Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2021

Bumps httpclient5 from 5.0 to 5.0.3.

Changelog

Sourced from httpclient5's changelog.

Release 5.0.3

This release upgrades HttpCore to the latest version, improves conformance to RFC 7235 (Hypertext Transfer Protocol (HTTP/1.1): Authentication) and addresses a number of issues found since 5.0.2 release.

Changelog:

  • PR #270: Master try w res and more.
    • Use try-with-resources.
    • Use Arrays.fill().
    • Add missing @​override.
    • Simplify if/else.
    • Remove redundant modifiers. …
    • Remove redundant returns. Contributed by Gary Gregory

Release 5.0.2

This release upgrades HttpCore to the latest version, improves conformance to RFC 7235 (Hypertext Transfer Protocol (HTTP/1.1): Authentication) and addresses a number of issues found since 5.0.1 release.

Changelog:

  • HTTPCLIENT-2116: Incorrect request message composition when routing requests via a proxy. Contributed by Oleg Kalnichevski

  • PoolingAsyncClientConnectionManager incorrectly emits Ping commands to HTTP/1.1 endpoints (#255). Contributed by 滕杰1

  • HTTPCLIENT-2115: HttpAsyncClientBuilder and H2AsyncClientBuilder fail to take replaceExecInterceptor() into account. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2112: AbstractMultipartFormat respects ByteBuffer.arrayOffset (#253). Contributed by Carter Kozak

  • Avoid updating Content-Length header in a 304 response. Contributed by Dirk Henselin

  • HTTPCLIENT-2105: Async clients incorrectly handle redirects of requests with enclosed

... (truncated)

Commits
  • 3734aaa HttpClient 5.0.3 release
  • 2328b78 Updated release notes for HttpClient 5.0.3 release
  • 0ba8edc HTTPCLIENT-2118: Corrected PoolingHttpClientConnectionManager javadocs
  • 894234a Incorrect handling of malformed authority component by URIUtils#extractHost
  • 9bc49cc Fixed 'JdbcRowSetImpl is internal proprietary API and may be removed in a fut...
  • 594e5fc Upgraded HttpClient version to 5.0.3-SNAPSHOT
  • d0c76ef Updated release notes for HttpClient 5.0.2 release
  • c1de3c4 Move public suffix list to generate-resources and apache-release profile
  • e249e56 Add project modules to dependency management
  • e13e4ff Unify JXR and Surefire report config
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 29, 2021
@bsideup bsideup added this to the next milestone Apr 1, 2021
@bsideup bsideup merged commit 09b4c96 into master Apr 1, 2021
@dependabot dependabot bot deleted the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.0.3 branch April 1, 2021 08:46
@tkrah
Copy link
Contributor

tkrah commented Jun 29, 2021

Just a note - this change will have this one:

apache/httpcomponents-core@fd7c0cd

integrated (5.0.2 release of httpcomponents-core) and all socket timeouts by default are now set to 3 minutes instead of infinite.
With long running operations (meaning something more than 3 minutes which is not that uncommon for long db queries or file operations with very big files) - this will fail now with a SocketTimeoutException which may be unexpected for such a minor change / release.

bsideup added a commit that referenced this pull request Sep 9, 2021
@bsideup
Copy link
Member

bsideup commented Sep 9, 2021

@tkrah thanks! This is indeed a very unexpected change coming from a patch release. I just submitted #1702 to revert it back to zero - we will consider changing it in future major releases.

chwehrli added a commit to chwehrli/sysdig-secure-plugin that referenced this pull request Nov 2, 2021
This will (probably) fix a timeout issue when sending analysis result to secure backend and waiting for reply.
See docker-java/docker-java#1590
chwehrli added a commit to chwehrli/sysdig-secure-plugin that referenced this pull request Nov 2, 2021
This will (probably) fix a timeout issue when sending analysis result to secure backend and waiting for reply.
See docker-java/docker-java#1590
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants