Bump h2 from 0.3.15 to 0.3.18

[dependabot]

Bumps h2 from 0.3.15 to 0.3.18.

Release notes

Sourced from h2's releases.

v0.3.18

What's Changed

• fix: pending-accept remotely-reset streams pattern was checking is_local by @​seanmonstar in hyperium/h2#676

v0.3.17

What's Changed

• Add Error::is_library() method to check if the originated inside h2.
• Add max_pending_accept_reset_streams(usize) option to client and server builders.
• Fix theoretical memory growth when receiving too many HEADERS and then RST_STREAM frames faster than an application can accept them off the queue. (CVE-2023-26964)

v0.3.16

What's Changed

• Set Protocol extension on requests when received Extended CONNECT requests.
• Remove B: Unpin + 'static bound requiremented of bufs
• Fix releasing of frames when stream is finished, reducing memory usage.
• Fix panic when trying to send data and connection window is available, but stream window is not.
• Fix spurious wakeups when stream capacity is not available.

New Contributors

• @​vi made their first contribution in hyperium/h2#646
• @​silence-coding made their first contribution in hyperium/h2#651
• @​gtsiam made their first contribution in hyperium/h2#649
• @​howardjohn made their first contribution in hyperium/h2#658
• @​cloneable made their first contribution in hyperium/h2#655
• @​aftersnow made their first contribution in hyperium/h2#657
• @​vadim-eg made their first contribution in hyperium/h2#661

Changelog

Sourced from h2's changelog.

0.3.18 (April 17, 2023)

• Fix panic because of opposite check in is_remote_local().

0.3.17 (April 13, 2023)

• Add Error::is_library() method to check if the originated inside h2.
• Add max_pending_accept_reset_streams(usize) option to client and server builders.
• Fix theoretical memory growth when receiving too many HEADERS and then RST_STREAM frames faster than an application can accept them off the queue. (CVE-2023-26964)

0.3.16 (February 27, 2023)

• Set Protocol extension on requests when received Extended CONNECT requests.
• Remove B: Unpin + 'static bound requiremented of bufs
• Fix releasing of frames when stream is finished, reducing memory usage.
• Fix panic when trying to send data and connection window is available, but stream window is not.
• Fix spurious wakeups when stream capacity is not available.

Commits

• 1b9f070 v0.3.18
• 1c6fa28 fix: pending-accept remotely-reset streams pattern was checking is_local
• af4bcac v0.3.17
• d3f37e9 feat: add max_pending_accept_reset_streams(n) options
• 5bc8e72 fix: limit the amount of pending-accept reset streams
• 8088ca6 feat: add Error::is_library method
• 481c31d chore: Use Cargo metadata for the MSRV build job
• d3d50ef chore: Replace unmaintained/outdated GitHub Actions
• 45b9bcc chore: set rust-version in Cargo.toml (#664)
• b9dcd39 v0.3.16
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @GeorgeHahn.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[GeorgeHahn]

@dependabot squash and merge

[github-actions]

Regression Detector Results

Run ID: 382f90ff-d78c-4a5f-bd6e-b4560384c92e
Baseline: eccc9e6
Comparison: 180c9dd
Total lading-target CPUs: 4

Explanation

A regression test is an integrated performance test for lading- target in a repeatable rig, with varying configuration for lading- target. What follows is a statistical summary of a brief lading- target run for each configuration across SHAs given above. The goal of these tests are to determine quickly if lading-target performance is changed and to what degree by a pull request.

The table below, if present, lists those experiments that have experienced a statistically significant change in mean optimization goal performance between baseline and comparison SHAs with 90.00% confidence OR have been detected as newly erratic. Negative values mean that baseline is faster, positive comparison. Results that do not exhibit more than a ±5.00% change in their mean optimization goal are discarded. An experiment is erratic if its coefficient of variation is greater than 0.1. The abbreviated table will be omitted if no interesting change is observed.

No interesting changes in experiment optimization goals with confidence ≥ 90.00% and |Δ mean %| ≥ 5.00%.

Fine details of change detection per experiment.

experiment	goal	Δ mean	Δ mean %	confidence	baseline mean	baseline stdev	baseline stderr	baseline outlier %	baseline CoV	comparison mean	comparison stdev	comparison stderr	comparison outlier %	comparison CoV	erratic	declared erratic
blackhole_from_apache_common_http	ingress throughput	23.63MiB/CPU-s	2.13	100.00%	1.08GiB/CPU-s	65.37MiB/CPU-s	863.63KiB/CPU-s	0.0	0.058911	1.11GiB/CPU-s	44.39MiB/CPU-s	586.38KiB/CPU-s	0.0	0.039168	False	False
apache_common_http_both_directions_this_doesnt_make_sense	ingress throughput	-13.81MiB/CPU-s	-1.21	100.00%	1.12GiB/CPU-s	41.12MiB/CPU-s	543.12KiB/CPU-s	0.0	0.035968	1.1GiB/CPU-s	76.42MiB/CPU-s	1009.63KiB/CPU-s	0.0	0.067668	False	False

[github-actions]

Regression Detector Results

Run ID: 1686cd39-bf1f-4367-99e4-3d209fc37b97
Baseline: 4a1012f
Comparison: 6417b40
Total lading-target CPUs: 4

Explanation

A regression test is an integrated performance test for lading- target in a repeatable rig, with varying configuration for lading- target. What follows is a statistical summary of a brief lading- target run for each configuration across SHAs given above. The goal of these tests are to determine quickly if lading-target performance is changed and to what degree by a pull request.

The table below, if present, lists those experiments that have experienced a statistically significant change in mean optimization goal performance between baseline and comparison SHAs with 90.00% confidence OR have been detected as newly erratic. Negative values mean that baseline is faster, positive comparison. Results that do not exhibit more than a ±5.00% change in their mean optimization goal are discarded. An experiment is erratic if its coefficient of variation is greater than 0.1. The abbreviated table will be omitted if no interesting change is observed.

No interesting changes in experiment optimization goals with confidence ≥ 90.00% and |Δ mean %| ≥ 5.00%.

Fine details of change detection per experiment.

experiment	goal	Δ mean	Δ mean %	confidence	baseline mean	baseline stdev	baseline stderr	baseline outlier %	baseline CoV	comparison mean	comparison stdev	comparison stderr	comparison outlier %	comparison CoV	erratic	declared erratic
blackhole_from_apache_common_http	ingress throughput	-15.87MiB/CPU-s	-1.39	100.00%	1.11GiB/CPU-s	41.29MiB/CPU-s	545.47KiB/CPU-s	0.0	0.036168	1.1GiB/CPU-s	70.27MiB/CPU-s	928.45KiB/CPU-s	0.0	0.06242	False	False
apache_common_http_both_directions_this_doesnt_make_sense	ingress throughput	-27.73MiB/CPU-s	-2.42	100.00%	1.12GiB/CPU-s	44.58MiB/CPU-s	588.9KiB/CPU-s	0.0	0.038841	1.09GiB/CPU-s	60.92MiB/CPU-s	804.73KiB/CPU-s	0.0	0.054391	False	False