Update http-signature to major version 1.3

[mylesgordon]

All versions of http-signature major version 1.2 eventually rely on an outdated and proven flawed version of json-schema. Major version 1.3 fixes this.

[mikailyetkin]

can someone help me to understand release process, i would like to know when and how this PR will be merged to master and a new version will be published.

[EBalmer]

can someone help me to understand release process, i would like to know when and how this PR will be merged to master and a new version will be published.

Seems Unlikely:
#3142

[mikailyetkin]

Seems Unlikely:

Thanks @EBalmer i saw that post, was actually trying to fix by myself , but then i have seen this PR. was thinking if it would be possible to have a new patch.

[makiri1993]

Any eta when this will be merged?

[grzegorzkrukowski]

+1 for it

[esteetaniag]

+1 for this as well

[Szarlus]

Guys, we are using a library that was deprecated and abandoned almost 2 years ago, don't get your hopes up that this will be merged any time soon. Maybe this is a good moment to finally make a transition to something that is actually maintained :(

[mylesgordon]

Guys, we are using a library that was deprecated and abandoned almost 2 years ago, don't get your hopes up that this will be merged any time soon. Maybe this is a good moment to finally make a transition to something that is actually maintained :(

Moving to another library is fine, the issue is when a library you use depends on request :(

[felix-hcl]

Guys, we are using a library that was deprecated and abandoned almost 2 years ago, don't get your hopes up that this will be merged any time soon. Maybe this is a good moment to finally make a transition to something that is actually maintained :(

Moving to another library is fine, the issue is when a library you use depends on request :(

We were facing exactly this issue but found a mitigation as described here:
#3394 (comment)