Repository navigation

Constrain Hackney to patched releases - #55

Closed

ziopio wants to merge 1 commit into

security/hackney-minimum-4.9

Closed

Constrain Hackney to patched releases#55
ziopio wants to merge 1 commit into
masterfrom
security/hackney-minimum-4.9

ziopio commented Oct 27, 2026

Member

Summary

Require Hackney >= 4.9.0 so fresh dependency resolution cannot select an affected release.
Keep the checked-in lock on Hackney 4.9.1, which is patched.

Validation

rebar3 tree resolves Hackney 4.9.1.
git diff --check


          Constrain Hackney to patched releases

2e62dc1

ziopio closed this

ziopio deleted the security/hackney-minimum-4.9 branch

October 27, 2026 14:55

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet