chore(deps): bump the http-upgrade group across 1 directory with 15 updates - #26427
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
no-changelog
github-actions
Bot
added
the
domain: core
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 5b4c87b829
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| tonic-health = { version = "0.14", default-features = false } | ||
| tonic-reflection = { version = "0.14", default-features = false, features = ["server"] } |
There was a problem hiding this comment.
With the default api/enable-api-client features, these crates resolve tonic-health and tonic-reflection against tonic 0.14 while the application still uses tonic 0.11, so HealthClient::new cannot accept the 0.11 Channel and the 0.14 health/reflection services cannot be added to the 0.11 server in src/api/grpc_server.rs. The prost upgrade compounds this because tonic-build 0.11 expects prost-build 0.12's Config, while the build scripts now pass the distinct 0.14 type. Upgrade tonic/tonic-build and their generated-code integration together, or retain the previous health/reflection/prost versions.
Useful? React with 👍 / 👎.
| headers = { version = "0.4.1", default-features = false } | ||
| http = { version = "1.5.0", default-features = false } |
There was a problem hiding this comment.
hyper-proxy 0.9.1 still exposes http 0.2 and headers 0.3 types, but vector-core/src/config/proxy.rs now imports the 1.x types from these direct dependencies. Consequently build_proxy produces an http 0.2 URI/error for Proxy::new while declaring an http 1.x InvalidUri, and its authorization header is likewise incompatible with Proxy::set_header; vector-core will not compile until hyper-proxy or these dependencies are aligned.
Useful? React with 👍 / 👎.
| tokio-stream = { version = "0.1.18", default-features = false } | ||
| tokio-test = "0.4.5" | ||
| tokio-tungstenite = { version = "0.20.1", default-features = false } | ||
| tokio-tungstenite = { version = "0.30.0", default-features = false } |
There was a problem hiding this comment.
When sinks-websocket_server is enabled, tungstenite 0.30's handshake request and response types use http 1.x, while src/sinks/websocket_server/sink.rs still assigns the crate's http 0.2 StatusCode and src/common/websocket.rs passes its request to Auth::apply, which accepts an http 0.2 request. These type mismatches prevent the WebSocket components from compiling; migrate those call sites to the existing HTTP 1 helpers or keep tokio-tungstenite on 0.20.
Useful? React with 👍 / 👎.
| rdkafka = { version = "0.39.0", default-features = false } | ||
| regex = { version = "1.12.3", default-features = false, features = ["std", "perf"] } | ||
| reqwest = { version = "0.11", features = ["json"] } | ||
| reqwest = { version = "0.13", features = ["json"] } |
There was a problem hiding this comment.
The reqwest 0.13 default feature set is unified with the existing reqwest_13 alias and causes the lockfile to add aws-lc-rs/aws-lc-sys and enable AWS-LC in rustls and quinn. This defeats the explicit policy at Cargo.toml:344-347 of avoiding AWS-LC alongside Vector's ring-based users, adding another native crypto build and its CMake toolchain burden to standard builds; preserve the required native-TLS/no-provider feature selection when upgrading reqwest.
Useful? React with 👍 / 👎.
| [[package]] | ||
| name = "aws-lc-rs" | ||
| version = "1.18.1" |
There was a problem hiding this comment.
The updated graph adds distributable dependencies including aws-lc-rs, aws-lc-sys, dunce, and fs_extra, but none is present in LICENSE-3rdparty.csv. Regenerate and commit the license inventory so packaged distributions include the required notices and check-licenses does not reject the dependency update.
AGENTS.md reference: AGENTS.md:L133-L139
Useful? React with 👍 / 👎.
…pdates Bumps the http-upgrade group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tower-http](https://github.com/tower-rs/tower-http) | `0.4.4` | `0.6.8` | | [headers](https://github.com/hyperium/headers) | `0.3.9` | `0.4.1` | | [http](https://github.com/hyperium/http) | `0.2.12` | `1.5.0` | | [http-serde](https://gitlab.com/kornelski/http-serde) | `1.1.3` | `2.1.1` | | [http-body](https://github.com/hyperium/http-body) | `0.4.6` | `1.0.1` | | [hyper-openssl](https://github.com/sfackler/hyper-openssl) | `0.9.2` | `0.10.2` | | [warp](https://github.com/seanmonstar/warp) | `0.3.7` | `0.4.3` | | [prost](https://github.com/tokio-rs/prost) | `0.12.6` | `0.14.3` | | [prost-build](https://github.com/tokio-rs/prost) | `0.12.6` | `0.14.3` | | [prost-reflect](https://github.com/andrewhickman/prost-reflect) | `0.14.7` | `0.16.5` | | [prost-types](https://github.com/tokio-rs/prost) | `0.12.6` | `0.14.3` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.11.26` | `0.13.4` | | [tokio-tungstenite](https://github.com/snapview/tokio-tungstenite) | `0.20.1` | `0.30.0` | | [tonic-health](https://github.com/hyperium/tonic) | `0.11.0` | `0.14.5` | | [tonic-reflection](https://github.com/hyperium/tonic) | `0.11.0` | `0.14.5` | Updates `tower-http` from 0.4.4 to 0.6.8 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.4.4...tower-http-0.6.8) Updates `headers` from 0.3.9 to 0.4.1 - [Release notes](https://github.com/hyperium/headers/releases) - [Commits](hyperium/headers@headers-v0.3.9...headers-v0.4.1) Updates `http` from 0.2.12 to 1.5.0 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v0.2.12...v1.5.0) Updates `http-serde` from 1.1.3 to 2.1.1 - [Commits](https://gitlab.com/kornelski/http-serde/compare/v1.1.3...v2.1.1) Updates `http-body` from 0.4.6 to 1.0.1 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@v0.4.6...v1.0.1) Updates `hyper-openssl` from 0.9.2 to 0.10.2 - [Release notes](https://github.com/sfackler/hyper-openssl/releases) - [Changelog](https://github.com/sfackler/hyper-openssl/blob/master/CHANGELOG.md) - [Commits](sfackler/hyper-openssl@0.9.2...0.10.2) Updates `warp` from 0.3.7 to 0.4.3 - [Release notes](https://github.com/seanmonstar/warp/releases) - [Changelog](https://github.com/seanmonstar/warp/blob/master/CHANGELOG.md) - [Commits](seanmonstar/warp@v0.3.7...v0.4.3) Updates `prost` from 0.12.6 to 0.14.3 - [Release notes](https://github.com/tokio-rs/prost/releases) - [Changelog](https://github.com/tokio-rs/prost/blob/master/CHANGELOG.md) - [Commits](tokio-rs/prost@v0.12.6...v0.14.3) Updates `prost-build` from 0.12.6 to 0.14.3 - [Release notes](https://github.com/tokio-rs/prost/releases) - [Changelog](https://github.com/tokio-rs/prost/blob/master/CHANGELOG.md) - [Commits](tokio-rs/prost@v0.12.6...v0.14.3) Updates `prost-reflect` from 0.14.7 to 0.16.5 - [Release notes](https://github.com/andrewhickman/prost-reflect/releases) - [Changelog](https://github.com/andrewhickman/prost-reflect/blob/main/CHANGELOG.md) - [Commits](https://github.com/andrewhickman/prost-reflect/commits/prost-reflect-v0.16.5) Updates `prost-types` from 0.12.6 to 0.14.3 - [Release notes](https://github.com/tokio-rs/prost/releases) - [Changelog](https://github.com/tokio-rs/prost/blob/master/CHANGELOG.md) - [Commits](tokio-rs/prost@v0.12.6...v0.14.3) Updates `reqwest` from 0.11.26 to 0.13.4 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.11.26...v0.13.4) Updates `tokio-tungstenite` from 0.20.1 to 0.30.0 - [Changelog](https://github.com/snapview/tokio-tungstenite/blob/master/CHANGELOG.md) - [Commits](snapview/tokio-tungstenite@v0.20.1...v0.30.0) Updates `tonic-health` from 0.11.0 to 0.14.5 - [Release notes](https://github.com/hyperium/tonic/releases) - [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md) - [Commits](grpc/grpc-rust@v0.11.0...v0.14.5) Updates `tonic-reflection` from 0.11.0 to 0.14.5 - [Release notes](https://github.com/hyperium/tonic/releases) - [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md) - [Commits](grpc/grpc-rust@v0.11.0...v0.14.5) --- updated-dependencies: - dependency-name: headers dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: http dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: http-upgrade - dependency-name: http-body dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: http-upgrade - dependency-name: http-serde dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: http-upgrade - dependency-name: hyper-openssl dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: prost dependency-version: 0.14.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: prost-build dependency-version: 0.14.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: prost-reflect dependency-version: 0.16.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: prost-types dependency-version: 0.14.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: reqwest dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: tokio-tungstenite dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: tonic-health dependency-version: 0.14.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: tonic-reflection dependency-version: 0.14.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: tower-http dependency-version: 0.6.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade - dependency-name: warp dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: http-upgrade ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
5b4c87b to
71fe43e
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 71fe43e45a
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| tracing.workspace = true | ||
| url = { version = "2.5.4", default-features = false, features = ["serde"] } | ||
| http = { version = "0.2.9", default-features = false } | ||
| http = { version = "1.5.0", default-features = false } |
There was a problem hiding this comment.
Upgrading only this dependency moves vector-config's sole Configurable for StatusCode implementation in lib/vector-config/src/http.rs onto the http 1.x type, while the main crate still depends on http 0.2 and uses that version for fields such as SimpleHttpConfig::response_code. Consequently, enabling the default sources-http_server feature leaves the field's 0.2 StatusCode without a Configurable implementation and the component configuration no longer compiles; retain 0.2 here or provide implementations for both versions until callers migrate.
Useful? React with 👍 / 👎.
Bumps the http-upgrade group with 15 updates in the / directory:
0.4.40.6.80.3.90.4.10.2.121.5.01.1.32.1.10.4.61.0.10.9.20.10.20.3.70.4.30.12.60.14.30.12.60.14.30.14.70.16.50.12.60.14.30.11.260.13.40.20.10.30.00.11.00.14.50.11.00.14.5Updates
tower-httpfrom 0.4.4 to 0.6.8Release notes
Sourced from tower-http's releases.
... (truncated)
Commits
33166c8v0.6.86680160Fix deprecated lints (#608)81b8231ci: Switch cargo-public-api-crates to cargo-check-external-types (#613)1fb0144ci: pin tracing in msrv job (#622)1fe4c09fix(decompression): disablemultiple_membersoption for gzip decoder (#621)3bf1ba7v0.6.7723ca9afix(decompression): Suppress EOF errors caused by decompressing empty body (#...8ab9f82chore(ci): use newer cargo-public-api-crates job (#619)7cfdf76doc: Replace doc_auto_cfg with doc_cfg (#609)50beeafAdd support for custom status code in TimeoutLayer (#599)Updates
headersfrom 0.3.9 to 0.4.1Release notes
Sourced from headers's releases.
Commits
8db1b78headers:0.4.112fb1d7feat: Add aimpl From\<http::HeaderName> for Vary(#210)66371a0feat: const::from_static()constructors (#209)d425d3cupdate copyright year1a8eac3doc: Remove empty line in document743d3b9fix(tests): Fix test compile error with nightly feature682d0a6refactor: Remove needless lifetime879d2d4Add methods formust-revalidateflag toCacheControl0fbde12docs(readme): add badge to readme2298faaAddContentEncoding::zstdUpdates
httpfrom 0.2.12 to 1.5.0Release notes
Sourced from http's releases.
... (truncated)
Changelog
Sourced from http's changelog.
... (truncated)
Commits
16fc9a7v1.5.0e559023fix(uri): enforce max length in PathAndQuery (#856)2178e17perf(header,uri): faster value validation, URI parse/format, map inserts (#852)03c8cd7fix(uri): allow empty paths in uri::Builder (#853)bb8705bfeat(method): add QUERY method (#798)82db5b8v1.4.2a9cdbf8fix(uri): reject DEL character (#842)df75ca3fix(uri): allow STAR paths with scheme/auth (#843)ec3f8cefeat(method): impl PartialOrd + Ord (#840)a24c968v1.4.1Updates
http-serdefrom 1.1.3 to 2.1.1Commits
c2403fbBump2d3c46dBetter support for binary headers070ade2Option<T> support456702aBump5c6cb53Test rmp8d1e7a5DRY headermap6174494Reduce StatusVisitor size16cd601Don't rely on Debug display212c87cRe-export httpb196b2fBumpUpdates
http-bodyfrom 0.4.6 to 1.0.1Commits
69e80ebv1.0.117451a8update year of license482c349http-body-util: v0.1.260c6383refactor(ci): small refactoring (#113)23212f1feat(util): add BodyDataStream (#117)fe8aa7erefactor: replace deprecated std::u64 with primitive type6a85548include license files in published crates46c54fbchore(util): resolve duplicate importb5c769dhttp-body-util: v0.1.176b19e6perf: improve BufList::copy_to_bytes if len == remainingUpdates
hyper-opensslfrom 0.9.2 to 0.10.2Changelog
Sourced from hyper-openssl's changelog.
Commits
81243faRelease v0.10.29add639Merge pull request #42 from sfackler/maybe-uninite53744bDon't lie about buffer initialization4acbe09Release v0.10.14265f58Merge pull request #41 from sfackler/fix-client-legacya6ed62cFix builda7399c9Enable all features on docs.rs665188cRelease v0.10.0f65a11cMerge pull request #39 from sfackler/hyper-189d45bbasdfUpdates
warpfrom 0.3.7 to 0.4.3Release notes
Sourced from warp's releases.
Changelog
Sourced from warp's changelog.
Commits
707866cv0.4.3418393ddeps: update to tokio-tungstenite 0.29 (#1155)d7f6fddfix(cors): don't error out if no request-method header in OPTIONS (#1158)de1ccd8feat: reexposeInfo::remote_addr()in log filter (#1151)468f56bProvides warp::reply::stream (#1148)7e86991feat: reimplementwarp::addr::remote()filter (#1149)3449d3dfeat: implFrom\<&'static [u8]>for Body (#1144)dbb0d33deps: update to tokio-tungstenite 0.28 (#1141)e7e2bb8ci: update to actions/checkout@v5 (#1145)eaf00efdocs: replace doc_auto_cfg config with doc_cfg (#1142)Updates
prostfrom 0.12.6 to 0.14.3Changelog
Sourced from prost's changelog.
... (truncated)
Commits
fafa97fchore: remove protobuf submodule and leverage cmake for it (#1389)e0643e2release 0.14.35595b61fix: Add backDecodeError::new(#1382)e42dcadBufix: Name::full_name() is correct for empty packages (#1386)107153fbuild(deps): update pulldown-cmark-to-cmark requirement from 21 to 22 (#1384)3fc7003build(deps): bump actions/upload-artifact from 5 to 6 (#1381)33f8721fix some forgotten prost import paths (#1385)efb0755chore: Release version 0.14.2 (#1372)91a093ftest(derive_copy): Allow dead code (#1362)2c22c59build(deps): bump actions/checkout from 5 to 6 (#1370)Updates
prost-buildfrom 0.12.6 to 0.14.3Changelog
Sourced from prost-build's changelog.
... (truncated)
Commits
fafa97fchore: remove protobuf submodule and leverage cmake for it (#1389)e0643e2release 0.14.35595b61fix: Add backDecodeError::new(#1382)e42dcadBufix: Name::full_name() is correct for empty packages (#1386)107153fbuild(deps): update pulldown-cmark-to-cmark requirement from 21 to 22 (#1384)3fc7003build(deps): bump actions/upload-artifact from 5 to 6 (#1381)33f8721fix some forgotten prost import paths (#1385)efb0755chore: Release version 0.14.2 (#1372)91a093ftest(derive_copy): Allow dead code (#1362)2c22c59build(deps): bump actions/checkout from 5 to 6 (#1370)Updates
prost-reflectfrom 0.14.7 to 0.16.5Release notes
Sourced from prost-reflect's releases.
... (truncated)
Changelog
Sourced from prost-reflect's changelog.
... (truncated)
Commits
Updates
prost-typesfrom 0.12.6 to 0.14.3Changelog
Sourced from prost-types's changelog.