Update HTTP requirement from 1 to 1, 2.7

[dependabot]

Updates the requirements on HTTP to permit the latest version.

Release notes

Sourced from HTTP's releases.

v2.7.1

HTTP v2.7.1

Diff since v2.7.0

HTTP 2.7.1 fixes HTTP/2 connection stalls after response bodies are discarded. The client now returns connection-level flow-control credit for unread buffered bytes, late DATA on closed streams, and DATA padding. This also covers failed requests whose response body was never handed to the caller, including peer resets during uploads.

Fixes #1371 via #1372. No public API changes.

Merged pull requests:

• Return HTTP/2 connection window credit for response bytes never read (#1372) (@​krynju)

Closed issues:

• HTTP/2 client leaks connection-level flow-control window when a response body is closed unread (retries, HTTP.open) (#1371)

Commits

• 6883e33 Prepare HTTP 2.7.1 release
• 54121ae Return HTTP/2 connection window credit for response bytes never read (#1372)
• 7f09620 Publish LLM documentation and prepare HTTP 2.7.0 (#1367)
• 9973339 Join request cookies with "; " instead of the appendheader comma fold (#1370)
• 174cac1 Raise the HTTP/1 line limit to 64 KiB and expose header limits on Transport (...
• afdf3b3 Skip informational (1xx) header blocks in the HTTP/2 client (#1369)
• e21957f Keep String response bodies reusable and refuse to resend a spent streaming b...
• 2edb99c Add an opt-in request logging middleware (#1368)
• 469d421 Write Host as the first HTTP/1.1 request header field (#1366)
• 26be5dd Honor server Keep-Alive timeout hints in the HTTP/1 connection pool (#1358)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)