Skip to content

chore(deps): update dependency httpoison to v3#1360

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/httpoison-3.x
Open

chore(deps): update dependency httpoison to v3#1360
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/httpoison-3.x

Conversation

@renovate

@renovate renovate Bot commented Jun 14, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
httpoison (source) prod major ~> 2.3~> 3.0

Release Notes

edgurgel/httpoison (httpoison)

v3.0.0

Compare Source

  • Upgrade to hackney 4.0, which fixes several CVEs (atom-table exhaustion via URL schemes, HTTP header injection, WebSocket buffer limits and more)
  • Response bodies now come straight from hackney; max_body_length is trimmed on our side
  • Redirects are now followed inside hackney, so HTTPoison.MaybeRedirect is no longer returned. The struct is kept only for backward compatibility
  • ssl: [verify: :verify_none] disables certificate verification again
  • Skip empty chunks when streaming a request body so they don't truncate the request
  • Basic auth over plain HTTP now requires the insecure_basic_auth: true option

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jun 14, 2026
@renovate

renovate Bot commented Jun 14, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mix.lock
Command failed: install-tool elixir v1.20.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants