0.8.1

microsoft/agent-host-protocol0.8.1Jun 4, 2026by andrewhavck

Upgrading?

Release notes summary

A security and maintenance patch for Pingora addressing memory exhaustion risks in HTTP/2 and upgrading Rustls dependencies, alongside various CI and dependency pinning updates.

Key Highlights

  • Default HTTP/2 server limits are bounded to mitigate memory exhaustion.
  • Rustls-related dev-dependencies are upgraded to address security advisories.
  • Tracing dependencies are pinned to preserve Rust 1.84 compatibility.
  • MSRV verification uses `cargo check` instead of compiling dev-dependencies.

New Features

  • Mitigation for HTTP/2 memory exhaustion.
  • Rustls security updates.
  • Use of valid paths in header serialization tests.

Full Release Notes

## [0.8.1](https://github.com/cloudflare/pingora/compare/0.8.0...0.8.1) - 2026-06-04


**🔒 Security**

* Bound default HTTP/2 server limits to mitigate memory exhaustion.
* Upgrade Rustls-related dev-dependencies to address `rustls-webpki` security advisories.

**⚙️ Miscellaneous Tasks**

* Pin tracing dependencies to preserve Rust 1.84 compatibility.
* Use `cargo check` for MSRV verification instead of compiling dev-dependencies during tests.
* Update the Semgrep OSS scanning workflow.
* Use valid paths in header serialization tests.
* Gate HTTP/1 CONNECT tests on patched HTTP/1 support.

Related Repositories