dependabot[bot] opened a new pull request, #924: URL: https://github.com/apache/axis-axis2-java-core/pull/924
Bumps [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) from 5.4.4 to 5.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/httpcomponents-client/blob/master/RELEASE_NOTES.txt";>org.apache.httpcomponents.client5:httpclient5's changelog</a>.</em></p> <blockquote> <h2>Release 5.5</h2> <p>This is the first GA release in the 5.5 release series. This release finalizes the 5.5 APIs and adds several experimental features and improvements, such as request multiplexing over a shared HTTP/2 connection and the Classic API facade acting as a compatibility bridge between classic I/O client services and the asynchronous message transport used internally.</p> <p>Notable changes and features included in the 5.5 series:</p> <ul> <li> <p>Improved conformance to RFC 7616 (HTTP Digest Access Authentication).</p> </li> <li> <p>The connection pool implementation acts as a caching facade in front of a standard managed connection pool and shares already leased connections to multiplex message exchanges over active HTTP/2 connections. Experimental.</p> </li> <li> <p>Extended Auth API and improved authentication protocol logic to support mutual authentication.</p> </li> <li> <p>The Classic API facade now acts as a compatibility bridge between the classic I/O client services (based on the standard InputStream / OutputStream model) and the asynchronous message transport used internally. This is experimental.</p> </li> <li> <p>HTTP/2 support for the Fluent Facade (via Classic API facade). This is experimental.</p> </li> </ul> <p>Compatibility notes:</p> <ul> <li>As of this release, HttpClient does not automatically execute redirects if the original request manually added headers that are considered sensitive.</li> </ul> <h2>Change Log</h2> <ul> <li> <p>HTTPCLIENT-2367: Fixed NPE in InternalAbstractHttpAsyncClient by adding a null check for resolvedTarget (<a href="https://redirect.github.com/apache/httpcomponents-client/issues/634";>#634</a>). Contributed by Arturo Bernal <!-- raw HTML omitted --></p> </li> <li> <p>Fixed case of Cookie#HTTP_ONLY_ATTR Contributed by Finn Petersen <a href="mailto:f...@posteo.net";>f...@posteo.net</a></p> </li> <li> <p>Simplified ProtocolSwitchStrategy by leveraging ProtocolVersionParser (<a href="https://redirect.github.com/apache/httpcomponents-client/issues/627";>#627</a>). Contributed by Arturo Bernal <!-- raw HTML omitted --></p> </li> <li> <p>HTTPCLIENT-2364: Fixed incorrect re-binding of the upgraded SSL socket to the HTTP connection by the #upgrade method of the DefaultHttpClientConnectionOperator. Contributed by Oleg Kalnichevski <!-- raw HTML omitted --></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/httpcomponents-client/commit/b42e73cc93667f93def29479706f12ff5141a9d9";><code>b42e73c</code></a> HttpClient 5.5 release</li> <li><a href="https://github.com/apache/httpcomponents-client/commit/3061c34bf93da6470a9bd495b279cae6d676b79c";><code>3061c34</code></a> Updated release notes for HttpClient 5.5 release</li> <li><a href="https://github.com/apache/httpcomponents-client/commit/14a9208ad775032a7ab10ac26dae4aeb31c4b25e";><code>14a9208</code></a> Updated NOTICE to 2025</li> <li><a href="https://github.com/apache/httpcomponents-client/commit/4021b7c47914efaf9cf30b8d00bbd129295c0639";><code>4021b7c</code></a> Link text adjustment</li> <li><a href="https://github.com/apache/httpcomponents-client/commit/be441c1352615685df51c23b74cd061b5b8faa06";><code>be441c1</code></a> Update the GitHub Security page with a link to the new HttpComponents</li> <li><a href="https://github.com/apache/httpcomponents-client/commit/f5f9ae8b024c164351210d3cc8fb96858f6b859f";><code>f5f9ae8</code></a> HTTPCLIENT-2367 - Fix NPE in InternalAbstractHttpAsyncClient by adding null c...</li> <li><a href="https://github.com/apache/httpcomponents-client/commit/19c02789e811419a449e8cc7a74290b80428a9f8";><code>19c0278</code></a> Bump org.junit:junit-bom from 5.12.1 to 5.12.2 <a href="https://redirect.github.com/apache/httpcomponents-client/issues/632";>#632</a></li> <li><a href="https://github.com/apache/httpcomponents-client/commit/ef06a272f25ff401eb8a8853370d7bd743f70e16";><code>ef06a27</code></a> Bump org.junit:junit-bom from 5.12.1 to 5.12.2 (<a href="https://redirect.github.com/apache/httpcomponents-client/issues/632";>#632</a>)</li> <li><a href="https://github.com/apache/httpcomponents-client/commit/9bae3020efbcafecdeec366814cd3bd970e101c0";><code>9bae302</code></a> Fix case of Cookie.HTTP_ONLY_ATTR</li> <li><a href="https://github.com/apache/httpcomponents-client/commit/0ba6102e65d793d4b4106e5b7bfabef7ec2d0a66";><code>0ba6102</code></a> Simplify ProtocolSwitchStrategy by Leveraging ProtocolVersionParser (<a href="https://redirect.github.com/apache/httpcomponents-client/issues/627";>#627</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/httpcomponents-client/compare/rel/v5.4.4...rel/v5.5";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org
