[dependabot]

Bumps h2 from 0.4.19 to 0.4.20.

Release notes

Sourced from h2's releases.

v0.4.20

What's Changed

• perf: decode two HPACK Huffman symbols per table lookup by @​ArniDagur in hyperium/h2#927
• perf: defer send buffer locking while receiving by @​brentechols in hyperium/h2#933
• perf: batch HPACK encoder writes per u32 by @​seanmonstar in hyperium/h2#938
• refactor: shrink HPACK encode tables by @​seanmonstar in hyperium/h2#949
• fix: reject GOAWAY frames with a non-zero stream identifier by @​jaideeppyne in hyperium/h2#951
• refactor: put decoder args onto a new FrameDecoder by @​seanmonstar in hyperium/h2#953
• chore: make CI have a single required job by @​seanmonstar in hyperium/h2#954
• style: apply clippy by @​seanmonstar in hyperium/h2#955
• fix: rare race during shutdown by @​seanmonstar in hyperium/h2#956
• fix(client): reject responses without :status by @​0x676e67 in hyperium/h2#959
• fix: count refused streams on local reset abuse counter by @​seanmonstar in hyperium/h2#966
• fix: reject duplicate content-lengths that differ by @​seanmonstar in hyperium/h2#967
• Update automatic DATA frame budget at runtime by @​jeremyjpj0916 in hyperium/h2#965
• fix: count reserved push promises against stream concurrency by @​seanmonstar in hyperium/h2#968
• perf: remove need to lock for pending_refusal for every recv call by @​seanmonstar in hyperium/h2#969
• Prepare v0.4.20 by @​seanmonstar in hyperium/h2#970

New Contributors

• @​jaideeppyne made their first contribution in hyperium/h2#951
• @​jeremyjpj0916 made their first contribution in hyperium/h2#965

Full Changelog: hyperium/h2@v0.4.19...v0.4.20

Changelog

Sourced from h2's changelog.

0.4.20 (October 6, 2026)

• Fix counting reserved push promises against stream concurrency limits.
• Fix automatic small DATA frame budget to update when the connection window changes at runtime.
• Fix rejecting duplicate content-length headers with different values.
• Fix counting refused streams towards the local reset limit.
• Fix client to reject responses without a :status pseudo header.
• Fix rare race condition during shutdown.
• Fix rejecting GOAWAY frames with a non-zero stream identifier.
• Optimize HPACK Huffman encoding and decoding.
• Reduce size of HPACK Huffman encoding tables.
• Optimize receive performance by reducing send buffer locking.

Commits

• b0e8908 v0.4.20
• 5b17a0e perf: remove need to lock for pending_refusal for every recv call (#969)
• a26b427 fix: count reserved push promises against stream concurrency (#968)
• 96c15eb fix: update automatic DATA frame budget at runtime (#965)
• d96d347 fix: reject duplicate content-lengths that differ (#967)
• 8e9655f fix: count refused streams on local reset abuse counter (#966)
• 3c5f61c fix(client): reject responses without :status (#959)
• e43124b fix: rare race during shutdown (#956)
• 20cfc37 style: apply clippy (#955)
• d785c5f chore: make CI have a single required job (#954)
• Additional commits viewable in compare view

[XAMPPRocky]

@dependabot recreate