Skip to content

Bump the maven group across 12 directories with 1 update - #3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-f32ba363c8
Open

Bump the maven group across 12 directories with 1 update#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-f32ba363c8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown

Bumps the maven group with 1 update in the / directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /extensions directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast-archunit-rules directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast-build-utils directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast-it directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast-spring directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast-spring-boot-autoconfiguration directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast-spring-tests directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast-sql directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /hazelcast-tpc-engine directory: org.apache.httpcomponents.core5:httpcore5.
Bumps the maven group with 1 update in the /modulepath-tests directory: org.apache.httpcomponents.core5:httpcore5.

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.3

This maintenance release fixes several defects and regression reported sicne the previous release includin a regression in backpressure handling of async TLS sessions introduced in version 5.3.3.

Change Log

  • HTTPCORE-796: abort redirected requests during the expect-continue handshake the same way as errors. Contributed by Oleg Kalnichevski

  • Fixed regression in backpressure handling of async TLS sessions. Reverts HTTPCORE-775. Contributed by Ryan Schmitt

  • Use max line length of 8192 and max header count of 100 for incoming HTTP/1 messages by default. Contributed by Oleg Kalnichevski

  • Enforce configured HPACK header list size limit upon initialization of HTTP/2 connections. Contributed by Arturo Bernal

  • HTTPCORE-774: fixed a race condition caused by concurrent update of the connection input window to the max value (ported from 5.3.x; omitted by mistake). Contributed by Oleg Kalnichevski

  • Ensure async data consumers can avoid NPE if they have been canceled or released from another thread at the same with concurrent data processing. Contributed by Oleg Kalnichevski

  • Fixed connection pool lease timeout race potentially causing pool entry leak (#649). Contributed by Arturo Bernal

Release 5.4.2

This maintenance release fixes a bug in the lax connection pool where expired connection cleanup fails to update the number of available connections, potentially causing the client to eventually deadlock. Two other fixes are included as well, one for a memory leak in the implementation of HTTP/2 stream priority and one in the parseLenient method, which should ignore illegal character names.

Change Log

... (truncated)

Commits
  • d5d0c20 HttpCore 5.4.3 release
  • 172871d Updated release notes for HttpCore 5.4.3 release
  • 496c2f5 HTTPCORE-796: abort redirected requests during the expect-continue handshake ...
  • 1391b7a SSLIOSession: Fix regression in backpressure handling
  • d96a00f Use max line length of 8192 and max header count of 100 for incoming HTTP/1 m...
  • 1ea1239 Enforce configured HPACK header list size limit on initialization
  • af61c1e HTTPCORE-774: fixed a race condition caused by concurrent update of the conne...
  • 0363ff3 Ensure async data consumers can avoid NPE if they have been canceled / releas...
  • 024b199 Fix lease timeout race to prevent pool entry leak (#649)
  • 25c7352 Upgraded HttpCore version to 5.4.3-SNAPSHOT
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the maven group across 12 directories with 1 update
6379c3a 
Bumps the maven group with 1 update in the / directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /extensions directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast-archunit-rules directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast-build-utils directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast-it directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast-spring directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast-spring-boot-autoconfiguration directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast-spring-tests directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast-sql directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /hazelcast-tpc-engine directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).
Bumps the maven group with 1 update in the /modulepath-tests directory: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).


Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.5 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.5...rel/v5.4.3)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 19, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 19, 2026 03:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants