Skip to content

Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5 - #476

Open
dependabot[bot] wants to merge 1 commit into
10.3.xfrom
dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.5
Open

dependabot[bot] wants to merge 1 commit into
10.3.xfrom
dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor

Bumps org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5.

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6.5

This maintenance release fixes several defects found since the previous release including the defect in the async Brotli decompression code that can cause the message exchange to hang indefinitely. It also upgrades HttpCore to version 5.4.4.

Change Log

  • Upgraded HttpCore to version 5.4.4. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay. Contributed by Matthias Kurz <m.kurz at irregular.at>

  • HTTPCLIENT-2432: Fixed connection-pool leak in ResponseEntityProxy#cleanup() when runtime #disconnectEndpoint throws an exception (#883). Contributed by Victor Alekseev

  • Decode punycode public suffixes in PublicSuffixMatcher#verify (#876). Contributed by Javid Khan

  • Fixed Brotli decompression hang with large input buffers. Contributed by Arturo Bernal

  • HTTP cache to treat malformed delta-seconds as absent. Contributed by Arturo Bernal Javid Khan

  • Bug-fix: ResponseCachingPolicy incorrectly applies neverCache1_1ResponsesWithQueryString config parameter. This config parameter and related functionality will be deprecated in the next feature release and removed in the future. Contributed by Oleg Kalnichevski

  • Removed invalid request version check from ResponseCachingPolicy. Contributed by Oleg Kalnichevski

  • Fixed resource leaking on error in AsyncCachingExec Contributed by Jeremie Bolduc <16137441+Jouramie at users.noreply.github.com>

Commits
  • e6970b4 HttpClient 5.6.5 release
  • d0ff6ec Updated release notes for HttpClient 5.6.5 release
  • 03a2abc Upgraded HttpCore to version 5.4.4
  • 7ed9d66 HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay
  • bd278a6 Improved connection expiry and eviction example
  • 02f11eb HTTPCLIENT-2432: fix connection-pool leak in ResponseEntityProxy.cleanup() wh...
  • 8e45f17 decode punycode public suffixes in PublicSuffixMatcher.verify (#876)
  • 6d8319a Fix Brotli decompression hang with large input buffers
  • 908ccc1 treat malformed delta-seconds as absent in deltaSeconds
  • 815043a Moved timeout and stale connection related integration tests into separate gr...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) from 5.6.4 to 5.6.5.
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.5/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.6.4...rel/v5.6.5)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 13, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants