chore(deps): update rust crate hyper to v1.10.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
hyper (source)	dependencies	patch	1.10.0 → 1.10.1

---

Release Notes

hyperium/hyper (hyper)

v1.10.1

Compare Source

Bug Fixes

• http1: fix busy loop when peer half-closes and open body (#​4086) (c6cb906f, closes #​4085)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[doubleword-code]

Good, I can see the main branch has similar Renovate dependency update PRs being merged. This is consistent with normal repo maintenance patterns.

Now let me produce my final review. Key points:

1. What the PR does: Updates hyper from 1.10.0 to 1.10.1 (patch bump) + transitive windows-sys updates
2. Why this matters: The hyper v1.10.1 release fixes a busy loop bug that causes 100% CPU usage when HTTP/1 peer half-closes with an open request body - this was a regression in 1.10.0
3. Assessment: This is a beneficial bug fix, semver-compatible, no code changes needed in this repo
4. Verdict: Approve - this should be merged

This is a clean dependency update with a meaningful fix. No blocking issues.

Based on my analysis of this pull request, here is my complete review:

Summary

This PR updates the hyper crate from version 1.10.0 to 1.10.1 via Cargo.lock. As a side effect, several transitive dependencies are updated to use windows-sys 0.61.2 instead of older versions (0.52.0, 0.60.2). This is a straightforward patch-version dependency update managed by Renovate.

Verdict: Ready to approve — this is a beneficial bug fix with no breaking changes expected.

Research notes

I fetched the v1.10.1 release notes and the associated PR #4086. The release contains exactly one change:

fix(http1): fix busy loop when peer half-closes and open body

This addresses issue #4085 — a regression introduced in v1.10.0 where HTTP/1 clients would enter a busy loop at 100% CPU when a peer half-closes the connection while a request body is still open. This is a meaningful fix that prevents potential denial-of-service scenarios caused by CPU exhaustion.

The windows-sys updates are transitive dependency changes that come along for the ride as other crates align their dependency trees. These are Windows-specific system bindings and pose no risk to the core functionality.

Suggested next steps

1. Merge this PR — the hyper update fixes a real performance/DoS vulnerability introduced in the previous version.
2. Consider monitoring CPU metrics after deployment if this codebase uses hyper's HTTP/1 client with streaming request bodies.

General findings

No issues found. This is a well-scoped dependency update:

• ✅ Semver-compatible (patch version bump)
• ✅ Fixes a known regression with security/performance implications
• ✅ No code changes required in this repository
• ✅ Consistent with other Renovate PRs in the project history