Timeouts encountered while reading a request body will now result in a 408 Request Timeout being returned to the client by way of a Bandit.HTTPError
being raised. Previously, a :more tuple was returned (#385, thanks
@martosaur!)
1.5.6 (1 Aug 2024)
Fixes
Improve handling of the end of stream condition for HTTP/2 requests that send
a body which isn't read by the Plug (#387, thanks @fekle!)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the production-dependencies group with 5 updates in the / directory:
1.7.7
1.7.8
1.5.5
1.5.7
1.4.3
1.4.4
0.18.0
0.19.0
0.5.4
0.5.6
Updates
absinthe
from 1.7.7 to 1.7.8Changelog
Sourced from absinthe's changelog.
Commits
f4a930c
changelog0e0c495
version bump84d6efa
Merge pull request #1326 from absinthe-graphql/fix-1325353a366
Ensure the pipeline modifier is loaded before we try the function_exported? callUpdates
bandit
from 1.5.5 to 1.5.7Changelog
Sourced from bandit's changelog.
Commits
9342545
Version bump to 1.5.7ffdfee9
Dialyzer fixupd8056ec
Expose body read timeouts as 408 Request Timeout errors (#385)af19424
Version bump to 1.5.65cd0ae9
Read data during stream shutdown to ensure we update expected content-length ...dc84294
Bump ex_doc from 0.34.1 to 0.34.2 (#377)d02559e
Bump hpax from 0.2.0 to 1.0.0 (#383)4d2d126
Bump req from 0.5.1 to 0.5.4 (#382)85420ce
Auto rerun on failed tests849fff3
Revert "Bump req from 0.5.1 to 0.5.2 (#376)"Updates
jason
from 1.4.3 to 1.4.4Changelog
Sourced from jason's changelog.
Commits
926d2ac
Bump 1.4.46c1b99e
Raise if trying to decode decimals without decimal9517f56
Remove unneeded workarounds for xref warnings433f93d
Fix warnings by conditionally compiling Decimal supporteb1e92a
Bump 1.4.33ffa13a
Fix derive with _ keyUpdates
postgrex
from 0.18.0 to 0.19.0Changelog
Sourced from postgrex's changelog.
Commits
Updates
req
from 0.5.4 to 0.5.6Release notes
Sourced from req's releases.
Changelog
Sourced from req's changelog.
Commits
99b4d10
Release v0.5.637ed548
Fix supporting Elixir v1.1335aec22
Update Telsa URL (#402)fbdd3ac
Release v0.5.53f843dd
encode_body
: Support%File.Stream{}
from other nodes in:form_multipart
507ebd1
encode_body
: Support%File.Stream{}
in:form_multipart
d7906dc
put_aws_sigv4
: Fix handling?name
(no value)a01b032
put_aws_sigv4
: Fix service detection on empty host7e164e0
put_aws_sigv4
: Raise on no :access_key_id/:secret_access_key/:service4273a81
handle_http_errors
should run beforeverify_checksum
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show