Update HTTP requirement from 1.10.17 to 1.10.17, 2.0 in /GeneralMetaData

[dependabot]

Updates the requirements on HTTP to permit the latest version.

Release notes

Sourced from HTTP's releases.

v2.0.0

HTTP v2.0.0

Diff since v1.11.0

Breaking changes

HTTP.jl 2.0 is a breaking major release and a broad rewrite of the package internals and public API on top of Reseau.jl. The most important migration notes are:

• Julia 1.10 is now the minimum supported Julia version.
• HTTP.request and the verb helpers buffer Response.body::Vector{UInt8} by default; use HTTP.open or response_stream for streaming control.
• Response.status_code has been renamed to Response.status.
• RequestContext is now typed request state with cancellation, deadlines, metadata, and timeout fields. Dict-like metadata access remains as a migration aid, but new code should use the typed helpers and fields.
• Client pooling, retries, TLS, proxying, cookies, and timeouts are now configured through HTTP.Client, HTTP.Transport, and explicit keywords such as retry_if, request_timeout, and read_idle_timeout instead of the old layer stack, pool, retry_delays, retry_check, sslconfig, or socket_type_tls APIs.
• WebSocket-specific entrypoints now live under HTTP.WebSockets, including HTTP.WebSockets.open, HTTP.WebSockets.listen, and HTTP.WebSockets.listen!.
• HTTP.download is no longer HTTP.jl's dedicated download helper. HTTP.download(...) now resolves to Base.download; use Downloads.download for simple downloads or HTTP.request(...; response_stream=io) / HTTP.open when HTTP.jl client configuration is needed.
• Undocumented 1.x internals, including parser, layer-stack, connection-pool, HPACK, and low-level HTTP/2 implementation details, are no longer supported migration targets.

Highlights

• New Reseau-backed transport foundation for HTTP/1.1 and HTTP/2 client/server workflows.
• New core types around Request, Response, Headers, Client, Transport, Stream, and RequestContext.
• First-class HTTP/2 client/server support, Server-Sent Events, WebSockets, static file serving, request tracing, structured timeout phases, structured HTTP error types, and precompile/trim-oriented workloads.
• See CHANGELOG.md and docs/src/guides/migration-1x.md for the full changelog and migration guide.

Merged pull requests:

• [BREAKING] HTTP.jl 2.0 package overhaul (#1248) (@​quinnj)

Changelog

Sourced from HTTP's changelog.

[v2.0.0] - 2026-04-27

HTTP.jl 2.0 is a major rewrite of the package internals and public API. The release keeps the familiar HTTP.request, verb helpers, HTTP.serve, routing, WebSocket, and SSE workflows, but rebuilds them on a smaller, explicit core that delegates transport mechanics to Reseau.jl. The 2.0 line is the new foundation for HTTP/1.1, HTTP/2, timeouts, streaming, precompilation, and future protocol work.

Added

• Added a new core API around Request, Response, Headers, RequestContext, explicit request/response body types, and structured timeout configuration.
• Added Client and Transport objects for reusable client configuration, connection reuse, cookie jars, redirect limits, retry policy, default headers, and HTTP/2 preference.
• Added first-class HTTP/2 client and server support through the Reseau-backed transport layer, including stream lifecycle handling, flow-control-aware body reads, and h2c prior-knowledge support for local/plaintext use cases.
• Added structured timeout phases for connection establishment, complete request deadlines, response-header waits, read-idle waits, write-idle waits, and Expect: 100-continue waits.
• Added HTTP.HTTPTimeoutError as the public timeout exception alias and richer timeout messages for client and server failures.
• Added HTTP.open for response streaming with the same request pipeline as HTTP.request.
• Added request tracing support through trace callbacks, client event types, and the verbose request keyword.
• Added server helpers for streaming handlers, static content, file serving, file-server roots, graceful shutdown callbacks, handler timeouts, and socket-close control.
• Added Server-Sent Events support for clients and servers through SSEEvent, sse_stream, and the sse_callback request keyword.
• Added WebSocket client/server support under HTTP.WebSockets, including HTTP.WebSockets.open, HTTP.WebSockets.listen, and HTTP.WebSockets.listen!.
• Added precompile workloads that cover common client, server, router, SSE, WebSocket, and streaming paths.
• Added curated manual and API-reference documentation for the 2.0 public surface, plus a migration guide for common 1.x call patterns.

Changed

• The package now presents a curated 2.0 public API built around Request, Response, Stream, Client, Transport, and explicit body types on top of Reseau.
• Julia 1.10 is now the minimum supported Julia version.
• HTTP.request and the verb helpers now return a fully materialized Response.body::Vector{UInt8} by default. Use HTTP.open or the response_stream keyword when you need streaming control.
• Request and Response constructors now prefer explicit keyword-oriented

... (truncated)

Commits

• 5eccd0c test(server): avoid windows post reuse flake
• fbe6009 fix(compat): support julia 1.10 import
• 25be01b [BREAKING] HTTP.jl 2.0 package overhaul (#1248)
• a380230 Implement bodysummary without private APIs (#1147)
• 0ac1528 Use Base.alloc_request instead of implementing it directly (#1145)
• 22ce15a 1.12 compat (#1243)
• 0abbfb1 Client & server support for text/event-stream, SSE (#1240)
• e7feb99 Bump version to 1.10.19
• a30e67a Fix overly aggressive header check. Fixes #1235 (#1236)
• d2de734 Bump version to 1.10.18
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)