Fix weights in header causing compression to be disabled

.config/dotnet-tools.json

@@ -3,7 +3,7 @@
   "isRoot": true,
   "tools": {
     "dotnet-sonarscanner": {
-      "version": "11.0.0",
+      "version": "11.2.1",
       "commands": [
         "dotnet-sonarscanner"
       ]

.github/workflows/build.yml

@@ -26,7 +26,7 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0
 
@@ -36,7 +36,7 @@ jobs:
         sudo apt-get install -y libmsquic
 
     - name: Download .NET SDK
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: 10.0
 
@@ -110,24 +110,33 @@ jobs:
 
           - os:
               name: 🍎
-              runs-on: macos-15-intel
+              runs-on: macos-26-intel
             arch: x64
             runtime: osx-x64
             platform: macos/amd64
 
           - os:
               name: 🍎
-              runs-on: macos-15
+              runs-on: macos-26
             arch: arm64
             runtime: osx-arm64
             platform: macos/arm64
 
     steps:
       - name: Checkout source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+
+      - name: Harden macOS x64 environment
+
+        if: matrix.os.runs-on == 'macos-26-intel'
+        run: |
+          sudo rm -rf /opt/homebrew || true
+          export PATH=/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin
+          export DYLD_LIBRARY_PATH=""
+          export DYLD_FALLBACK_LIBRARY_PATH=""
 
       - name: Setup .NET SDK
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         if: matrix.os.runs-on != 'linux-arm32'
         with:
           dotnet-version: |

.github/workflows/release.yml

@@ -20,17 +20,17 @@ jobs:
 
     steps:
       - name: Checkout source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Setup .NET SDK
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: 10.0
 
       - name: Setup NuGet CLI
-        uses: NuGet/setup-nuget@v2
+        uses: NuGet/setup-nuget@v4
 
       - name: Restore dependencies
         run: dotnet restore

Adapters/AspNetCore/GenHTTP.Adapters.AspNetCore.csproj

@@ -35,7 +35,7 @@
     </ItemGroup>
 
     <ItemGroup>
-      <PackageReference Include="Microsoft.Extensions.ObjectPool" Version="10.0.5" />
+      <PackageReference Include="Microsoft.Extensions.ObjectPool" Version="10.0.7" />
     </ItemGroup>
 
 </Project>

Directory.Build.props

@@ -40,7 +40,7 @@
 
     <ItemGroup>
 
-        <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.201" PrivateAssets="All" />
+        <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.203" PrivateAssets="All" />
 
     </ItemGroup>
 

Engine/Internal/GenHTTP.Engine.Internal.csproj

@@ -19,9 +19,9 @@
 
         <ProjectReference Include="..\..\Modules\IO\GenHTTP.Modules.IO.csproj" />
 
-        <PackageReference Include="Microsoft.Extensions.ObjectPool" Version="10.0.5" />
+        <PackageReference Include="Microsoft.Extensions.ObjectPool" Version="10.0.7" />
 
-        <PackageReference Include="System.IO.Pipelines" Version="10.0.5" />
+        <PackageReference Include="System.IO.Pipelines" Version="10.0.7" />
 
     </ItemGroup>
 

Modules/Archives/GenHTTP.Modules.Archives.csproj

@@ -14,7 +14,7 @@
 
         <ProjectReference Include="..\IO\GenHTTP.Modules.IO.csproj" />
 
-        <PackageReference Include="SharpCompress" Version="0.47.3" />
+        <PackageReference Include="SharpCompress" Version="0.47.4" />
 
     </ItemGroup>
 

Modules/Caching/GenHTTP.Modules.Caching.csproj

@@ -14,7 +14,7 @@
 
         <PackageReference Include="AsyncKeyedLock" Version="8.0.2" />
 
-        <PackageReference Include="System.Text.Json" Version="10.0.5" />
+        <PackageReference Include="System.Text.Json" Version="10.0.7" />
 
     </ItemGroup>
 

Modules/Compression/Providers/CompressionConcern.cs

@@ -1,4 +1,5 @@
-using System.IO.Compression;
+using System.Buffers;
+using System.IO.Compression;
 
 using GenHTTP.Api.Content;
 using GenHTTP.Api.Content.IO;
@@ -131,31 +132,39 @@ private bool ShouldCompressBySize(IResponse response)
 
         return MinimumSize is null || contentLength is null || contentLength >= MinimumSize;
     }
+
+    private static readonly SearchValues<char> Delimiters = SearchValues.Create([',', ';']);
 
     private static HashSet<string> ParseSupported(ReadOnlySpan<char> acceptHeader)
     {
         var result = new HashSet<string>(StringComparer.OrdinalIgnoreCase);
 
-        var start = 0;
-
-        while (start <= acceptHeader.Length)
+        while (!acceptHeader.IsEmpty)
         {
-            var comma = acceptHeader[start..].IndexOf(',');
-            var end = comma >= 0 ? start + comma : acceptHeader.Length;
-
-            var part = acceptHeader.Slice(start, end - start).Trim();
+            var delimIdx = acceptHeader.IndexOfAny(Delimiters);
 
-            if (!part.IsEmpty)
+            ReadOnlySpan<char> token;
+            if (delimIdx < 0)
             {
-                result.Add(part.ToString());
+                token = acceptHeader.Trim();
+                acceptHeader = default;
             }
-
-            if (comma < 0)
+            else if (acceptHeader[delimIdx] == ',')
+            {
+                token = acceptHeader[..delimIdx].Trim();
+                acceptHeader = acceptHeader[(delimIdx + 1)..];
+            }
+            else
             {
-                break;
+                token = acceptHeader[..delimIdx].TrimEnd();
+                var commaIdx = acceptHeader[delimIdx..].IndexOf(',');
+                acceptHeader = commaIdx >= 0
+                    ? acceptHeader[(delimIdx + commaIdx + 1)..]
+                    : default;
             }
 
-            start = end + 1;
+            if (!token.IsEmpty)
+                result.Add(token.ToString());
         }
 
         return result;

Modules/Conversion/GenHTTP.Modules.Conversion.csproj

@@ -14,7 +14,7 @@
 
         <ProjectReference Include="..\IO\GenHTTP.Modules.IO.csproj" />
 
-        <PackageReference Include="YamlDotNet" Version="16.3.0" />
+        <PackageReference Include="YamlDotNet" Version="17.0.1" />
 
     </ItemGroup>
 

Modules/DependencyInjection/GenHTTP.Modules.DependencyInjection.csproj

@@ -29,7 +29,7 @@
     </ItemGroup>
 
     <ItemGroup>
-      <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.5" />
+      <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.7" />
     </ItemGroup>
 
     <ItemGroup>

Modules/OpenApi/GenHTTP.Modules.OpenApi.csproj

@@ -16,11 +16,11 @@
 
         <ProjectReference Include="..\Reflection\GenHTTP.Modules.Reflection.csproj" />
 
-        <PackageReference Include="NSwag.Core" Version="14.6.3" />
+        <PackageReference Include="NSwag.Core" Version="14.7.1" />
 
-        <PackageReference Include="NSwag.Core.Yaml" Version="14.6.3" />
+        <PackageReference Include="NSwag.Core.Yaml" Version="14.7.1" />
 
-        <PackageReference Include="NSwag.Generation" Version="14.6.3" />
+        <PackageReference Include="NSwag.Generation" Version="14.7.1" />
 
     </ItemGroup>
 

Modules/ReverseProxy/GenHTTP.Modules.ReverseProxy.csproj

@@ -18,7 +18,7 @@
 
         <ProjectReference Include="..\Websockets\GenHTTP.Modules.Websockets.csproj" />
 
-        <PackageReference Include="System.IO.Pipelines" Version="10.0.5" />
+        <PackageReference Include="System.IO.Pipelines" Version="10.0.7" />
 
     </ItemGroup>
 

Modules/Websockets/GenHTTP.Modules.Websockets.csproj

@@ -15,7 +15,7 @@
 
     <ItemGroup>
 
-        <PackageReference Include="System.IO.Pipelines" Version="10.0.5" />
+        <PackageReference Include="System.IO.Pipelines" Version="10.0.7" />
 
         <ProjectReference Include="..\..\API\GenHTTP.Api.csproj"/>
 

Testing/Acceptance/GenHTTP.Testing.Acceptance.csproj

@@ -43,16 +43,16 @@
 
     <ItemGroup>
 
-        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.3.0" />
+        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.4.0" />
 
-        <PackageReference Include="Microsoft.OpenApi" Version="3.5.0" />
-        <PackageReference Include="Microsoft.OpenApi.YamlReader" Version="3.5.0" />
+        <PackageReference Include="Microsoft.OpenApi" Version="3.5.2" />
+        <PackageReference Include="Microsoft.OpenApi.YamlReader" Version="3.5.2" />
 
-        <PackageReference Include="MSTest" Version="4.1.0" />
+        <PackageReference Include="MSTest" Version="4.2.1" />
 
         <PackageReference Include="NSubstitute" Version="5.3.0" />
 
-        <PackageReference Include="coverlet.collector" Version="8.0.1">
+        <PackageReference Include="coverlet.collector" Version="10.0.0">
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>

Testing/Acceptance/Modules/Compression/CompressionTests.cs

@@ -35,7 +35,7 @@ public async Task TestCompression(TestEngine engine)
 
         Assert.AreEqual("zstd", response.Content.Headers.ContentEncoding.First());
     }
-
+    
     /// <summary>
     /// As a browser, I expect only supported compression algorithms to be used
     /// to generate my response.
@@ -378,6 +378,20 @@ public async Task TestCompressionThreshold_Disabled_AllContentCompressed(TestEng
 
         await runner.DisposeAsync();
     }
+
+    [TestMethod]
+    [MultiEngineTest]
+    public async Task TestWeights(TestEngine engine)
+    {
+        await using var runner = await TestHost.RunAsync(CreateLargeContentHandler().Build(), engine: engine);
+
+        var request = runner.GetRequest();
+        request.Headers.Add("Accept-Encoding", "br;q=1, gzip;q=0.8");
+
+        using var response = await runner.GetResponseAsync(request);
+
+        Assert.AreEqual("br", response.Content.Headers.ContentEncoding.First());
+    }
 
     /// <summary>
     /// Helper class to create content with unknown length (null)