Merge branch 'master' into feat/update_expat_2_7_5

Ashish285 · web-flow · commit 5b30d2dbd11f · 2026-03-20T14:47:22.000+08:00
diff --git a/nghttp/idf_component.yml b/nghttp/idf_component.yml
@@ -1,4 +1,4 @@
-version: "1.68.0"
+version: "1.68.1"
 description: "nghttp2 - HTTP/2 C Library"
 url: https://github.com/espressif/idf-extra-components/tree/master/nghttp
 dependencies:
diff --git a/nghttp/nghttp2 b/nghttp/nghttp2
@@ -1 +1 @@
-Subproject commit 534b74b72524e962c18c7146470914632ca7eb2d
+Subproject commit f769990597670f3ea8d2440d1e18a3f9a0df9bc0
diff --git a/nghttp/port/include/nghttp2/nghttp2ver.h b/nghttp/port/include/nghttp2/nghttp2ver.h
@@ -29,7 +29,7 @@
  * @macro
  * Version number of the nghttp2 library release
  */
-#define NGHTTP2_VERSION "1.68.0"
+#define NGHTTP2_VERSION "1.68.1"
 
 /**
  * @macro
diff --git a/nghttp/sbom_nghttp2.yml b/nghttp/sbom_nghttp2.yml
@@ -1,10 +1,10 @@
 name: nghttp2
-version: 1.68.0
+version: 1.68.1
 cpe: cpe:2.3:a:nghttp2:nghttp2:{}:*:*:*:*:*:*:*
 supplier: 'Organization: nghttp2 <https://nghttp2.org/'
 description: nghttp2 - HTTP/2 C Library and tools
 url: https://github.com/nghttp2/nghttp2
-hash: 534b74b72524e962c18c7146470914632ca7eb2d
+hash: f769990597670f3ea8d2440d1e18a3f9a0df9bc0
 cve-exclude-list:
-  - cve: CVE-2024-28182
-    reason: Resolved in version v1.61.0
+  - cve: CVE-2026-27135
+    reason: Fixed in v1.68.1. See https://github.com/nghttp2/nghttp2/commit/310c239817118dc0b6be0c2184a7b6c39f751a45

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-version: "1.68.0"`
	`1`	`+version: "1.68.1"`
`2`	`2`	`description: "nghttp2 - HTTP/2 C Library"`
`3`	`3`	`url: https://github.com/espressif/idf-extra-components/tree/master/nghttp`
`4`	`4`	`dependencies:`