Skip to content

chore(deps): bump http from 1.4.0 to 1.5.0 - #53

Merged
wiseaidev merged 1 commit into
mainfrom
dependabot/cargo/http-1.4.1
Sep 12, 2026
Merged

wiseaidev merged 1 commit into
mainfrom
dependabot/cargo/http-1.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps http from 1.4.0 to 1.5.0.

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

New Contributors

Full Changelog: hyperium/http@v1.4.2...v1.5.0

v1.4.2

What's Changed

New Contributors

Full Changelog: hyperium/http@v1.4.1...v1.4.2

v1.4.1

tl;dr

  • Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
  • Fix Extend for HeaderMap to clamp max size hint and not overflow.
  • Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
  • Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

  • Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
  • Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
  • Fix uri::PathAndQuery parsing to enforce URI max length.

1.4.2 (June 8, 2026)

  • Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
  • Fix Uri to properly reject DEL characters.

1.4.1 (May 25, 2026)

  • Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
  • Fix Extend for HeaderMap to clamp max size hint and not overflow.
  • Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
  • Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 26, 2026
@wiseaidev

Copy link
Copy Markdown
Member

@dependabot rebase & make no mistakes

Bumps [http](https://github.com/hyperium/http) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: http
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump http from 1.4.0 to 1.4.1 chore(deps): bump http from 1.4.0 to 1.5.0 Sep 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/http-1.4.1 branch from 525d6ff to 4f833c9 Compare September 12, 2026 16:56
@wiseaidev
wiseaidev merged commit 5987c3d into main Sep 12, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/cargo/http-1.4.1 branch September 12, 2026 17:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant