Upgrade rustls-platform-verifier#3010
Conversation
|
@seanmonstar Is it okay to bump the "default" MSRV to 1.85 for this? That version was released in Feb 2025, so is more than a year old. I'm guessing your MSRV policy for reqwest wouldn't be more strict than hyper's "some version that's at least 6 months old", so it should be fine? |
|
Yea, I'm not more strict than hyper. But I do take a very conservative approach to MSRV upgrades: only when it would enable something great for users. If it's just for slight improvements as a maintainer, I prefer to just continue to deal with the older MSRV. Also, an unwritten rule I've tried to aim for is to be compatible with Debian stable. For bookworm, that was 1.63. We're past that of course. And bookworm is now oldstable, 1.85 is on trixie, the new stable. So, from that point it's fine. I suppose this can be done. I'll just record here for probably no one that my general feeling is that rustls prefers to upgrade MSRV quickly (more than I do, at least), and I just kind of wish it didn't. |
ff91ded to
ce00e43
Compare
Bumps reqwest from 0.13.2 to 0.13.3. Release notes Sourced from reqwest's releases. v0.13.3 tl;dr Fix CertificateRevocationList parsing of PEM values. Fix logging in resolver to only show host, not full URL. Fix hickory-dns to fallback to a default if /etc/resolv.conf fails. Fix HTTP/3 to handle STOP_SENDING as not an error. Fix HTTP/3 pool to remove timed out QUIC connections. Fix HTTP/3 connection establishment picking IPv4 and IPv6. Upgrade rustls-platform-verifier. (wasm) Only use wasm-bindgen on unknown-* targets. What's Changed Update docs.rs Features by @JamesWiresmith in seanmonstar/reqwest#2961 fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @monosans in seanmonstar/reqwest#2797 fix: remove timeout con by @cuiweixie in seanmonstar/reqwest#2967 http3: handle stop_sending without error by @anuraaga in seanmonstar/reqwest#2978 resolve: debug log to change only host by @lms0806 in seanmonstar/reqwest#2992 Edit reference link by @lms0806 in seanmonstar/reqwest#2996 docs: more accurate about default HTTP2 window sizes by @seanmonstar in seanmonstar/reqwest#3007 [HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 by @lyuzichong in seanmonstar/reqwest#3006 Upgrade rustls-platform-verifier by @jplatte in seanmonstar/reqwest#3010 use wasm-bindgen ecosystem only for wasm32-unknown-* target by @Ludea in seanmonstar/reqwest#3000 fix rustls crl pem parsing by @Threated in seanmonstar/reqwest#3013 docs(retry): include ReqRep in docsrs by @seanmonstar in seanmonstar/reqwest#3020 New Contributors @JamesWiresmith made their first contribution in seanmonstar/reqwest#2961 @monosans made their first contribution in seanmonstar/reqwest#2797 @cuiweixie made their first contribution in seanmonstar/reqwest#2967 @anuraaga made their first contribution in seanmonstar/reqwest#2978 @lms0806 made their first contribution in seanmonstar/reqwest#2992 @lyuzichong made their first contribution in seanmonstar/reqwest#3006 @Ludea made their first contribution in seanmonstar/reqwest#3000 Full Changelog: seanmonstar/reqwest@v0.13.2...v0.13.3 Changelog Sourced from reqwest's changelog. v0.13.3 Fix CertificateRevocationList parsing of PEM values. Fix logging in resolver to only show host, not full URL. Fix hickory-dns to fallback to a default if /etc/resolv.conf fails. Fix HTTP/3 to handle STOP_SENDING as not an error. Fix HTTP/3 pool to remove timed out QUIC connections. Fix HTTP/3 connection establishment picking IPv4 and IPv6. Upgrade rustls-platform-verifier. (wasm) Only use wasm-bindgen on unknown-* targets. Commits a9a88c4 v0.13.3 f3f6d9d docs(retry): include ReqRep in docsrs (#3020) 5f9c231 fix rustls CRL PEM parsing (#3013) 11d835d use wasm-bindgen ecosystem only for wasm32-unknown-* target (#3000) 1f72916 Upgrade rustls-platform-verifier (#3010) 5d5bf35 [HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 (#3006) 93dc1b2 docs: more accurate about default HTTP2 window sizes (#3007) c5e50f0 docs: update outdated link in comments b25611f resolve: debug log to change only host (#2992) ca1f479 http3: handle stop_sending without error (#2978) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
New release is out that gets rid of a bunch of outdated transitive dependencies.