chore(deps): update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.3 [security]

[dd-octo-sts]

This PR contains the following updates:

Package	Type	Update	Change
org.apache.httpcomponents.client5:httpclient5 (source)	dependencies	patch	5.6.1 → 5.6.3

🚨 Security Vulnerability Fix

Severity: CRITICAL

This PR addresses a security vulnerability detected by GitHub Dependabot. Please review and merge promptly.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.2%. Comparing base (a4d9345) to head (0ee1561).

Additional details and impacted files

@@           Coverage Diff           @@
##              main    #131   +/-   ##
=======================================
  Coverage     85.2%   85.2%           
  Complexity       1       1           
=======================================
  Files          163     163           
  Lines        48830   48830           
  Branches      6978    6978           
=======================================
  Hits         41614   41614           
  Misses        5206    5206           
  Partials      2010    2010           

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a4d9345...0ee1561. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[dd-prapprover-prod-77c48c]

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

• ✅ PR is eligible for auto-approval by rule dependency-management-renovate-updater - 2026-09-28T19:18:14Z
• ✅ CI tests passed - 2026-09-28T19:18:18Z
• ✅ Approved (commit: 0ee1561) - 2026-09-28T19:18:20Z
• ✅ Merge Started
• ⬜ Merged

➡️ Current phase: ⏳ Merge via MergeQueue is still pending...

[dd-prapprover-prod-77c48c]

This PR has been automatically approved by the DD PR Approver bot.

[datadog-prod-us1-4]

More details

HttpClient remains scoped to benchmark corpus downloads, and the patch-level update to 5.6.3 introduces no reportable compatibility or dependency-management concern.

Was this helpful? React 👍 or 👎

_{Open Bits AI session}

_{🤖 Bits Code Review · Commit 0ee1561 · @DataDog review to ask questions}