From 1fbd7a64d06e52851171d04648f05ad3a4cc12f7 Mon Sep 17 00:00:00 2001
From: Lars Francke <git@lars-francke.de>
Date: Tue, 25 Aug 2026 10:56:54 +0200
Subject: [PATCH] chore: Update dependencies a RustSec advisory affects

h2 below 0.4.16 accepts and queues empty DATA frames without limit, which
RUSTSEC-2026-0258 covers.
---
 Cargo.lock | 4 ++--
 Cargo.nix  | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 6af0087a..72ab5179 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1157,9 +1157,9 @@ dependencies = [
 
 [[package]]
 name = "h2"
-version = "0.4.15"
+version = "0.4.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6cb093c84e8bd9b188d4c4a8cb6579fc016968d14c99882163cd3ff402a4f155"
+checksum = "ef8e5e5a340588f4452631496976cf8636d4a7ecf600239fdc27615d2530bc16"
 dependencies = [
  "atomic-waker",
  "bytes",
diff --git a/Cargo.nix b/Cargo.nix
index 4c252e96..6cee15d7 100644
--- a/Cargo.nix
+++ b/Cargo.nix
@@ -3644,9 +3644,9 @@ rec {
       };
       "h2" = rec {
         crateName = "h2";
-        version = "0.4.15";
+        version = "0.4.19";
         edition = "2021";
-        sha256 = "0mgilh1g8gydcchqi6acs5l6j0gwg5jwpa64sj4b3ncb9v497c3c";
+        sha256 = "05mw60jmsq97vjgj607nxjkx8dl6rxv6jj9i4r2z92056id5x3pg";
         authors = [
           "Carl Lerche <me@carllerche.com>"
           "Sean McArthur <sean@seanmonstar.com>"