bump hackney to 1.21.0

benoitc · Feb 20, 2025 · 6eaca56 · 6eaca56
1 parent 90a1fe4
commit 6eaca56
Show file tree

Hide file tree

Showing 8 changed files with 27 additions and 18 deletions.
diff --git a/LICENSE b/LICENSE
@@ -1,4 +1,4 @@
-2012-2023 (c) Benoît Chesneau <bchesneau@pm.me>
+2012-2025 (c) Benoît Chesneau <bchesneau@pm.me>
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

diff --git a/NEWS.md b/NEWS.md
@@ -1,6 +1,21 @@
 # NEWS
+1.21.0 - 2025-02-20
+-------------------
+
+- fix: remove SSL options incompatible with tls 1.3
+- fix: url parsing handle "/" path correctly
+- fix: simplify integration test suite
+- fix: handle chunked response in redirect responses
+- fix: handle http & https proxies separately
+- fix: skip junk lines in 1.xx response
+
+** security fixes ***
+
+- fix URL parsing to prevent SSRF . (related to CVE-2025-1211)
+- use latest SSL certificate bundle
+
 
-1.20.1 - 2013-10-11
+1.20.1 - 2023-10-11
 -------------------
 
 - fix multipart: handle case where Length is undefined

diff --git a/NOTICE b/NOTICE
@@ -1,7 +1,7 @@
 hackney
 -------
 
-2012-2023 (c) Benoît Chesneau <bchesneau@pm.me>
+2012-2025 (c) Benoît Chesneau <bchesneau@pm.me>
 
 hackney is released under the Apache 2 license. See the LICENSE file for
 the complete license.

diff --git a/README.md b/README.md
@@ -2,9 +2,9 @@
 
 # hackney - HTTP client library in Erlang #
 
-Copyright (c) 2012-2023 Benoît Chesneau.
+Copyright (c) 2012-2025 Benoît Chesneau.
 
-__Version:__ 1.20.1
+__Version:__ 1.21.0
 
 # hackney
 

diff --git a/TODO.md b/TODO.md
@@ -1,18 +1,12 @@
 # TODO
 
-1.21.0
+2.0.0
 ------
 
 - Improve pool
 - Improve proxying
-
-2.0.0
------
 - Support Websockets 
 - Support HTTP 2
 - Request / Response hooks
 - Dynamic response behaviour.
-
-2.1.0
------
 - Support HTTP 3
diff --git a/doc/README.md b/doc/README.md
@@ -2,9 +2,9 @@
 
 # hackney - HTTP client library in Erlang #
 
-Copyright (c) 2012-2023 Benoît Chesneau.
+Copyright (c) 2012-2025 Benoît Chesneau.
 
-__Version:__ 1.20.1
+__Version:__ 1.21.0
 
 # hackney
 

diff --git a/doc/overview.edoc b/doc/overview.edoc
@@ -1,6 +1,6 @@
 
 %%==============================================================================
-%% Copyright 2012-2021 Benoît Chesneau
+%% Copyright 2012-2025 Benoît Chesneau
 %%
 %% Licensed under the Apache License, Version 2.0 (the "License");
 %% you may not use this file except in compliance with the License.
@@ -16,8 +16,8 @@
 %%==============================================================================
 
 
-@copyright 2012-2023 Benoît Chesneau.
-@version 1.20.1
+@copyright 2012-2025 Benoît Chesneau.
+@version 1.21.0
 @title hackney - HTTP client library in Erlang
 
 @doc

diff --git a/src/hackney.app.src b/src/hackney.app.src
@@ -4,7 +4,7 @@
 {application, hackney,
   [
     {description, "simple HTTP client"},
-    {vsn, "1.20.1"},
+    {vsn, "1.21.0"},
     {registered, [hackney_pool]},
     {applications, [kernel,
       stdlib,