From 680c1a7208aeaf4f5e9286f4d64e9eb754c9968b Mon Sep 17 00:00:00 2001 From: Simba Zhang Date: Sat, 24 Oct 2026 07:09:16 -0700 Subject: [PATCH] chore: bump swift-nio stack to clear Dependabot advisories Bump three transitive pins in Package.resolved to their first patched versions. Package.swift is unchanged; swift-nio is pulled in through Hummingbird, so only the lockfile moves. - swift-nio 2.99.0 -> 2.100.0 GHSA-rj37-6j9x-74q6 (high, unbounded HTTP/1 header count) GHSA-r3rc-9hpw-54v9 (high, ByteBuffer UInt32 truncation) GHSA-cq87-8r7h-962v (medium, CRLF in outbound headers) - swift-nio-http2 1.43.0 -> 1.44.0 GHSA-4px2-pw77-vc85 (medium) - swift-nio-extras 1.34.0 -> 1.34.1 GHSA-6ph5-fww6-vfwv (medium) The HTTP/1 header-count advisory is reachable on the default listener. The others are not reached by SwiftLM's code paths; they are bumped here so the lockfile is clean. `swift package resolve` accepts the pins and changes no other entries. Compilation is verified by CI, not locally. Co-Authored-By: Claude Haiku 5.5 --- Package.resolved | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/Package.resolved b/Package.resolved index c636ff4c..336ad64c 100644 --- a/Package.resolved +++ b/Package.resolved @@ -176,8 +176,8 @@ "kind" : "remoteSourceControl", "location" : "https://github.com/apple/swift-nio.git", "state" : { - "revision" : "f71c8d2a5e74a2c6d11a0fbe324774b5d6084237", - "version" : "2.99.0" + "revision" : "57c0a08a331aaea9f5d7a932ad94ef43be942a95", + "version" : "2.100.0" } }, { @@ -185,8 +185,8 @@ "kind" : "remoteSourceControl", "location" : "https://github.com/apple/swift-nio-extras.git", "state" : { - "revision" : "5a48717e29f62cb8326d6d42e46b562ca93847a6", - "version" : "1.34.0" + "revision" : "d2eeec0339074034f11a040a74aa2a341a2c4506", + "version" : "1.34.1" } }, { @@ -194,8 +194,8 @@ "kind" : "remoteSourceControl", "location" : "https://github.com/apple/swift-nio-http2.git", "state" : { - "revision" : "81cc18264f92cd307ff98430f89372711d4f6fe9", - "version" : "1.43.0" + "revision" : "61d1b44f6e4e118792be1cff88ee2bc0267c6f9a", + "version" : "1.44.0" } }, {