[dependabot]

Bumps org.apache.httpcomponents.client5:httpclient5-fluent from 5.6.4 to 5.6.5.

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5-fluent's changelog.

Release 5.6.5

This maintenance release fixes several defects found since the previous release including the defect in the async Brotli decompression code that can cause the message exchange to hang indefinitely. It also upgrades HttpCore to version 5.4.4.

Change Log

• Upgraded HttpCore to version 5.4.4. Contributed by Oleg Kalnichevski

• HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay. Contributed by Matthias Kurz <m.kurz at irregular.at>

• HTTPCLIENT-2432: Fixed connection-pool leak in ResponseEntityProxy#cleanup() when runtime #disconnectEndpoint throws an exception (#883). Contributed by Victor Alekseev

• Decode punycode public suffixes in PublicSuffixMatcher#verify (#876). Contributed by Javid Khan

• Fixed Brotli decompression hang with large input buffers. Contributed by Arturo Bernal

• HTTP cache to treat malformed delta-seconds as absent. Contributed by Arturo Bernal Javid Khan

• Bug-fix: ResponseCachingPolicy incorrectly applies neverCache1_1ResponsesWithQueryString config parameter. This config parameter and related functionality will be deprecated in the next feature release and removed in the future. Contributed by Oleg Kalnichevski

• Removed invalid request version check from ResponseCachingPolicy. Contributed by Oleg Kalnichevski

• Fixed resource leaking on error in AsyncCachingExec Contributed by Jeremie Bolduc <16137441+Jouramie at users.noreply.github.com>

Commits

• e6970b4 HttpClient 5.6.5 release
• d0ff6ec Updated release notes for HttpClient 5.6.5 release
• 03a2abc Upgraded HttpCore to version 5.4.4
• 7ed9d66 HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay
• bd278a6 Improved connection expiry and eviction example
• 02f11eb HTTPCLIENT-2432: fix connection-pool leak in ResponseEntityProxy.cleanup() wh...
• 8e45f17 decode punycode public suffixes in PublicSuffixMatcher.verify (#876)
• 6d8319a Fix Brotli decompression hang with large input buffers
• 908ccc1 treat malformed delta-seconds as absent in deltaSeconds
• 815043a Moved timeout and stale connection related integration tests into separate gr...
• Additional commits viewable in compare view

---

Note

Low Risk
Test-only dependency patch bump with no changes to the Jedis library artifact or runtime classpath.

Overview
Bumps the test-scoped org.apache.httpcomponents.client5:httpclient5-fluent dependency in pom.xml from 5.6.4 to 5.6.5. No application or production code changes.

The newer release is a maintenance patch (HttpCore 5.4.4, connection-pool and async caching fixes, Brotli decompression hang fix, HTTP/2 replay fix). It only affects tests that use the fluent HTTP client API (e.g. scenario fault-injection helpers).

^{Reviewed by Cursor Bugbot for commit 56761e6. Bugbot is set up for automated code reviews on this repo. Configure here.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	⚠️ Failed 2026-10-12T00:04:47.450717Z	32f7dfd	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.