cybrid_api_organization_ruby 0.129.1293 → 0.129.1295

data/vendor/bundle/ruby/4.0.0/extensions/x86_64-linux/4.0.0/psych-5.5.0/gem_make.out

@@ -4,7 +4,7 @@ checking for pkg-config for yaml-0.1... [" ", "", "-lyaml"]
 creating Makefile
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-xwtwxf sitelibdir\=./.gem.20261013-3719-xwtwxf clean
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-kehiaf sitelibdir\=./.gem.20261014-3706-kehiaf clean
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych'
 cd libyaml && make clean
 /bin/sh: 1: cd: can't cd to libyaml
@@ -12,7 +12,7 @@ make[1]: [Makefile:287: clean-so] Error 2 (ignored)
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-xwtwxf sitelibdir\=./.gem.20261013-3719-xwtwxf
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-kehiaf sitelibdir\=./.gem.20261014-3706-kehiaf
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych'
 compiling psych.c
 compiling psych_emitter.c
@@ -23,13 +23,13 @@ linking shared-object psych.so
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-xwtwxf sitelibdir\=./.gem.20261013-3719-xwtwxf install
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-kehiaf sitelibdir\=./.gem.20261014-3706-kehiaf install
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych'
-/usr/bin/install -c -m 0755 psych.so ./.gem.20261013-3719-xwtwxf
+/usr/bin/install -c -m 0755 psych.so ./.gem.20261014-3706-kehiaf
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-xwtwxf sitelibdir\=./.gem.20261013-3719-xwtwxf clean
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-kehiaf sitelibdir\=./.gem.20261014-3706-kehiaf clean
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/psych-5.5.0/ext/psych'
 cd libyaml && make clean
 /bin/sh: 1: cd: can't cd to libyaml

data/vendor/bundle/ruby/4.0.0/extensions/x86_64-linux/4.0.0/racc-1.8.1/gem_make.out

@@ -3,24 +3,24 @@ current directory: /home/circleci/project/build/public-clients/api-platform-orga
 creating Makefile
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-695pdl sitelibdir\=./.gem.20261013-3719-695pdl clean
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-qh3g59 sitelibdir\=./.gem.20261014-3706-qh3g59 clean
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse'
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-695pdl sitelibdir\=./.gem.20261013-3719-695pdl
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-qh3g59 sitelibdir\=./.gem.20261014-3706-qh3g59
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse'
 compiling cparse.c
 linking shared-object racc/cparse.so
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-695pdl sitelibdir\=./.gem.20261013-3719-695pdl install
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-qh3g59 sitelibdir\=./.gem.20261014-3706-qh3g59 install
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse'
-/usr/bin/install -c -m 0755 cparse.so ./.gem.20261013-3719-695pdl/racc
+/usr/bin/install -c -m 0755 cparse.so ./.gem.20261014-3706-qh3g59/racc
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-695pdl sitelibdir\=./.gem.20261013-3719-695pdl clean
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-qh3g59 sitelibdir\=./.gem.20261014-3706-qh3g59 clean
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse'
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/racc-1.8.1/ext/racc/cparse'

data/vendor/bundle/ruby/4.0.0/extensions/x86_64-linux/4.0.0/stringio-3.2.0/gem_make.out

@@ -4,24 +4,24 @@ checking for rb_io_mode_t in ruby/io.h... yes
 creating Makefile
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-9otxzp sitelibdir\=./.gem.20261013-3719-9otxzp clean
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-r9kz30 sitelibdir\=./.gem.20261014-3706-r9kz30 clean
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio'
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-9otxzp sitelibdir\=./.gem.20261013-3719-9otxzp
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-r9kz30 sitelibdir\=./.gem.20261014-3706-r9kz30
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio'
 compiling stringio.c
 linking shared-object stringio.so
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-9otxzp sitelibdir\=./.gem.20261013-3719-9otxzp install
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-r9kz30 sitelibdir\=./.gem.20261014-3706-r9kz30 install
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio'
-/usr/bin/install -c -m 0755 stringio.so ./.gem.20261013-3719-9otxzp
+/usr/bin/install -c -m 0755 stringio.so ./.gem.20261014-3706-r9kz30
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio'
 
 current directory: /home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio
-make DESTDIR\= sitearchdir\=./.gem.20261013-3719-9otxzp sitelibdir\=./.gem.20261013-3719-9otxzp clean
+make DESTDIR\= sitearchdir\=./.gem.20261014-3706-r9kz30 sitelibdir\=./.gem.20261014-3706-r9kz30 clean
 make[1]: Entering directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio'
 make[1]: Leaving directory '/home/circleci/project/build/public-clients/api-platform-organization/ruby/vendor/bundle/ruby/4.0.0/gems/stringio-3.2.0/ext/stringio'

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2/connection.rb

@@ -10,9 +10,6 @@ module HTTP2
   # Default stream_limit
   DEFAULT_MAX_CONCURRENT_STREAMS = 100
 
-  # Default stream priority (lower values are higher priority).
-  DEFAULT_WEIGHT = 16
-
   # Default connection "fast-fail" preamble string as defined by the spec.
   CONNECTION_PREFACE_MAGIC = "PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n"
 
@@ -66,8 +63,10 @@ module HTTP2
       @compressor   = Header::Compressor.new(@local_settings)
       @decompressor = Header::Decompressor.new(@local_settings)
 
-      @active_stream_count = 0
-      @last_stream_id = 0
+      @active_stream_count =
+        @promised_stream_count =
+          @last_promised_stream_id =
+            @last_stream_id = 0
       @streams = {}
       @streams_recently_closed = {}
       @oldest_stream_recently_closed = nil
@@ -75,10 +74,8 @@ module HTTP2
 
       @framer = Framer.new(@local_settings.settings_max_frame_size)
 
-      @local_window_limit = @local_settings.settings_initial_window_size
-      @local_window = @local_window_limit
-      @remote_window_limit = @remote_settings.settings_initial_window_size
-      @remote_window = @remote_window_limit
+      @local_window = @local_window_limit = @local_settings.settings_initial_window_size
+      @remote_window = @remote_window_limit = @remote_settings.settings_initial_window_size
 
       @recv_buffer = "".b
       @continuation = []
@@ -291,20 +288,25 @@ module HTTP2
             # Skip only this frame: later ones may serve completing streams.
             next if closed? && (stream_id > @last_stream_id || !@streams.key?(stream_id))
 
-            stream = @streams[stream_id]
-            if stream.nil?
+            unless (stream = @streams[stream_id])
               verify_pseudo_headers(frame)
 
               verify_stream_order(stream_id)
-              stream = activate_stream(
-                id: stream_id,
-                weight: frame[:weight] || DEFAULT_WEIGHT,
-                dependency: frame[:dependency] || 0,
-                exclusive: frame[:exclusive] || false
-              )
-              emit(:stream, stream)
+
+              # TODO: remove EMPTY_HASH after dropping support for ruby < 3.4 (recent rubies can
+              # receive nil as kwarg splat)
+              priority = EMPTY_HASH
+              if frame[:flags].anybits?(PRIORITY)
+                connection_error(:protocol_error, msg: "stream can't depend on itself") if stream_id == frame[:dependency]
+
+                priority = frame.slice(:weight, :dependency, :exclusive)
+              end
+
+              stream = activate_stream(id: stream_id, **priority)
             end
 
+            # streams are only emitted in a non-idle state.
+            emit(:stream, stream)
             stream << frame
 
           when :push_promise
@@ -332,6 +334,8 @@ module HTTP2
             parent = @streams[stream_id]
             pid = frame[:promise_stream]
 
+            validate_push_promise(pid)
+
             # if PUSH parent is recently closed, RST_STREAM the push
             if @streams_recently_closed[stream_id]
               send(type: :rst_stream, stream: pid, error: :refused_stream)
@@ -357,6 +361,12 @@ module HTTP2
 
             _verify_pseudo_headers(frame, REQUEST_MANDATORY_HEADERS)
             verify_stream_order(pid)
+
+            if @promised_stream_count >= @local_settings.settings_max_concurrent_streams
+              send(type: :rst_stream, stream: pid, error: :refused_stream)
+              next
+            end
+
             stream = activate_stream(id: pid, parent: parent)
             emit(:promise, stream)
             stream << frame
@@ -371,7 +381,7 @@ module HTTP2
               case frame_type
               # Priority signaling is deprecated (RFC 9113 Section 5.3.2), but
               # a PRIORITY frame may still name a stream id not opened yet:
-              # activate it, so the priority sticks if the stream opens.
+              # retain its priority without creating a stream until it opens.
               when :priority
                 # After a GOAWAY, a PRIORITY for a stream already used and
                 # closed must not resurrect it: reprioritizing a closed
@@ -379,16 +389,12 @@ module HTTP2
                 # the draining connection open.
                 next if closed? && stream_id <= @last_stream_id
 
-                stream = activate_stream(
-                  id: stream_id,
-                  weight: frame[:weight] || DEFAULT_WEIGHT,
-                  dependency: frame[:dependency] || 0,
-                  exclusive: frame[:exclusive] || false
-                )
+                connection_error(:protocol_error, msg: "stream can't depend on itself") if frame[:stream] == frame[:dependency]
 
-                emit(:stream, stream)
-                stream << frame
+                priority = frame.slice(:weight, :dependency, :exclusive)
 
+                stream = activate_stream(id: stream_id, **priority)
+                stream << frame
               # WINDOW_UPDATE can be sent by a peer that has sent a frame
               # bearing the END_STREAM flag. This means that a receiver could
               # receive a WINDOW_UPDATE frame on a "half-closed (remote)" or
@@ -557,6 +563,16 @@ module HTTP2
       end
     end
 
+    def validate_push_promise(stream_id)
+      connection_error(:protocol_error, msg: "clients cannot send PUSH_PROMISE") if @remote_role == :client
+      connection_error(:protocol_error, msg: "push promises are disabled") if @local_settings.settings_enable_push.zero?
+      unless stream_id.positive? && stream_id.even? && stream_id > @last_promised_stream_id
+        connection_error(:protocol_error, msg: "invalid promised stream ID")
+      end
+
+      @last_promised_stream_id = stream_id
+    end
+
     # Validate settings parameters.  See sepc Section 6.5.2.
     #
     # @param role [Symbol] The sender's role: :client or :server
@@ -667,12 +683,15 @@ module HTTP2
           end
 
         when :settings_header_table_size
-          # Setting header table size might cause some headers evicted
+          # The value is the maximum table size for the encoder of the other
+          # side: our setting limits the peer's encoder (our decompressor),
+          # and the peer's setting limits our encoder (our compressor).
+          # The table itself changes with the next dynamic table size update.
           case side
           when :local
-            @compressor.table_size = v
+            @decompressor.max_table_size = v
           when :remote
-            @decompressor.table_size = v
+            @compressor.max_table_size = v
           end
 
         when :settings_enable_push
@@ -681,6 +700,13 @@ module HTTP2
         when :settings_max_frame_size
           @framer.remote_max_frame_size = v
 
+        when :settings_max_header_list_size
+          case side
+          when :remote
+            @decompressor.max_header_list_size = v
+            # when :local
+            # not enforcing this on the client side
+          end
           # else # ignore unknown settings
         end
       end
@@ -785,9 +811,11 @@ module HTTP2
       raise StreamLimitExceeded if @active_stream_count >= max_concurrent_streams
 
       stream = Stream.new(connection: self, id: id, **args)
+      @promised_stream_count += 1 if stream.parent
 
       stream.once(:close) do
         @streams.delete(id)
+        @promised_stream_count -= 1 if stream.parent
 
         # A graceful GOAWAY leaves the connection :closing until the
         # tracked streams complete (Section 6.8); the last one to close

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2/header/compressor.rb

@@ -11,9 +11,11 @@ module HTTP2
         @cc = EncodingContext.new(settings)
       end
 
-      # Set dynamic table +size+ in EncodingContext
-      def table_size=(size)
-        @cc.table_size = size
+      # Set the maximum dynamic table +size+ allowed by the peer's
+      # SETTINGS_HEADER_TABLE_SIZE. The next header block starts with a
+      # dynamic table size update when the table size has to change.
+      def max_table_size=(size)
+        @cc.max_table_size = size
       end
 
       # Encodes +i+ via integer representation into +buffer+ at the offset set by +offset+.

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2/header/decompressor.rb

@@ -11,13 +11,23 @@ module HTTP2
 
       FORBIDDEN_HEADERS = %w[connection te].freeze
 
+      attr_writer :max_header_list_size
+
       def initialize(settings = Settings.new)
         @cc = EncodingContext.new(settings)
+        @max_header_list_size = settings.settings_max_header_list_size
+        @accept_invalid_headers = false
+      end
+
+      def accept_invalid_headers!
+        @accept_invalid_headers = true
       end
 
-      # Set dynamic table +size+ in EncodingContext
-      def table_size=(size)
-        @cc.table_size = size
+      # Set the maximum dynamic table +size+ allowed by our acknowledged
+      # SETTINGS_HEADER_TABLE_SIZE. When the current table is larger, the
+      # next header block has to start with a dynamic table size update.
+      def max_table_size=(size)
+        @cc.max_table_size = size
       end
 
       # Decodes integer value from provided +buffer+.
@@ -97,6 +107,7 @@ module HTTP2
       # Decodes and processes header commands within provided +buf+.
       def decode(buf, frame = nil)
         list = [] #: Array[header_pair]
+        header_list_size = 0
         decoding_pseudo_headers = true
         @cc.listen_on_table do
           until buf.empty?
@@ -104,12 +115,17 @@ module HTTP2
             next if field.nil?
 
             is_pseudo_header = field.start_with?(":")
-            if !decoding_pseudo_headers && is_pseudo_header
+            if !decoding_pseudo_headers && is_pseudo_header && !@accept_invalid_headers
               raise ProtocolError, "one or more pseudo headers encountered after regular headers"
             end
 
             decoding_pseudo_headers = is_pseudo_header
-            raise ProtocolError, "invalid header received: #{field}" if FORBIDDEN_HEADERS.include?(field)
+            if !@accept_invalid_headers && FORBIDDEN_HEADERS.include?(field)
+              raise ProtocolError, "invalid header received: #{field}"
+            end
+
+            header_list_size += field.bytesize + value.bytesize + 32
+            raise ProtocolError, "header list exceeds configured maximum" if header_list_size > @max_header_list_size
 
             if frame
               case field

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2/header/encoding_context.rb

@@ -101,13 +101,21 @@ module HTTP2
 
       # Initializes compression context with appropriate client/server
       # +settings+ and maximum size of the dynamic table.
+      #
+      # The dynamic table starts at +settings.table_size+ octets. The same
+      # value is the initial maximum size allowed for the table.
       def initialize(settings = Settings.new)
         @table = []
         @table_by_field = Hash.new { |hs, k| hs[k] = [] }
         @unshifts = 0
         @settings = settings
+        # Current dynamic table size, as known to both encoder and decoder.
         @limit = settings.table_size
-        @_table_updated = false
+        # Maximum dynamic table size allowed by SETTINGS_HEADER_TABLE_SIZE.
+        @max_size_limit =
+          # Smallest maximum size set since the last dynamic table size update.
+          @lowest_max_size_limit = MAX_HEADER_TABLE_SIZE
+        @_table_updated = @_max_table_size_updated = false
         @current_table_size = 0
       end
 
@@ -118,11 +126,15 @@ module HTTP2
         tbf = @table_by_field.transform_values(&:dup)
         unshifts = @unshifts
         l = @limit
+        ml = @max_size_limit
+        lml = @lowest_max_size_limit
         other.instance_eval do
           @table = t.dup # shallow copy
           @table_by_field = tbf
           @unshifts = unshifts
           @limit = l
+          @max_size_limit = ml
+          @lowest_max_size_limit = lml
         end
         other
       end
@@ -149,6 +161,14 @@ module HTTP2
       # - http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-10#section-4.1
       def process(cmd)
         type = cmd[:type]
+
+        # The maximum size was reduced below the current table size and the
+        # encoder has not signalled a size that fits into it.
+        if type != :changetablesize && @lowest_max_size_limit < @limit
+          raise CompressionError,
+                "dynamic table size update required"
+        end
+
         name = cmd[:name]
         value = cmd[:value]
 
@@ -156,12 +176,13 @@ module HTTP2
         when :changetablesize
           raise CompressionError, "tried to change table size after adding elements to table" if @_table_updated
 
-          # we can receive multiple table size change commands inside a header frame. However,
-          # we should blow up if we receive another frame where the new table size is bigger.
-          table_size_updated = @limit != @settings.table_size
-
-          raise CompressionError, "dynamic table size update exceed limit" if !table_size_updated && value > @limit
+          # The new maximum size MUST be lower than or equal to the limit set
+          # by SETTINGS_HEADER_TABLE_SIZE.
+          # - https://www.rfc-editor.org/rfc/rfc7541#section-6.3
+          raise CompressionError, "dynamic table size update exceed limit" if value > @max_size_limit
 
+          # The smallest maximum size set since the last update is signalled.
+          @lowest_max_size_limit = @max_size_limit if value <= @lowest_max_size_limit
           self.table_size = value
 
           nil
@@ -210,10 +231,18 @@ module HTTP2
       end
 
       # Plan +headers+ compression.
-      def encode(headers)
+      #
+      # Emits dynamic table size updates first when the table size has to
+      # change. See #max_table_size=.
+      def encode(headers, &block)
         # Literals commands are marked with :noindex when index is not used
         noindex = STATIC_NEVER.include?(@settings.index)
 
+        if @_max_table_size_updated
+          encode_change_table_size(&block)
+          @_max_table_size_updated = false
+        end
+
         headers.each do |field, value|
           # Literal header names MUST be translated to lowercase before
           # encoding and transmission.
@@ -276,6 +305,26 @@ module HTTP2
         resize_table(0)
       end
 
+      # Set the maximum dynamic table +size+ allowed by
+      # SETTINGS_HEADER_TABLE_SIZE.
+      #
+      # The current table size does not change here. It changes only with a
+      # dynamic table size update at the beginning of a header block:
+      # - an encoder emits the update in the next #encode call. It uses
+      #   +settings.table_size+, capped by this maximum.
+      # - a decoder requires the update in the next header block when the
+      #   current table size exceeds this maximum.
+      #
+      # When the maximum is reduced and then increased again before the next
+      # header block, the smallest maximum has to be signalled first.
+      # - https://www.rfc-editor.org/rfc/rfc7541#section-4.2
+      def max_table_size=(size)
+        @max_size_limit = size
+        # alternative: clamp size based on @max_size_limit, instead of failing later on #process
+        @lowest_max_size_limit = size if size < @lowest_max_size_limit
+        @_max_table_size_updated = true
+      end
+
       def listen_on_table
         yield
       ensure
@@ -284,6 +333,22 @@ module HTTP2
 
       private
 
+      def encode_change_table_size
+        if @lowest_max_size_limit < @limit
+          self.table_size = @lowest_max_size_limit
+          yield({ type: :changetablesize, value: @lowest_max_size_limit })
+        end
+        @lowest_max_size_limit = @max_size_limit
+
+        max_table_size = MAX_HEADER_TABLE_SIZE
+        max_table_size = @max_size_limit if @max_size_limit < max_table_size
+
+        return unless max_table_size != @limit
+
+        self.table_size = max_table_size
+        yield({ type: :changetablesize, value: max_table_size })
+      end
+
       def resize_table(cmdsize)
         return if @table.empty?
 

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2/server.rb

@@ -93,9 +93,6 @@ module HTTP2
         type: :headers,
         flags: END_HEADERS,
         stream: 1,
-        weight: DEFAULT_WEIGHT,
-        dependency: 0,
-        exclusive: false,
         payload: headers
       } #: headers_frame
 

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2/settings.rb

@@ -2,10 +2,11 @@
 
 module HTTP2
   MAX_HEADER_LIST_SIZE = (2 << 30) - 1
+  MAX_HEADER_TABLE_SIZE = 4096
 
   # Default values for SETTINGS frame, as defined by the spec.
   SPEC_DEFAULT_CONNECTION_SETTINGS = {
-    settings_header_table_size: 4096,
+    settings_header_table_size: MAX_HEADER_TABLE_SIZE,
     settings_enable_push: 1, # enabled for servers
     settings_max_concurrent_streams: Framer::MAX_STREAM_ID, # unlimited
     settings_initial_window_size: 65_535,
@@ -31,7 +32,7 @@ module HTTP2
   ) do
     def initialize(
       # connection settings
-      settings_header_table_size: 4096,
+      settings_header_table_size: MAX_HEADER_TABLE_SIZE,
       settings_enable_push: 1,
       settings_max_concurrent_streams: 100,
       settings_initial_window_size: 65_535,
@@ -40,7 +41,7 @@ module HTTP2
       # encoding context settings
       huffman: :shorter,
       index: :all,
-      table_size: 4096
+      table_size: MAX_HEADER_TABLE_SIZE
     )
       super
     end

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2/stream.rb

@@ -40,6 +40,9 @@ module HTTP2
     include Emitter
     include Error
 
+    # Default stream priority (lower values are higher priority).
+    DEFAULT_WEIGHT = 16
+
     STREAM_OPEN_STATES = %i[open half_closed_local half_closing closing].freeze
 
     # Stream ID (odd for client initiated streams, even otherwise).
@@ -75,9 +78,7 @@ module HTTP2
     # @param window [Integer]
     # @param parent [Stream]
     # @param state [Symbol]
-    def initialize(connection:, id:, weight: 16, dependency: 0, exclusive: false, parent: nil, state: :idle)
-      stream_error(:protocol_error, msg: "stream can't depend on itself") if id == dependency
-
+    def initialize(connection:, id:, weight: DEFAULT_WEIGHT, dependency: 0, exclusive: false, parent: nil, state: :idle)
       @connection = connection
       @id = id
       @weight = weight
@@ -88,9 +89,9 @@ module HTTP2
       @send_buffer = FrameBuffer.new
 
       process_priority(weight: weight, dependency: dependency, exclusive: exclusive)
-      @local_window_max_size = connection.local_settings[:settings_initial_window_size]
-      @local_window = connection.local_settings[:settings_initial_window_size]
-      @remote_window = connection.remote_settings[:settings_initial_window_size]
+      @local_window_max_size = connection.local_settings.settings_initial_window_size
+      @local_window = connection.local_settings.settings_initial_window_size
+      @remote_window = connection.remote_settings.settings_initial_window_size
       @parent = parent
       @state  = state
       @error  = false

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module HTTP2
-  VERSION = "1.2.3"
+  VERSION = "1.3.0"
 end

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/lib/http/2.rb

@@ -4,6 +4,7 @@ require "http/2/version"
 
 module HTTP2
   EMPTY = [].freeze
+  EMPTY_HASH = {}.freeze
 end
 
 require "http/2/extensions"

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/sig/2.rbs

@@ -8,6 +8,7 @@ module HTTP2
   DEFAULT_MAX_CONCURRENT_STREAMS: Integer
 
   EMPTY: []
+  EMPTY_HASH: {}
 
   type connection_opts = Hash[Symbol, untyped]
 
@@ -15,8 +16,6 @@ module HTTP2
 
   type settings_enum = Enumerable[[Symbol, Integer]]
 
-  DEFAULT_WEIGHT: Integer
-
   CONNECTION_PREFACE_MAGIC: String
 
   REQUEST_MANDATORY_HEADERS: Array[String]

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/sig/connection.rbs

@@ -19,11 +19,13 @@ module HTTP2
 
     @stream_id: Integer
     @active_stream_count: Integer
+    @promised_stream_count: Integer
     @last_stream_id: Integer
 
     @streams: Hash[Integer, Stream]
     @streams_recently_closed: Hash[Integer, Numeric]
     @oldest_stream_recently_closed: Numeric
+    @last_promised_stream_id: Integer
 
     @framer: Framer
 
@@ -81,6 +83,8 @@ module HTTP2
 
     def ping_management: (frame) -> void
 
+    def validate_push_promise: (Integer stream_id) -> void
+
     def validate_settings: (role_type, settings_enum) -> void
 
     def connection_settings: (settings_frame) -> void

data/vendor/bundle/ruby/4.0.0/gems/{http-2-1.2.3 → http-2-1.3.0}/sig/header/compressor.rbs

@@ -6,13 +6,13 @@ module HTTP2
 
       @cc: EncodingContext
 
-      def table_size=: (Integer) -> void
+      def max_table_size=: (Integer) -> void
 
       def integer: (Integer, Integer, buffer: String, ?offset: Integer) -> String
 
       def string: (String, ?String buffer) -> String
 
-      def header: (header_command, ?String) -> String
+      def header: (change_table_size_command | header_command, ?String) -> String
 
       def encode: (Enumerable[header_pair]) -> String