chore(deps): update module github.com/refraction-networking/utls to v1.6.7

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/refraction-networking/utls	v1.6.2 -> v1.6.7

---

Release Notes

refraction-networking/utls (github.com/refraction-networking/utls)

v1.6.7: Allow inspecting Client Hello before locking Session/PSK

Compare Source

What's Changed

• Allow BuildHandshakeState to inspect ClientHello before setting SessionTicket/PSK by @​adotkhan in https://github.com/refraction-networking/utls/pull/301

Full Changelog: refraction-networking/utls@v1.6.6...v1.6.7

v1.6.6: Hotfix: QUIC must not send non-empty session ID by RFC

Compare Source

What's Changed

• quic: always use empty session ID by @​gaukas in https://github.com/refraction-networking/utls/pull/297

Full Changelog: refraction-networking/utls@v1.6.5...v1.6.6

v1.6.5: Popular Firefox 120 parrot and deps update

Compare Source

What's Changed

• build(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 by @​dependabot in https://github.com/refraction-networking/utls/pull/293
• Update Firefox 120 parrot to a more popular version by @​adotkhan in https://github.com/refraction-networking/utls/pull/296

New Contributors

• @​adotkhan made their first contribution in https://github.com/refraction-networking/utls/pull/296

Full Changelog: refraction-networking/utls@v1.6.4...v1.6.5

v1.6.4: bugfix: UConn incorrectly inherits Conn methods

Compare Source

What's Changed

• build(deps): bump github.com/quic-go/quic-go from 0.40.1 to 0.42.0 by @​dependabot in https://github.com/refraction-networking/utls/pull/289
• fix: (*UConn).Read() and Secure Renegotiation by @​gaukas in https://github.com/refraction-networking/utls/pull/292

Full Changelog: refraction-networking/utls@v1.6.3...v1.6.4

v1.6.3: Cryptographically Secured Shuffle

Compare Source

Don't panic! This does not cause any significant security concern, since modern platforms are doing fine with limited randomness from math/rand. This patch is for some much restrictive platforms such as WebAssembly -- on which math/rand may generate deterministic output (e.g., same random number series from each cold start).

What's Changed

• security: crypto/rand ShuffleChromeTLSExtensions by @​gaukas in https://github.com/refraction-networking/utls/pull/286

Full Changelog: refraction-networking/utls@v1.6.2...v1.6.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.20 -> 1.23.1
golang.org/x/net	v0.20.0 -> v0.23.0
golang.org/x/crypto	v0.18.0 -> v0.21.0
golang.org/x/sys	v0.16.0 -> v0.18.0