Skip to content

Bump got from 14.6.6 to 16.1.0 - #661

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/got-16.1.0
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/got-16.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps got from 14.6.6 to 16.1.0.

Release notes

Sourced from got's releases.

v16.1.0

This release is the result of a large bug hunt. Many of the fixes make Got match its documented behavior, so you may notice some of them:

  • Invalid options now throw: an empty method, a negative or fractional maxRedirects or retry.limit, a prefixUrl with a query string or fragment, and a handlers entry that is not a function.
  • A stream with a body, json, or form option now rejects writes, as documented.
  • The promise response event now only fires for the final response, not for every retry attempt.
  • got.extend({body}) (and json, form) no longer sends the payload with every request of the instance. Payloads are never merged with defaults.
  • instance.extend() now inherits the parent's mutableDefaults, like got.extend(instance).
  • A HEAD request is no longer changed to GET on a 301, 302, or 303 redirect.
  • response.body no longer keeps a leading UTF-8 byte order mark, and JSON with a byte order mark now parses.

Improvements

  • Accept number values in headers 6fffc9e
  • Export the Timings, DnsCacheLookup, and DnsCacheOptions types d012d1d eccaaca
  • Retry FormData bodies by re-serializing them instead of failing 90c6ec1
  • Support the x-gzip content coding and stacked content codings 5550a79

Fixes

  • Fix many HTTP/2 edge cases, including requests that could hang forever when the response or request was destroyed d3c549c 78bf394 6bbc7f4 602b179 687b5c8 4ea02b8 b6522f3 9348ad6 c686386 3bbc37b 91dc486 11621cd
  • Fix timeout.request restarting on each redirect, and several timeout phase edge cases 9cd2ee6 df33cdb 4e4c583 795234f 0f1263d
  • Fix redirects: keep the URL fragment, evaluate followRedirect once per response, and keep Content-Length correct when a hook replaces the body 1febf3c a2b3d90 1d64f7c 60b48af
  • Fix Infinity timeouts firing at once or throwing 724ebc2
  • Fix retry delay edge cases, including invalid Retry-After values and calculateDelay for afterResponse retries fe58b8c 0193605
  • Fix retries with replaced or non-replayable bodies ae5521f 7c1cda3 8bbc79f 1a56d36 d012d1d
  • Fix the default paginate on real-world Link headers, and several pagination option and limit edge cases bd2dee0 1e61807 602b179 f98d0e1 c8419e4 526a988 557e61f 4712e5b a4a50ad b65e533
  • Fix afterResponse, beforeRequest, and beforeCache hook edge cases 45c201c c1cf0f8 850e49b a4a50ad 863cf30 494279b
  • Fix response body decoding and parsing edge cases c36ad51 c409a84 3c6eaf1 f658d3e dbd83df
  • Fix stream edge cases: respect backpressure, stop forwarding after unpipe, and do not copy hop-by-hop headers to a piped ServerResponse 348e114 dc929bd dc56e4b c930cd9 a9a754f
  • Fix uploads: DataView byte ranges, upload error classification, progress total for Content-Length: 0, and cancelling Web ReadableStream bodies 2a66686 d1cb051 0238069 b57120c 200bc85
  • Fix option normalization, cloning, and immutable defaults 8f44d81 687eb7d 30023f7 5548b00 bec5da6 bcc0b01 9348ad6 a9a754f 7b13369 3bd0486 d272656 0e537c7 60b62a0 129d88d
  • Fix error stacks reporting RequestError instead of the real error class, and other error cause edge cases c8419e4 9d61a37 5ccac58 71f4e0e
  • Fix custom DNS cache lookups and DNS records without a valid TTL b3dc5c6 4ea02b8 d012d1d
  • Fix cookie edge cases with retries, redirects, and async cookie jars 784bbd2 d5cd5e4
  • Fix diagnostics channel coverage across retries and terminal errors cfce7b6
  • Fix TypeScript types to match the runtime values 7c833b8 c59692b 88eeb13 0c17a8b c788ac9 a4176b6

sindresorhus/got@v16.0.0...v16.1.0

v16.0.0

Breaking changes

  • Rewrite HTTP/2 support and drop the http2-wrapper dependency (#2464) 1e157c4
    • Got now has a built-in HTTP/2 client: ALPN negotiation, a pooled session cache with multiplexing, GOAWAY retirement, request and response trailers, informational (1xx) responses, abort signals, response caching, IPv6 authorities, and h2c through h2session.
    • agent.http2 is no longer an agent slot. It is only an opt-out flag now: pass false to skip session pooling. Passing an agent instance throws.
    • Response headers no longer contain HTTP/2 pseudo-headers. Use response.statusCode instead of response.headers[':status'].
    • A custom agent.https combined with http2: true makes Got use the native HTTP/1.1 path, because the built-in session pool does not support custom HTTPS agents.

... (truncated)

Commits
  • 05b4476 16.1.0
  • 50c4ac6 Simplify
  • 03d541e Remove the companies section from the readme
  • eac0aa1 Document that a payload does not belong in got.extend()
  • 11621cd Settle an HTTP/2 request when the user destroys the response
  • 33b3ab4 Sync the option doc comments with the documentation
  • 5ccac58 Keep the cause frames intact when its message is not in its stack
  • 91dc486 Keep an HTTP/2 response complete once END_STREAM arrived
  • 3bbc37b Settle a destroyed in-progress http2 request
  • 494279b Name null in the beforeError return validation
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
@aivus

aivus commented Oct 19, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/got-16.1.0 branch from 672a533 to a6140f5 Compare October 19, 2026 20:03
@aivus aivus mentioned this pull request Oct 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/got-16.1.0 branch 4 times, most recently from 3e52515 to 4eecaaa Compare October 19, 2026 20:25
Bumps [got](https://github.com/sindresorhus/got) from 14.6.6 to 16.1.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v14.6.6...v16.1.0)

---
updated-dependencies:
- dependency-name: got
  dependency-version: 16.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/got-16.1.0 branch from 4eecaaa to e843af2 Compare October 19, 2026 20:29
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like got is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/got-16.1.0 branch October 19, 2026 20:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants