Skip to content

Bump org.asynchttpclient:async-http-client from 2.12.4 to 3.0.14 - #1418

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.asynchttpclient-async-http-client-3.0.14
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.asynchttpclient-async-http-client-3.0.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown

Bumps org.asynchttpclient:async-http-client from 2.12.4 to 3.0.14.

Release notes

Sourced from org.asynchttpclient:async-http-client's releases.

AHC v3.0.14 Release

What's Changed

Security Advisory

GHSA-v2j5-22fr-j62r GHSA-qjr7-w8pj-pmv9 GHSA-x8v2-478q-2hvg GHSA-p2jm-6hj6-9rjg GHSA-2jwh-9rmr-j4xf

New Contributors

Full Changelog: AsyncHttpClient/async-http-client@async-http-client-project-3.0.13...async-http-client-project-3.0.14

... (truncated)

Commits
  • bec30bb [maven-release-plugin] prepare release async-http-client-project-3.0.14
  • b61637f Bound how far a compressed WebSocket message may inflate
  • 6ec7ee4 Keep plaintext responses from setting or overlaying Secure cookies
  • d3bb4d6 Scope pooled connections by authenticated identity, including proxies
  • fd97636 Keep a caller-set Cookie header when the jar contributes
  • 7dc5bbc Enforce public suffix rules by A-label, locale, host-only, IP
  • c1a6063 Keep a caller's cookie when the store refuses Set-Cookie (#2349)
  • 5f970a4 Treat Domain=. as a host-only cookie (#2350)
  • faccbab Fix/auth retry stale cookies (#2351)
  • 0ace000 Close with 1009 when a WebSocket message is too big (#2352)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) from 2.12.4 to 3.0.14.
- [Release notes](https://github.com/AsyncHttpClient/async-http-client/releases)
- [Commits](AsyncHttpClient/async-http-client@async-http-client-project-2.12.4...async-http-client-project-3.0.14)

---
updated-dependencies:
- dependency-name: org.asynchttpclient:async-http-client
  dependency-version: 3.0.14
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants