This is an automated email from the ASF dual-hosted git repository.
Jefffrey pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-rs.git
The following commit(s) were added to refs/heads/main by this push:
new 3dcd14ae6f chore(deps): bump http from 1.4.0 to 1.4.2 (#10191)
3dcd14ae6f is described below
commit 3dcd14ae6fd6ab78fe1431372348212d6916127c
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue Jun 23 13:18:18 2026 +1000
chore(deps): bump http from 1.4.0 to 1.4.2 (#10191)
Bumps [http](https://github.com/hyperium/http) from 1.4.0 to 1.4.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hyperium/http/releases";>http's
releases</a>.</em></p>
<blockquote>
<h2>v1.4.1</h2>
<h2>tl;dr</h2>
<ul>
<li>Fix <code>PathAndQuery::from_static()</code> and
<code>from_shared()</code> to reject inputs that do not start with
<code>/</code>.</li>
<li>Fix <code>Extend</code> for <code>HeaderMap</code> to clamp max size
hint and not overflow.</li>
<li>Fix <code>header::IntoIter</code> that could use-after-free if the
generic value type could panic on drop.</li>
<li>Fix <code>header::{IterMut, ValuesIterMut}</code> to not violate
stacked borrows.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(header): fix clippy::assign_op_pattern by <a
href="https://github.com/rxc-amzn";><code>@rxc-amzn</code></a> in <a
href="https://redirect.github.com/hyperium/http/pull/806";>hyperium/http#806</a></li>
<li>ci: pin itoa in msrv job by <a
href="https://github.com/seanmonstar";><code>@seanmonstar</code></a> in
<a
href="https://redirect.github.com/hyperium/http/pull/813";>hyperium/http#813</a></li>
<li>Remove unnecessary explicit lifetimes by <a
href="https://github.com/jplatte";><code>@jplatte</code></a> in <a
href="https://redirect.github.com/hyperium/http/pull/815";>hyperium/http#815</a></li>
<li>chore(ci): update to actions/checkout@v6 by <a
href="https://github.com/tottoto";><code>@tottoto</code></a> in <a
href="https://redirect.github.com/hyperium/http/pull/819";>hyperium/http#819</a></li>
<li>tests: update to rand 0.10 by <a
href="https://github.com/tottoto";><code>@tottoto</code></a> in <a
href="https://redirect.github.com/hyperium/http/pull/818";>hyperium/http#818</a></li>
<li>refactor: Remove usage of float instruction by <a
href="https://github.com/AurelienFT";><code>@AurelienFT</code></a> in <a
href="https://redirect.github.com/hyperium/http/pull/823";>hyperium/http#823</a></li>
<li>refactor(uri): consolidate PathAndQuery::from_shared and from_static
by <a
href="https://github.com/seanmonstar";><code>@seanmonstar</code></a> in
<a
href="https://redirect.github.com/hyperium/http/pull/825";>hyperium/http#825</a></li>
<li>fix(uri): reject Path::from_shared/from_static if doesn't start with
slash by <a
href="https://github.com/seanmonstar";><code>@seanmonstar</code></a> in
<a
href="https://redirect.github.com/hyperium/http/pull/826";>hyperium/http#826</a></li>
<li>Rephrase comment by <a
href="https://github.com/daalfox";><code>@daalfox</code></a> in <a
href="https://redirect.github.com/hyperium/http/pull/827";>hyperium/http#827</a></li>
<li>Fix typo in request builder docs by <a
href="https://github.com/vleksis";><code>@vleksis</code></a> in <a
href="https://redirect.github.com/hyperium/http/pull/831";>hyperium/http#831</a></li>
<li>fix: clamp Extend size hint so HeaderMap reserve cannot overflow by
<a href="https://github.com/SAY-5";><code>@SAY-5</code></a> in <a
href="https://redirect.github.com/hyperium/http/pull/833";>hyperium/http#833</a></li>
<li>fix(headers): fix stacked borrows for IterMut/ValuesIterMut by <a
href="https://github.com/seanmonstar";><code>@seanmonstar</code></a> in
<a
href="https://redirect.github.com/hyperium/http/pull/837";>hyperium/http#837</a></li>
<li>fix(header): use a set_len guard in IntoIter drop by <a
href="https://github.com/seanmonstar";><code>@seanmonstar</code></a> in
<a
href="https://redirect.github.com/hyperium/http/pull/838";>hyperium/http#838</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/rxc-amzn";><code>@rxc-amzn</code></a>
made their first contribution in <a
href="https://redirect.github.com/hyperium/http/pull/806";>hyperium/http#806</a></li>
<li><a
href="https://github.com/AurelienFT";><code>@AurelienFT</code></a> made
their first contribution in <a
href="https://redirect.github.com/hyperium/http/pull/823";>hyperium/http#823</a></li>
<li><a href="https://github.com/daalfox";><code>@daalfox</code></a> made
their first contribution in <a
href="https://redirect.github.com/hyperium/http/pull/827";>hyperium/http#827</a></li>
<li><a href="https://github.com/vleksis";><code>@vleksis</code></a> made
their first contribution in <a
href="https://redirect.github.com/hyperium/http/pull/831";>hyperium/http#831</a></li>
<li><a href="https://github.com/SAY-5";><code>@SAY-5</code></a> made
their first contribution in <a
href="https://redirect.github.com/hyperium/http/pull/833";>hyperium/http#833</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/hyperium/http/compare/v1.4.0...v1.4.1";>https://github.com/hyperium/http/compare/v1.4.0...v1.4.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hyperium/http/blob/master/CHANGELOG.md";>http's
changelog</a>.</em></p>
<blockquote>
<h1>1.4.2 (June 8, 2026)</h1>
<ul>
<li>Fix <code>uri::Builder</code> to allow <code>"*"</code> as
the path when scheme and authority are also set, used in HTTP/2
requests.</li>
<li>Fix <code>Uri</code> to properly reject <code>DEL</code>
characters.</li>
</ul>
<h1>1.4.1 (May 25, 2026)</h1>
<ul>
<li>Fix <code>PathAndQuery::from_static()</code> and
<code>from_shared()</code> to reject inputs that do not start with
<code>/</code>.</li>
<li>Fix <code>Extend</code> for <code>HeaderMap</code> to clamp max size
hint and not overflow.</li>
<li>Fix <code>header::IntoIter</code> that could use-after-free if the
generic value type could panic on drop.</li>
<li>Fix <code>header::{IterMut, ValuesIterMut}</code> to not violate
stacked borrows.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hyperium/http/commit/82db5b8af1e3939678fee88f3c57b72fee7e3a7b";><code>82db5b8</code></a>
v1.4.2</li>
<li><a
href="https://github.com/hyperium/http/commit/a9cdbf8aaf87198020389ba14f92d9784740c91c";><code>a9cdbf8</code></a>
fix(uri): reject DEL character (<a
href="https://redirect.github.com/hyperium/http/issues/842";>#842</a>)</li>
<li><a
href="https://github.com/hyperium/http/commit/df75ca3ffe2821df665aa0962d62312691942b11";><code>df75ca3</code></a>
fix(uri): allow STAR paths with scheme/auth (<a
href="https://redirect.github.com/hyperium/http/issues/843";>#843</a>)</li>
<li><a
href="https://github.com/hyperium/http/commit/ec3f8ce1bb571223d5e738c6dd7a749670f821dc";><code>ec3f8ce</code></a>
feat(method): impl PartialOrd + Ord (<a
href="https://redirect.github.com/hyperium/http/issues/840";>#840</a>)</li>
<li><a
href="https://github.com/hyperium/http/commit/a24c968ba3b53c4c9953164235664cab9e8fa315";><code>a24c968</code></a>
v1.4.1</li>
<li><a
href="https://github.com/hyperium/http/commit/bc3b0441be3065fc2653e9b3b1392c0fed873482";><code>bc3b044</code></a>
fix(header): use a set_len guard in IntoIter drop (<a
href="https://redirect.github.com/hyperium/http/issues/838";>#838</a>)</li>
<li><a
href="https://github.com/hyperium/http/commit/1b968dc519c49b1922bc546c95f33900e684f4ab";><code>1b968dc</code></a>
fix(header): fix stacked borrows for IterMut/ValuesIterMut (<a
href="https://redirect.github.com/hyperium/http/issues/837";>#837</a>)</li>
<li><a
href="https://github.com/hyperium/http/commit/6e2dd42a15d4c1711baa2191bd1d15022e1e2e9c";><code>6e2dd42</code></a>
fix: clamp Extend size hint so HeaderMap reserve cannot overflow (<a
href="https://redirect.github.com/hyperium/http/issues/833";>#833</a>)</li>
<li><a
href="https://github.com/hyperium/http/commit/68e0abb052a243a5530ad4c404cb0b169a7ecb4a";><code>68e0abb</code></a>
docs: fix typo in request builder docs (<a
href="https://redirect.github.com/hyperium/http/issues/831";>#831</a>)</li>
<li><a
href="https://github.com/hyperium/http/commit/29dd307b3e382a4343fc917fa3c41125ac50dfb8";><code>29dd307</code></a>
docs(extensions): rephrase internal comment (<a
href="https://redirect.github.com/hyperium/http/issues/827";>#827</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/hyperium/http/compare/v1.4.0...v1.4.2";>compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
Cargo.lock | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index 0732782b42..2175011a03 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1548,9 +1548,9 @@ checksum =
"7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
[[package]]
name = "http"
-version = "1.4.0"
+version = "1.4.2"
source = "registry+https://github.com/rust-lang/crates.io-index";
-checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+checksum = "6970f50e31d6fc17d3fa27329444bfa74e196cf62e95052a3f6fee181dba6425"
dependencies = [
"bytes",
"itoa",
