diff --git a/NEWS.md b/NEWS.md
index 412c2d82..00aa65ae 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,6 +1,6 @@
 # NEWS
 
-4.5.2 - 2026-07-05
+4.5.2 - 2026-07-06
 ------------------
 
 ### Changed
@@ -10,6 +10,13 @@
   the stream closed on its END_STREAM chunk. A waiting sender is now settled
   as `ok` once the send buffer has drained, and only gets the close-reason
   error when data is still outstanding.
+- Bump `quic` to 1.7.0. Relevant to hackney's HTTP/3 client: the connection
+  flow-control window now slides forward with received bytes instead of
+  stalling after 8 MiB, so large HTTP/3 downloads keep flowing; the idle
+  timer restarts on received activity per RFC 9000 §10.1; an invalid peer
+  SETTINGS frame now closes the connection cleanly instead of crashing; and
+  a client recognizes a server stateless reset (RFC 9000 §10.3) and closes
+  promptly instead of waiting for the idle timeout.
 
 4.5.1 - 2026-07-04
 ------------------
diff --git a/rebar.config b/rebar.config
index 7c7f90ac..b6b2bba4 100644
--- a/rebar.config
+++ b/rebar.config
@@ -53,7 +53,7 @@
 
 {deps, [
         %% Pure Erlang QUIC + HTTP/3 stack
-        {quic, "~>1.6.5"},
+        {quic, "~>1.7.0"},
         %% Pure Erlang HTTP/2 stack
         {h2, "~>0.10.4"},
         %% WebTransport client (HTTP/3 and HTTP/2) - powers the wt_* API