Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[dotnet] Update dependency BenderProxy to 1.1.2 #14965

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 28, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
BenderProxy 1.0.0 -> 1.1.2 age adoption passing confidence

Release Notes

jimevans/BenderProxy (BenderProxy)

v1.1.2

==================================
This release fixes two bugs in BenderProxy. The first bug is that if a socket
exception is encountered after shutdown of the proxy has been requested, the
proxy now swallows and ignores the exception. Since socket processing is
asynchronous, it's possible for the proxy to attempt connection after no
socket exists, and the exception is benign, since a shutdown was explicitly
requested anyway.

The second bug is in the processing of responses that utilize chunked
encoding. Previously, after reading the results of a chunk, the proxy tried
to read the length of the next chunk, by reading the next line of the body
stream. However, if there are no more chunks, this could cause the reader
to attempt reading past the end of the stream, causing an exception. To
mitigate this, after reading a chunk, the proxy now advances the stream
pointer two bytes, past the carriage-return/line-feed pair (CRLF) that
marks the end of a chunk. The proxy can then properly determine if it's
reached the end of the stream before attempting to read another chunk.

v1.1.1

==================================
This release changes the behavior of the proxy when multiple headers with the
same name are encountered. Previously, BenderProxy would concatenate the
values for multiple header instances with commas. However, parsing these
multiple values back out was nearly impossible, since the header value could
legitimately contain a comma. Now, the proxy concatenates the values using
carriage-return/line-feed pairs (CRLF), which the header value cannot
contain, because a CRLF pair signifies the end of a header in HTTP. This
enables the user to properly separate multiple header values when handling
HTTP traffic. Note that this is a proxy-only change; it does not affect
the actual HTTP traffic across the wire.

v1.1.0

==================================
This release adds support for persistent or so-called "keep-alive" connections
to be used. This allows BenderProxy to enable scenarios like authentication
using connection-based protocols like NTLM. The proxy now defaults to using
persistent connections. To revert to the previous behavior of closing the
connection to the server on every HTTP request, set the EnableKeepAlive
property of the HttpProxy to false.

Additionally, it attempts to make multiple subsequent calls that should reuse
the same socket more thread-safe, and keep them from stepping on one another.
Unfortunately, the way this is currently implemented is likely to introduce
a performance bottleneck in the proxy, because only one request can be
processed at a time. A rearchitecture to allow parallel HTTP calls should be
created at some point.

Finally, this release fixes a bug in parsing of HTTP headers. Header names,
according to spec are supposed to be case-insensitive, and the proxy was
not treating them that way.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added C-dotnet dependencies Pull requests that update a dependency file labels Dec 28, 2024
Copy link
Contributor Author

renovate bot commented Dec 28, 2024

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (1.1.2). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/benderproxy-1.x branch December 28, 2024 20:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
C-dotnet dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant