Skip to content

Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.2 to 5.4.4 - #123

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/org.apache.httpcomponents.core5-httpcore5-5.4.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/org.apache.httpcomponents.core5-httpcore5-5.4.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps org.apache.httpcomponents.core5:httpcore5 from 5.4.2 to 5.4.4.

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.4

This maintenance release optimizes HTTP/1.1 message buffer configuration and corrects the handling of asynchronous entity producer state resets after interrupted writes.

Change Log

  • HTTPCORE-800: Fixed hexadecimal encoding of control characters in HttpException messages. Contributed by Arturo Bernal

  • HTTPCORE-799: Corrected the handling of asynchronous entity producer state resets after interrupted writes. Contributed by Matthias Kurz <m.kurz at irregular.at>

  • Fixed URIBuilder encoding policy documentation and null reset behavior. Contributed by Praful Gupta

  • Increased the default HTTP/1.1 buffer size to 32 KiB. Contributed by Arturo Bernal

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Override with Http1Config.Builder.setMaxLineLength(int) and setMaxHeaderCount(int). Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake).

... (truncated)

Commits
  • d40892e HttpCore 5.4.4 release
  • 698b2b6 Updated release notes for HttpCore 5.4.4 release
  • 8ada43a HTTPCORE-800: Fix hexadecimal encoding of control characters
  • 9cb751e HTTPCORE-799: Reset async entity producer state after interrupted writes
  • e871fa0 Fix URIBuilder encoding policy documentation and null reset
  • 34542fc Increase default HTTP/1.1 buffer size to 32 KiB
  • a79f87e Add details to solve compatibility issues.
  • 93421d3 Upgraded HttpCore version to 5.4.4-SNAPSHOT
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core) from 5.4.2 to 5.4.4.
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.4.2...rel/v5.4.4)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants