Bump hyper from 1.8.1 to 1.9.0 #527

Merged
dependabot[bot] merged 1 commit from dependabot/cargo/hyper-1.9.0 into main 2026-04-06 19:45:11 +00:00
dependabot[bot] commented 2026-04-06 06:37:12 +00:00 (Migrated from github.com)

Bumps hyper from 1.8.1 to 1.9.0.

Release notes

Sourced from hyper's releases.

v1.9.0

Features

  • client:
  • error: add 'Error::is_parse_version_h2' method (393c77c7)
  • http1: add UpgradeableConnection::into_parts (e21205cf)

Bug Fixes

  • ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
  • http1:
  • http2:
    • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
    • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Refactors and chores

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.9.0 (2026-03-31)

Bug Fixes

  • ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
  • http1:
  • http2:
    • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
    • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Features

  • client:
  • error: add 'Error::is_parse_version_h2' method (393c77c7)
  • http1: add UpgradeableConnection::into_parts (e21205cf)
Commits
  • 0d6c7d5 v1.9.0
  • e21205c feat(http1): add UpgradeableConnection::into_parts
  • 393c77c feat(error): add 'Error::is_parse_version_h2' method
  • 5b17a69 fix(http2): cancel sending client request body on response future drop (#4042)
  • 7211ec2 fix(http1): allow keep-alive for chunked requests with trailers (#4043)
  • d51cb71 feat(client): expose HTTP/2 current max stream count (#4026)
  • 28e73cc fix(ffi): validate null pointers before dereferencing in request/response fun...
  • e13e783 docs(client): fix HTTP/2 max concurrent stream link to spec (#4037)
  • 8ba9008 chore(dependencies): drop pin-utils dependency (#4023)
  • 5778745 feat(client): add HTTP/2 max_local_error_reset_streams option (#4021)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [hyper](https://github.com/hyperium/hyper) from 1.8.1 to 1.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hyperium/hyper/releases">hyper's releases</a>.</em></p> <blockquote> <h2>v1.9.0</h2> <h2>Features</h2> <ul> <li><strong>client:</strong> <ul> <li>expose HTTP/2 current max stream count (<a href="https://redirect.github.com/hyperium/hyper/issues/4026">#4026</a>) (<a href="https://github.com/hyperium/hyper/commit/d51cb71569bbca7927b3828ef11e3bec4fa97eb4">d51cb715</a>)</li> <li>add HTTP/2 <code>max_local_error_reset_streams</code> option (<a href="https://redirect.github.com/hyperium/hyper/issues/4021">#4021</a>) (<a href="https://github.com/hyperium/hyper/commit/577874591cae246dfb2d72d7140d794ac2fa605a">57787459</a>)</li> </ul> </li> <li><strong>error:</strong> add 'Error::is_parse_version_h2' method (<a href="https://github.com/hyperium/hyper/commit/393c77c71138ff6e33d7089deac770a3f3f1436b">393c77c7</a>)</li> <li><strong>http1:</strong> add UpgradeableConnection::into_parts (<a href="https://github.com/hyperium/hyper/commit/e21205cfe4066edbcddc56150d963dabbc7d3ec4">e21205cf</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><strong>ffi:</strong> validate null pointers before dereferencing in request/response functions (<a href="https://redirect.github.com/hyperium/hyper/issues/4038">#4038</a> (<a href="https://github.com/hyperium/hyper/commit/28e73ccd230cff8d7e5b5880ce2ab5fb8ced36be">28e73ccd</a>)</li> <li><strong>http1:</strong> <ul> <li>allow keep-alive for chunked requests with trailers (<a href="https://redirect.github.com/hyperium/hyper/issues/4043">#4043</a>) (<a href="https://github.com/hyperium/hyper/commit/7211ec25eff2ea6ee783817fee2a221d4eb2ed03">7211ec25</a>, closes <a href="https://redirect.github.com/hyperium/hyper/issues/4044">#4044</a>)</li> <li>use case-insensitive matching for trailer fields (<a href="https://redirect.github.com/hyperium/hyper/issues/4011">#4011</a>) (<a href="https://github.com/hyperium/hyper/commit/3b344cac9f96a9365409086dde51d06aa797ffc3">3b344cac</a>, closes <a href="https://redirect.github.com/hyperium/hyper/issues/4010">#4010</a>)</li> <li>use httparse config for Servers (<a href="https://redirect.github.com/hyperium/hyper/issues/4002">#4002</a>) (<a href="https://github.com/hyperium/hyper/commit/bcb8ec576619650d3388604e6c246829e7be133a">bcb8ec57</a>, closes <a href="https://redirect.github.com/hyperium/hyper/issues/3923">#3923</a>)</li> </ul> </li> <li><strong>http2:</strong> <ul> <li>cancel sending client request body on response future drop (<a href="https://redirect.github.com/hyperium/hyper/issues/4042">#4042</a>) (<a href="https://github.com/hyperium/hyper/commit/5b17a69ebcf969471c1a19b25ed2cb81299d1be6">5b17a69e</a>, closes <a href="https://redirect.github.com/hyperium/hyper/issues/4040">#4040</a>)</li> <li>non-utf8 char in Connection header may cause panic when calling to_str (<a href="https://redirect.github.com/hyperium/hyper/issues/4019">#4019</a>) (<a href="https://github.com/hyperium/hyper/commit/c36ca8a5c50e4a05a78aa3e158f13456ee674fb1">c36ca8a5</a>)</li> </ul> </li> </ul> <h2>Refactors and chores</h2> <ul> <li>docs(error): add more information about is_incomplete_message by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/3978">hyperium/hyper#3978</a></li> <li>Run cargo-audit in CI to check for known vulnerabilities in dependencies. by <a href="https://github.com/f0rki"><code>@​f0rki</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/3246">hyperium/hyper#3246</a></li> <li>refactor(http1): simplify match of Token parse error by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/3981">hyperium/hyper#3981</a></li> <li>refactor(http1): use saturating_sub instead of manual impl by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/3983">hyperium/hyper#3983</a></li> <li>refactor(http1): replace many args of Chunked::step with struct by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/3982">hyperium/hyper#3982</a></li> <li>docs: fix comment in <code>put_slice()</code> by <a href="https://github.com/coryan"><code>@​coryan</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/3986">hyperium/hyper#3986</a></li> <li>test(lib): fix unused warnings due to feature gating test imports by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/3997">hyperium/hyper#3997</a></li> <li>docs: improve Read trait and ReadBufCursor documentation by <a href="https://github.com/majiayu000"><code>@​majiayu000</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4000">hyperium/hyper#4000</a></li> <li>fix: use h1 parser config when parsing server req by <a href="https://github.com/0xPoe"><code>@​0xPoe</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4002">hyperium/hyper#4002</a></li> <li>test(server): fix flaky disable_keep_alive_mid_request by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4009">hyperium/hyper#4009</a></li> <li>chore(ci): update to actions/checkout@v6 by <a href="https://github.com/tottoto"><code>@​tottoto</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4005">hyperium/hyper#4005</a></li> <li>chore(ci): update to cargo-check-external-types 0.4.0 by <a href="https://github.com/tottoto"><code>@​tottoto</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4006">hyperium/hyper#4006</a></li> <li>update copyright year to 2026 by <a href="https://github.com/jasmyhigh"><code>@​jasmyhigh</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4007">hyperium/hyper#4007</a></li> <li>refactor: avoid unwrap examples by <a href="https://github.com/0xPoe"><code>@​0xPoe</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4001">hyperium/hyper#4001</a></li> <li>fix(http1): use case-insensitive matching for trailer fields by <a href="https://github.com/HueCodes"><code>@​HueCodes</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4011">hyperium/hyper#4011</a></li> <li>chore: convert bug report template to GitHub form by <a href="https://github.com/njg7194"><code>@​njg7194</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4015">hyperium/hyper#4015</a></li> <li>chore(ci): force toml mode in yq selecting msrv by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4020">hyperium/hyper#4020</a></li> <li>fix: non-utf8 char may cause panic when calling to_str by <a href="https://github.com/cuiweixie"><code>@​cuiweixie</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4019">hyperium/hyper#4019</a></li> <li>feat(http2/client): add <code>max_local_error_reset_streams</code> option by <a href="https://github.com/ffuugoo"><code>@​ffuugoo</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4021">hyperium/hyper#4021</a></li> <li>chore: drop pin-utils dependency by <a href="https://github.com/tottoto"><code>@​tottoto</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4023">hyperium/hyper#4023</a></li> <li>[minor] doc: Fix HTTP/2 max concurrent stream link by <a href="https://github.com/dentiny"><code>@​dentiny</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4037">hyperium/hyper#4037</a></li> <li>fix(ffi): validate null pointers before dereferencing in request/resp… by <a href="https://github.com/DhruvaD1"><code>@​DhruvaD1</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4038">hyperium/hyper#4038</a></li> <li>h2: expose current max stream count by <a href="https://github.com/howardjohn"><code>@​howardjohn</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4026">hyperium/hyper#4026</a></li> <li>fix(http1): allow keep-alive for chunked requests with trailers by <a href="https://github.com/wi-adam"><code>@​wi-adam</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4043">hyperium/hyper#4043</a></li> <li>fix(http2): cancel pipe_task and send RST_STREAM on response future drop by <a href="https://github.com/mmishra100"><code>@​mmishra100</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/4042">hyperium/hyper#4042</a></li> <li>Add APIs to allow switching an HTTP1 connection to HTTP2 if H2 preface is seen by <a href="https://github.com/pborzenkov"><code>@​pborzenkov</code></a> in <a href="https://redirect.github.com/hyperium/hyper/pull/3996">hyperium/hyper#3996</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hyperium/hyper/blob/master/CHANGELOG.md">hyper's changelog</a>.</em></p> <blockquote> <h2>v1.9.0 (2026-03-31)</h2> <h4>Bug Fixes</h4> <ul> <li><strong>ffi:</strong> validate null pointers before dereferencing in request/response functions (<a href="https://redirect.github.com/hyperium/hyper/issues/4038">#4038</a> (<a href="https://github.com/hyperium/hyper/commit/28e73ccd230cff8d7e5b5880ce2ab5fb8ced36be">28e73ccd</a>)</li> <li><strong>http1:</strong> <ul> <li>allow keep-alive for chunked requests with trailers (<a href="https://redirect.github.com/hyperium/hyper/issues/4043">#4043</a>) (<a href="https://github.com/hyperium/hyper/commit/7211ec25eff2ea6ee783817fee2a221d4eb2ed03">7211ec25</a>, closes <a href="https://redirect.github.com/hyperium/hyper/issues/4044">#4044</a>)</li> <li>use case-insensitive matching for trailer fields (<a href="https://redirect.github.com/hyperium/hyper/issues/4011">#4011</a>) (<a href="https://github.com/hyperium/hyper/commit/3b344cac9f96a9365409086dde51d06aa797ffc3">3b344cac</a>, closes <a href="https://redirect.github.com/hyperium/hyper/issues/4010">#4010</a>)</li> <li>use httparse config for Servers (<a href="https://redirect.github.com/hyperium/hyper/issues/4002">#4002</a>) (<a href="https://github.com/hyperium/hyper/commit/bcb8ec576619650d3388604e6c246829e7be133a">bcb8ec57</a>, closes <a href="https://redirect.github.com/hyperium/hyper/issues/3923">#3923</a>)</li> </ul> </li> <li><strong>http2:</strong> <ul> <li>cancel sending client request body on response future drop (<a href="https://redirect.github.com/hyperium/hyper/issues/4042">#4042</a>) (<a href="https://github.com/hyperium/hyper/commit/5b17a69ebcf969471c1a19b25ed2cb81299d1be6">5b17a69e</a>, closes <a href="https://redirect.github.com/hyperium/hyper/issues/4040">#4040</a>)</li> <li>non-utf8 char in Connection header may cause panic when calling to_str (<a href="https://redirect.github.com/hyperium/hyper/issues/4019">#4019</a>) (<a href="https://github.com/hyperium/hyper/commit/c36ca8a5c50e4a05a78aa3e158f13456ee674fb1">c36ca8a5</a>)</li> </ul> </li> </ul> <h4>Features</h4> <ul> <li><strong>client:</strong> <ul> <li>expose HTTP/2 current max stream count (<a href="https://redirect.github.com/hyperium/hyper/issues/4026">#4026</a>) (<a href="https://github.com/hyperium/hyper/commit/d51cb71569bbca7927b3828ef11e3bec4fa97eb4">d51cb715</a>)</li> <li>add HTTP/2 <code>max_local_error_reset_streams</code> option (<a href="https://redirect.github.com/hyperium/hyper/issues/4021">#4021</a>) (<a href="https://github.com/hyperium/hyper/commit/577874591cae246dfb2d72d7140d794ac2fa605a">57787459</a>)</li> </ul> </li> <li><strong>error:</strong> add 'Error::is_parse_version_h2' method (<a href="https://github.com/hyperium/hyper/commit/393c77c71138ff6e33d7089deac770a3f3f1436b">393c77c7</a>)</li> <li><strong>http1:</strong> add UpgradeableConnection::into_parts (<a href="https://github.com/hyperium/hyper/commit/e21205cfe4066edbcddc56150d963dabbc7d3ec4">e21205cf</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hyperium/hyper/commit/0d6c7d5469baa09e2fb127ee3758a79b3271a4f0"><code>0d6c7d5</code></a> v1.9.0</li> <li><a href="https://github.com/hyperium/hyper/commit/e21205cfe4066edbcddc56150d963dabbc7d3ec4"><code>e21205c</code></a> feat(http1): add UpgradeableConnection::into_parts</li> <li><a href="https://github.com/hyperium/hyper/commit/393c77c71138ff6e33d7089deac770a3f3f1436b"><code>393c77c</code></a> feat(error): add 'Error::is_parse_version_h2' method</li> <li><a href="https://github.com/hyperium/hyper/commit/5b17a69ebcf969471c1a19b25ed2cb81299d1be6"><code>5b17a69</code></a> fix(http2): cancel sending client request body on response future drop (<a href="https://redirect.github.com/hyperium/hyper/issues/4042">#4042</a>)</li> <li><a href="https://github.com/hyperium/hyper/commit/7211ec25eff2ea6ee783817fee2a221d4eb2ed03"><code>7211ec2</code></a> fix(http1): allow keep-alive for chunked requests with trailers (<a href="https://redirect.github.com/hyperium/hyper/issues/4043">#4043</a>)</li> <li><a href="https://github.com/hyperium/hyper/commit/d51cb71569bbca7927b3828ef11e3bec4fa97eb4"><code>d51cb71</code></a> feat(client): expose HTTP/2 current max stream count (<a href="https://redirect.github.com/hyperium/hyper/issues/4026">#4026</a>)</li> <li><a href="https://github.com/hyperium/hyper/commit/28e73ccd230cff8d7e5b5880ce2ab5fb8ced36be"><code>28e73cc</code></a> fix(ffi): validate null pointers before dereferencing in request/response fun...</li> <li><a href="https://github.com/hyperium/hyper/commit/e13e783927d429fc03038fe512eeb4d379cf1a70"><code>e13e783</code></a> docs(client): fix HTTP/2 max concurrent stream link to spec (<a href="https://redirect.github.com/hyperium/hyper/issues/4037">#4037</a>)</li> <li><a href="https://github.com/hyperium/hyper/commit/8ba900853b0f619b165e8530fc8c310bc13e056b"><code>8ba9008</code></a> chore(dependencies): drop pin-utils dependency (<a href="https://redirect.github.com/hyperium/hyper/issues/4023">#4023</a>)</li> <li><a href="https://github.com/hyperium/hyper/commit/577874591cae246dfb2d72d7140d794ac2fa605a"><code>5778745</code></a> feat(client): add HTTP/2 <code>max_local_error_reset_streams</code> option (<a href="https://redirect.github.com/hyperium/hyper/issues/4021">#4021</a>)</li> <li>Additional commits viewable in <a href="https://github.com/hyperium/hyper/compare/v1.8.1...v1.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hyper&package-manager=cargo&previous-version=1.8.1&new-version=1.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Sign in to join this conversation.
No description provided.