You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
4.7.2 (2026-10-02)
Bugs Fixed
Reject request URLs containing backslashes in the authority before authentication.
Verify cached authentication challenges before token use and clear rejected or malformed challenges without removing newer entries installed by concurrent requests.
Preserve redirect header updates and cleanup when restoring request bodies during authentication.
Remove stale request authorization and clear the observed cached challenge when a 401 response omits WWW-Authenticate, without retrying authentication.