[dependabot]

Bumps httpclient from 2.9.0 to 2.10.0.

Changelog

Sourced from httpclient's changelog.

Changes in 2.10.0

• Refresh the bundled Mozilla CA certificates to the October 20, 2026 snapshot, building on #444 (#482)
• With peer verification enabled and no custom verification callback, reject TLS connections when a server supplies certificates containing blocked eMudhra intermediate CA public keys, including cross-signed variants (#480, #481) Connections are also rejected when a server supplies an unused certificate containing a blocked public key. VERIFY_NONE/nil disables this check; a custom verification callback replaces the default policy and is responsible for certificate validation.
• Report Java socket read timeouts on JRuby as HTTPClient::ReceiveTimeoutError (#486)
• Add JRuby CI coverage (#486)
• Restore Ruby CI coverage across supported runtimes, including Ruby 4.0 (#485)
• Restore Bundler setup in Ruby HEAD CI (#483)

, and some changes for testing.

Commits

• 03f21ef bump 2.10.0
• 0d2eba6 Update Changelog for 2.10.0
• 49059a7 Merge pull request #486 from yyuu/ci/jruby-test-and-fixes
• 43fb167 test: explain JRuby cipher compatibility
• da6b6e4 test: use an ECDHE cipher for JRuby SSL checks
• 0dff6ae fix: restore JRuby SSL test compatibility
• 0d742d3 ci: add JRuby test job
• 9af49d3 Merge pull request #485 from yyuu/ci/update-ruby-test-matrix
• 275af34 ci: add Ruby 4.0 to test matrix
• 2aa611a ci: run legacy Ruby tests on Ubuntu 24.04
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)