Skip to content

deps(cargo): bump pingora-core from 0.8.0 to 0.8.1 - #4

Merged
wolf4ood merged 1 commit into
mainfrom
dependabot/cargo/pingora-core-0.8.1
Aug 25, 2026
Merged

wolf4ood merged 1 commit into
mainfrom
dependabot/cargo/pingora-core-0.8.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pingora-core from 0.8.0 to 0.8.1.

Release notes

Sourced from pingora-core's releases.

Pingora 0.8.1

0.8.1 - 2026-06-04

🔒 Security

  • Bound default HTTP/2 server limits to mitigate memory exhaustion.
  • Upgrade Rustls-related dev-dependencies to address rustls-webpki security advisories.

⚙️ Miscellaneous Tasks

  • Pin tracing dependencies to preserve Rust 1.84 compatibility.
  • Use cargo check for MSRV verification instead of compiling dev-dependencies during tests.
  • Update the Semgrep OSS scanning workflow.
  • Use valid paths in header serialization tests.
  • Gate HTTP/1 CONNECT tests on patched HTTP/1 support.
Changelog

Sourced from pingora-core's changelog.

0.8.1 - 2026-06-04

🔒 Security

  • Bound default HTTP/2 server limits to mitigate memory exhaustion.
  • Upgrade Rustls-related dev-dependencies to address rustls-webpki security advisories.

⚙️ Miscellaneous Tasks

  • Pin tracing dependencies to preserve Rust 1.84 compatibility.
  • Use cargo check for MSRV verification instead of compiling dev-dependencies during tests.
  • Update the Semgrep OSS scanning workflow.
  • Use valid paths in header serialization tests.
  • Gate HTTP/1 CONNECT tests on patched HTTP/1 support.
Commits
  • 719ef6c Release 0.8.1
  • 2e59680 RUSTSEC-2026-0098 and RUSTSEC-2026-0099 fixes
  • a444389 Gate CONNECT tests on patched HTTP/1 support
  • 45dbece Use valid paths in header serialization tests
  • f7ad7ce ci: add Semgrep OSS scanning workflow
  • 5eeddba ci: use cargo check for MSRV instead of cargo test
  • 783b673 Pin cf-rustracing and cf-rustracing-jaeger due to rand 0.10 edition 2024 depe...
  • d193c8d Bound default HTTP/2 server limits to mitigate memory exhaustion
  • See full diff in compare view

@dependabot dependabot Bot added cargo dependencies Pull requests that update a dependency file labels Jun 5, 2026
@wolf4ood

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [pingora-core](https://github.com/cloudflare/pingora) from 0.8.0 to 0.8.1.
- [Release notes](https://github.com/cloudflare/pingora/releases)
- [Changelog](https://github.com/cloudflare/pingora/blob/0.8.1/CHANGELOG.md)
- [Commits](cloudflare/pingora@0.8.0...0.8.1)

---
updated-dependencies:
- dependency-name: pingora-core
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/pingora-core-0.8.1 branch from 3634315 to d60db18 Compare August 25, 2026 08:22
@wolf4ood
wolf4ood merged commit dcd500d into main Aug 25, 2026
3 checks passed
@wolf4ood
wolf4ood deleted the dependabot/cargo/pingora-core-0.8.1 branch August 25, 2026 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cargo dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant