search

tabular-io / iceberg-rest-image

Simple project to expose a catalog over REST using a Java catalog backend
Apache License 2.0
100 stars 40 forks source link

Bump org.apache.httpcomponents.core5:httpcore5 from 5.1.4 to 5.2.2 #34

Closed dependabot[bot] closed 11 months ago

dependabot[bot] commented 1 year ago

Bumps org.apache.httpcomponents.core5:httpcore5 from 5.1.4 to 5.2.2.

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.2.2

This is a maintenance release that corrects several defects discovered since release 5.2.1 including a major defect that can cause HTTP/2 connections allocate excessive amount of memory for their output frame buffer if the opposite endpoint transmits a high value of MAX_FRAME_SIZE in its settings.

Change Log

  • HTTPCORE-752: I/O reactor fails to initialize socket timeout for TLS connections correctly resulting in infinite (no timeout) by default. Contributed by Oleg Kalnichevski

  • HTTPCORE-751: H2 protocol handler always resizes the output frame buffer to the remove MAX_FRAME_SIZE instead of doing so only then the remote MAX_FRAME_SIZE is lesser than the current MAX_FRAME_SIZE (partially reverts HTTPCORE-707). Contributed by Oleg Kalnichevski

  • HTTPCORE-750: Fixed a defect causing AbstractIOSessionPool to create multiple connections under high load at initialization time due to a race condition. Contributed by Oleg Kalnichevski

  • Handle UnsupportedOperationException in getApplicationProtocol. Contributed by Arturo Bernal

  • HTTPCORE-742: BasicHttpRequest#setUri does not correctly reset internal state. Contributed by Oleg Kalnichevski

  • HTTPCORE-733: BasicAsyncEntityProducer sends an extra trailing 0 with UTF-8 encoded content Contributed by Oleg Kalnichevski

  • Do not duplicate the HttpMessage instance variable slot in subclasses of AbstractMessageWrapper. Contributed by Gary Gregory

Release 5.2.1

This is a maintenance release that corrects several minor defects discovered since release 5.2 and fixes SOCKS proxy protocol support in the async transport.

Change Log

  • HTTPCLIENT-2248: Fixed broken TLS over SOCKS. Contributed by Oleg Kalnichevski

... (truncated)

Commits
  • 8cd0f01 HttpCore 5.2.2 release
  • f73dd56 Updated release notes for HttpCore 5.2.2 release
  • 6f82d1c HTTPCORE-752: I/O reactor fails to initialize socket timeout for TLS connecti...
  • 4f5bbaf Bump rxjava from 3.1.5 to 3.1.6
  • 3ab9d95 HTTPCORE-751: H2 protocol handler always resizes the output frame buffer to t...
  • a091322 HTTPCORE-750: Fixed a defect causing AbstractIOSessionPool to create multiple...
  • 1b9871c Handle UnsupportedOperationException in getApplicationProtocol.
  • 9f8cdb1 [HTTPCORE-745] ContentType.create(String, NameValuePair...) should make (#404)
  • 0311043 Bump junit-bom from 5.9.1 to 5.9.3
  • 7376337 HTTPCORE-742: BasicHttpRequest#setUri does not correctly reset internal state
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot[bot] commented 11 months ago

Superseded by #51.