Closed dependabot[bot] closed 3 months ago
Hi, any chance of merging this PR and releasing a new version? :)
Hi @francescopellegrini !
I can cut a new release no problem! I've been lagging behind my OSS projects...
But this specific issue I think shouldn't actually make a big difference. You can always depend and override on newer versions on your applications. Is there anything particularly gnarly with this one I am not aware?
Thanks!
Hi @victorolinasc , thank you for the swift response!
Yes, https://github.com/benoitc/hackney/issues/730 which affects some projects I'm working on: I cannot bump the deps because joken_jwks
requires v1.18
So, we've got a PR for updating this dep. I will update the lib and cut a release after that.
I haven't tried it yet but am curious if something like
{:hackney, "~> 1.20", override: true}
would work? I know it is suboptimal but it "should" work either way...
Also, you can pass a different adapter if you use other libraries. Just make sure to recompile things after that and it also should work. I will try to repro the issue to see what I am missing here...
Thanks a lot either way for bringing this up!
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version
or @dependabot ignore this minor version
. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore
condition with the desired update_types
to your config file.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Bumps hackney from 1.18.2 to 1.20.1.
Release notes
Sourced from hackney's releases.
Changelog
Sourced from hackney's changelog.
Commits
f190daf
bump 1.20.1f8b89cd
handle case where Length is undefinedaa95d66
regen docbed69b9
update todo and versions of erlang supported0821202
update changes8f758ea
bump to 1.20.06709e7a
Fix partial_pathencode to properly handle asterisk (*) (#720)870b6ad
Explicitly state max_connections and timeout defaults in docs (#688)992cc36
(feat) Support LF separators since rfc7230-3.5 allows for LF-only (#706)bbe73c8
remove rebar3 from supportDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show