Skip to content

Release 4.9.0 - #992

Merged
benoitc merged 1 commit into
masterfrom
release/4.9.0
Oct 25, 2026
Merged

benoitc merged 1 commit into
masterfrom
release/4.9.0

Conversation

@benoitc

@benoitc benoitc commented Oct 25, 2026

Copy link
Copy Markdown
Owner

Adds the max_body_size option and ships the security fixes merged since 4.8.7 (#987, #978, #979, #980, #988, #989) plus the pool fixes #973 and #984.

Behaviour changes: buffered bodies over 512 MiB now fail unless max_body_size is raised, and pinned cacerts that include public roots no longer get the cross-sign fallback.

@benoitc
benoitc merged commit 0f5db33 into master Oct 25, 2026
11 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4.x: the pool dials inside handle_call, so one slow or unreachable host stalls checkouts for every host

1 participant