From 20faebc68c22407a3309f8e528c9dc9a1ac4ad6d Mon Sep 17 00:00:00 2001
From: Benoit Chesneau <bchesneau@gmail.com>
Date: Fri, 25 Sep 2026 11:49:17 +0200
Subject: [PATCH] Release 4.8.1

quic 2.0.1 compiles on Windows again: its NIF build hooks ran through sh,
which Windows lacks, so the compile failed there for anything reaching
quic, hackney included. The test profile moves to cowboy 2.19.0.
---
 NEWS.md             | 10 ++++++++++
 rebar.config        |  2 +-
 rebar.lock          |  6 +++---
 src/hackney.app.src |  2 +-
 4 files changed, 15 insertions(+), 5 deletions(-)

diff --git a/NEWS.md b/NEWS.md
index 417479c5..20cc1b20 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,5 +1,15 @@
 # NEWS
 
+4.8.1 - 2026-09-25
+------------------
+
+### Changed
+
+- Update `quic` to 2.0.1, which compiles on Windows again. Its NIF build and
+  clean hooks ran through `sh`, which Windows lacks, so the compile failed
+  there for anything that reaches quic, hackney included. Windows runs on OTP
+  crypto.
+
 4.8.0 - 2026-09-24
 ------------------
 
diff --git a/rebar.config b/rebar.config
index e8cf0e33..6f3ab241 100644
--- a/rebar.config
+++ b/rebar.config
@@ -66,7 +66,7 @@
        ]}.
 
 {profiles, [{test, [
-               {deps, [{cowboy, "2.18.0"}, {jsx, "3.1.0"}]},
+               {deps, [{cowboy, "2.19.0"}, {jsx, "3.1.0"}]},
                %% rebar3 can't parse cowboy 2.13+ Elixir-style ">= X and < Y"
                %% reqs for cowlib/ranch; override with bare names so rebar3
                %% resolves them itself (rebar3#2364).
diff --git a/rebar.lock b/rebar.lock
index 2313d963..a6ed1ec7 100644
--- a/rebar.lock
+++ b/rebar.lock
@@ -4,7 +4,7 @@
  {<<"idna">>,{pkg,<<"idna">>,<<"7.1.0">>},0},
  {<<"mimerl">>,{pkg,<<"mimerl">>,<<"1.5.0">>},0},
  {<<"parse_trans">>,{pkg,<<"parse_trans">>,<<"3.4.2">>},0},
- {<<"quic">>,{pkg,<<"quic">>,<<"2.0.0">>},0},
+ {<<"quic">>,{pkg,<<"quic">>,<<"2.0.1">>},0},
  {<<"ssl_verify_fun">>,{pkg,<<"ssl_verify_fun">>,<<"1.1.7">>},0},
  {<<"webtransport">>,{pkg,<<"webtransport">>,<<"0.4.7">>},0}]}.
 [
@@ -14,7 +14,7 @@
  {<<"idna">>, <<"1067A13043538129602D2F2CE6899D8713125C7D19734AA557CE2E3EA55BD4F1">>},
  {<<"mimerl">>, <<"F35ACA6F23242339B3666E0AC0702379E362B469D0AEA167F6CC713547E777ED">>},
  {<<"parse_trans">>, <<"C352DDC1A0D5E54F9B1654D45F9C432EEF76F9CEA371C55DDFF769EF688FDB74">>},
- {<<"quic">>, <<"FE44A1CEA79078879C4431FBE595F115D8F7932ED5FB45AE4E9C67A4DAE5863C">>},
+ {<<"quic">>, <<"45AD1FFEDD9A177277F78482BC28D07DE93710D8A641F06345C1C27767C754EA">>},
  {<<"ssl_verify_fun">>, <<"354C321CF377240C7B8716899E182CE4890C5938111A1296ADD3EC74CF1715DF">>},
  {<<"webtransport">>, <<"8E0ABD5875DAAB05C7020B8FC0C3B318FE93AA9329302FE5ECDA2A0F953CF688">>}]},
 {pkg_hash_ext,[
@@ -23,7 +23,7 @@
  {<<"idna">>, <<"6AE959A025BF36DF61A8CAB8508D9654891B5426A84C44D82DEAFFD6DDF8C71F">>},
  {<<"mimerl">>, <<"DB648CE065BAE14EA84CA8B5DD123F42F49417CEF693541110BF6F9E9BE9ECC4">>},
  {<<"parse_trans">>, <<"4C25347DE3B7C35732D32E69AB43D1CEEE0BEAE3F3B3ADE1B59CBD3DD224D9CA">>},
- {<<"quic">>, <<"69DA19A76181E03F975AFB18151C51F17F5623E3C38FD1A816D3148998EDBBB5">>},
+ {<<"quic">>, <<"D907A5898467C3DED1D50DD12726577C342BB3BD6F8F40F5FE679805147D0B81">>},
  {<<"ssl_verify_fun">>, <<"FE4C190E8F37401D30167C8C405EDA19469F34577987C76DDE613E838BBC67F8">>},
  {<<"webtransport">>, <<"9D2FCBFC561A172CF6F2EEF00B89FC89774C039CE850414356964C147707F85E">>}]}
 ].
diff --git a/src/hackney.app.src b/src/hackney.app.src
index 349a2d3e..b8e5276f 100644
--- a/src/hackney.app.src
+++ b/src/hackney.app.src
@@ -4,7 +4,7 @@
 {application, hackney,
   [
     {description, "Simple HTTP client with HTTP/1.1, HTTP/2, and HTTP/3 support"},
-    {vsn, "4.8.0"},
+    {vsn, "4.8.1"},
     {registered, [hackney_pool]},
     {applications, [kernel,
       stdlib,