protocol-http2 0.28.0 → 0.29.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b123bcf0056d6c21b757beb154bd0e20b099175880fa563f55cb5793c91c0013
-  data.tar.gz: 42721396177fccec6c4ec2201e927b6de774d7ef604dabf9652c68c84ea6b8b1
+  metadata.gz: b2fc79a606e21b27bd978ed1fbec9be16dcec2c6cc4cd439afb75b3c427b941e
+  data.tar.gz: 86814f5f27b1c584856495db654a4652d21fbd7fe85f76fd9be864c2ca0026f0
 SHA512:
-  metadata.gz: 22c8475249a63cc3b4276ac867b6034379f15f10795204d81b1e79de46cb2e1d431a9766537eca67766ca3e88703fc82f8ff38774486d04ee0d4999e8a0e801d
-  data.tar.gz: fb451afbc0ef6c216601c18221ed0bfd107fa4262597bf7d3a8188293ae2f475e5f312641a91abbdacb79617837667b769efe1c5cc198f08234506d48cdcf74d
+  metadata.gz: 79c50e19d145032be114d6e2b0c3771324a751b2d3da05b25620d3f73aaf596ea3ab36651bfe1108290231b54840f73d17679f46516481dd5160bff2818b9a6c
+  data.tar.gz: 98229ff38e947ff4b3986cc0610ab77ecc450fb113ea86b3c84431da22265e481f12e27d092f38fc5dabe76180fb74cd05d3b529caa1b9780cefbead42ff3c2b

data/lib/protocol/http2/connection.rb

@@ -4,6 +4,7 @@
 # Copyright, 2019-2026, by Samuel Williams.
 # Copyright, 2023, by Marco Concetto Rudilosso.
 # Copyright, 2026, by Denis Talakevich.
+# Copyright, 2026, by Martin Ek.
 
 require_relative "framer"
 require_relative "flow_controlled"
@@ -510,6 +511,15 @@ module Protocol
 				
 				if stream = @streams[stream_id]
 					stream.receive_headers(frame)
+				elsif local_stream_id?(stream_id) and closed_stream_id?(stream_id)
+					# This can occur if we reset a stream while the remote peer was sending headers for it,
+					# e.g. a response which was already in flight when the request was cancelled.
+					# The header block must still be decoded in order to keep the HPACK decoder state
+					# synchronized with the remote peer's encoder, but the decoded headers are discarded
+					# (RFC 9113 §5.1).
+					decode_headers(frame.unpack)
+					
+					return nil
 				else
 					if stream_id <= @remote_stream_id
 						raise ProtocolError, "Invalid stream id: #{stream_id} <= #{@remote_stream_id}!"

data/lib/protocol/http2/continuation_frame.rb

@@ -2,6 +2,7 @@
 
 # Released under the MIT License.
 # Copyright, 2019-2025, by Samuel Williams.
+# Copyright, 2026, by Martin Ek.
 
 require_relative "frame"
 
@@ -90,7 +91,7 @@ module Protocol
 					
 					remainder = data.byteslice(maximum_size, data.bytesize-maximum_size)
 					
-					@continuation = ContinuationFrame.new
+					@continuation = ContinuationFrame.new(@stream_id)
 					@continuation.pack(remainder, maximum_size: maximum_size)
 				else
 					set_flags(END_HEADERS)

data/lib/protocol/http2/version.rb

@@ -7,6 +7,6 @@
 module Protocol
 	# @namespace
 	module HTTP2
-		VERSION = "0.28.0"
+		VERSION = "0.29.2"
 	end
 end

data/license.md

@@ -6,6 +6,7 @@ Copyright, 2020, by Olle Jonsson.
 Copyright, 2023, by Marco Concetto Rudilosso.  
 Copyright, 2024, by Adam Petro.  
 Copyright, 2026, by Denis Talakevich.  
+Copyright, 2026, by Martin Ek.  
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/readme.md

@@ -14,6 +14,15 @@ Please see the [project documentation](https://socketry.github.io/protocol-http2
 
 Please see the [project releases](https://socketry.github.io/protocol-http2/releases/index) for all releases.
 
+### v0.29.1
+
+  - Sign releases with the Socketry release certificate.
+
+### v0.29.0
+
+  - Decode and discard `HEADERS` received for a locally-initiated stream which was already reset, e.g. a response in flight when the request was cancelled, rather than failing the connection with `ProtocolError`. This keeps the HPACK decoder state synchronized with the remote peer (RFC 9113 §5.1).
+  - `CONTINUATION` frames generated when packing a large header block now carry the stream ID of the frame they continue.
+
 ### v0.28.0
 
   - Treat `RST_STREAM(NO_ERROR)` as an orderly stream closure rather than constructing a `StreamError`.
@@ -47,16 +56,6 @@ Please see the [project releases](https://socketry.github.io/protocol-http2/rele
 
   - Introduce a limit to the number of CONTINUATION frames that can be read to prevent resource exhaustion. The default limit is 8 continuation frames, which means a total of 9 frames (1 initial + 8 continuation). This limit can be adjusted by passing a different value to the `limit` parameter in the `Continued.read` method. Setting the limit to 0 will only read the initial frame without any continuation frames. In order to change the default, you can redefine the `LIMIT` constant in the `Protocol::HTTP2::Continued` module, OR you can pass a different frame class to the framer.
 
-### v0.22.1
-
-  - Improved tracing performance by only tracing framer operations when in an active trace context.
-  - Updated `protocol-http` dependency version in gemspec.
-  - Code modernization and documentation improvements.
-
-### v0.22.0
-
-  - [Added Priority Update Frame and Stream Priority](https://socketry.github.io/protocol-http2/releases/index#added-priority-update-frame-and-stream-priority)
-
 ## See Also
 
   - [Async::HTTP](https://github.com/socketry/async-http) - A high-level HTTP client and server implementation.
@@ -81,12 +80,14 @@ $ bundle exec sus
 
 ### Making Releases
 
-To make a new release:
+To prepare a release branch and open a pull request from an up-to-date `main`:
 
 ``` bash
-$ bundle exec bake gem:release:patch # or minor or major
+$ bundle exec bake gem:github:release:patch # or minor or major
 ```
 
+See [bake-gem-github](https://github.com/socketry/bake-gem-github) for setup, remote releases, and recovery.
+
 ### Developer Certificate of Origin
 
 In order to protect users of this project, we require all contributors to comply with the [Developer Certificate of Origin](https://developercertificate.org/). This ensures that all contributions are properly licensed and attributed.

data/releases.md

@@ -1,5 +1,14 @@
 # Releases
 
+## v0.29.1
+
+  - Sign releases with the Socketry release certificate.
+
+## v0.29.0
+
+  - Decode and discard `HEADERS` received for a locally-initiated stream which was already reset, e.g. a response in flight when the request was cancelled, rather than failing the connection with `ProtocolError`. This keeps the HPACK decoder state synchronized with the remote peer (RFC 9113 §5.1).
+  - `CONTINUATION` frames generated when packing a large header block now carry the stream ID of the frame they continue.
+
 ## v0.28.0
 
   - Treat `RST_STREAM(NO_ERROR)` as an orderly stream closure rather than constructing a `StreamError`.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: protocol-http2
 version: !ruby/object:Gem::Version
-  version: 0.28.0
+  version: 0.29.2
 platform: ruby
 authors:
 - Samuel Williams
@@ -11,36 +11,7 @@ authors:
 - Marco Concetto Rudilosso
 - Olle Jonsson
 bindir: bin
-cert_chain:
-- |
-  -----BEGIN CERTIFICATE-----
-  MIIE2DCCA0CgAwIBAgIBATANBgkqhkiG9w0BAQsFADBhMRgwFgYDVQQDDA9zYW11
-  ZWwud2lsbGlhbXMxHTAbBgoJkiaJk/IsZAEZFg1vcmlvbnRyYW5zZmVyMRIwEAYK
-  CZImiZPyLGQBGRYCY28xEjAQBgoJkiaJk/IsZAEZFgJuejAeFw0yMjA4MDYwNDUz
-  MjRaFw0zMjA4MDMwNDUzMjRaMGExGDAWBgNVBAMMD3NhbXVlbC53aWxsaWFtczEd
-  MBsGCgmSJomT8ixkARkWDW9yaW9udHJhbnNmZXIxEjAQBgoJkiaJk/IsZAEZFgJj
-  bzESMBAGCgmSJomT8ixkARkWAm56MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIB
-  igKCAYEAomvSopQXQ24+9DBB6I6jxRI2auu3VVb4nOjmmHq7XWM4u3HL+pni63X2
-  9qZdoq9xt7H+RPbwL28LDpDNflYQXoOhoVhQ37Pjn9YDjl8/4/9xa9+NUpl9XDIW
-  sGkaOY0eqsQm1pEWkHJr3zn/fxoKPZPfaJOglovdxf7dgsHz67Xgd/ka+Wo1YqoE
-  e5AUKRwUuvaUaumAKgPH+4E4oiLXI4T1Ff5Q7xxv6yXvHuYtlMHhYfgNn8iiW8WN
-  XibYXPNP7NtieSQqwR/xM6IRSoyXKuS+ZNGDPUUGk8RoiV/xvVN4LrVm9upSc0ss
-  RZ6qwOQmXCo/lLcDUxJAgG95cPw//sI00tZan75VgsGzSWAOdjQpFM0l4dxvKwHn
-  tUeT3ZsAgt0JnGqNm2Bkz81kG4A2hSyFZTFA8vZGhp+hz+8Q573tAR89y9YJBdYM
-  zp0FM4zwMNEUwgfRzv1tEVVUEXmoFCyhzonUUw4nE4CFu/sE3ffhjKcXcY//qiSW
-  xm4erY3XAgMBAAGjgZowgZcwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0O
-  BBYEFO9t7XWuFf2SKLmuijgqR4sGDlRsMC4GA1UdEQQnMCWBI3NhbXVlbC53aWxs
-  aWFtc0BvcmlvbnRyYW5zZmVyLmNvLm56MC4GA1UdEgQnMCWBI3NhbXVlbC53aWxs
-  aWFtc0BvcmlvbnRyYW5zZmVyLmNvLm56MA0GCSqGSIb3DQEBCwUAA4IBgQB5sxkE
-  cBsSYwK6fYpM+hA5B5yZY2+L0Z+27jF1pWGgbhPH8/FjjBLVn+VFok3CDpRqwXCl
-  xCO40JEkKdznNy2avOMra6PFiQyOE74kCtv7P+Fdc+FhgqI5lMon6tt9rNeXmnW/
-  c1NaMRdxy999hmRGzUSFjozcCwxpy/LwabxtdXwXgSay4mQ32EDjqR1TixS1+smp
-  8C/NCWgpIfzpHGJsjvmH2wAfKtTTqB9CVKLCWEnCHyCaRVuKkrKjqhYCdmMBqCws
-  JkxfQWC+jBVeG9ZtPhQgZpfhvh+6hMhraUYRQ6XGyvBqEUe+yo6DKIT3MtGE2+CP
-  eX9i9ZWBydWb8/rvmwmX2kkcBbX0hZS1rcR593hGc61JR6lvkGYQ2MYskBveyaxt
-  Q2K9NVun/S785AP05vKkXZEFYxqG6EW012U4oLcFl5MySFajYXRYbuUpH6AY+HP8
-  voD0MPg1DssDLKwXyt1eKD/+Fq0bFWhwVM/1XiAXL7lyYUyOq24KHgQ2Csg=
-  -----END CERTIFICATE-----
+cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
@@ -126,7 +97,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.10
+rubygems_version: 4.0.21
 specification_version: 4
 summary: A low level implementation of the HTTP/2 protocol.
 test_files: []

metadata.gz.sig

@@ -1,2 +0,0 @@
-�G$٣@��5�'�7����It/�ua*�(I@1����+O�G+t)� 5�6v7�G�Z�k���������Cƽ�<ĸ��N�}q&�T2-Z�Ɲ�ě�)M�f�T�LlŲ�X�M��.Ү�A�M�#Ke��3�ʈ�@x�K�
0���0�{FF.�R�T�����Ss�Ue���o� �F���{�=k|���e�/h��e�1UI�=�	�G���a��J��7�t����-�Xnc	��"�����u�8�ic	%FA~,��I�.�"au�̝�q�J����p
-��7���-\�kw%�8o�N�K�Z���=)D
nӧlcHW[_��W|a��a�