deps(rust): bump gotatun from 0.9.2 to 0.10.1 in /wgbridge-rs

[dependabot]

Bumps gotatun from 0.9.2 to 0.10.1.

Release notes

Sourced from gotatun's releases.

v0.10.1

What's Changed

• Fix UDP receive task panics on an empty datagram by @​markus-mullvad in mullvad/gotatun#204 (GHSA-6gxq-8xp9-742r)
• Reset IP counts periodically even if device has no registered peers by @​markus-mullvad in mullvad/gotatun#205 (GHSA-m2rr-7rr7-vmp7)

Full Changelog: mullvad/gotatun@v0.10.0...v0.10.1

v0.10.0

What's Changed

• Add force_handshake function by @​dlon in mullvad/gotatun#199
• Return bound port in device.read() by @​dlon in mullvad/gotatun#202
• Apply the dual-stack address mapping outside Apple targets by @​wayahead in mullvad/gotatun#193
• Bind UAPI unix socket without doubled slash in path by @​zicjin in mullvad/gotatun#195
• Document unsafe use when creating dual-stack sockets by @​markus-mullvad in mullvad/gotatun#198
• Fix/windows udp receive by @​Serock3 in mullvad/gotatun#200

New Contributors

• @​wayahead made their first contribution in mullvad/gotatun#193
• @​zicjin made their first contribution in mullvad/gotatun#195

Full Changelog: mullvad/gotatun@v0.9.2...v0.10.0

Changelog

Sourced from gotatun's changelog.

[0.10.1] - 2026-10-16

Fixed

• Fix IP counts not resetting periodically for devices without registered peers.

Linux

• Fix panic upon reading an empty UDP datagram if UDP GRO optimizations were enabled. The panic would terminates the device's shared UDP receive task, denying inbound traffic for every peer on that device until it was restarted or reconfigured.

[0.10.0] - 2026-10-14

Added

• Add Device::force_handshake to establish a WireGuard session for a peer.

Fixed

• Bind the UAPI unix socket at /var/run/wireguard/<name>.sock without a doubled slash in the path. The kernel previously reported the bound path as /var/run/wireguard//<name>.sock, which broke exact-path lookups such as lsof /var/run/wireguard/<name>.sock.
• Apply the dual-stack address mapping on every target served by the generic UDP socket implementation, not only Apple targets. Sending to an IPv4 peer on a dual-stack socket previously failed with EAFNOSUPPORT on those targets, and received datagrams reported an unmapped ::ffff: source address.
• Report UDP receive failures as fatal device errors. The inbound task previously stopped silently on such failures, so Device::wait was never woken and the device stopped receiving without any indication.
• When listen_port is 0, DeviceRead::listen_port and UAPI get report the actually assigned port instead of 0. That port is also kept across suspend/resume and other rebinds.

iOS

• Stop compiling check_send_max_number_of_packets on targets that never call it.

Security

Windows

• Fix a remotely triggerable denial of service in the UDP receive path used without the windows-gro feature. A single unauthenticated UDP datagram larger than the 4096-byte receive buffer stopped the receive task, halting inbound traffic for every peer on the device until the connection was rebuilt. Oversized datagrams are now discarded and reception continues.

Commits

• 9524864 Release 0.10.1
• d236570 Bump version to 0.10.1
• dac7aed Merge branch 'fix-GHSA-m2rr-7rr7-vmp7'
• b5881f0 Reset IP counts periodically even if device has no registered peers
• de5bf67 Merge branch 'fix-GHSA-6gxq-8xp9-742r'
• 07f7773 Fix security advisory GHSA-6gxq-8xp9-742r
• 9a9b196 Add regression test for security advisory GHSA-6gxq-8xp9-742r
• b6f43b9 Release 0.10.0
• dc581d3 Bump version to 0.10.0
• badd604 Merge branch 'keep-bound-port'
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)