Bump org.asynchttpclient:async-http-client from 3.0.8 to 3.0.12

[dependabot]

Bumps org.asynchttpclient:async-http-client from 3.0.8 to 3.0.12.

Release notes

Sourced from org.asynchttpclient:async-http-client's releases.

AHC v3.0.12 Release

What's Changed

• Release v3.0.11 by @​hyperxpro in AsyncHttpClient/async-http-client#2198
• Reduce per-request allocation in ThreadSafeCookieStore.get() by @​hyperxpro in AsyncHttpClient/async-http-client#2201
• escape quote and crlf in multipart content-disposition values by @​jmestwa-coder in AsyncHttpClient/async-http-client#2203
• Avoid Uri reallocation in UriEncoder.encode() on the no-op path by @​hyperxpro in AsyncHttpClient/async-http-client#2204
• Reuse a per-thread UriParser scratch to avoid per-parse allocation by @​hyperxpro in AsyncHttpClient/async-http-client#2205
• Intern known request header names to static AsciiString by @​hyperxpro in AsyncHttpClient/async-http-client#2206
• Match HTTP/2 content-encoding with AsciiString constants instead of toLowerCase by @​hyperxpro in AsyncHttpClient/async-http-client#2207
• Improve CI Release Workflow by @​hyperxpro in AsyncHttpClient/async-http-client#2208
• Fall back to NIO instead of throwing when no native transport is available by @​hyperxpro in AsyncHttpClient/async-http-client#2209
• fail websocket handshake on invalid sec-websocket-accept by @​jmestwa-coder in AsyncHttpClient/async-http-client#2211
• Localize tests that depended on public endpoints by @​hyperxpro in AsyncHttpClient/async-http-client#2215
• [Performance] Raise default HTTP/2 initial window size to 16 MiB by @​hyperxpro in AsyncHttpClient/async-http-client#2213
• Add LoadBalance.ROUND_ROBIN for per-request IP round-robin by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2202
• Bump the dependencies group with 5 updates by @​dependabot[bot] in AsyncHttpClient/async-http-client#2222
• Bump actions/checkout from 6 to 7 in the actions group by @​dependabot[bot] in AsyncHttpClient/async-http-client#2223
• use SecureRandom for digest auth cnonce by @​jmestwa-coder in AsyncHttpClient/async-http-client#2220
• skip origin Authorization on CONNECT proxy request by @​madib06ops in AsyncHttpClient/async-http-client#2234
• escape quoted-string params in Digest Authorization header by @​madib06ops in AsyncHttpClient/async-http-client#2236
• stop config realm leaking to a cross-origin redirect target by @​jmestwa-coder in AsyncHttpClient/async-http-client#2224
• fail SCRAM exchange on invalid ServerSignature by @​madib06ops in AsyncHttpClient/async-http-client#2235
• normalize the scheme case in the Uri constructor by @​madib06ops in AsyncHttpClient/async-http-client#2239
• Fix LICENSE file for Apache 2.0 by @​hyperxpro in AsyncHttpClient/async-http-client#2242
• Enable HTTPS endpoint identification in JsseSslEngineFactory by @​hyperxpro in AsyncHttpClient/async-http-client#2243
• Reject CR/LF in raw multipart part-header fields by @​hyperxpro in AsyncHttpClient/async-http-client#2244
• Read InputStream bodies straight into the buffer, no staging array by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2233
• Bind origin Kerberos/SPNEGO token to the origin service, not the proxy by @​hyperxpro in AsyncHttpClient/async-http-client#2245
• Avoid per-connect lock on shared Bootstrap options map (#2218) by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2219
• Make idle-channel pool cleaner reap in a single O(n) pass by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2225
• Mirror Netty option-failure semantics in applyChannelOptions by @​hyperxpro in AsyncHttpClient/async-http-client#2247
• Round robin issue (#2214) by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2217
• Release the round-robin HTTP/2 permit when a connection starts draining by @​hyperxpro in AsyncHttpClient/async-http-client#2248
• Harden the O(n) idle-pool reap tests: stable idle window + kept-after-removed coverage by @​hyperxpro in AsyncHttpClient/async-http-client#2249
• Wait for a sibling HTTP/2 connection without blocking the caller thread by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2227
• Generalize failed-IP cooldown across all LoadBalance modes and make it configurable by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2221
• Never block the event loop acquiring a connection permit by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2226
• Harden the HTTP/2 connection-waiter registry against waiter failures and shutdown races by @​hyperxpro in AsyncHttpClient/async-http-client#2251
• No blocking acquire on event loop by @​hyperxpro in AsyncHttpClient/async-http-client#2252
• Schedule the round-robin request timeout once, not twice by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2229
• Harden failed-IP cooldown config and add DEFAULT-mode test by @​hyperxpro in AsyncHttpClient/async-http-client#2253
• Fail fast on empty round-robin address resolution by @​hyperxpro in AsyncHttpClient/async-http-client#2254
• Signal STOP on the finishing multipart chunk, not an extra empty read by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2232
• Reuse the per-request partition key instead of recomputing it by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2231
• Document that BodyState.STOP may carry the final bytes by @​hyperxpro in AsyncHttpClient/async-http-client#2255
• Avoid the per-request rotation copy in round-robin address selection by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2230
• Cap cookies retained per domain (RFC 6265 5.3) by @​pavel-ptashyts in AsyncHttpClient/async-http-client#2256
• Mark the round-robin RotatedView RandomAccess and cover its bounds check by @​hyperxpro in AsyncHttpClient/async-http-client#2257
• Add AI Agent Guidelines to AGENTS.md by @​hyperxpro in AsyncHttpClient/async-http-client#2268
• Support HTTP/2 after proxy CONNECT by @​rampreeth in AsyncHttpClient/async-http-client#2250

... (truncated)

Commits

• c07038b [maven-release-plugin] prepare release async-http-client-project-3.0.12
• 496feb3 Restore the -SNAPSHOT suffix on main
• 26c2eca Release v3.0.12 (#2306)
• 0801680 Never pool a socket whose CONNECT the proxy refused
• d1f45ab Decode quoted-pairs when reading auth-params back off the wire
• 75e8c66 Refuse a 407 on a tunnel inherited from the connection pool
• d84ca5f Record the removal of the stale-parameter rspauth helper for revapi
• 6c5c751 Insert the tunnel SSL handler without assuming an inflater
• be439b2 Stop answering the origin's 407 with the proxy's credentials
• 7e1acde Re-arm tunnelEstablished whenever a CONNECT is attached
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.