Update HTTP requirement from 1 to 1, 2.0 in the all-julia-packages group across 1 directory

[dependabot]

Updates the requirements on HTTP to permit the latest version.
Updates HTTP to 2.0.0

Release notes

Sourced from HTTP's releases.

v2.0.0

HTTP v2.0.0

Diff since v1.11.0

Breaking changes

HTTP.jl 2.0 is a breaking major release and a broad rewrite of the package internals and public API on top of Reseau.jl. The most important migration notes are:

• Julia 1.10 is now the minimum supported Julia version.
• HTTP.request and the verb helpers buffer Response.body::Vector{UInt8} by default; use HTTP.open or response_stream for streaming control.
• Response.status_code has been renamed to Response.status.
• RequestContext is now typed request state with cancellation, deadlines, metadata, and timeout fields. Dict-like metadata access remains as a migration aid, but new code should use the typed helpers and fields.
• Client pooling, retries, TLS, proxying, cookies, and timeouts are now configured through HTTP.Client, HTTP.Transport, and explicit keywords such as retry_if, request_timeout, and read_idle_timeout instead of the old layer stack, pool, retry_delays, retry_check, sslconfig, or socket_type_tls APIs.
• WebSocket-specific entrypoints now live under HTTP.WebSockets, including HTTP.WebSockets.open, HTTP.WebSockets.listen, and HTTP.WebSockets.listen!.
• HTTP.download is no longer HTTP.jl's dedicated download helper. HTTP.download(...) now resolves to Base.download; use Downloads.download for simple downloads or HTTP.request(...; response_stream=io) / HTTP.open when HTTP.jl client configuration is needed.
• Undocumented 1.x internals, including parser, layer-stack, connection-pool, HPACK, and low-level HTTP/2 implementation details, are no longer supported migration targets.

Highlights

• New Reseau-backed transport foundation for HTTP/1.1 and HTTP/2 client/server workflows.
• New core types around Request, Response, Headers, Client, Transport, Stream, and RequestContext.
• First-class HTTP/2 client/server support, Server-Sent Events, WebSockets, static file serving, request tracing, structured timeout phases, structured HTTP error types, and precompile/trim-oriented workloads.
• See CHANGELOG.md and docs/src/guides/migration-1x.md for the full changelog and migration guide.

Merged pull requests:

• [BREAKING] HTTP.jl 2.0 package overhaul (#1248) (@​quinnj)

Changelog

Sourced from HTTP's changelog.

[v2.0.0] - 2026-04-27

HTTP.jl 2.0 is a major rewrite of the package internals and public API. The release keeps the familiar HTTP.request, verb helpers, HTTP.serve, routing, WebSocket, and SSE workflows, but rebuilds them on a smaller, explicit core that delegates transport mechanics to Reseau.jl. The 2.0 line is the new foundation for HTTP/1.1, HTTP/2, timeouts, streaming, precompilation, and future protocol work.

Added

• Added a new core API around Request, Response, Headers, RequestContext, explicit request/response body types, and structured timeout configuration.
• Added Client and Transport objects for reusable client configuration, connection reuse, cookie jars, redirect limits, retry policy, default headers, and HTTP/2 preference.
• Added first-class HTTP/2 client and server support through the Reseau-backed transport layer, including stream lifecycle handling, flow-control-aware body reads, and h2c prior-knowledge support for local/plaintext use cases.
• Added structured timeout phases for connection establishment, complete request deadlines, response-header waits, read-idle waits, write-idle waits, and Expect: 100-continue waits.
• Added HTTP.HTTPTimeoutError as the public timeout exception alias and richer timeout messages for client and server failures.
• Added HTTP.open for response streaming with the same request pipeline as HTTP.request.
• Added request tracing support through trace callbacks, client event types, and the verbose request keyword.
• Added server helpers for streaming handlers, static content, file serving, file-server roots, graceful shutdown callbacks, handler timeouts, and socket-close control.
• Added Server-Sent Events support for clients and servers through SSEEvent, sse_stream, and the sse_callback request keyword.
• Added WebSocket client/server support under HTTP.WebSockets, including HTTP.WebSockets.open, HTTP.WebSockets.listen, and HTTP.WebSockets.listen!.
• Added precompile workloads that cover common client, server, router, SSE, WebSocket, and streaming paths.
• Added curated manual and API-reference documentation for the 2.0 public surface, plus a migration guide for common 1.x call patterns.

Changed

• The package now presents a curated 2.0 public API built around Request, Response, Stream, Client, Transport, and explicit body types on top of Reseau.
• Julia 1.10 is now the minimum supported Julia version.
• HTTP.request and the verb helpers now return a fully materialized Response.body::Vector{UInt8} by default. Use HTTP.open or the response_stream keyword when you need streaming control.
• Request and Response constructors now prefer explicit keyword-oriented

... (truncated)

Commits

• 5eccd0c test(server): avoid windows post reuse flake
• fbe6009 fix(compat): support julia 1.10 import
• 25be01b [BREAKING] HTTP.jl 2.0 package overhaul (#1248)
• a380230 Implement bodysummary without private APIs (#1147)
• 0ac1528 Use Base.alloc_request instead of implementing it directly (#1145)
• 22ce15a 1.12 compat (#1243)
• 0abbfb1 Client & server support for text/event-stream, SSE (#1240)
• e7feb99 Bump version to 1.10.19
• a30e67a Fix overly aggressive header check. Fixes #1235 (#1236)
• d2de734 Bump version to 1.10.18
• Additional commits viewable in compare view

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Superseded by #61.