Skip to content

chore(deps): bump hyper from 1.11.1 to 1.12.0 - #85

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/main/hyper-1.12.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/main/hyper-1.12.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026 •

Copy link
Copy Markdown
Contributor

Bumps hyper from 1.11.1 to 1.12.0.

Release notes

Sourced from hyper's releases.

v1.12.0

Features

Bug Fixes

  • http1:
    • withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)
    • remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)
    • always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)
    • let a Connection close token win over a later keep-alive (#4201) (5dadff76)
    • preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)
  • http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Everything

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.12.0 (2026-10-06)

Bug Fixes

  • http1:
    • withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)
    • remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)
    • always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)
    • let a Connection close token win over a later keep-alive (#4201) (5dadff76)
    • preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)
  • http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

Commits
  • 7f67699 v1.12.0
  • 254bf12 perf(body): skip waking a closed peer when a channel end drops (#4225)
  • c44f1cc fix(http1): withdraw a stale want when the client dispatcher takes a request ...
  • 69396fd fix(http1): remove content-length if transfer-encoding is auto-added (#4224)
  • a5d7fd7 fix(http1): always remove content-length if transfer-encoding is sent (#4223)
  • 5dadff7 fix(http1): let a Connection close token win over a later keep-alive (#4201)
  • d1cd14e feat(http1): add max_header_size limit for server and client (#4183)
  • 714c7cf style(lib): address cast-possible-truncation clippy findings (#4192)
  • 0d47440 style(lib): mark partial Debug impls as non-exhaustive (#4218)
  • da3b1b1 style(lib): remove useless_borrows_in_formatting from the clippy allowlist (#...
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from ak5 as a code owner October 18, 2026 17:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/main/hyper-1.12.0 branch from 9a52a0c to 813649d Compare October 25, 2026 08:31
Bumps [hyper](https://github.com/hyperium/hyper) from 1.11.1 to 1.12.0.
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.11.1...v1.12.0)

---
updated-dependencies:
- dependency-name: hyper
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/main/hyper-1.12.0 branch from 813649d to 082ac9f Compare October 29, 2026 16:38
ak5 added a commit that referenced this pull request Oct 29, 2026
Reconcile Dependabot proposals #85, #87, #88, #91, #92, #93, #94 and #95 against the security audit. Preserve test utilities and explicit ChaCha key-state zeroization.

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@ak5 ak5 closed this Oct 29, 2026
@ak5
ak5 deleted the dependabot/cargo/main/hyper-1.12.0 branch October 29, 2026 16:46
@dependabot @github

dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant