From 8a30a7da4c30dd53314333a1badc4973ce6d0b70 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Aug 2026 11:14:42 +0000
Subject: [PATCH] chore: bump github.com/elazarl/goproxy from 1.8.0 to 1.9.0
 (#28019)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [github.com/elazarl/goproxy](https://github.com/elazarl/goproxy)
from 1.8.0 to 1.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/elazarl/goproxy/releases">github.com/elazarl/goproxy's
releases</a>.</em></p>
<blockquote>
<h2>v1.9.0: HTTP/2 MITM Full Support</h2>
<h2>What's Changed</h2>
<ul>
<li>HTTP/2 MITM Full Support by <a
href="https://github.com/ErikPelli"><code>@​ErikPelli</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/785">elazarl/goproxy#785</a></li>
<li>Use Go standard library to check port by <a
href="https://github.com/ErikPelli"><code>@​ErikPelli</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/795">elazarl/goproxy#795</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/elazarl/goproxy/compare/v1.8.6...v1.9.0">https://github.com/elazarl/goproxy/compare/v1.8.6...v1.9.0</a></p>
<h3>Highlights &amp; Acknowledgements</h3>
<ul>
<li><strong>HTTP/2 MITM Support:</strong> This release introduces native
support for inspecting and manipulating HTTP/2 traffic within GoProxy's
MITM functionality.
A special thanks to the team at <a
href="https://github.com/LumiaSecurity"><code>@​LumiaSecurity</code></a>
(including <a href="https://github.com/omriza"><code>@​omriza</code></a>
for the review) for supporting the development of these HTTP/2 MITM
features and contributing to this major enhancement.
Achieving full HTTP/2 MITM capability represents a huge milestone for
GoProxy, taking our library to the next level for whoever needs it.
<strong>To enable it, make sure that <code>AllowHTTP2</code> is set to
<code>true</code> in the proxy configuration.</strong></li>
</ul>
<h3>⚠️ Possible Breaking Change</h3>
<ul>
<li>Previously there was an incomplete implementation of HTTP/2 inside
the <code>h2.go</code> file, with an exported H2Transport struct.
Probably no one was using it, but if you were, be careful that in this
release it has been removed to create the full HTTP/2 MITM
implementation.</li>
</ul>
<h2>v1.8.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix unexpected scheme edge case in MITM by <a
href="https://github.com/ErikPelli"><code>@​ErikPelli</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/793">elazarl/goproxy#793</a></li>
<li>Stream MITM response bodies by <a
href="https://github.com/krissetto"><code>@​krissetto</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/794">elazarl/goproxy#794</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/krissetto"><code>@​krissetto</code></a>
made their first contribution in <a
href="https://redirect.github.com/elazarl/goproxy/pull/794">elazarl/goproxy#794</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/elazarl/goproxy/compare/v1.8.5...v1.8.6">https://github.com/elazarl/goproxy/compare/v1.8.5...v1.8.6</a></p>
<h2>v1.8.5</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(https): coalesce the MITM response head into a single write by
<a
href="https://github.com/shaharfreiman"><code>@​shaharfreiman</code></a>
in <a
href="https://redirect.github.com/elazarl/goproxy/pull/787">elazarl/goproxy#787</a></li>
<li>Remove redundant certificate Leaf set starting from Go 1.23 by <a
href="https://github.com/ErikPelli"><code>@​ErikPelli</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/789">elazarl/goproxy#789</a></li>
<li>Fix headers overwrite when there are no trailers by <a
href="https://github.com/ErikPelli"><code>@​ErikPelli</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/791">elazarl/goproxy#791</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/shaharfreiman"><code>@​shaharfreiman</code></a>
made their first contribution in <a
href="https://redirect.github.com/elazarl/goproxy/pull/787">elazarl/goproxy#787</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/elazarl/goproxy/compare/v1.8.4...v1.8.5">https://github.com/elazarl/goproxy/compare/v1.8.4...v1.8.5</a></p>
<h2>v1.8.4</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: don't set Transfer-Encoding: chunked on 304 responses by <a
href="https://github.com/Yanhu007"><code>@​Yanhu007</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/770">elazarl/goproxy#770</a></li>
<li>docs: add missing godoc comments to exported symbols by <a
href="https://github.com/scovl"><code>@​scovl</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/768">elazarl/goproxy#768</a></li>
<li>http: forward upstream response trailers by <a
href="https://github.com/0b01"><code>@​0b01</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/773">elazarl/goproxy#773</a></li>
<li>Remove insecure skip verify from origin transport by <a
href="https://github.com/ErikPelli"><code>@​ErikPelli</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/774">elazarl/goproxy#774</a></li>
<li>Avoid chunked response when there is http.NoBody by <a
href="https://github.com/ErikPelli"><code>@​ErikPelli</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/776">elazarl/goproxy#776</a></li>
<li>fix(https): close client connection when target connection errors by
<a href="https://github.com/wucm667"><code>@​wucm667</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/779">elazarl/goproxy#779</a></li>
<li>fix: restore examples module health and clarify sample apps by <a
href="https://github.com/Thiago-Tertuliano"><code>@​Thiago-Tertuliano</code></a>
in <a
href="https://redirect.github.com/elazarl/goproxy/pull/780">elazarl/goproxy#780</a></li>
<li>fix: append headers instead of overwriting when keepDestHeaders is
true by <a
href="https://github.com/Yanhu007"><code>@​Yanhu007</code></a> in <a
href="https://redirect.github.com/elazarl/goproxy/pull/771">elazarl/goproxy#771</a></li>
</ul>
<h2>New Contributors</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/elazarl/goproxy/commit/6225cd309d7c0e201659f1e00086b12fdae62df2"><code>6225cd3</code></a>
Use Go standard library to check port (<a
href="https://redirect.github.com/elazarl/goproxy/issues/795">#795</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/5e4406819eb880480bfe8be39e5c06c161e96ad5"><code>5e44068</code></a>
HTTP/2 MITM Full Support (<a
href="https://redirect.github.com/elazarl/goproxy/issues/785">#785</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/a4bf4321f461a060a8c55d371ae3cfa747d561d5"><code>a4bf432</code></a>
Stream MITM response bodies (<a
href="https://redirect.github.com/elazarl/goproxy/issues/794">#794</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/3f0ac0b322e30aff226ea2ce9f4114c7a5585ff4"><code>3f0ac0b</code></a>
Fix unexpected scheme edge case in MITM (<a
href="https://redirect.github.com/elazarl/goproxy/issues/793">#793</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/d435b12bc2fd1ecae5c03a39fdd452a43e36be00"><code>d435b12</code></a>
Fix headers overwrite when there are no trailers (<a
href="https://redirect.github.com/elazarl/goproxy/issues/791">#791</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/54976310a7923a7526777f9eb0a3fc0f4d625ffc"><code>5497631</code></a>
Remove redundant certificate Leaf set starting from Go 1.23 (<a
href="https://redirect.github.com/elazarl/goproxy/issues/789">#789</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/5ba11e8846d7c139c0404fcc47099ef8dc7375c2"><code>5ba11e8</code></a>
fix(https): coalesce the MITM response head into a single write (<a
href="https://redirect.github.com/elazarl/goproxy/issues/787">#787</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/636207d4c044d260140a1f7a6f13efb609dbadc0"><code>636207d</code></a>
fix: append headers instead of overwriting when keepDestHeaders is true
(<a
href="https://redirect.github.com/elazarl/goproxy/issues/771">#771</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/6584eeeb52783bbb3ef0ca44c6edc3241e65bc9d"><code>6584eee</code></a>
fix: restore examples module health and clarify sample apps (<a
href="https://redirect.github.com/elazarl/goproxy/issues/780">#780</a>)</li>
<li><a
href="https://github.com/elazarl/goproxy/commit/038e3b90031f25eead7d60a7db162de131321fe7"><code>038e3b9</code></a>
fix(https): close client connection when target connection errors (<a
href="https://redirect.github.com/elazarl/goproxy/issues/779">#779</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/elazarl/goproxy/compare/v1.8.0...v1.9.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/elazarl/goproxy&package-manager=go_modules&previous-version=1.8.0&new-version=1.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 6e58d8ff07..f8b7e100fa 100644
--- a/go.mod
+++ b/go.mod
@@ -530,7 +530,7 @@ require (
 	github.com/coder/preview v1.0.10-0.20260521153517-34deb0946c4f
 	github.com/danieljoos/wincred v1.2.3
 	github.com/dgraph-io/ristretto/v2 v2.4.0
-	github.com/elazarl/goproxy v1.8.0
+	github.com/elazarl/goproxy v1.9.0
 	github.com/elimity-com/scim v0.0.0-20260506142751-830e1caafcc3
 	github.com/fsnotify/fsnotify v1.10.1
 	github.com/go-git/go-git/v5 v5.19.2
diff --git a/go.sum b/go.sum
index 7a30aa47ed..b1602310a1 100644
--- a/go.sum
+++ b/go.sum
@@ -454,8 +454,8 @@ github.com/elastic/go-sysinfo v1.15.1 h1:zBmTnFEXxIQ3iwcQuk7MzaUotmKRp3OabbbWM8T
 github.com/elastic/go-sysinfo v1.15.1/go.mod h1:jPSuTgXG+dhhh0GKIyI2Cso+w5lPJ5PvVqKlL8LV/Hk=
 github.com/elastic/go-windows v1.0.0 h1:qLURgZFkkrYyTTkvYpsZIgf83AUsdIHfvlJaqaZ7aSY=
 github.com/elastic/go-windows v1.0.0/go.mod h1:TsU0Nrp7/y3+VwE82FoZF8gC/XFg/Elz6CcloAxnPgU=
-github.com/elazarl/goproxy v1.8.0 h1:dt561rX7UAYMeFRLtzFx6uQGl2TpL1dr6uCG23nFQSY=
-github.com/elazarl/goproxy v1.8.0/go.mod h1:b5xm6W48AUHNpRTCvlnd0YVh+JafCCtsLsJZvvNTz+E=
+github.com/elazarl/goproxy v1.9.0 h1:2j3c13lD5v0QTjxphJSSIHS7w8/m/pzSHtLMPOpznC0=
+github.com/elazarl/goproxy v1.9.0/go.mod h1:THdE5ix2clxX9lZzcICPpZ67d6CdrPZxdOYsNgU5e30=
 github.com/elimity-com/scim v0.0.0-20260506142751-830e1caafcc3 h1:P+JJLBS2QNe5aWBpNoDWqmGwNv/DKP+WZpU/mPIS+28=
 github.com/elimity-com/scim v0.0.0-20260506142751-830e1caafcc3/go.mod h1:JkjcmqbLW+khwt2fmBPJFBhx2zGZ8XobRZ+O0VhlwWo=
 github.com/emersion/go-sasl v0.0.0-20200509203442-7bfe0ed36a21 h1:OJyUGMJTzHTd1XQp98QTaHernxMYzRaOasRir9hUlFQ=