Skip to content

build(deps): Bump github.com/hummingbird-project/hummingbird from 2.26.0 to 2.27.1 - #528

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/swift/github.com/hummingbird-project/hummingbird-2.27.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/swift/github.com/hummingbird-project/hummingbird-2.27.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/hummingbird-project/hummingbird from 2.26.0 to 2.27.1.

Release notes

Sourced from github.com/hummingbird-project/hummingbird's releases.

v2.27.1

Patch release changes

  • Fix lost produceMore event in RequestBody.Source.yield, fixing hangs when creating a new RequestBody source eg when using inbound close handlers. #908 from @​roman-ambinder
  • Remove unused OutputBuffer. #905

v2.27.0

Minor release changes

  • Add FullFoundation trait that enables APIs using symbols from Foundation and not FoundationEssentials. This trait is enabled by default. #899
  • Drop support for swift 6.1 and add support for swift 6.2. #903

Patch release changes

  • Add accept-headers header to FileMiddleware responses. #900

Other changes

  • Add GitHub action to verify Hummingbird without FullFoundation trait does not use Foundation.
Commits
  • f2a7f91 Update Software Bill of Materials (SBOM) (#914)
  • 5718780 Update from hummingbird-project-template 15a2b9dee9af980910c4371413ee88d80433...
  • 61fa491 Remove unused code, fix sometime failing test (#905)
  • 00d3831 Fix lost produceMore in RequestBody.Source.yield (#908)
  • 0806106 Bump the dependencies group across 1 directory with 2 updates (#909)
  • bb1f427 Update Software Bill of Materials (SBOM) (#904)
  • b8e4931 Remove 6.1 version of Package.swift (#903)
  • 628ec9d Update Software Bill of Materials (SBOM) (#902)
  • 654470d Add FullFoundation trait that enables code needing the full Foundation libr...
  • 049261a Add accept-ranges header for file middleware requests (#900)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/hummingbird-project/hummingbird](https://github.com/hummingbird-project/hummingbird) from 2.26.0 to 2.27.1.
- [Release notes](https://github.com/hummingbird-project/hummingbird/releases)
- [Commits](hummingbird-project/hummingbird@2.26.0...2.27.1)

---
updated-dependencies:
- dependency-name: github.com/hummingbird-project/hummingbird
  dependency-version: 2.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file swift_package_manager Pull requests that update swift_package_manager code labels Oct 14, 2026

@Arthur-Ficial Arthur-Ficial left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated PR Review — Dependabot Hummingbird Bump

PR type: Build/CI (lockfile-only)
Change: Package.resolved — Hummingbird 2.26.0 → 2.27.1 (1 file, 2 additions, 2 deletions)

Supply chain check

Check Status
Known, established dependency (hummingbird-project) ✓
Semver-compatible with from: "2.0.0" constraint ✓
Exact revision pinned in lockfile (f2a7f91) ✓
No new dependencies introduced ✓
No unsafeFlags ✓
Swift tools version 6.3 compatible (HB 2.27 dropped 6.1, added 6.2) ✓

Upstream changes (2.26.0 → 2.27.1)

v2.27.0 (minor):

  • FullFoundation trait added (enabled by default — no breaking change for apfel)
  • Dropped Swift 6.1 support (apfel uses 6.3 — no impact)
  • accept-headers on FileMiddleware responses (apfel doesn't use FileMiddleware)

v2.27.1 (patch):

  • Fix: Lost produceMore event in RequestBody.Source.yield — fixes hangs when creating a new RequestBody source (e.g. inbound close handlers). Potentially beneficial for apfel's HTTP server stability.
  • Removed unused OutputBuffer (cleanup)

What I verified

  • Package.swift constraint (from: "2.0.0") accepts 2.27.1 — no manifest change needed
  • No Sources/** changes → no CHANGELOG entry required (changelog-gate ✓)
  • No ApfelCore public API surface change expected (apfelcore-public-api CI still running)
  • No security surface changes
  • Upstream release notes contain no breaking changes for the 2.x API surface

Findings

No P0, P1, or P2 findings. This is a clean, semver-compatible lockfile bump with a beneficial bugfix.

CI status

  • changelog-gate: ✅ passed
  • build-and-test: 🔄 in progress
  • apfelcore-public-api: 🔄 in progress

Recommendation: Merge once CI is green. The RequestBody.Source.yield fix in 2.27.1 is a stability improvement relevant to apfel's HTTP server.


Generated by Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file swift_package_manager Pull requests that update swift_package_manager code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant