Skip to content

Comments

build(deps): bump org.apache.httpcomponents.core5:httpcore5 from 5.3.6 to 5.4.1#8320

Open
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/maven/org.apache.httpcomponents.core5-httpcore5-5.4.1
Open

build(deps): bump org.apache.httpcomponents.core5:httpcore5 from 5.3.6 to 5.4.1#8320
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/maven/org.apache.httpcomponents.core5-httpcore5-5.4.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 23, 2026

Bumps org.apache.httpcomponents.core5:httpcore5 from 5.3.6 to 5.4.1.

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.1

This maintenance release fixes a latency regression in the async transport caused by TCP_NODELAY failing to be set. Several other bugs have also been fixed affecting connection management, HTTP/2 exception handling and propagation, and so forth.

Change Log

  • Regression: Ensure TCP-specific socket options are set correctly in the async transport. Contributed by Ryan Schmitt

  • Bug fix: Prevent integer overflow in LaxConnPool so that negative numbers are not reported in the thread pool statistics. Contributed by Ryan Schmitt

  • Bug fix: Loop over and close expired connections in LaxConnPool instead of returning them. Contributed by Ryan Schmitt

  • Bug fix: Respect the PoolReusePolicy.FIFO in StrictConnPool. Contributed by Ryan Schmitt

  • Bug fix: Corrected exception propagation in protocol negotiators' exception handling code. Contributed by Oleg Kalnichevski

  • Bug fix: Fix SOCKS handshake to fail on EOF. (#604) Contributed by Arturo Bernal

  • Bug fix: Handle CancelledKeyException thrown by abort method of the H2 stream. Contributed by Oleg Kalnichevski

  • Bug fix: Fix race condition in ComplexCancellable. Contributed by Ryan Schmitt

  • Bug fix: In MonitoringResponseOutOfOrderStrategy, always perform a blocking read to check for data. Contributed by Ryan Schmitt

  • Bug fix: Corrected exception propagation to individual H2 streams in case of an unexpected error with the H2 connection. Contributed by Oleg Kalnichevski

  • Regression: Restored SocketSupport and marked it deprecated. Contributed by Oleg Kalnichevski

... (truncated)

Commits
  • c728dd8 HttpCore 5.4.1 release
  • b5e2b02 Update release notes for HttpCore 5.4.1 release
  • 17ce37a Ensure TCP-specific socket options are set
  • a33904a LaxConnPool: Prevent integer overflow in getTotalStats()
  • 92dbfea LaxConnPool: Loop over expired connections
  • 0d9d1aa StrictConnPool: Fix FIFO implementation
  • 7230a04 Bug fix: Corrected exception propagation in protocol negotiators exception ha...
  • 2b8615d Fix SOCKS handshake to fail on EOF. (#604)
  • 5d96deb Bug fix: Handle CancelledKeyException thrown by abort method of the H2 stream
  • 15e9de4 ComplexCancellable: Fix race condition
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core) from 5.3.6 to 5.4.1.
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.1/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.6...rel/v5.4.1)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants