Skip to content

chore(deps): bump hpack from 4.1.0 to 4.2.0 in /lockfiles/py314#1298

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/lockfiles/py314/hpack-4.2.0
Jun 26, 2026
Merged

chore(deps): bump hpack from 4.1.0 to 4.2.0 in /lockfiles/py314#1298
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/lockfiles/py314/hpack-4.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026

Copy link
Copy Markdown
Contributor

Bumps hpack from 4.1.0 to 4.2.0.

Changelog

Sourced from hpack's changelog.

4.2.0 (2026-06-22)

API Changes (Backward Incompatible)

  • Support for Python 3.9 has been removed.
  • Support for PyPy 3.9 has been removed.

API Changes (Backward Compatible)

  • Support for Python 3.14 has been added.

Bugfixes

  • Headers marked as sensitive will no longer log their value at DEBUG level. Instead a placeholder value of SENSITIVE_REDACTED is logged.
  • Fixed perfect match missed for headers with empty values.
  • Restricted variable integer decoding to uint32 to prevent run-away computation. With thanks to Hiroki Nishino_.

.. _Hiroki Nishino: https://github.com/tawAsh1

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 26, 2026
Bumps [hpack](https://github.com/python-hyper/hpack) from 4.1.0 to 4.2.0.
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](python-hyper/hpack@v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: hpack
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/lockfiles/py314/hpack-4.2.0 branch from 16998a8 to 2108d1b Compare June 26, 2026 05:14
@github-actions github-actions Bot merged commit 1156f76 into main Jun 26, 2026
4 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/lockfiles/py314/hpack-4.2.0 branch June 26, 2026 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants