Skip to content

[hical61-hical] Update to version 2.0.0#51251

Merged
BillyONeal merged 1 commit intomicrosoft:masterfrom
Hical61:hical61-hical-v2.0.0
Apr 21, 2026
Merged

[hical61-hical] Update to version 2.0.0#51251
BillyONeal merged 1 commit intomicrosoft:masterfrom
Hical61:hical61-hical-v2.0.0

Conversation

@Hical61
Copy link
Copy Markdown
Contributor

@Hical61 Hical61 commented Apr 19, 2026

Changes

Update hical61-hical from 1.0.1 to 2.0.0.

Upstream changelog: https://github.com/Hical61/Hical/blob/main/CHANGELOG.md#200---2026-04-19

Key changes in v2.0.0

Security & Stability Fixes

  • [P0] Fixed use-after-free in middleware build() and execute() — lambda captured by reference changed to by value
  • [P0] Fixed HttpServer timer race condition — steady_timer reused outside loop with shared_ptr<atomic<bool>> alive flag
  • [P0] Fixed GenericConnection data race — reading_ changed from bool to std::atomic<bool>
  • [P0] Fixed TcpServer acceptLoop use-after-this — coroutine lambda captures alive_ flag
  • [P1] Fixed Multipart DoS check ordering — part count limit check moved before push_back

Improvements

  • Session ID generation upgraded from std::mt19937_64 to OpenSSL RAND_bytes (cryptographically secure)
  • Cookie security defaults: httpOnly=true, secure=true, sameSite="Lax"
  • Session lock-free lastAccess via atomic<int64_t>
  • Router zero-alloc string_view lookup via transparent hashing
  • Added SessionOptions::maxSessions (default 100000) DoS protection

Port changes

  • Updated version from 1.0.1 to 2.0.0 in vcpkg.json
  • Updated SHA512 in portfile.cmake for new release tarball
  • No changes to dependencies or build options

Checklist

  • Changes: Updated port version to 2.0.0
  • Port builds successfully on x64-linux / x64-windows-static
  • No new dependencies added
  • Version database updated via vcpkg x-add-version
  • Manifest formatted via vcpkg format-manifest
  • License: MIT (unchanged)

@BillyONeal
Copy link
Copy Markdown
Member

I am unable to merge this because there are merge conflicts. To resolve those, please switch to https://github.com/microsoft/vcpkg 's master branch, make your edits to change it to 2.x, and force push to this branch.

(In general it's better to always base new PRs on a recent master commit as it reduces the size of the PR diff to just what you changed)

@BillyONeal
Copy link
Copy Markdown
Member

Also please use the port update checklist:

- [ ] Changes comply with the [maintainer guide](https://github.com/microsoft/vcpkg-docs/blob/main/vcpkg/contributing/maintainer-guide.md).
- [ ] SHA512s are updated for each updated download.
- [ ] The "supports" clause reflects platforms that may be fixed by this new version, or no changes were necessary.
- [ ] Any fixed [CI baseline](https://github.com/microsoft/vcpkg/blob/master/scripts/ci.baseline.txt) and [CI feature baseline](https://github.com/microsoft/vcpkg/blob/master/scripts/ci.feature.baseline.txt) entries are removed from that file, or no entries needed to be changed.
- [ ] All patch files in the port are applied and succeed.
- [ ] The version database is fixed by rerunning `./vcpkg x-add-version --all` and committing the result.
- [ ] Exactly one version is added in each modified versions file.

@BillyONeal BillyONeal marked this pull request as draft April 20, 2026 23:52
@Hical61 Hical61 force-pushed the hical61-hical-v2.0.0 branch from d837a37 to 5dde58e Compare April 21, 2026 01:19
@Hical61
Copy link
Copy Markdown
Contributor Author

Hical61 commented Apr 21, 2026

I am unable to merge this because there are merge conflicts. To resolve those, please switch to https://github.com/microsoft/vcpkg 's master branch, make your edits to change it to 2.x, and force push to this branch.

(In general it's better to always base new PRs on a recent master commit as it reduces the size of the PR diff to just what you changed)

Thank you @BillyONeal for the review! I've rebased the branch onto the latest master and force-pushed a clean single commit. The merge conflicts should be resolved now.

@Hical61
Copy link
Copy Markdown
Contributor Author

Hical61 commented Apr 21, 2026

Also please use the port update checklist:

- [ ] Changes comply with the [maintainer guide](https://github.com/microsoft/vcpkg-docs/blob/main/vcpkg/contributing/maintainer-guide.md).
- [ ] SHA512s are updated for each updated download.
- [ ] The "supports" clause reflects platforms that may be fixed by this new version, or no changes were necessary.
- [ ] Any fixed [CI baseline](https://github.com/microsoft/vcpkg/blob/master/scripts/ci.baseline.txt) and [CI feature baseline](https://github.com/microsoft/vcpkg/blob/master/scripts/ci.feature.baseline.txt) entries are removed from that file, or no entries needed to be changed.
- [ ] All patch files in the port are applied and succeed.
- [ ] The version database is fixed by rerunning `./vcpkg x-add-version --all` and committing the result.
- [ ] Exactly one version is added in each modified versions file.

Port update checklist:

  • Changes comply with the maintainer guide.
  • SHA512s are updated for each updated download.
  • The "supports" clause reflects platforms that may be fixed by this new version, or no changes were necessary.
  • Any fixed CI baseline and CI feature baseline entries are removed from that file, or no entries needed to be changed.
  • All patch files in the port are applied and succeed.
  • The version database is fixed by rerunning ./vcpkg x-add-version --all and committing the result.
  • Exactly one version is added in each modified versions file.

@Hical61 Hical61 marked this pull request as ready for review April 21, 2026 01:45
Copy link
Copy Markdown
Member

@BillyONeal BillyONeal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the update!

@BillyONeal BillyONeal merged commit c2a21b7 into microsoft:master Apr 21, 2026
16 checks passed
@Hical61 Hical61 deleted the hical61-hical-v2.0.0 branch April 21, 2026 02:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants