Skip to content

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1 - #3389

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1
Apr 23, 2026
Merged

github-actions[bot] merged 1 commit into
masterfrom
dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1.

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6.1

This is a maintenance release disables experimental SCRAM auth scheme by default and fixes SCRAM final response handling. The SCRAM auth scheme can be re-enabled by choosing a custom auth scheme preference sequence that explicitly includes SCRAM auth.

Change Log

  • Fix SCRAM final response handling. Contributed by Arturo Bernal

  • Auth challenge parsing code improvement. Contributed by Oleg Kalnichevski

  • Add missing Javadoc for ConnectionConfig (#820). Contributed by Gary Gregory

  • Bug fix: Corrected async message exchange cancellation logic in InternalHttpAsyncExecRuntime. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2417: Honor TlsConfig attachment in async connect path. Contributed by Arturo Bernal

  • HTTPCLIENT-2414: Fix Basic auth cache scoping across path prefixes (#802). Contributed by Arturo Bernal

  • HTTPCLIENT-2415: Normalize CookieOrigin path for cookie matching (#803). Contributed by Arturo Bernal

  • Bug fix: Corrected sleep time calculation in IdleConnectionEvictor; use 1 minute sleep time by default. Contributed by Oleg Kalnichevski

  • DefaultManagedHttpClientConnection: Restore original socket timeout. Contributed by Ryan Schmitt

  • HTTPCLIENT-2411: Use standard HTTP-date format for synthesized Date header (#775). Contributed by Arturo Bernal

  • Fix NPE in connection evictor setup (#774). Contributed by Arturo Bernal

Commits
  • 4f86ca6 HttpClient 5.6.1 release
  • 1b2bafe Updated release notes for HttpClient 5.6.1 release
  • 1acf00b Fix SCRAM final response handling
  • 49549ab Auth challenge parsing code improvement
  • fa6b6d7 Add missing Javadoc for ConnectionConfig (#820)
  • 3de8ad5 Fixed DefaultClientTlsStrategy test failures on MacOS
  • c69f38f Bug-fix: corrects message exchange cancellation logic in InternalHttpAsyncExe...
  • 30386d3 HTTPCLIENT-2417 Honor TlsConfig attachment in async connect path
  • 9cc45f6 HTTPCLIENT-2414 - Fix Basic auth cache scoping across path prefixes (#802)
  • 1e01a48 HTTPCLIENT-2415: Normalize CookieOrigin path for cookie matching (#803)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 21, 2026
@amazon-inspector-n-virginia

Copy link
Copy Markdown

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

1 similar comment
@amazon-inspector-n-virginia

Copy link
Copy Markdown

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

@github-actions
github-actions Bot enabled auto-merge (squash) April 21, 2026 06:26

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@amazon-inspector-n-virginia

Copy link
Copy Markdown

✅ I finished the code review, and didn't find any security or code quality issues.

1 similar comment
@amazon-inspector-n-virginia

Copy link
Copy Markdown

✅ I finished the code review, and didn't find any security or code quality issues.

@codecov

codecov Bot commented Apr 21, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.34%. Comparing base (4ba4fea) to head (20c16e2).
⚠️ Report is 10 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff            @@
##             master    #3389   +/-   ##
=========================================
  Coverage     71.33%   71.34%           
- Complexity     5522     5523    +1     
=========================================
  Files           647      647           
  Lines         24963    24963           
  Branches       3116     3116           
=========================================
+ Hits          17808    17809    +1     
  Misses         5735     5735           
+ Partials       1420     1419    -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot
dependabot Bot force-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch from e433d20 to be566cb Compare April 23, 2026 15:22

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@dependabot
dependabot Bot force-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch from be566cb to 666e6ce Compare April 23, 2026 15:40

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@dependabot
dependabot Bot force-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch from 666e6ce to 8b7954e Compare April 23, 2026 17:37

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@dependabot
dependabot Bot force-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch from 8b7954e to f082e25 Compare April 23, 2026 17:47

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@dependabot
dependabot Bot force-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch from f082e25 to a388921 Compare April 23, 2026 18:22

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

Bumps [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) from 5.6 to 5.6.1.
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.1/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.6...rel/v5.6.1)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch from a388921 to 20c16e2 Compare April 23, 2026 18:32

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@github-actions
github-actions Bot merged commit 48cdd60 into master Apr 23, 2026
12 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch April 23, 2026 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant