dependabot[bot] opened a new pull request, #19226: URL: https://github.com/apache/pinot/pull/19226
Bumps [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) from 3.0.11 to 3.0.12. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/AsyncHttpClient/async-http-client/releases";>org.asynchttpclient:async-http-client's releases</a>.</em></p> <blockquote> <h2>AHC v3.0.12 Release</h2> <h2>What's Changed</h2> <ul> <li>Release v3.0.11 by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2198";>AsyncHttpClient/async-http-client#2198</a></li> <li>Reduce per-request allocation in ThreadSafeCookieStore.get() by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2201";>AsyncHttpClient/async-http-client#2201</a></li> <li>escape quote and crlf in multipart content-disposition values by <a href="https://github.com/jmestwa-coder";><code>@jmestwa-coder</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2203";>AsyncHttpClient/async-http-client#2203</a></li> <li>Avoid Uri reallocation in UriEncoder.encode() on the no-op path by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2204";>AsyncHttpClient/async-http-client#2204</a></li> <li>Reuse a per-thread UriParser scratch to avoid per-parse allocation by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2205";>AsyncHttpClient/async-http-client#2205</a></li> <li>Intern known request header names to static AsciiString by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2206";>AsyncHttpClient/async-http-client#2206</a></li> <li>Match HTTP/2 content-encoding with AsciiString constants instead of toLowerCase by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2207";>AsyncHttpClient/async-http-client#2207</a></li> <li>Improve CI Release Workflow by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2208";>AsyncHttpClient/async-http-client#2208</a></li> <li>Fall back to NIO instead of throwing when no native transport is available by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2209";>AsyncHttpClient/async-http-client#2209</a></li> <li>fail websocket handshake on invalid sec-websocket-accept by <a href="https://github.com/jmestwa-coder";><code>@jmestwa-coder</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2211";>AsyncHttpClient/async-http-client#2211</a></li> <li>Localize tests that depended on public endpoints by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2215";>AsyncHttpClient/async-http-client#2215</a></li> <li>[Performance] Raise default HTTP/2 initial window size to 16 MiB by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2213";>AsyncHttpClient/async-http-client#2213</a></li> <li>Add LoadBalance.ROUND_ROBIN for per-request IP round-robin by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2202";>AsyncHttpClient/async-http-client#2202</a></li> <li>Bump the dependencies group with 5 updates by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2222";>AsyncHttpClient/async-http-client#2222</a></li> <li>Bump actions/checkout from 6 to 7 in the actions group by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2223";>AsyncHttpClient/async-http-client#2223</a></li> <li>use SecureRandom for digest auth cnonce by <a href="https://github.com/jmestwa-coder";><code>@jmestwa-coder</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2220";>AsyncHttpClient/async-http-client#2220</a></li> <li>skip origin Authorization on CONNECT proxy request by <a href="https://github.com/madib06ops";><code>@madib06ops</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2234";>AsyncHttpClient/async-http-client#2234</a></li> <li>escape quoted-string params in Digest Authorization header by <a href="https://github.com/madib06ops";><code>@madib06ops</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2236";>AsyncHttpClient/async-http-client#2236</a></li> <li>stop config realm leaking to a cross-origin redirect target by <a href="https://github.com/jmestwa-coder";><code>@jmestwa-coder</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2224";>AsyncHttpClient/async-http-client#2224</a></li> <li>fail SCRAM exchange on invalid ServerSignature by <a href="https://github.com/madib06ops";><code>@madib06ops</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2235";>AsyncHttpClient/async-http-client#2235</a></li> <li>normalize the scheme case in the Uri constructor by <a href="https://github.com/madib06ops";><code>@madib06ops</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2239";>AsyncHttpClient/async-http-client#2239</a></li> <li>Fix LICENSE file for Apache 2.0 by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2242";>AsyncHttpClient/async-http-client#2242</a></li> <li>Enable HTTPS endpoint identification in JsseSslEngineFactory by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2243";>AsyncHttpClient/async-http-client#2243</a></li> <li>Reject CR/LF in raw multipart part-header fields by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2244";>AsyncHttpClient/async-http-client#2244</a></li> <li>Read InputStream bodies straight into the buffer, no staging array by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2233";>AsyncHttpClient/async-http-client#2233</a></li> <li>Bind origin Kerberos/SPNEGO token to the origin service, not the proxy by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2245";>AsyncHttpClient/async-http-client#2245</a></li> <li>Avoid per-connect lock on shared Bootstrap options map (<a href="https://redirect.github.com/AsyncHttpClient/async-http-client/issues/2218";>#2218</a>) by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2219";>AsyncHttpClient/async-http-client#2219</a></li> <li>Make idle-channel pool cleaner reap in a single O(n) pass by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2225";>AsyncHttpClient/async-http-client#2225</a></li> <li>Mirror Netty option-failure semantics in applyChannelOptions by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2247";>AsyncHttpClient/async-http-client#2247</a></li> <li>Round robin issue (<a href="https://redirect.github.com/AsyncHttpClient/async-http-client/issues/2214";>#2214</a>) by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2217";>AsyncHttpClient/async-http-client#2217</a></li> <li>Release the round-robin HTTP/2 permit when a connection starts draining by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2248";>AsyncHttpClient/async-http-client#2248</a></li> <li>Harden the O(n) idle-pool reap tests: stable idle window + kept-after-removed coverage by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2249";>AsyncHttpClient/async-http-client#2249</a></li> <li>Wait for a sibling HTTP/2 connection without blocking the caller thread by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2227";>AsyncHttpClient/async-http-client#2227</a></li> <li>Generalize failed-IP cooldown across all LoadBalance modes and make it configurable by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2221";>AsyncHttpClient/async-http-client#2221</a></li> <li>Never block the event loop acquiring a connection permit by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2226";>AsyncHttpClient/async-http-client#2226</a></li> <li>Harden the HTTP/2 connection-waiter registry against waiter failures and shutdown races by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2251";>AsyncHttpClient/async-http-client#2251</a></li> <li>No blocking acquire on event loop by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2252";>AsyncHttpClient/async-http-client#2252</a></li> <li>Schedule the round-robin request timeout once, not twice by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2229";>AsyncHttpClient/async-http-client#2229</a></li> <li>Harden failed-IP cooldown config and add DEFAULT-mode test by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2253";>AsyncHttpClient/async-http-client#2253</a></li> <li>Fail fast on empty round-robin address resolution by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2254";>AsyncHttpClient/async-http-client#2254</a></li> <li>Signal STOP on the finishing multipart chunk, not an extra empty read by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2232";>AsyncHttpClient/async-http-client#2232</a></li> <li>Reuse the per-request partition key instead of recomputing it by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2231";>AsyncHttpClient/async-http-client#2231</a></li> <li>Document that BodyState.STOP may carry the final bytes by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2255";>AsyncHttpClient/async-http-client#2255</a></li> <li>Avoid the per-request rotation copy in round-robin address selection by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2230";>AsyncHttpClient/async-http-client#2230</a></li> <li>Cap cookies retained per domain (RFC 6265 5.3) by <a href="https://github.com/pavel-ptashyts";><code>@pavel-ptashyts</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2256";>AsyncHttpClient/async-http-client#2256</a></li> <li>Mark the round-robin RotatedView RandomAccess and cover its bounds check by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2257";>AsyncHttpClient/async-http-client#2257</a></li> <li>Add AI Agent Guidelines to AGENTS.md by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2268";>AsyncHttpClient/async-http-client#2268</a></li> <li>Support HTTP/2 after proxy CONNECT by <a href="https://github.com/rampreeth";><code>@rampreeth</code></a> in <a href="https://redirect.github.com/AsyncHttpClient/async-http-client/pull/2250";>AsyncHttpClient/async-http-client#2250</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/c07038b44e5206375662b46859672e8f1df9f05a";><code>c07038b</code></a> [maven-release-plugin] prepare release async-http-client-project-3.0.12</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/496feb3962f96c755e413f00925df78031b9e2e4";><code>496feb3</code></a> Restore the -SNAPSHOT suffix on main</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/26c2eca030835a1c70ecb61f4d6499ca00bfa0bc";><code>26c2eca</code></a> Release v3.0.12 (<a href="https://redirect.github.com/AsyncHttpClient/async-http-client/issues/2306";>#2306</a>)</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/0801680d289feea8b6e517b0174d9d06eb16b13d";><code>0801680</code></a> Never pool a socket whose CONNECT the proxy refused</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/d1f45ab87b15b7d12f50db79408593a651f46c1e";><code>d1f45ab</code></a> Decode quoted-pairs when reading auth-params back off the wire</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/75e8c660e0e1454f188a480623a1c74194e51a70";><code>75e8c66</code></a> Refuse a 407 on a tunnel inherited from the connection pool</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/d84ca5f81af7804b6ebedd26e2be9b1d1a594672";><code>d84ca5f</code></a> Record the removal of the stale-parameter rspauth helper for revapi</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/6c5c751dcdfdd15feb055e00f2ddd0798ed6c65f";><code>6c5c751</code></a> Insert the tunnel SSL handler without assuming an inflater</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/be439b2ec773d12d61914c238d3e8eeaa6f0ba21";><code>be439b2</code></a> Stop answering the origin's 407 with the proxy's credentials</li> <li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/7e1acdee51686a11653b002aa28f5b3fa220c1b2";><code>7e1acde</code></a> Re-arm tunnelEstablished whenever a CONNECT is attached</li> <li>Additional commits viewable in <a href="https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-3.0.11...async-http-client-project-3.0.12";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
