Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the http group across 1 directory with 5 updates #1055

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 14, 2024

Bumps the http group with 5 updates in the / directory:

Package From To
hyper 0.14.30 1.4.1
tower-http 0.5.2 0.6.1
tower 0.3.1 0.5.1
rustls-cng 0.5.0 0.5.1
rustls 0.23.13 0.23.14

Updates hyper from 0.14.30 to 1.4.1

Release notes

Sourced from hyper's releases.

v1.4.1

Bug Fixes

  • http1: reject final chunked if missing 0 (8e5de1bb)

v1.4.0

Bug Fixes

  • http2: stop removing "Trailer" header in HTTP/2 responses as per RFC 9110 (#3648) (a3269f7a)
  • server: start header read timeout immediately (#3185) (0eb1b6cf)

Features

  • client:
    • add SendRequest::try_send_request() method (#3691) (4ffaad53)
    • remove Send +Sync bounds requirement of http2::Connection executor (#3682) (56c3cd56)
    • remove 'static lifetime bound on http1/2 client IO (#3667) (9580b357)
  • http1: add support for receiving trailer fields (#3637) (ac84af6b, closes #2703)
  • server: add Builder::auto_date_header(bool) to allow disabling Date headers (721785ef)
  • service: implement Service for reference types (#3607) (eade122d)

New Contributors

Full Changelog: hyperium/hyper@v1.3.1...v1.4.0

v1.3.1

Bug Fixes

  • client: revert auto content-length header for some requests (#3633)

v1.3.0

Bug Fixes

  • client: send content-length even with no body (172fdfaf)
  • http2:
    • max_header_list_size(num) defaults to 16kb (203d1b09)

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.4.1 (2024-07-09)

Bug Fixes

  • http1: reject final chunked if missing 0 (8e5de1bb)

v1.4.0 (2024-07-01)

Bug Fixes

  • http2: stop removing "Trailer" header in HTTP/2 responses as per RFC 9110 (#3648) (a3269f7a)
  • server: start header read timeout immediately (#3185) (0eb1b6cf)

Features

  • client:
    • add SendRequest::try_send_request() method (#3691) (4ffaad53)
    • remove Send +Sync bounds requirement of http2::Connection executor (#3682) (56c3cd56)
    • remove 'static lifetime bound on http1/2 client IO (#3667) (9580b357)
  • http1: add support for receiving trailer fields (#3637) (ac84af6b, closes #2703)
  • server: add Builder::auto_date_header(bool) to allow disabling Date headers (721785ef)
  • service: implement Service for reference types (#3607) (eade122d)

v1.3.1 (2024-04-16)

Bug Fixes

  • client: revert auto content-length header for some requests (#3633)

v1.3.0 (2024-04-15)

Bug Fixes

  • client: send content-length even with no body (172fdfaf)
  • http2:
    • max_header_list_size(num) defaults to 16kb (203d1b09)
    • initial_max_send_streams defaults to 100 (2d1bd708)
  • server:
    • avoid unwrapping for the Future impl of HTTP/1 UpgradeableConnection (#3627) (b79be911, closes #3621)
    • avoid graceful_shutdown panic on upgraded H1 connection (#3616) (6ecf8521)

Features

... (truncated)

Commits
  • 4fda6b3 v1.4.1
  • 8e5de1b fix(http1): reject final chunked if missing 0
  • fdc1916 v1.4.0
  • 4ffaad5 feat(client): add SendRequest::try_send_request() method (#3691)
  • 56c3cd5 feat(client): remove Send +Sync bounds requirement of http2::Connection e...
  • 9580b35 feat(client): remove 'static lifetime bound on http1/2 client IO (#3667)
  • 3e435cf docs(client): Include exec arg in client::conn::http2::handshake doc (#3694)
  • 111d038 docs(client): better describe Uri forms are sent as-is
  • aa7ff60 docs(client): replace example on mod page with link to guide
  • 7cedc13 perf(client): create DispatchGone error only if needed
  • Additional commits viewable in compare view

Updates tower-http from 0.5.2 to 0.6.1

Release notes

Sourced from tower-http's releases.

v0.6.1

Fixed

  • decompression: reuse scratch buffer to significantly reduce allocations and improve performance (#521)

#521: tower-rs/tower-http#521

New Contributors

v0.6.0

Changed:

  • body module is disabled except for catch-panic, decompression-*, fs, or limit features (BREAKING) (#477)
  • Update to tower 0.5 (#503)

Fixed

  • fs: Precompression of static files now supports files without a file extension (#507)

#477: tower-rs/tower-http#477 #503: tower-rs/tower-http#503 #507: tower-rs/tower-http#507

Commits

Updates tower from 0.3.1 to 0.5.1

Release notes

Sourced from tower's releases.

tower 0.5.1

  • Fix minimum version of tower-layer dependency (#787)

#787: tower-rs/tower#787

tower 0.5.0

Fixed

  • util: BoxService is now Sync (#702)

Changed

  • util: Removed deprecated ServiceExt::ready_and method and ReadyAnd future (#652)
  • retry: Breaking Change retry::Policy::retry now accepts &mut Req and &mut Res instead of the previous mutable versions. This increases the flexibility of the retry policy. To update, update your method signature to include mut for both parameters. (#584)
  • retry: Breaking Change Change Policy to accept &mut self (#681)
  • retry: Add generic backoff utilities (#685)
  • retry: Add Budget trait. This allows end-users to implement their own budget and bucket implementations. (#703)
  • reconnect: Breaking Change Remove unused generic parameter from Reconnect::new (#755)
  • ready-cache: Allow iteration over ready services (#700)
  • discover: Implement Clone for Change (#701)
  • util: Add a BoxCloneServiceLayer (#708)
  • rng: use a simpler random 2-sampler (#716)
  • filter: Derive Clone for AsyncFilterLayer (#731)
  • general: Update IndexMap (#741)
  • MSRV: Increase MSRV to 1.63.0 (#741)

#702: tower-rs/tower#702 #652: tower-rs/tower#652 #584: tower-rs/tower#584 #681: tower-rs/tower#681 #685: tower-rs/tower#685 #703: tower-rs/tower#703 #755: tower-rs/tower#755 #700: tower-rs/tower#700 #701: tower-rs/tower#701 #708: tower-rs/tower#708 #716: tower-rs/tower#716 #731: tower-rs/tower#731 #741: tower-rs/tower#741

tower 0.4.13

Added

  • load_shed: Public constructor for Overloaded error (#661)

Fixed

  • util: Fix hang with call_all when the Stream of requests is pending

... (truncated)

Commits
  • 7155101 Prepare release of v0.5.1 (#791)
  • b2c48b4 Bump dependency on tower-layer (#787)
  • fec9e55 tower-layer: drop versions from dev dependencies (#782)
  • 646804d chore: prepare to release tower-0.5.0, tower-layer-0.3.3, tower-service-0.3.3...
  • 7202cfe chore: fix a few typos (#780)
  • 85080a5 use workspace dependencies for tower (#778)
  • 88a7d3e fix warnings found when running check/doc commands (#779)
  • a6e98a7 chore: update GitHub Actions CI (#740)
  • 74e925d chore: fix spelling errors (#775)
  • 89ac74f feat: Make new functions const when possible (#760)
  • Additional commits viewable in compare view

Updates rustls-cng from 0.5.0 to 0.5.1

Commits

Updates rustls from 0.23.13 to 0.23.14

Commits
  • cf736e3 Prepare 0.23.14
  • 262ae99 Accept kyber deprecation
  • c9f5734 Take aws-lc-rs 1.10
  • 0560938 Take latest bogo release
  • 7bf82dc Send illegal_parameter alert on illegal group
  • d752eb2 Send illegal_parameter alert on invalid key share
  • 2d3b7ab default crypto provider improvements
  • bcc295d Fix new cargo doc warnings in examples
  • e7dd2fd fips.rs: reflect certificate issuance for aws-lc 2.0.0
  • 58a5891 fix(deps): update rust crate brotli to v7
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the http group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hyper](https://github.com/hyperium/hyper) | `0.14.30` | `1.4.1` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.5.2` | `0.6.1` |
| [tower](https://github.com/tower-rs/tower) | `0.3.1` | `0.5.1` |
| [rustls-cng](https://github.com/rustls/rustls-cng) | `0.5.0` | `0.5.1` |
| [rustls](https://github.com/rustls/rustls) | `0.23.13` | `0.23.14` |



Updates `hyper` from 0.14.30 to 1.4.1
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v0.14.30...v1.4.1)

Updates `tower-http` from 0.5.2 to 0.6.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.5.2...tower-http-0.6.1)

Updates `tower` from 0.3.1 to 0.5.1
- [Release notes](https://github.com/tower-rs/tower/releases)
- [Commits](tower-rs/tower@tower-0.3.1...tower-0.5.1)

Updates `rustls-cng` from 0.5.0 to 0.5.1
- [Commits](https://github.com/rustls/rustls-cng/commits/v0.5.1)

Updates `rustls` from 0.23.13 to 0.23.14
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.13...v/0.23.14)

---
updated-dependencies:
- dependency-name: hyper
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: http
- dependency-name: tower-http
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: http
- dependency-name: tower
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: http
- dependency-name: rustls-cng
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: http
- dependency-name: rustls
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: http
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 14, 2024
@CBenoit CBenoit closed this Oct 15, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 15, 2024

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/cargo/http-d84e66b8b9 branch October 15, 2024 04:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Development

Successfully merging this pull request may close these issues.

1 participant