheels for musllinux_.
• Build binary wheels against OpenSSL_ 3.5.4.
• Add command-line argument to the http3_client example to request a key update during interoperability tests.

1.2.0

• Add support for compatible version handling as defined in :rfc:9368.
• Add support for QUIC Version 2, as defined in :rfc:9369.
• Drop support for draft QUIC versions which were obsoleted by :rfc:9000.
• Improve datagram padding to allow better packet coalescing and reduce the number of roundtrips during connection establishement.
• Fix server anti-amplification checks during address validation to take into account invalid packets, such as datagram-level padding.
• Allow asyncio clients to make efficient use of 0-RTT by passing wait_connected=False to :meth:~aioquic.asyncio.connect.
• Add command-line arguments to the http3_client example for client certificates and negotiating QUIC Version 2.

1.1.0

• Improve path challenge handling and compliance with :rfc:9000.
• Limit the amount of buffered CRYPTO data to avoid memory exhaustion.
• Enable SHA-384 based signature algorithms and SECP384R1 key exchange.
• Build binary wheels against OpenSSL_ 3.3.0.

1.0.0

• Ensure no data is sent after a stream reset.
• Make :class:~aioquic.h3.connection.H3Connection's :meth:~aioquic.h3.connection.H3Connection.send_datagram and :meth:~aioquic.h3.connection.H3Connection.send_push_promise methods raise an :class:~aioquic.h3.exceptions.InvalidStreamTypeError exception if an invalid stream ID is specified.
• Improve the documentation for :class:~aioquic.asyncio.QuicConnectionProtocol's :meth:~aioquic.asyncio.QuicConnectionProtocol.transmit method.

... (truncated)

• cb10353 1.3.0
• 43be102 Build binary wheels against OpenSSL 3.5.4
• 7a7ce57 Allow HTTP/3 client to request a key update
• 34c5eac Send PATH_CHALLENGE before other frame types
• 83590c8 Update PATH_CHALLENGE / PATH_RESPONSE state after sending
• 483a66f Add support for Python 3.14
• 89aaa0f Stop using typing's Dict, List, Tuple for type annotations
• cbde38d Drop support for end-of-life Python 3.9
• 773ec8a h3: Remove stream objects when stream is ended
• 6c25c5c Limit the number of remote path challenges stored per path
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)