chore(deps): bump the ruby group with 7 updates

[dependabot]

Bumps the ruby group with 7 updates:

Package	From	To
html2rss	4a414ce	e29ffd7
async-http	0.94.2	0.95.0
mime-types-data	3.2026.0331	3.2026.0407
parallel	2.0.0	2.0.1
protocol-http	0.60.0	0.62.0
protocol-http1	0.37.0	0.39.0
protocol-http2	0.24.0	0.26.0

Updates html2rss from 4a414ce to e29ffd7

Commits

• e29ffd7 chore(deps): bump addressable from 2.8.9 to 2.9.0 (#354)
• 54a4fb9 refactor: unify Hash operations and symbol-key internals (#353)
• c5bb745 feat(scraper): let wordpress query paginated archives (#352)
• See full diff in compare view

Updates async-http from 0.94.2 to 0.95.0

Release notes

Sourced from async-http's releases.

v0.95.0

• Use Protocol::HTTP::RefusedError for safe retry of requests not processed by the server, including non-idempotent methods like PUT.
  • Remove Async::HTTP::Protocol::RequestFailed in favour of Protocol::HTTP::RefusedError.
  • HTTP/1: Delegate request write failure handling to protocol-http1.
  • HTTP/2: Handle GOAWAY and REFUSED_STREAM via protocol-http2, enabling automatic retry of unprocessed requests.

v0.94.3

• Fix response body leak in HTTP/2 server when stream is reset before send_response completes (e.g. client-side gRPC cancellation). The response body's close was never called, leaking any resources tied to body lifecycle (such as rack.response_finished callbacks and utilization metrics).

Changelog

Sourced from async-http's changelog.

v0.95.0

• Use Protocol::HTTP::RefusedError for safe retry of requests not processed by the server, including non-idempotent methods like PUT.
  • Remove Async::HTTP::Protocol::RequestFailed in favour of Protocol::HTTP::RefusedError.
  • HTTP/1: Delegate request write failure handling to protocol-http1.
  • HTTP/2: Handle GOAWAY and REFUSED_STREAM via protocol-http2, enabling automatic retry of unprocessed requests.

v0.94.3

• Fix response body leak in HTTP/2 server when stream is reset before send_response completes (e.g. client-side gRPC cancellation). The response body's close was never called, leaking any resources tied to body lifecycle (such as rack.response_finished callbacks and utilization metrics).

v0.94.1

• Fix defer_stop usage in HTTP1::Server, improving server graceful shutdown behavior.

v0.94.0

• Propagate all errors from background reader to active streams so that they are closed correctly (e.g. errors are not missed).

v0.92.2

• Better handling of trailers. If invalid trailers are received, the connection (HTTP/1) or stream (HTTP/2) is reset.

v0.92.0

• Breaking: Remove Async::HTTP::Reference. Use Protocol::URL::Reference directly instead.

v0.91.0

• Move all default trace providers into traces/provider/async/http.

v0.90.2

• Don't emit resource: keyword argument in traces - it's unsupported by OpenTelemetry.

v0.88.0

Support custom protocols with options

{ruby Async::HTTP::Protocol} contains classes for specific protocols, e.g. {ruby Async::HTTP::Protocol::HTTP1} and {ruby Async::HTTP::Protocol::HTTP2}. It also contains classes for aggregating protocols, e.g. {ruby Async::HTTP::Protocol::HTTP} and {ruby Async::HTTP::Protocol::HTTPS}. They serve as factories for creating client and server instances.

These classes are now configurable with various options, which are passed as keyword arguments to the relevant connection classes. For example, to configure an HTTP/1.1 protocol without keep-alive:

protocol = Async::HTTP::Protocol::HTTP1.new(persistent: false, maximum_line_length: 32)
endpoint = Async::HTTP::Endpoint.parse("http://localhost:9292", protocol: protocol)
server = Async::HTTP::Server.for(endpoint) do |request|
	Protocol::HTTP::Response[200, {}, ["Hello, world"]]
end.run

... (truncated)

Commits

• 7144eab Bump minor version.
• 968fe0d Better handling of refused requests. (#222)
• 7a8850e Update error-during-body-write test for protocol-http1 v0.37.1.
• 7c30830 Minor test improvement.
• 5028705 Bump patch version.
• f25091d Fix HTTP/2 response leak. (#219)
• 5004f0a 100% documentation coverage.
• 3057c9c Modernize code.
• 0a3cfd6 Test robustness on Ruby 4+.
• See full diff in compare view

Updates mime-types-data from 3.2026.0331 to 3.2026.0407

Changelog

Sourced from mime-types-data's changelog.

3.2026.0407 / 2026-04-07

• Updated registry entries from the IANA [media registry][registry] and [provisional media registry][provisional] and the [Apache Tika media registry][tika] as of the release date.

Commits

• cdd6e72 Update mime-types-data 3.2026.0407 / 2026-04-07
• 1bcba11 deps: bump the actions group with 2 updates
• See full diff in compare view

Updates parallel from 2.0.0 to 2.0.1

Changelog

Sourced from parallel's changelog.

2.0.1

Added

• require mfa for gem release

Commits

• f9c570b v2.0.1
• 45c60ab Merge pull request #366 from tagliala/chore/opt-in-for-mfa-explicitly
• c80ad3c Opt-in for MFA requirement explicitly
• e2ad082 simplify changelog
• 0c27347 Merge pull request #364 from sferik/changelog
• b76538a Add CHANGELOG.md with full release history
• See full diff in compare view

Updates protocol-http from 0.60.0 to 0.62.0

Release notes

Sourced from protocol-http's releases.

v0.62.0

No release notes provided.

v0.61.0

• Introduce Protocol::HTTP::RequestRefusedError for indicating a request was not processed by the server and can be safely retried.

Changelog

Sourced from protocol-http's changelog.

Releases

v0.61.0

• Introduce Protocol::HTTP::RefusedError for indicating a stream or request was refused before processing and can be safely retried. RequestRefusedError is provided as an alias for backwards compatibility.

Commits

• d8b5f53 Bump minor version.
• 99873c6 Rename RequestRefusedError -> RefusedError.
• af8cb2e Bump minor version.
• f47889b Introduce Protocol::HTTP::RequestRefusedError.
• See full diff in compare view

Updates protocol-http1 from 0.37.0 to 0.39.0

Release notes

Sourced from protocol-http1's releases.

v0.39.0

• Rename RequestRefusedError -> RefusedError.

v0.38.0

• write_request now raises Protocol::HTTP::RequestRefusedError if the request line or headers cannot be written, indicating the request was not processed and can be safely retried.

v0.37.1

• Defer body.close in write_chunked_body, write_fixed_length_body, and write_body_and_close until after the response is fully written and flushed. Previously, body.each called close in its ensure block before the terminal chunk (chunked encoding) or final flush was written, causing rack.response_finished callbacks to delay the client-visible response completion.

Changelog

Sourced from protocol-http1's changelog.

v0.39.0

• Rename RequestRefusedError -> RefusedError.

v0.38.0

• write_request now raises Protocol::HTTP::RequestRefusedError if the request line or headers cannot be written, indicating the request was not processed and can be safely retried.

v0.37.1

• Defer body.close in write_chunked_body, write_fixed_length_body, and write_body_and_close until after the response is fully written and flushed. Previously, body.each called close in its ensure block before the terminal chunk (chunked encoding) or final flush was written, causing rack.response_finished callbacks to delay the client-visible response completion.

Commits

• 6e4af8c Bump minor version.
• 0344794 Rename RequestRefusedError -> RefusedError.
• fa384fa Fix documentation.
• 1406b0b Bump minor version.
• 1f9f4be Better handling of write_request failures. (#54)
• 5dd30b4 Bump patch version.
• 4affdc0 Defer body.close until final chunk is written. (#53)
• 5b4ab72 Modernize code.
• See full diff in compare view

Updates protocol-http2 from 0.24.0 to 0.26.0

Release notes

Sourced from protocol-http2's releases.

v0.26.0

• On RST_STREAM with REFUSED_STREAM, close the stream with Protocol::HTTP::RefusedError instead of StreamError.

v0.25.0

• On GOAWAY, proactively close unprocessed streams (ID above last_stream_id) with Protocol::HTTP::RequestRefusedError, enabling safe retry of non-idempotent requests.

Changelog

Sourced from protocol-http2's changelog.

v0.26.0

• On RST_STREAM with REFUSED_STREAM, close the stream with Protocol::HTTP::RefusedError instead of StreamError.

v0.25.0

• On GOAWAY, proactively close unprocessed streams (ID above last_stream_id) with Protocol::HTTP::RequestRefusedError, enabling safe retry of non-idempotent requests.

Commits

• b33b6a4 Bump minor version.
• 382befe Use RefusedError directly in stream close! transition.
• 5fbef08 Bump minor version.
• 5b518b5 Better handling of GOAWAY. (#28)
• 17f7b3b Modernize code.
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-13 07:25 UTC · Rule: dependabot
• ✅ Checks passed · on draft merge queue: embarking main (040eb74), #1132 and #1133 together #1135
• ✅ Merged — 2026-04-13 07:26 UTC · at 3eb775d6731b4d7f86d489d85b70104000a7f1ec

This pull request spent 1 minute 20 seconds in the queue, including 1 minute 6 seconds running CI.

Required conditions to merge

• author=dependabot[bot]
  • chore(deps): bump the ruby group with 7 updates #1133
• base=main
• status-success=build