We're currently pinning our installed version of pshtt to a specific commit, because it contains a fix that we needed to ensure accurate results on Secure the News, and there was a while between when the fix was committed and the pshtt maintainers created a new release.
Now the pshtt maintainers have released pshtt 0.1.6, which includes that fix and some others as well.
Notably, pshtt 0.1.6 upgrades the SSLyze dependency to 1.x, so we will have to make sure that transition is smooth.
We're currently pinning our installed version of pshtt to a specific commit, because it contains a fix that we needed to ensure accurate results on Secure the News, and there was a while between when the fix was committed and the pshtt maintainers created a new release.
Now the pshtt maintainers have released pshtt 0.1.6, which includes that fix and some others as well.
Notably, pshtt 0.1.6 upgrades the SSLyze dependency to 1.x, so we will have to make sure that transition is smooth.