Skip to content

Bump the julia-deps group with 2 updates#7

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/julia/julia-deps-6a2f6aa60d
Jun 3, 2026
Merged

Bump the julia-deps group with 2 updates#7
github-actions[bot] merged 1 commit into
mainfrom
dependabot/julia/julia-deps-6a2f6aa60d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on Downloads and HTTP to permit the latest version.
Updates Downloads to 1.7.0

Release notes

Sourced from Downloads's releases.

v1.7.0

What's Changed

New Contributors

... (truncated)

Commits
  • e7fe58f Oops: delete debug lines
  • 9f686f0 Get default file name from content-disposition or URL (#269)
  • 9391b09 Adapt code to more recent Julia versions
  • 03f0d4d Drop support (and CI) for Julia < 1.10 (LTS)
  • e692e77 Set Multi handle to NULL after calling curl_multi_cleanup (#266)
  • 91a71b9 Adapt expected protocol for response to invalid domain error (#267)
  • afd04be Bump codecov/codecov-action from 4 to 5 (#264)
  • 39036e1 CI: Use Dependabot to automatically update external GitHub Actions (#263)
  • 78e7c7c Bump CI actions versions (#252)
  • 89d3c7d fix cancelling upload requests (#259)
  • Additional commits viewable in compare view

Updates HTTP to 2.0.0

Release notes

Sourced from HTTP's releases.

v2.0.0

HTTP v2.0.0

Diff since v1.11.0

Breaking changes

HTTP.jl 2.0 is a breaking major release and a broad rewrite of the package internals and public API on top of Reseau.jl. The most important migration notes are:

  • Julia 1.10 is now the minimum supported Julia version.
  • HTTP.request and the verb helpers buffer Response.body::Vector{UInt8} by default; use HTTP.open or response_stream for streaming control.
  • Response.status_code has been renamed to Response.status.
  • RequestContext is now typed request state with cancellation, deadlines, metadata, and timeout fields. Dict-like metadata access remains as a migration aid, but new code should use the typed helpers and fields.
  • Client pooling, retries, TLS, proxying, cookies, and timeouts are now configured through HTTP.Client, HTTP.Transport, and explicit keywords such as retry_if, request_timeout, and read_idle_timeout instead of the old layer stack, pool, retry_delays, retry_check, sslconfig, or socket_type_tls APIs.
  • WebSocket-specific entrypoints now live under HTTP.WebSockets, including HTTP.WebSockets.open, HTTP.WebSockets.listen, and HTTP.WebSockets.listen!.
  • HTTP.download is no longer HTTP.jl's dedicated download helper. HTTP.download(...) now resolves to Base.download; use Downloads.download for simple downloads or HTTP.request(...; response_stream=io) / HTTP.open when HTTP.jl client configuration is needed.
  • Undocumented 1.x internals, including parser, layer-stack, connection-pool, HPACK, and low-level HTTP/2 implementation details, are no longer supported migration targets.

Highlights

  • New Reseau-backed transport foundation for HTTP/1.1 and HTTP/2 client/server workflows.
  • New core types around Request, Response, Headers, Client, Transport, Stream, and RequestContext.
  • First-class HTTP/2 client/server support, Server-Sent Events, WebSockets, static file serving, request tracing, structured timeout phases, structured HTTP error types, and precompile/trim-oriented workloads.
  • See CHANGELOG.md and docs/src/guides/migration-1x.md for the full changelog and migration guide.

Merged pull requests:

Changelog

Sourced from HTTP's changelog.

[v2.0.0] - 2026-04-27

HTTP.jl 2.0 is a major rewrite of the package internals and public API. The release keeps the familiar HTTP.request, verb helpers, HTTP.serve, routing, WebSocket, and SSE workflows, but rebuilds them on a smaller, explicit core that delegates transport mechanics to Reseau.jl. The 2.0 line is the new foundation for HTTP/1.1, HTTP/2, timeouts, streaming, precompilation, and future protocol work.

Added

  • Added a new core API around Request, Response, Headers, RequestContext, explicit request/response body types, and structured timeout configuration.
  • Added Client and Transport objects for reusable client configuration, connection reuse, cookie jars, redirect limits, retry policy, default headers, and HTTP/2 preference.
  • Added first-class HTTP/2 client and server support through the Reseau-backed transport layer, including stream lifecycle handling, flow-control-aware body reads, and h2c prior-knowledge support for local/plaintext use cases.
  • Added structured timeout phases for connection establishment, complete request deadlines, response-header waits, read-idle waits, write-idle waits, and Expect: 100-continue waits.
  • Added HTTP.HTTPTimeoutError as the public timeout exception alias and richer timeout messages for client and server failures.
  • Added HTTP.open for response streaming with the same request pipeline as HTTP.request.
  • Added request tracing support through trace callbacks, client event types, and the verbose request keyword.
  • Added server helpers for streaming handlers, static content, file serving, file-server roots, graceful shutdown callbacks, handler timeouts, and socket-close control.
  • Added Server-Sent Events support for clients and servers through SSEEvent, sse_stream, and the sse_callback request keyword.
  • Added WebSocket client/server support under HTTP.WebSockets, including HTTP.WebSockets.open, HTTP.WebSockets.listen, and HTTP.WebSockets.listen!.
  • Added precompile workloads that cover common client, server, router, SSE, WebSocket, and streaming paths.
  • Added curated manual and API-reference documentation for the 2.0 public surface, plus a migration guide for common 1.x call patterns.

Changed

  • The package now presents a curated 2.0 public API built around Request, Response, Stream, Client, Transport, and explicit body types on top of Reseau.
  • Julia 1.10 is now the minimum supported Julia version.
  • HTTP.request and the verb helpers now return a fully materialized Response.body::Vector{UInt8} by default. Use HTTP.open or the response_stream keyword when you need streaming control.
  • Request and Response constructors now prefer explicit keyword-oriented

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the julia-deps group with 2 updates
84e2e0d 
Updates the requirements on [Downloads](https://github.com/JuliaLang/Downloads.jl) and [HTTP](https://github.com/JuliaWeb/HTTP.jl) to permit the latest version.

Updates `Downloads` to 1.7.0
- [Release notes](https://github.com/JuliaLang/Downloads.jl/releases)
- [Commits](JuliaLang/Downloads.jl@v0.1.0...v1.7.0)

Updates `HTTP` to 2.0.0
- [Release notes](https://github.com/JuliaWeb/HTTP.jl/releases)
- [Changelog](https://github.com/JuliaWeb/HTTP.jl/blob/master/CHANGELOG.md)
- [Commits](JuliaWeb/HTTP.jl@v1.0.0...v2.0.0)

---
updated-dependencies:
- dependency-name: Downloads
  dependency-version: 1.7.0
  dependency-type: direct:production
  dependency-group: julia-deps
- dependency-name: HTTP
  dependency-version: 2.0.0
  dependency-type: direct:production
  dependency-group: julia-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file julia Pull requests that update julia code labels Jun 3, 2026
@dependabot dependabot Bot mentioned this pull request Jun 3, 2026
Closed
@github-actions
github-actions Bot merged commit 5dee168 into main Jun 3, 2026
1 of 4 checks passed
@dependabot
dependabot Bot deleted the dependabot/julia/julia-deps-6a2f6aa60d branch June 3, 2026 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file julia Pull requests that update julia code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants