chore(deps): update dependency hackney to v4.7.2 #62

Merged

Doridian merged 1 commit from renovate/hackney-4.x-lockfile into main

2026-07-17 07:58:43 -07:00

MaidFox commented

2026-07-17 02:07:26 -07:00

Member

This PR contains the following updates:

Package	Type	Update	Change
hackney (source)	prod	minor	`4.6.0` → `4.7.2`

Release Notes

benoitc/hackney (hackney)

`v4.7.2`

Compare Source

Bump quic to 1.7.1. A clean QUIC connection close (idle pooled HTTP/3 connections, orderly shutdown) no longer emits ERROR and CRASH reports from quic_h3_connection nor propagates an abnormal exit to the connection owner. This also removes the intermittent eunit group cancellation in the h3/wt test suites.

See NEWS.md for details. PR #913.

`v4.7.1`

Compare Source

Chunked decoding no longer fails with {error, invalid_chunk_size} when the CRLF terminating a chunk-size line is split across two socket reads (buffer ending on a lone \r). The parser now waits for the \n (#901).

A malformed chunk-size line or chunk terminator now fails cleanly with {error, invalid_chunk_size} or {error, poorly_formatted_chunked_size} instead of crashing the parser with a case_clause error.

See NEWS.md for details. PR #912.

`v4.7.0`

Compare Source

HTTP/2 request bodies larger than the peer's flow control window no longer fail with {error, send_buffer_full}. Body sends block until the server opens the window, bounded by the new send_timeout option (default 30000 ms, infinity allowed, nonblock restores the old fail-fast behavior). If the window never opens the request fails with {error, timeout} and the abandoned stream is reset so its buffered body does not linger on a shared connection. Applies to whole-body and streamed HTTP/2 request bodies; HTTP/1.1 and HTTP/3 are unchanged.

HTTP/2 async requests now deliver their response messages: the stream entry stored an internal reference where the delivery code expected the stream_to pid, so every async HTTP/2 response was silently dropped.

HTTP/2 {async, once} now honors stream_next/1 with the same contract as HTTP/1.1: status and headers eagerly, then one message per pull. once streams use h2 manual flow control, so a slow consumer keeps the peer's window closed and in-flight data stays bounded to one window.

Connections created with hackney:connect/4 and {pool, false} honor a {send_timeout, T} connect option; pooled connections keep the default and take the per-request option instead.

See NEWS.md for details. PR #911.

`v4.6.1`

Compare Source

Changed

Bump h2 to 0.11.0. It adds h2:peername/1, which returns the peer's {IpAddress, Port} for a live connection. Additive only; no behavior change for hackney.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [hackney](https://hex.pm/packages/hackney) ([source](https://github.com/benoitc/hackney)) | prod | minor | `4.6.0` → `4.7.2` | --- ### Release Notes <details> <summary>benoitc/hackney (hackney)</summary> ### [`v4.7.2`](https://github.com/benoitc/hackney/releases/tag/4.7.2) [Compare Source](https://github.com/benoitc/hackney/compare/4.7.1...4.7.2) Bump `quic` to 1.7.1. A clean QUIC connection close (idle pooled HTTP/3 connections, orderly shutdown) no longer emits ERROR and CRASH reports from `quic_h3_connection` nor propagates an abnormal exit to the connection owner. This also removes the intermittent eunit group cancellation in the h3/wt test suites. See NEWS.md for details. PR [#913](https://github.com/benoitc/hackney/issues/913). ### [`v4.7.1`](https://github.com/benoitc/hackney/releases/tag/4.7.1) [Compare Source](https://github.com/benoitc/hackney/compare/4.7.0...4.7.1) Chunked decoding no longer fails with `{error, invalid_chunk_size}` when the CRLF terminating a chunk-size line is split across two socket reads (buffer ending on a lone `\r`). The parser now waits for the `\n` ([#901](https://github.com/benoitc/hackney/issues/901)). A malformed chunk-size line or chunk terminator now fails cleanly with `{error, invalid_chunk_size}` or `{error, poorly_formatted_chunked_size}` instead of crashing the parser with a `case_clause` error. See NEWS.md for details. PR [#912](https://github.com/benoitc/hackney/issues/912). ### [`v4.7.0`](https://github.com/benoitc/hackney/releases/tag/4.7.0) [Compare Source](https://github.com/benoitc/hackney/compare/4.6.1...4.7.0) HTTP/2 request bodies larger than the peer's flow control window no longer fail with `{error, send_buffer_full}`. Body sends block until the server opens the window, bounded by the new `send_timeout` option (default 30000 ms, `infinity` allowed, `nonblock` restores the old fail-fast behavior). If the window never opens the request fails with `{error, timeout}` and the abandoned stream is reset so its buffered body does not linger on a shared connection. Applies to whole-body and streamed HTTP/2 request bodies; HTTP/1.1 and HTTP/3 are unchanged. HTTP/2 async requests now deliver their response messages: the stream entry stored an internal reference where the delivery code expected the `stream_to` pid, so every async HTTP/2 response was silently dropped. HTTP/2 `{async, once}` now honors `stream_next/1` with the same contract as HTTP/1.1: status and headers eagerly, then one message per pull. once streams use h2 manual flow control, so a slow consumer keeps the peer's window closed and in-flight data stays bounded to one window. Connections created with `hackney:connect/4` and `{pool, false}` honor a `{send_timeout, T}` connect option; pooled connections keep the default and take the per-request option instead. See NEWS.md for details. PR [#911](https://github.com/benoitc/hackney/issues/911). ### [`v4.6.1`](https://github.com/benoitc/hackney/releases/tag/4.6.1) [Compare Source](https://github.com/benoitc/hackney/compare/4.6.0...4.6.1) ##### Changed - Bump `h2` to 0.11.0. It adds `h2:peername/1`, which returns the peer's `{IpAddress, Port}` for a live connection. Additive only; no behavior change for hackney. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

MaidFox added 1 commit

2026-07-17 02:07:26 -07:00

chore(deps): update dependency hackney to v4.7.1

Lint / Lint (pull_request) Successful in 1m16s

Details

Nix check / check-nix (pull_request) Successful in 1m40s

Details

2afbfeac8f

MaidFox changed title from ~~chore(deps): update dependency hackney to v4.7.1~~ to chore(deps): update dependency hackney to v4.7.2

2026-07-17 03:07:28 -07:00