Skip to content

chore(deps-dev): bump hpack from 4.1.0 to 4.2.0 - #1579

Merged
github-actions[bot] merged 1 commit into
chore/consolidate-dependabot-updatesfrom
dependabot/pip/hpack-4.2.0
Oct 15, 2026
Merged

github-actions[bot] merged 1 commit into
chore/consolidate-dependabot-updatesfrom
dependabot/pip/hpack-4.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps hpack from 4.1.0 to 4.2.0.

Changelog

Sourced from hpack's changelog.

4.2.0 (2026-06-22)

API Changes (Backward Incompatible)

  • Support for Python 3.9 has been removed.
  • Support for PyPy 3.9 has been removed.

API Changes (Backward Compatible)

  • Support for Python 3.14 has been added.

Bugfixes

  • Headers marked as sensitive will no longer log their value at DEBUG level. Instead a placeholder value of SENSITIVE_REDACTED is logged.
  • Fixed perfect match missed for headers with empty values.
  • Restricted variable integer decoding to uint32 to prevent run-away computation. With thanks to Hiroki Nishino_.

.. _Hiroki Nishino: https://github.com/tawAsh1

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner September 24, 2026 21:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 24, 2026
@github-actions
github-actions Bot enabled auto-merge September 24, 2026 21:28
@dependabot
dependabot Bot force-pushed the dependabot/pip/hpack-4.2.0 branch from c237214 to 60b85d5 Compare October 6, 2026 22:02
Bumps [hpack](https://github.com/python-hyper/hpack) from 4.1.0 to 4.2.0.
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](python-hyper/hpack@v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: hpack
  dependency-version: 4.2.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from main to chore/consolidate-dependabot-updates October 15, 2026 04:53
@dependabot
dependabot Bot force-pushed the dependabot/pip/hpack-4.2.0 branch from 60b85d5 to 47cc81a Compare October 15, 2026 04:54
@github-actions
github-actions Bot merged commit 04fe406 into chore/consolidate-dependabot-updates Oct 15, 2026
11 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/hpack-4.2.0 branch October 15, 2026 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants