Skip to content

chore(deps-dev): bump hpack from 4.1.0 to 4.2.0 - #1579

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/hpack-4.2.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/hpack-4.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps hpack from 4.1.0 to 4.2.0.

Changelog

Sourced from hpack's changelog.

4.2.0 (2026-06-22)

API Changes (Backward Incompatible)

  • Support for Python 3.9 has been removed.
  • Support for PyPy 3.9 has been removed.

API Changes (Backward Compatible)

  • Support for Python 3.14 has been added.

Bugfixes

  • Headers marked as sensitive will no longer log their value at DEBUG level. Instead a placeholder value of SENSITIVE_REDACTED is logged.
  • Fixed perfect match missed for headers with empty values.
  • Restricted variable integer decoding to uint32 to prevent run-away computation. With thanks to Hiroki Nishino_.

.. _Hiroki Nishino: https://github.com/tawAsh1

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner September 24, 2026 21:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 24, 2026
@github-actions
github-actions Bot enabled auto-merge September 24, 2026 21:28
Bumps [hpack](https://github.com/python-hyper/hpack) from 4.1.0 to 4.2.0.
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](python-hyper/hpack@v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: hpack
  dependency-version: 4.2.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/hpack-4.2.0 branch from c237214 to 60b85d5 Compare October 6, 2026 22:02

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants