SwiftNIO HTTP/2 1.22.0

SemVer Minor

• Adopt Sendable in relevant types (#343)
• Make HPACKHeaders hashable. (#344)

SemVer Patch

• Improve HTTPHeader normalisation performance for large inputs (#347)

Other Changes

• Add script to list transitive dependencies (#340)
• Remove build_podspec.sh (#341)
• HPACKHeaders performance test for HTTPHeader normalisation (#346)

SwiftNIO HTTP/2 1.21.0

SemVer Minor

• Drop support for Swift 5.2 and 5.3 (#337)

Other Changes

• Use SPM API diff checker (#334)
• Fix warnings, that appeared after requiring Swift 5.4 (#338)

SwiftNIO HTTP/2 1.20.1

SemVer Patch

• Forbid clients from pushing (#332)

Other Changes

• ci update (#329)
• Update alloc limits and clean up soundness (#331)

SwiftNIO HTTP/2 1.20.0

Security Fixes

This version contains a fix for CVE-2022-0618: Denial of service via HTTP/2 HEADERS frames padding. This fix involves a substantial rewrite of the frame parser to address a number of related issues that all trigger crashes in swift-nio-http2. For more details see the advisory. We recommend updating to this release as soon as possible. (commit)

SemVer Minor

• Make UnrepresentableInteger public (#325)

SemVer Patch

• Remove a retain/release (#327)
• Use unchecked math in encodeInteger (#328)

Other Changes

• Update minimum dependency version in README (#326)

SwiftNIO HTTP/2 1.19.2

The release contains fixes for three security vulnerabilties.

SemVer Patch

• CVE-2022-24668: Denial of service via ALTSVC or ORIGIN frames
• CVE-2022-24667: Denial of service via mishandled HPACK variable length integer encoding
• CVE-2022-24666: Denial of service via invalid HTTP/2 HEADERS frame length

Other Changes

• Update doc generation script (#322)
• Add 5.6 nightly CI (#324)

SwiftNIO HTTP/2 1.19.1

SemVer Patch

• Protect against reentrancy inside the HTTP2ChannelHandler (#319)
• Only flush when necessary in the HTTP2ChannelHandler (#320)

Other Changes

• Update nightly allocation limits (#321)

SwiftNIO HTTP/2 1.19.0

SemVer Minor

• Deliver outbound stream errors to channels. (#315)

SemVer Patch

• Add Transfer-Encoding chunked to HTTP1 requests and responses. (#316)
• Forward all reads before stream channel inactive (#317)

SwiftNIO HTTP/2 1.18.5

SemVer Patch

• Remove forbidden HTTP1 headers even if no connection header is present (#311)

Other Changes

• Swift nightly has improved alloc counts. (#314)

SwiftNIO HTTP/2 1.18.4

SemVer Patch

• Improve performance of HPACKHeaders.subscript(canonicalForm:) (#304, #308, #310)
• Don't count CR or LF as whitespace when trimming whitespace from header values (#306)
• Ignore empty values when returning canonical form of header values (#307)

Other Changes

• Update to 5.5 release in CI (#301)
• Account for improved allocs on nightly (#302)
• Add perf and alloc tests for getting headers (#303)

SwiftNIO HTTP/2 1.18.3

SemVer Patch

• Clean up imports and dependencies (#300)

Other Changes

• Fix doc generation and jazzy version (#298)