[renovate]

Change proposal

Change

Use Ubuntu 26.04 and recognize its exact label in the pinned Actionlint configuration.
Provision curl 8.23.0 and its checksum-locked dependencies for the Linux interoperability task.
Require the scoped installation to succeed before running the existing protocol harness.
Keep the interoperability profile and tool version in one Renovate update group.
Update the quic-go test peer's indirect dependencies to clear GO-2026-6860 and GO-2026-6866 in golang.org/x/net.
Keep Go 1.26.0 and quic-go 0.64.1 unchanged, and regenerate the peer's checksums and profile digest.

Closes #54.

Evidence

• Configuration changes with explicit checks for a missing lockfile and an unsupported operating system.
• mise run check passes in hosted CI.
• The existing Linux curl interoperability task passes with Mise 2026.10.17 and curl 8.23.0.
• The existing Linux quic-go task passes bidirectional interoperability for both supported protocol versions with the updated dependencies.
• The existing dependency audit passes for the updated Go, Mix, and Python inputs.
• Public API snapshots remain unchanged.
• The interoperability profile matches the provisioned peer.

Actionlint, Taplo formatting and validation, Typos, Gitleaks, and strict Renovate configuration validation pass.
Production extraction detects both curl declarations.
A separate update fixture groups both declarations into the same proposed branch.
The real protocol harness retains HTTP/1.1, HTTP/2, TLS, response body, connection reuse, and missing CA assertions.
go mod verify, peer compilation, and go vet pass with Go 1.27.3.

Security and release scope

• Public API contents remain unchanged.
• Protocol state and wait bounds remain unchanged.
• Project package versions and release behavior remain unchanged.

@coderabbitai ignore

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI; Enforced overrides: Organization
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: c567685a-876e-4df3-bd22-37d03c56f99d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.