From 0b7f590be2d97a31979d01ea9adde2f21522e30f Mon Sep 17 00:00:00 2001
From: Brandon Harvey <8107750+bharvey88@users.noreply.github.com>
Date: Wed, 8 Jul 2026 16:16:07 -0500
Subject: [PATCH] Raise http_request rx buffer to 5120 for GitHub's CSP header
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The redirect on release-asset downloads carries a ~3.6 KB
Content-Security-Policy header line; esp_http_client requires each
header line to fit the rx buffer, so 2048 still failed with
"HTTP_CLIENT: Out of buffer" (confirmed on hardware running 26.7.8.6;
the new manifest guard correctly refused to install, so no downgrade).

Version: 26.7.8.7

🤖 Generated with [Claude Code](https://claude.com/claude-code)
---
 Integrations/ESPHome/Core.yaml          | 2 +-
 Integrations/ESPHome/MSR-1.yaml         | 8 ++++----
 Integrations/ESPHome/MSR-1_BLE.yaml     | 8 ++++----
 Integrations/ESPHome/MSR-1_Factory.yaml | 8 ++++----
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/Integrations/ESPHome/Core.yaml b/Integrations/ESPHome/Core.yaml
index c306271..273890d 100644
--- a/Integrations/ESPHome/Core.yaml
+++ b/Integrations/ESPHome/Core.yaml
@@ -1,5 +1,5 @@
 substitutions:
-  version:  "26.7.8.6"
+  version:  "26.7.8.7"
   device_description: ${name} made by Apollo Automation - version ${version}.
   # Default OTA password. Override in your device YAML by re-declaring
   # `substitutions: { ota_password: !secret <name>_ota_password }` so each
diff --git a/Integrations/ESPHome/MSR-1.yaml b/Integrations/ESPHome/MSR-1.yaml
index bbf591f..a7bcf4d 100644
--- a/Integrations/ESPHome/MSR-1.yaml
+++ b/Integrations/ESPHome/MSR-1.yaml
@@ -47,10 +47,10 @@ web_server:
 
 http_request:
   verify_ssl: true
-  # GitHub release-asset downloads answer with a redirect whose signed
-  # Location header exceeds the 512-byte default and fails with
-  # "HTTP_CLIENT: Out of buffer".
-  buffer_size_rx: 2048
+  # GitHub release-asset downloads answer with a redirect carrying a
+  # ~3.6 KB Content-Security-Policy header; each header line must fit
+  # this buffer or the request fails with "HTTP_CLIENT: Out of buffer".
+  buffer_size_rx: 5120
 
 safe_mode:
 
diff --git a/Integrations/ESPHome/MSR-1_BLE.yaml b/Integrations/ESPHome/MSR-1_BLE.yaml
index d846901..e55fe71 100644
--- a/Integrations/ESPHome/MSR-1_BLE.yaml
+++ b/Integrations/ESPHome/MSR-1_BLE.yaml
@@ -47,10 +47,10 @@ bluetooth_proxy:
 
 http_request:
   verify_ssl: true
-  # GitHub release-asset downloads answer with a redirect whose signed
-  # Location header exceeds the 512-byte default and fails with
-  # "HTTP_CLIENT: Out of buffer".
-  buffer_size_rx: 2048
+  # GitHub release-asset downloads answer with a redirect carrying a
+  # ~3.6 KB Content-Security-Policy header; each header line must fit
+  # this buffer or the request fails with "HTTP_CLIENT: Out of buffer".
+  buffer_size_rx: 5120
 
 safe_mode:
 
diff --git a/Integrations/ESPHome/MSR-1_Factory.yaml b/Integrations/ESPHome/MSR-1_Factory.yaml
index d74805b..e3484d9 100644
--- a/Integrations/ESPHome/MSR-1_Factory.yaml
+++ b/Integrations/ESPHome/MSR-1_Factory.yaml
@@ -45,10 +45,10 @@ ota:
 
 http_request:
   verify_ssl: true
-  # GitHub release-asset downloads answer with a redirect whose signed
-  # Location header exceeds the 512-byte default and fails with
-  # "HTTP_CLIENT: Out of buffer".
-  buffer_size_rx: 2048
+  # GitHub release-asset downloads answer with a redirect carrying a
+  # ~3.6 KB Content-Security-Policy header; each header line must fit
+  # this buffer or the request fails with "HTTP_CLIENT: Out of buffer".
+  buffer_size_rx: 5120
 
 safe_mode: