622: Bump hyper from 0.14.9 to 0.14.10 r=thomaseizinger a=dependabot[bot]

Bumps [hyper](https://github.com/hyperium/hyper) from 0.14.9 to 0.14.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/hyperium/hyper/releases">hyper's releases</a>.</em></p>
<blockquote>
<h2>v0.14.10</h2>
<h2>Bug Fixes</h2>
<ul>
<li><strong>http1:</strong>
<ul>
<li>reject content-lengths that have a plus sign prefix (<a href="06335158ca">06335158</a>) (<strong>Security</strong> GHSA-f3pg-qwvg-p99c)</li>
<li>protect against overflow in chunked decoder (<a href="efd9a9821f">efd9a982</a>) (<strong>Security</strong> GHSA-5h46-h7hh-c6x9)</li>
</ul>
</li>
</ul>
<h2>Features</h2>
<ul>
<li><strong>ffi:</strong> add option to get raw headers from response (<a href="8c89a8c166">8c89a8c1</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/hyperium/hyper/blob/master/CHANGELOG.md">hyper's changelog</a>.</em></p>
<blockquote>
<h3>v0.14.10 (2021-07-07)</h3>
<h4>Bug Fixes</h4>
<ul>
<li><strong>http1:</strong>
<ul>
<li>reject content-lengths that have a plus sign prefix (<a href="06335158ca">06335158</a>)</li>
<li>protect against overflow in chunked decoder (<a href="efd9a9821f">efd9a982</a>)</li>
</ul>
</li>
</ul>
<h4>Features</h4>
<ul>
<li><strong>ffi:</strong> add option to get raw headers from response (<a href="8c89a8c166">8c89a8c1</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="9b69cbc254"><code>9b69cbc</code></a> v0.14.10</li>
<li><a href="1fb719e0b6"><code>1fb719e</code></a> fix(http1): reject content-lengths that have a plus sign prefix</li>
<li><a href="1068b994df"><code>1068b99</code></a> fix(http1): protect against overflow in chunked decoder</li>
<li><a href="11cb4725ad"><code>11cb472</code></a> refactor(http2): fix unstable name clash of Cursor::remaining</li>
<li><a href="13594c377d"><code>13594c3</code></a> chore(github): merge duplicate issue templates</li>
<li><a href="c60a9dd9c9"><code>c60a9dd</code></a> chore(github): add issue templates</li>
<li><a href="8c89a8c166"><code>8c89a8c</code></a> feat(ffi): add option to get raw headers from response</li>
<li><a href="08b2138e40"><code>08b2138</code></a> refactor(error): add header parse error details in <code>hyper::Error</code></li>
<li><a href="ea8b0cd86e"><code>ea8b0cd</code></a> refactor(error): remove PartialEq derives for error kind enums</li>
<li>See full diff in <a href="https://github.com/hyperium/hyper/compare/v0.14.9...v0.14.10">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hyper&package-manager=cargo&previous-version=0.14.9&new-version=0.14.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
bors[bot] 2021-07-08 12:23:23 +00:00 committed by GitHub
commit 3e3015a478
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

10
Cargo.lock generated
View File

@ -1553,9 +1553,9 @@ dependencies = [
[[package]]
name = "hyper"
version = "0.14.9"
version = "0.14.10"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "07d6baa1b441335f3ce5098ac421fb6547c46dda735ca1bc6d0153c838f9dd83"
checksum = "7728a72c4c7d72665fde02204bcbd93b247721025b222ef78606f14513e0fd03"
dependencies = [
"bytes 1.0.1",
"futures-channel",
@ -1582,7 +1582,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "5f9f7a97316d44c0af9b0301e65010573a853a9fc97046d7331d7f6bc0fd5a64"
dependencies = [
"futures-util",
"hyper 0.14.9",
"hyper 0.14.10",
"log 0.4.14",
"rustls 0.19.0",
"tokio",
@ -3300,7 +3300,7 @@ dependencies = [
"futures-util",
"http",
"http-body",
"hyper 0.14.9",
"hyper 0.14.10",
"hyper-rustls",
"ipnet",
"js-sys",
@ -4063,7 +4063,7 @@ dependencies = [
"ed25519-dalek",
"futures",
"get-port",
"hyper 0.14.9",
"hyper 0.14.10",
"itertools 0.10.1",
"libp2p",
"miniscript",