Skip to content

chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.3.1 to 5.6.1 - #1214

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1
Open

chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.3.1 to 5.6.1#1214
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMay 22, 2026

Copy link
Copy Markdown
Contributor

Bumps org.apache.httpcomponents.client5:httpclient5 from 5.3.1 to 5.6.1.

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6.1

This is a maintenance release disables experimental SCRAM auth scheme by default and fixes SCRAM final response handling. The SCRAM auth scheme can be re-enabled by choosing a custom auth scheme preference sequence that explicitly includes SCRAM auth.

Change Log

  • Fix SCRAM final response handling. Contributed by Arturo Bernal

  • Auth challenge parsing code improvement. Contributed by Oleg Kalnichevski

  • Add missing Javadoc for ConnectionConfig (#820). Contributed by Gary Gregory

  • Bug fix: Corrected async message exchange cancellation logic in InternalHttpAsyncExecRuntime. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2417: Honor TlsConfig attachment in async connect path. Contributed by Arturo Bernal

  • HTTPCLIENT-2414: Fix Basic auth cache scoping across path prefixes (#802). Contributed by Arturo Bernal

  • HTTPCLIENT-2415: Normalize CookieOrigin path for cookie matching (#803). Contributed by Arturo Bernal

  • Bug fix: Corrected sleep time calculation in IdleConnectionEvictor; use 1 minute sleep time by default. Contributed by Oleg Kalnichevski

  • DefaultManagedHttpClientConnection: Restore original socket timeout. Contributed by Ryan Schmitt

  • HTTPCLIENT-2411: Use standard HTTP-date format for synthesized Date header (#775). Contributed by Arturo Bernal

  • Fix NPE in connection evictor setup (#774). Contributed by Arturo Bernal

Release 5.6

... (truncated)

Commits
  • 4f86ca6 HttpClient 5.6.1 release
  • 1b2bafe Updated release notes for HttpClient 5.6.1 release
  • 1acf00b Fix SCRAM final response handling
  • 49549ab Auth challenge parsing code improvement
  • fa6b6d7 Add missing Javadoc for ConnectionConfig (#820)
  • 3de8ad5 Fixed DefaultClientTlsStrategy test failures on MacOS
  • c69f38f Bug-fix: corrects message exchange cancellation logic in InternalHttpAsyncExe...
  • 30386d3 HTTPCLIENT-2417 Honor TlsConfig attachment in async connect path
  • 9cc45f6 HTTPCLIENT-2414 - Fix Basic auth cache scoping across path prefixes (#802)
  • 1e01a48 HTTPCLIENT-2415: Normalize CookieOrigin path for cookie matching (#803)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 22, 2026
@dependabot
dependabotBotforce-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch 2 times, most recently from 3385dc3 to d36a49bCompareMay 26, 2026 16:55
@dependabot
dependabotBotforce-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch 2 times, most recently from 808b67c to 8eb4241CompareJune 10, 2026 16:45
Bumps [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) from 5.3.1 to 5.6.1.
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.1/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.3.1...rel/v5.6.1)
---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.client5:httpclient5
dependency-version: 5.6.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.1 branch from 8eb4241 to 3f0270cCompareJune 10, 2026 16:52
@dependabot@github

dependabotBot commented on behalf of githubJul 3, 2026

Copy link
Copy Markdown
ContributorAuthor

A newer version of org.apache.httpcomponents.client5:httpclient5 exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@yvonnep165