Skip to content

Bump the swift group across 2 directories with 5 updates - #3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/swift/swift-d79ab98f01
Open

Bump the swift group across 2 directories with 5 updates#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/swift/swift-d79ab98f01

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown

Bumps the swift group with 3 updates in the / directory: github.com/vapor/vapor, github.com/apple/swift-nio-extras and github.com/vapor/leaf-kit.
Bumps the swift group with 2 updates in the /ExampleApp directory: github.com/vapor/vapor and github.com/apple/swift-nio-extras.

Updates github.com/vapor/vapor from 4.76.3 to 4.90.0

Release notes

Sourced from github.com/vapor/vapor's releases.

4.90.0

⚠️ Security Update ⚠️

This release fixes a long standing issue in Vapor's URI parsing if users attempt to parse untrusted input that could lead to potential host spoofing. This was caused by using a C implementation with a uint16_t index with no bounds checking. For more details see the security advisory GHSA-qvxg-wjxc-r4gg.

This vulnerability has been designated as CVE-2024-21631. Thank you to baarde for reporting!

4.89.3 - Fix setting public folder for FileMiddleware when using bundles

What's Changed

Fix setting public folder for FileMiddleware when using bundles by @​grantjbutler in #3113

This PR fixes an issue where, if you provided a subfolder within a bundle’s resources, the wrong path would be provided to the FileMiddleware, causing the resources to not be loaded.

For example, given a bundle with the following structure:

App.app/
└── Contents/
    ├── MacOS/
    │   └── App
    └── Resources/
        └── web-app/
            └── Public
                └── index.html

If you tried to create an instance of FileMiddleware that tried to use web-app/Public/ as the folder to serve files from, FileMiddleware would incorrectly use the resource path of the bundle (App.app/Resources/) instead of the full path to the specified folder (App.app/Resources/web-app/Public/).

New Contributor

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.89.2...4.89.3

4.89.2 - Consistently use the value from X-Request-Id as the request's ID when present

What's Changed

Consistently use the value from X-Request-Id as the request's ID when present by @​baarde in #3117

Changes

This PR ensures that the Request’s id and the value of the logger’s request-id value are the same.

Motivation

The Request’s id property was added in #2964 to expose the request-id identifier used for logging.

#3072 changed this behavior. The request-id identifier is now set:

... (truncated)

Commits

Updates github.com/apple/swift-nio from 2.53.0 to 2.78.0

Release notes

Sourced from github.com/apple/swift-nio's releases.

SwiftNIO 2.78.0

What's Changed

This release contains a number of features that have been added to enable the SwiftNIO ecosystem to adopt strict concurrency checking and the Swift 6 language mode more easily. In particular, this release migrates NIOCore and NIOEmbedded, two critical and widespread dependencies.

This release also contains new tools for making adoption easier, in particular the isolated views of EventLoop, EventLoopPromise, and EventLoopFuture. For more details on how to use these types to make adoption of strict concurrency easier, please see our documentation on the relationship between EventLoops, EventLoopFutures, and Swift's concurrency model.

More work in this area is ongoing, and will be released in subsequent versions.

SemVer Minor

SemVer Patch

Other Changes

... (truncated)

Commits
  • 27c839f GetaddrinfoResolver succeeds futures on eventLoop (#3042)
  • 4292153 Support concurrency take over in 6.2 (#3043)
  • 100b1f4 Print alloc-limits-from-test-output usage when no args (#3041)
  • 56f9b7c Fix flaky test testTasksScheduledDuringShutdownAreAutomaticallyCancel… (#3036)
  • 7dea8e7 Update release.yml and label action (#3035)
  • 2122fd8 Import Android instead for NIOEmbedded (#3033)
  • d73d862 Wait for closeFuture instead of close promise in NIOAsyncChannel's `execu...
  • 6008911 Enable MemberImportVisibility check - attempt 2 (#3029)
  • 2d72ada Get NIOEmbedded clean under strict concurrency (#3030)
  • 1a3229b Fix now-racy scheduled callback tests (#3031)
  • Additional commits viewable in compare view

Updates github.com/apple/swift-nio-http2 from 1.26.0 to 1.35.0

Release notes

Sourced from github.com/apple/swift-nio-http2's releases.

SwiftNIO HTTP/2 1.35.0

What's Changed

SemVer Minor

SemVer Patch

Other Changes

New Contributors

Full Changelog: apple/swift-nio-http2@1.34.1...1.35.0

SwiftNIO HTTP/2 1.34.1

What's Changed

SemVer Patch

Other Changes

New Contributors

Full Changelog: apple/swift-nio-http2@1.34.0...1.34.1

SwiftNIO HTTP/2 1.34.0

What's Changed

... (truncated)

Commits
  • 170f4ca Don't fail closeFuture when an error occurs on closing (#487)
  • 2083f5d Enable MemberImportVisibility check on all targets (#486)
  • adbe5af Aligning semantic version label check name (#485)
  • 1879e72 Finish multiplexer's inbound streams in more cases (#483)
  • bb19976 unify scheduled and main yamls (#482)
  • 91136a6 Make configureHTTP2AsyncSecureUpgrade public (#480)
  • 04a093d Add a variant of configureAsyncHTTPServerPipeline which takes a stream dele...
  • 1959f76 Import new Android overlay instead in the tests (#479)
  • 4bce87f Enable ShellCheck CI (#478)
  • 6c86975 Remove unused dockerfiles and allocation scripts (#477)
  • Additional commits viewable in compare view

Updates github.com/apple/swift-nio-extras from 1.19.0 to 1.24.1

Release notes

Sourced from github.com/apple/swift-nio-extras's releases.

SwiftNIO Extras 1.24.1

What's Changed

SemVer Patch

Other Changes

Full Changelog: apple/swift-nio-extras@1.24.0...1.24.1

SwiftNIO Extras 1.24.0

SemVer Minor

SwiftNIO Extras 1.23.0

SemVer Minor

  • Raise minimum swift version to 5.8 (#218)

SemVer Patch

  • Fix NIOHTTPDecompression bug for multi-request channels (#221, patch credit to @​sidepelican)
  • Use oldHeaders.count when reserving capacity in HTTPFields (#223, patch credit to @​Joannis)
  • HTTP Compression Test with 304 Not Modified Responses (#224, patch credit to @​dimitribouniol)
  • Enable automatic compression format detection (#208)
  • Clean up @retroactive conformances (#222)

Other Changes

  • Fixed the shutdown order for quiescing demo (#220, patch credit to @​crontab)

SwiftNIO Extras 1.22.0

SemVer Minor

  • Make HTTP type conversion code public (#216, patch credit to @​adam-fowler)
  • LineBasedFrameDecoder: can be a NIOSingleStepByteToMessageDecoder (#217)

SwiftNIO Extras 1.21.0

SemVer Minor

  • HTTPType channel handlers RemovableChannelHandler conformance (#213, patch credit to @​adam-fowler)

SemVer Patch

  • Changes for Musl support. (#211, patch credit to @​al45tair)
  • Don't reserve capacity for NIOPCAPRingBuffer (#209)

... (truncated)

Commits

Updates github.com/vapor/leaf-kit from 1.10.2 to 1.12.0

Release notes

Sourced from github.com/vapor/leaf-kit's releases.

1.11.1 - Fix and add tests for requireBody() and requireNoBody()

What's Changed

Fix and add tests for requireBody() and requireNoBody() by @​fpseverino in #133

Issue #123

  • Fix and add tests for requireBody() and requireNoBody()
This patch was released by @​0xTim

Full Changelog: vapor/leaf-kit@1.11.0...1.11.1

1.10.6 - Allow escaped quotes in tag parameters

What's Changed

Allow escaped quotes in tag parameters by @​roya1v in #124

Allows escaped quotes in tag parameters so you can do something like #myCustomTag("this \"thing\" is cool")

Solves #122

This patch was released by @​0xTim

Full Changelog: vapor/leaf-kit@1.10.5...1.10.6

1.10.5 - Fix crash with missing parameter

What's Changed

Fix crash with missing parameter by @​b-nassler in #130

This line https://github.com/vapor/leaf-kit/blob/main/Sources/LeafKit/LeafParser/LeafParser.swift#L203 would cause a crash when no parameters are found

Fixed issue that lead to a crash when parameters would be empty in line https://github.com/vapor/leaf-kit/blob/main/Sources/LeafKit/LeafParser/LeafParser.swift#L203

New Contributor

This patch was released by @​0xTim

Full Changelog: vapor/leaf-kit@1.10.4...1.10.5

1.10.4 - Fix extend not rendered when wrapped by with

What's Changed

Fix extend not rendered when wrapped by with by @​benblakely in #129

When an #extend was wrapped by a #with, the #extend wasn’t rendered.

... (truncated)

Commits

Updates github.com/vapor/vapor from 4.76.0 to 4.90.0

Release notes

Sourced from github.com/vapor/vapor's releases.

4.90.0

⚠️ Security Update ⚠️

This release fixes a long standing issue in Vapor's URI parsing if users attempt to parse untrusted input that could lead to potential host spoofing. This was caused by using a C implementation with a uint16_t index with no bounds checking. For more details see the security advisory GHSA-qvxg-wjxc-r4gg.

This vulnerability has been designated as CVE-2024-21631. Thank you to baarde for reporting!

4.89.3 - Fix setting public folder for FileMiddleware when using bundles

What's Changed

Fix setting public folder for FileMiddleware when using bundles by @​grantjbutler in #3113

This PR fixes an issue where, if you provided a subfolder within a bundle’s resources, the wrong path would be provided to the FileMiddleware, causing the resources to not be loaded.

For example, given a bundle with the following structure:

App.app/
└── Contents/
    ├── MacOS/
    │   └── App
    └── Resources/
        └── web-app/
            └── Public
                └── index.html

If you tried to create an instance of FileMiddleware that tried to use web-app/Public/ as the folder to serve files from, FileMiddleware would incorrectly use the resource path of the bundle (App.app/Resources/) instead of the full path to the specified folder (App.app/Resources/web-app/Public/).

New Contributor

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.89.2...4.89.3

4.89.2 - Consistently use the value from X-Request-Id as the request's ID when present

What's Changed

Consistently use the value from X-Request-Id as the request's ID when present by @​baarde in #3117

Changes

This PR ensures that the Request’s id and the value of the logger’s request-id value are the same.

Motivation

The Request’s id property was added in #2964 to expose the request-id identifier used for logging.

#3072 changed this behavior. The request-id identifier is now set:

... (truncated)

Commits

Updates github.com/apple/swift-nio from 2.53.0 to 2.78.0

Release notes

Sourced from github.com/apple/swift-nio's releases.

SwiftNIO 2.78.0

What's Changed

This release contains a number of features that have been added to enable the SwiftNIO ecosystem to adopt strict concurrency checking and the Swift 6 language mode more easily. In particular, this release migrates NIOCore and NIOEmbedded, two critical and widespread dependencies.

This release also contains new tools for making adoption easier, in particular the isolated views of EventLoop, EventLoopPromise, and EventLoopFuture. For more details on how to use these types to make adoption of strict concurrency easier, please see our documentation on the relationship between EventLoops, EventLoopFutures, and Swift's concurrency model.

More work in this area is ongoing, and will be released in subsequent versions.

SemVer Minor

SemVer Patch

Other Changes

... (truncated)

Commits
  • 27c839f GetaddrinfoResolver succeeds futures on eventLoop (#3042)
  • 4292153 Support concurrency take over in 6.2 (#3043)
  • 100b1f4 Print alloc-limits-from-test-output usage when no args (#3041)
  • 56f9b7c Fix flaky test testTasksScheduledDuringShutdownAreAutomaticallyCancel… (#3036)
  • 7dea8e7 Update release.yml and label action (#3035)
  • 2122fd8 Import Android instead for NIOEmbedded (#3033)
  • d73d862 Wait for closeFuture instead of close promise in NIOAsyncChannel's `execu...
  • 6008911 Enable MemberImportVisibility check - attempt 2 (#3029)
  • 2d72ada Get NIOEmbedded clean under strict concurrency (#3030)
  • 1a3229b Fix now-racy scheduled callback tests (#3031)
  • Additional commits viewable in compare view

Updates github.com/apple/swift-nio-http2 from 1.26.0 to 1.35.0

Release notes

Sourced from github.com/apple/swift-nio-http2's releases.

SwiftNIO HTTP/2 1.35.0

What's Changed

SemVer Minor

SemVer Patch

Other Changes

New Contributors

Full Changelog: apple/swift-nio-http2@1.34.1...1.35.0

SwiftNIO HTTP/2 1.34.1

What's Changed

SemVer Patch

Other Changes

New Contributors

Full Changelog: apple/swift-nio-http2@1.34.0...1.34.1

SwiftNIO HTTP/2 1.34.0

What's Changed

... (truncated)

Commits
  • 170f4ca Don't fail closeFuture when an error occurs on closing (#487)
  • 2083f5d Enable MemberImportVisibility check on all targets (#486)
  • adbe5af Aligning semantic version label check name (#485)
  • 1879e72 Finish multiplexer's inbound streams in more cases (#483)
  • bb19976 unify scheduled and main yamls (#482)
  • 91136a6 Make configureHTTP2AsyncSecureUpgrade public (#480)
  • 04a093d Add a variant of configureAsyncHTTPServerPipeline which takes a stream dele...
  • 1959f76 Import new Android overlay instead in the tests (#479)
  • 4bce87f Enable ShellCheck CI (

@dependabot
Bump the swift group across 2 directories with 5 updates
5ea9c24 
Bumps the swift group with 3 updates in the / directory: [github.com/vapor/vapor](https://github.com/vapor/vapor), [github.com/apple/swift-nio-extras](https://github.com/apple/swift-nio-extras) and [github.com/vapor/leaf-kit](https://github.com/vapor/leaf-kit).
Bumps the swift group with 2 updates in the /ExampleApp directory: [github.com/vapor/vapor](https://github.com/vapor/vapor) and [github.com/apple/swift-nio-extras](https://github.com/apple/swift-nio-extras).


Updates `github.com/vapor/vapor` from 4.76.3 to 4.90.0
- [Release notes](https://github.com/vapor/vapor/releases)
- [Commits](vapor/vapor@4.76.3...4.90.0)

Updates `github.com/apple/swift-nio` from 2.53.0 to 2.78.0
- [Release notes](https://github.com/apple/swift-nio/releases)
- [Commits](apple/swift-nio@2.53.0...2.78.0)

Updates `github.com/apple/swift-nio-http2` from 1.26.0 to 1.35.0
- [Release notes](https://github.com/apple/swift-nio-http2/releases)
- [Commits](apple/swift-nio-http2@1.26.0...1.35.0)

Updates `github.com/apple/swift-nio-extras` from 1.19.0 to 1.24.1
- [Release notes](https://github.com/apple/swift-nio-extras/releases)
- [Commits](apple/swift-nio-extras@1.19.0...1.24.1)

Updates `github.com/vapor/leaf-kit` from 1.10.2 to 1.12.0
- [Release notes](https://github.com/vapor/leaf-kit/releases)
- [Commits](vapor/leaf-kit@1.10.2...1.12.0)

Updates `github.com/vapor/vapor` from 4.76.0 to 4.90.0
- [Release notes](https://github.com/vapor/vapor/releases)
- [Commits](vapor/vapor@4.76.3...4.90.0)

Updates `github.com/apple/swift-nio` from 2.53.0 to 2.78.0
- [Release notes](https://github.com/apple/swift-nio/releases)
- [Commits](apple/swift-nio@2.53.0...2.78.0)

Updates `github.com/apple/swift-nio-http2` from 1.26.0 to 1.35.0
- [Release notes](https://github.com/apple/swift-nio-http2/releases)
- [Commits](apple/swift-nio-http2@1.26.0...1.35.0)

Updates `github.com/apple/swift-nio-extras` from 1.19.0 to 1.24.1
- [Release notes](https://github.com/apple/swift-nio-extras/releases)
- [Commits](apple/swift-nio-extras@1.19.0...1.24.1)

---
updated-dependencies:
- dependency-name: github.com/vapor/vapor
  dependency-version: 4.90.0
  dependency-type: direct:production
  dependency-group: swift
- dependency-name: github.com/apple/swift-nio
  dependency-version: 2.78.0
  dependency-type: indirect
  dependency-group: swift
- dependency-name: github.com/apple/swift-nio-http2
  dependency-version: 1.35.0
  dependency-type: indirect
  dependency-group: swift
- dependency-name: github.com/apple/swift-nio-extras
  dependency-version: 1.24.1
  dependency-type: indirect
  dependency-group: swift
- dependency-name: github.com/vapor/leaf-kit
  dependency-version: 1.12.0
  dependency-type: indirect
  dependency-group: swift
- dependency-name: github.com/vapor/vapor
  dependency-version: 4.90.0
  dependency-type: direct:production
  dependency-group: swift
- dependency-name: github.com/apple/swift-nio
  dependency-version: 2.78.0
  dependency-type: indirect
  dependency-group: swift
- dependency-name: github.com/apple/swift-nio-http2
  dependency-version: 1.35.0
  dependency-type: indirect
  dependency-group: swift
- dependency-name: github.com/apple/swift-nio-extras
  dependency-version: 1.24.1
  dependency-type: indirect
  dependency-group: swift
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file swift_package_manager Pull requests that update swift_package_manager code labels Jul 15, 2026
@dependabot dependabot Bot mentioned this pull request Jul 15, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file swift_package_manager Pull requests that update swift_package_manager code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants