From 38b86aa4909c911878f49d9729d73bf640cdf908 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Apr 2023 17:09:49 +0000 Subject: [PATCH 1/3] chore(deps): Bump h2 from 0.3.16 to 0.3.17 Bumps [h2](https://github.com/hyperium/h2) from 0.3.16 to 0.3.17. - [Release notes](https://github.com/hyperium/h2/releases) - [Changelog](https://github.com/hyperium/h2/blob/master/CHANGELOG.md) - [Commits](https://github.com/hyperium/h2/compare/v0.3.16...v0.3.17) --- updated-dependencies: - dependency-name: h2 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 5e74a6e..a21ed2d 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1337,9 +1337,9 @@ dependencies = [ [[package]] name = "h2" -version = "0.3.16" +version = "0.3.17" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5be7b54589b581f624f566bf5d8eb2bab1db736c51528720b6bd36b96b55924d" +checksum = "66b91535aa35fea1523ad1b86cb6b53c28e0ae566ba4a460f4457e936cad7c6f" dependencies = [ "bytes", "fnv", From 62114219e2d5af6dea312fab21cce643c8c0811f Mon Sep 17 00:00:00 2001 From: Valentin Brandl Date: Fri, 14 Apr 2023 00:26:53 +0200 Subject: [PATCH 2/3] Update changelog --- CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index eec4bfa..c594580 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +* Updated [`h2`](https://github.com/hyperium/h2) from 0.3.16 to 0.3.17 ([#599]) + +[#599]: https://github.com/vbrandl/hoc/pull/599 + ## [0.34.0] 2023-04-13 From 081ca836bc72a1a554f1681301b39003a254d84f Mon Sep 17 00:00:00 2001 From: Valentin Brandl Date: Fri, 14 Apr 2023 00:30:11 +0200 Subject: [PATCH 3/3] Update changelog --- CHANGELOG.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c594580..d6642c2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,10 +5,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] -* Updated [`h2`](https://github.com/hyperium/h2) from 0.3.16 to 0.3.17 ([#599]) +* Updated [`h2`](https://github.com/hyperium/h2) from 0.3.16 to 0.3.17, fixes [SEC#11] ([#599]) [#599]: https://github.com/vbrandl/hoc/pull/599 +[SEC#11]: https://github.com/vbrandl/hoc/security/dependabot/11 + ## [0.34.0] 2023-04-13