8000 Bump http from 0.2.12 to 1.5.0 by dependabot[bot] · Pull Request #665 · bazeltools/rules_minidock_tools · GitHub
[go: up one dir, main page]
Skip to content

Bump http from 0.2.12 to 1.5.0 - #665

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/http-1.5.0
Open

Bump http from 0.2.12 to 1.5.0#665
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/http-1.5.0

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Jul 30, 2026 •
edited
Loading
Copy link
Copy Markdown
Contributor

Bumps http from 0.2.12 to 1.5.0.

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

New Contributors

Full Changelog: hyperium/http@v1.4.2...v1.5.0

v1.4.2

What's Changed

New Contributors

Full Changelog: hyperium/http@v1.4.1...v1.4.2

v1.4.1

tl;dr

  • Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
  • Fix Extend for HeaderMap to clamp max size hint and not overflow.
  • Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
  • Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

  • Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
  • Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
  • Fix uri::PathAndQuery parsing to enforce URI max length.

1.4.2 (June 8, 2026)

  • Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
  • Fix Uri to properly reject DEL characters.

1.4.1 (May 25, 2026)

  • Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
  • Fix Extend for HeaderMap to clamp max size hint and not overflow.
  • Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
  • Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

1.4.0 (November 24, 2025)

  • Add StatusCode::EARLY_HINTS constant for 103 Early Hints.
  • Make StatusCode::from_u16 now a const fn.
  • Make Authority::from_static now a const fn.
  • Make PathAndQuery::from_static now a const fn.
  • MSRV increased to 1.57 (allows legible const fn panic messages).

1.3.1 (March 11, 2025)

  • Fix validation that all characters are UTF-8 in URI path and query.

1.3.0 (March 11, 2025)

  • Allow most UTF-8 characters in URI path and query.
  • Fix HeaderMap::reserve() to allocate sufficient capacity.

1.2.0 (December 3, 2024)

  • Add StatusCode::TOO_EARLY constant for 425 status.
  • Loosen TryFrom<HashMap> for HeaderMap to work with any state generic.
  • Change Builder methods to use TryInto instead of TryFrom arguments.
  • Make StatusCode::as_u16 a const function.
  • Fix Method parsing to allow #$%&' characters.
  • Fix HeaderName parsing to reject " characters.
  • Fix off by 1 error in Method::from_bytes that could cause extra allocations.

1.1.0 (March 4, 2024)

  • Add methods to allow trying to allocate in the HeaderMap, returning an error if oversize instead of panicking.
  • Add Extensions::get_or_insert() method.
  • Implement From<Uri> for uri::Builder.

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 30, 2026
@dependabot dependabot Bot mentioned this pull request Jul 30, 2026
Closed
@dependabot
dependabot Bot force-pushed the dependabot/cargo/http-1.5.0 branch 2 times, most recently from d2b4066 to 1b857f7 Compare August 17, 2026 02:26
@dependabot
Bump http from 0.2.12 to 1.5.0
d3e71fb 
Bumps [http](https://github.com/hyperium/http) from 0.2.12 to 1.5.0.
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v0.2.12...v1.5.0)

---
updated-dependencies:
- dependency-name: http
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/http-1.5.0 branch from 1b857f7 to d3e71fb Compare August 17, 2026 02:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

0