Update dependency org.http4s:http4s-ember-client to v1.0.0-M47 by renovate[bot] · Pull Request #70 · polystat/polystat-cli

renovate · 2026-07-16T07:15:33Z

This PR contains the following updates:

Package	Update	Change
org.http4s:http4s-ember-client (source)	patch	`1.0.0-M32` → `1.0.0-M47`

Release Notes

http4s/http4s (org.http4s:http4s-ember-client)

`v1.0.0-M47`

Compare Source

This is a security hardening release that comes as a result of two independent scans. Upgrades are strongly encouraged if you are:

Running Ember HTTP/2
Running behind an unhardened proxy
Exposing websocket endpoints to the public
Using DigestAuth or FollowRedirect middleware
Using staticcontent services

Unlike most 1.x milestones, no merge forward has been done from the 0.23 series first. A pending PR is open, but security-relevant patches and upgrades came first.

Security fixes

What Else Has Changed

User-facing upgrades

Update scodec-bits to 1.2.5 in series/0.23 by @http4s-steward[bot] in #7833
Update scala-java-time to 2.7.0 in series/0.23 by @http4s-steward[bot] in #7867
Update jawn-parser to 1.7.0 in series/0.23 by @http4s-steward[bot] in #7876
Update jawn-fs2 to 2.6.0 in series/0.23 by @http4s-steward[bot] in #7878
Update circe-core, circe-generic, ... to 0.14.16 in series/0.23 by @http4s-steward[bot] in #7877

Special thanks

@rossabaker would like to thank:

@reardonj and @ERobertGII for their security analysis and mitigations
@samspills, @morgen-peschke, and @OddKristensen for reviewing the mitigations

Full Changelog: http4s/http4s@v1.0.0-M46...v1.0.0-M47

`v1.0.0-M46`

Compare Source

What's Changed

http4s-core

merge 0.23 to main by @samspills in #7728

Full Changelog: http4s/http4s@v1.0.0-M45...v1.0.0-M46

`v1.0.0-M45`

Compare Source

What's Changed

http4s-core

Merge series/0.23 into main by @danicheg in #7673
Merge 0.23 to main by @rossabaker in #7715
merge 0.23.31 into main by @samspills in #7718

Documentation

Add Famly to list of adopters by @christianharrington in #7672

Behind the scenes

Ignore sbt-doctest updates on main by @danicheg in #7601

New Contributors

@hugo-vrijswijk made their first contribution in #7654
@bio-aeon made their first contribution in #7611
@carlosrogue made their first contribution in #7660
@christianharrington made their first contribution in #7672

Full Changelog: http4s/http4s@v1.0.0-M44...v1.0.0-M45

`v1.0.0-M44`

Compare Source

What's Changed

http4s-core

merge 0.23.30 -> main by @samspills in #7594

Documentation

update 1.0.0-Mxx releasing guide re ancillary releases by @samspills in #7572

Behind the scenes

Fix Scala Steward config by @danicheg in #7569

New Contributors

@i10416 made their first contribution in #7582
@NthPortal made their first contribution in #7577
@yawaramin made their first contribution in #7589

Full Changelog: http4s/http4s@v1.0.0-M43...v1.0.0-M44

`v1.0.0-M43`

Compare Source

What's Changed

http4s-core

merge v0.23.29 -> main by @samspills in #7550

Documentation

Prep for 1.0.0-M43 release: update changelog + release guidelines by @samspills in #7570

Full Changelog: http4s/http4s@v1.0.0-M42...v1.0.0-M43

`v1.0.0-M42`

Compare Source

What's Changed

http4s-core

Address the Entity model in CurlConverter.requestToCurlWithBody by @danicheg in #7480
Merge series/0.23 into main by @danicheg in #7494
Merge 0.23.28 -> main by @rossabaker in #7518

Documentation

Tweak the 'versions' page by @danicheg in #7488
Draft the v1.0.0-M42 release notes by @danicheg in #7532

Behind the scenes

Ignore sbt-scala-native-config-brew updates on main by @danicheg in #7442
Ignore com.earldouglas:xsbt-web-plugin updates on main by @danicheg in #7479

New Contributors

@KristianAN made their first contribution in #7401
@Adam-McDevitt made their first contribution in #7417
@mcenkar made their first contribution in #7428
@henricook made their first contribution in #7435
@SallyPerez made their first contribution in #7372
@Chingles2404 made their first contribution in #7452
@Dichotomia made their first contribution in #7472
@dj707chen made their first contribution in #7469

Full Changelog: http4s/http4s@v1.0.0-M41...v1.0.0-M42

`v1.0.0-M41`

Compare Source

It's been a while since the last milestone release. This release includes numerous features and patches from the 0.23 series. Be sure to check out its release notes! As always within this milestone series, backward compatibility is not guaranteed.

What's Changed

http4s-core

remove deprecated comment parser from CommonRules by @txdv in #7398
remove unused deprecated method asMaskBased by @txdv in #7397

http4s-server

Delete Jsonp middleware by @froth in #7286

http4s-client

expose cookies in the CookieJar middleware by @massimosiani in #7160

Behind the scenes

0.23 -> main by @armanbilge in #7296
Merge 0.23 -> main by @rossabaker in #7387
Merge 0.23.26 -> main by @rossabaker in #7404

New Contributors

@massimosiani made their first contribution in #7160
@george-wilson-rea made their first contribution in #7207
@lolgab made their first contribution in #7278
@grouzen made their first contribution in #7284
@morgen-peschke made their first contribution in #7238
@plokhotnyuk made their first contribution in #7228
@Marcus-Rosti made their first contribution in #7316
@LaurenceWarne made their first contribution in #7265
@sam-tombury made their first contribution in #7234
@rlavolee made their first contribution in #7329
@kejifasuyi made their first contribution in #7357
@txdv made their first contribution in #7398

Full Changelog: http4s/http4s@v1.0.0-M40...v1.0.0-M41

`v1.0.0-M40`

Compare Source

What's Changed

http4s-core

Fix misleading EntityBody mentions in some scaladocs by @danicheg in #6955
Tweak performance of QueryOps#withQueryParam by @danicheg in #6864
Deprecate Entity Apply by @diesalbla in #6305
Expunge all unsafe logging by @armanbilge, @iRevive in #6645, #7122
Migrate Uri.Scheme and TransferCoding to CIString by @froth in #7164

http4s-server

More comprehensive support of Entity model in Jsonp Middleware by @danicheg in #6937
Take account of Entity model in BracketRequestResponse Middleware by @danicheg in #6957
Use Clock from CE instead of one from java.time in CSRF Middleware by @danicheg in #7166

http4s-client

Rectify Client#fromHttpApp by @danicheg in #7148

Documentation

Fix Entity docs by @danicheg in #7067
Update adopters.md by @dantb in #7107

Behind the scenes

Ignore sbt-jmh updates on main by @armanbilge in #6952
Merge series/0.23 into main by @danicheg in #6970
Merge series/0.23 into main by @danicheg in #7025
Clean up internal package by @danicheg in #7030
Ignore crossproject updates on main by @armanbilge in #7048
Ignore sbt-revolver updates on main by @armanbilge in #7052
Fix semantic merge conflicts following #6305 by @armanbilge in #7063
0.23 -> main by @armanbilge in #7115
Use MonadThrow instead of Sync in H2Client.RequestKey#getAddress by @danicheg in #7167
0.23 -> main by @armanbilge in #7172
Clear the internal package of unused/deprecated things by @froth in #7158
Ignore scalac-compat-annotation updates on main by @danicheg in #7179
Cleanup of org.http4s.internal by @froth in #7175
Merge v0.23.22 into main by @danicheg in #7211

New Contributors

@froth made their first contribution in #7164

Full Changelog: http4s/http4s@v1.0.0-M39...v1.0.0-M40

`v1.0.0-M39`

Compare Source

v1.0.0-M39 (2023-01-24)

This bugfix release merges forward v0.23.18 and is binary compatible
with v1.0.0-M38.

What's Changed

http4s-ember-core

Take into account the Entity model in H2Server by @danicheg in #6936

http4s-ember-client

Don't drain the body for non-streamed entities in EmberClient by @danicheg in #6935

Behind the scenes

Remove nonValidatingCopyConstructor linter by @rossabaker in #6914
Merge 0.23.18 -> main by @rossabaker in #6939

Full Changelog: http4s/http4s@v1.0.0-M38...v1.0.0-M39

`v1.0.0-M38`

Compare Source

What's Changed

http4s-core

A bit more efficient size checking for Seq collections by @danicheg in #6765
Use map instead of mapValues on Maps by @danicheg in #6774
Proposal: Change Query model by @danicheg in #6839
Don't log a Message body for an Entity.Empty by @danicheg in #6876
Log a Message body considering the Entity model by @danicheg in #6878
Fixes GHSA-54w6-vxfh-fw7f

http4s-server

Utilize Using from std instead of the self-written AutoCloseableResource by @danicheg in #6767
Clean up DefaultHead middleware by @danicheg in #6860
Address the Entity model in the ChunkAggregator Middleware by @danicheg in #6886

http4s-client

removed the Ref boolean by @geoffjohn11 in #6654

http4s-ember-server

Make StreamForking resource-safe in the face of cancelation by @TimWSpence in #6610

Documentation

Promote Scala Native support on homepage by @armanbilge in #6717
Add link to API docs to landing page by @armanbilge in #6771
Cleanup quickstart and contributing pages by @reardonj in #6802
Close Twitter by @rossabaker in #6821
Highlight the new Entity model in the client's docs by @danicheg in #6868
Tweak DSL docs by @danicheg in #6873

Behind the scenes

Ignore epollcat updates on main by @armanbilge in #6701
Provide a dev shell per Java version by @rossabaker in #6728
0.23 -> main by @armanbilge in #6746
Merge series/0.23 into main by @danicheg in #6787
Ignore updates of Scala Native by @danicheg in #6800
Ignore munit updates on main by @armanbilge in #6814
Merge series/0.23 into main by @danicheg in #6822
Merge series/0.23 into main by @danicheg in #6857
Remove dead scala-xml code by @armanbilge in #6867
Merge series/0.23 into main by @danicheg in #6883
Merge 0.23 -> main by @rossabaker in #6895
Merge 0.23 -> main by @rossabaker in #6897

New Contributors

@yoshinorin made their first contribution in #6708
@hnaderi made their first contribution in #6714
@samspills made their first contribution in #6709
@CraigHammondDexcom made their first contribution in #6741
@reardonj made their first contribution in #6802
@mabasic made their first contribution in #6826
@geoffjohn11 made their first contribution in #6654
@mattyjbrown made their first contribution in #6853

Full Changelog: http4s/http4s@v1.0.0-M37...v1.0.0-M38

`v1.0.0-M37`

Compare Source

This release is the latest milestone in the 1.x series, and is not binary compatible with previous 1.0 milestones. It also includes the changes from v0.23.16, including Scala Native support for all modules.

What's Changed

Documentation

Add doc for mixing left- and right-associative by @jan0sch in #6598

Behind the scenes

Ignore case-insensitive updates on main by @armanbilge in #6643
Merge series/0.23 into main by @danicheg in #6664
Ignore munit-cats-effect updates on main by @armanbilge in #6669
Ignore scalacheck updates on main by @armanbilge in #6684
Ignore keypool updates on main by @armanbilge in #6675
0.23 -> main by @armanbilge in #6692

Full Changelog: http4s/http4s@v1.0.0-M36...v1.0.0-M37

`v1.0.0-M36`

Compare Source

This release is the latest milestone in the 1.x series, and is not binary compatible with previous 1.0 milestones. It also includes the changes from v0.23.15.

What's Changed

http4s-core

Use scodec.bits.ByteVector for Entity.Strict by @armanbilge in #6528
Smite Seq in Message#multiParams, Uri#multiParams, Query#multiParams by @danicheg in #6524

http4s-server

Spring cleaning: Remove unneeded temporal constraints and make some cosmetic changes by @FrancescoSerra in #6491

Documentation

Remove references to Scala 2.12 in docs by @danicheg in #6604
Fix 1.0 version table compatibility with 2.12 & 2.13 by @JackTreble in #6607
Tweak the http4s.g8 example on the quick start page by @danicheg in #6608

Behind the scenes

Release v1.0.0-M35 by @armanbilge in #6569
Pick Sbt Scoverage from 0.23 by @danicheg in #6574
Ignore literally updates on main by @armanbilge in #6584
Merge series/0.23 into main by @danicheg in #6612
0.23 -> main by @armanbilge in #6631

New Contributors

@JackTreble made their first contribution in #6607

Full Changelog: http4s/http4s@v1.0.0-M35...v1.0.0-M36

`v1.0.0-M35`

Compare Source

This release is the latest milestone in the 1.x series, and is not binary compatible with previous 1.0 milestones. It also includes the changes from v0.23.13 and updates fs2 to v3.2.11 which includes a security patch for GHSA-2cpx-6pqp-wf35.

What's Changed

http4s-core

Remove redundant collection converting in Query#multiParams by @danicheg in #6514
Remove BackendBuilder#allocate by @danicheg in #6540

Behind the scenes

0.23 -> main by @armanbilge in #6551
0.23 -> main by @armanbilge in #6563
0.23 -> main by @armanbilge in #6565
0.23 -> main by @armanbilge in #6567

Full Changelog: http4s/http4s@v1.0.0-M34...v1.0.0-M35

`v1.0.0-M34`

Compare Source

This release is the latest milestone in the 1.x series, and is not binary compatible with previous 1.0 milestones. It also includes the changes from v0.23.13.

What's Changed

http4s-core

Remove CollectionCompat by @danicheg in #6508

http4s-server

Address the entity model in the server's RequestLogger by @danicheg in #6323
Fix regression of Router#define by @danicheg in #6371
Relax server.middleware.Caching constraints by @danicheg in #6490

http4s-client

Take into account the Entity model in the ResponseLogger by @danicheg in #6319

Behind the scenes

Merge 0.23 -> main by @armanbilge in #6430
vault, scala-java-time updates via 0.23 by @armanbilge in #6443
Ignore cats updates on main by @armanbilge in #6472
0.23 -> main by @armanbilge in #6499

New Contributors

@typelevel-steward made their first contribution in #6434
@christiankjaer made their first contribution in #6444
@cgoldammer made their first contribution in #6450
@jrozanski made their first contribution in #6454
@leoniv made their first contribution in #6473
@FrancescoSerra made their first contribution in #6469
@ajelden made their first contribution in #6488

Full Changelog: http4s/http4s@v1.0.0-M33...v1.0.0-M34

`v1.0.0-M33`

Compare Source

This is the latest milestone in the 1.x series. It is binary incompatible with http4s-1.0.0-M32.

This is the first 1.x release after "The Great Schism", described in v0.23.12. Because 1.0 isn't stable yet, all ancillary repositories will need to be released for this version. If there is one that you would like to maintain, please look for the "Maintainers wanted!" issue in the repository of interest.

Additional to the below, this release includes all changes in v0.23.12.

What's Changed

http4s-core

Remove deprecated things by @danicheg in #6156
Override toString for Entity by @danicheg in #6168
Fix Request/Response scaladoc by @danicheg in #6171
Covariant Messages: minimum viable PR by @bplommer in #5712
Tweak Message#withEmptyBody by @danicheg in #6288
Remove http4s.EmptyBody by @danicheg in #6296
Message - Use Strict Entity for string responses by @diesalbla in #6299
Make Part and Multipart covariant by @diesalbla in #6304
Fix Request#productElement and Response#productElement by @danicheg in #6372
Add info about the entity into the toString of Request and Response by @danicheg in #6373
Resubmit idempotent requests with only pure entities in Retry middleware by @danicheg in #6379

http4s-laws

Address the Entity model in Arbitrary[Entity[*]] by @danicheg in #6369

http4s-server

Relax authentication#challenged constraints by @danicheg in #6253
Use Strict entities where possible by @diesalbla in #6306
Take into account the Entity model in the EntityLimiter by @danicheg in #6320

http4s-client

Fix Client scaladoc by @danicheg in #6188
Remove deprecated Client.fetch, DefaultClient.fetch by @danicheg in #6187

http4s-ember-core

ember: Add support for strict entities, look for content-length only once by @wjoel in #6317

Documentation

Tweak Entity docs by @danicheg in #6375

Behind the scenes

Release v0.21.33 by @rossabaker in #6147
Restore changes to versions page on main by @armanbilge in #6148
Remove deprecated execution contexts by @rossabaker in #6124
Ignore http4s-crypto updates on main by @armanbilge in #6217
Merge 0.23 -> main by @rossabaker in #6193
Merge 0.23 -> main by @armanbilge in #6250
Message - remoteHost: define without OptionT. by @diesalbla in #6257
Merge series/0.23 into main by @danicheg in #6282
Ignore scala-lang updates by @danicheg in #6293
Tweak BodyCache#hasNoBody by @danicheg in #6289
Ignore discipline updates on main by @armanbilge in #6309
Reduce use of covary method. by @diesalbla in #6230
Merge series/0.23 into main by @danicheg in #6311
Ignore okio updates by @danicheg in #6315
Address the entity model in the DefaultHead by @danicheg in #6324
Address the entity model in the Client#fromHttpApp by @danicheg in #6325
[ci skip] ignore scodec updates on main by @armanbilge in #6337
Ignore log4cats updates by @danicheg in #6341
Ignore scalacheck-effect-munit updates by @danicheg in #6347
Ignore updates for all log4cats modules by @danicheg in #6346
Merge 0.23 -> main by @danicheg in #6348
Merge series/0.23 into main by @danicheg in #6378
Get ip4s updates from series/0.23 by @rossabaker in #6384
Ignore circe updates by @danicheg in #6400
Merge 0.23.12 to main by @rossabaker in #6416

New Contributors

@teigen made their first contribution in #6057
@takapi327 made their first contribution in #6166
@zainab-ali made their first contribution in #6098
@dragonfly-ai made their first contribution in #6203
@CharlesAHunt made their first contribution in #6036
@OnAirEntertainment-Scala made their first contribution in #6385

Full Changelog: http4s/http4s@v1.0.0-M32...v1.0.0-M33

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Update dependency org.http4s:http4s-ember-client to v1.0.0-M47

c33611a

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update dependency org.http4s:http4s-ember-client to v1.0.0-M47#70

Update dependency org.http4s:http4s-ember-client to v1.0.0-M47#70
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/org.http4s-http4s-ember-client-1.x

renovate Bot commented Jul 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 16, 2026

Release Notes

Security fixes

What Else Has Changed

User-facing upgrades

Special thanks

What's Changed

http4s-core

What's Changed

http4s-core

Documentation

Behind the scenes

New Contributors

What's Changed

http4s-core

Documentation

Behind the scenes

New Contributors

What's Changed

http4s-core

Documentation

What's Changed

http4s-core

Documentation

Behind the scenes

New Contributors

What's Changed

http4s-core

http4s-server

http4s-client

Behind the scenes

New Contributors

What's Changed

http4s-core

http4s-server

http4s-client

Documentation

Behind the scenes

New Contributors

v1.0.0-M39 (2023-01-24)

What's Changed

http4s-ember-core

http4s-ember-client

Behind the scenes

What's Changed

http4s-core

http4s-server

http4s-client

http4s-ember-server

Documentation

Behind the scenes

New Contributors

What's Changed

Documentation

Behind the scenes

What's Changed

http4s-core

http4s-server

Documentation

Behind the scenes

New Contributors

What's Changed

http4s-core

Behind the scenes

What's Changed

http4s-core

http4s-server

http4s-client

Behind the scenes

New Contributors

What's Changed

http4s-core

http4s-laws

http4s-server

http4s-client

http4s-ember-core

Documentation

Behind the scenes