From 56b6ab5d037f5d26c670c973a93d4ed6dee9977a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 23 Jul 2026 14:46:05 +0000
Subject: [PATCH] chore(deps): bump hyper from 0.14.32 to 1.8.1

Bumps [hyper](https://github.com/hyperium/hyper) from 0.14.32 to 1.8.1.
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hyperium/hyper/compare/v0.14.32...v1.8.1)

---
updated-dependencies:
- dependency-name: hyper
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                           | 38 +++++++++++++++++++++-------
 runtime/jwks-manager/Cargo.toml      |  2 +-
 runtime/kms-proxy/Cargo.toml         |  2 +-
 runtime/sidecar-watcher/Cargo.toml   |  2 +-
 runtime/telemetry-service/Cargo.toml |  2 +-
 5 files changed, 33 insertions(+), 13 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 2ebe2e926..83d6bbec8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -39,7 +39,7 @@ dependencies = [
  "flate2",
  "foldhash 0.2.0",
  "futures-core",
- "h2",
+ "h2 0.3.27",
  "http 0.2.12",
  "httparse",
  "httpdate",
@@ -1975,6 +1975,25 @@ dependencies = [
  "tracing",
 ]
 
+[[package]]
+name = "h2"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6cb093c84e8bd9b188d4c4a8cb6579fc016968d14c99882163cd3ff402a4f155"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http 1.4.0",
+ "indexmap 2.13.0",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
 [[package]]
 name = "half"
 version = "1.8.3"
@@ -2208,7 +2227,7 @@ dependencies = [
  "futures-channel",
  "futures-core",
  "futures-util",
- "h2",
+ "h2 0.3.27",
  "http 0.2.12",
  "http-body 0.4.6",
  "httparse",
@@ -2232,6 +2251,7 @@ dependencies = [
  "bytes",
  "futures-channel",
  "futures-core",
+ "h2 0.4.15",
  "http 1.4.0",
  "http-body 1.0.1",
  "httparse",
@@ -2675,7 +2695,7 @@ dependencies = [
  "anyhow",
  "base64 0.21.7",
  "chrono",
- "hyper 0.14.32",
+ "hyper 1.8.1",
  "jsonwebtoken",
  "reqwest",
  "serde",
@@ -2709,7 +2729,7 @@ dependencies = [
  "chrono",
  "hex",
  "hmac",
- "hyper 0.14.32",
+ "hyper 1.8.1",
  "metrics",
  "metrics-exporter-prometheus",
  "redis",
@@ -4096,7 +4116,7 @@ dependencies = [
  "encoding_rs",
  "futures-core",
  "futures-util",
- "h2",
+ "h2 0.3.27",
  "http 0.2.12",
  "http-body 0.4.6",
  "hyper 0.14.32",
@@ -4598,7 +4618,7 @@ dependencies = [
  "chrono",
  "ed25519-dalek",
  "humantime",
- "hyper 0.14.32",
+ "hyper 1.8.1",
  "jsonschema",
  "k8s-openapi",
  "kube",
@@ -5060,7 +5080,7 @@ version = "0.1.0"
 dependencies = [
  "anyhow",
  "chrono",
- "hyper 0.14.32",
+ "hyper 1.8.1",
  "prometheus-client 0.20.0",
  "reqwest",
  "serde",
@@ -5312,7 +5332,7 @@ dependencies = [
  "axum 0.6.20",
  "base64 0.21.7",
  "bytes",
- "h2",
+ "h2 0.3.27",
  "http 0.2.12",
  "http-body 0.4.6",
  "hyper 0.14.32",
@@ -6407,7 +6427,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.48.0",
 ]
 
 [[package]]
diff --git a/runtime/jwks-manager/Cargo.toml b/runtime/jwks-manager/Cargo.toml
index bff01abcd..4411e81b1 100644
--- a/runtime/jwks-manager/Cargo.toml
+++ b/runtime/jwks-manager/Cargo.toml
@@ -15,5 +15,5 @@ tracing-subscriber = "0.3"
 chrono = { version = "0.4", features = ["serde"] }
 uuid = { version = "1.0", features = ["v4"] }
 base64 = "0.21"
-hyper = { version = "0.14", features = ["full"] }
+hyper = { version = "1.8", features = ["full"] }
 jsonwebtoken = "9.0"
diff --git a/runtime/kms-proxy/Cargo.toml b/runtime/kms-proxy/Cargo.toml
index 52d1d9c73..8ecb93f18 100644
--- a/runtime/kms-proxy/Cargo.toml
+++ b/runtime/kms-proxy/Cargo.toml
@@ -18,7 +18,7 @@ base64 = "0.21"
 sha2 = "0.10"
 hmac = "0.12"
 hex = "0.4"
-hyper = { version = "0.14", features = ["full"] }
+hyper = { version = "1.8", features = ["full"] }
 tower = "0.4"
 tower-http = { version = "0.4", features = ["cors", "trace"] }
 redis = { version = "0.27", features = ["tokio-comp"] }
diff --git a/runtime/sidecar-watcher/Cargo.toml b/runtime/sidecar-watcher/Cargo.toml
index bd0b4d384..a391c825a 100644
--- a/runtime/sidecar-watcher/Cargo.toml
+++ b/runtime/sidecar-watcher/Cargo.toml
@@ -9,7 +9,7 @@ autotests = false
 [dependencies]
 pf-dsse = { path = "../../core/crypto/dsse-rs" }
 anyhow = "1.0"
-hyper = { version = "0.14", features = ["full"] }
+hyper = { version = "1.8", features = ["full"] }
 tokio = { version = "1.0", features = ["full", "rt-multi-thread", "macros"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
diff --git a/runtime/telemetry-service/Cargo.toml b/runtime/telemetry-service/Cargo.toml
index bb6eb5bd3..9cb04b9f9 100644
--- a/runtime/telemetry-service/Cargo.toml
+++ b/runtime/telemetry-service/Cargo.toml
@@ -13,6 +13,6 @@ anyhow = "1.0"
 tracing = "0.1"
 tracing-subscriber = "0.3"
 chrono = { version = "0.4", features = ["serde"] }
-hyper = { version = "0.14", features = ["full"] }
+hyper = { version = "1.8", features = ["full"] }
 prometheus-client = "0.20"
 sha2 = "0.10"