[PR #729] [MERGED] chore(deps): bump reqwest from 0.11.27 to 0.12.2 #1075

Closed
opened 2026-01-05 14:54:00 +01:00 by adam · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/LGUG2Z/komorebi/pull/729
Author: @dependabot[bot]
Created: 4/1/2024
Status: Merged
Merged: 4/1/2024
Merged by: @LGUG2Z

Base: masterHead: dependabot/cargo/reqwest-0.12.2


📝 Commits (1)

  • 89a5a6f chore(deps): bump reqwest from 0.11.27 to 0.12.2

📊 Changes

2 files changed (+115 additions, -25 deletions)

View changed files

📝 Cargo.lock (+113 -23)
📝 komorebic/Cargo.toml (+2 -2)

📄 Description

Bumps reqwest from 0.11.27 to 0.12.2.

Release notes

Sourced from reqwest's releases.

v0.12.2

What's Changed

  • Fix missing ALPN when connecting to socks5 proxy with rustls.
  • Fix TLS version limits with rustls.
  • Fix not detected ALPN h2 from server with native-tls.

New Contributors

Full Changelog: https://github.com/seanmonstar/reqwest/compare/v0.12.1...v0.12.2

v0.12.1

What's Changed

  • Fix ClientBuilder::interface() when no TLS is enabled.
  • Fix TlsInfo::peer_certificate() being truncated with rustls.
  • Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
  • Fix Display for Error to not include its source error.

New Contributors

Full Changelog: https://github.com/seanmonstar/reqwest/compare/v0.12.0...v0.12.1

v0.12.0

What's Changed

  • Upgrade to hyper, http, and http-body v1.
  • Add better support for converting to and from http::Request and http::Response.
  • Add http2 optional cargo feature, default on.
  • Add charset optional cargo feature, default on.
  • Add macos-system-configuration cargo feature, default on.
  • Change all optional dependencies to no longer be exposed as implicit features.
  • Add ClientBuilder::interface(str) to specify the local interface to bind to.
  • Experimental: disables the http3 feature temporarily.

Full Changelog: https://github.com/seanmonstar/reqwest/compare/v0.11.27...v0.12.0

Changelog

Sourced from reqwest's changelog.

v0.12.2

  • Fix missing ALPN when connecting to socks5 proxy with rustls.
  • Fix TLS version limits with rustls.
  • Fix not detected ALPN h2 from server with native-tls.

v0.12.1

  • Fix ClientBuilder::interface() when no TLS is enabled.
  • Fix TlsInfo::peer_certificate() being truncated with rustls.
  • Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
  • Fix Display for Error to not include its source error.

v0.12.0

  • Upgrade to hyper, http, and http-body v1.
  • Add better support for converting to and from http::Request and http::Response.
  • Add http2 optional cargo feature, default on.
  • Add charset optional cargo feature, default on.
  • Add macos-system-configuration cargo feature, default on.
  • Change all optional dependencies to no longer be exposed as implicit features.
  • Add ClientBuilder::interface(str) to specify the local interface to bind to.
  • Experimental: disables the http3 feature temporarily.
Commits
  • 6768a8e v0.12.2
  • fff307b fix(connect): ALPN missed when using socks5 proxy with rustls backend (#2164)
  • 04bf45f fix: tls version limit for rustls (#2203)
  • 056f8c4 fix(connect): not negotiate h2 when using native-tls backend (#2165)
  • e0ea15b v0.12.1
  • 3d78fcb fix: Display for Error shouldn't include source (#2199)
  • c535724 Fix binding interface when no TLS is used (#2200)
  • d5adcba fix: rustls extraction of TlsInfo::peer_certificate() being truncated (#2195)
  • 7a5df21 fix: could panic if http2 disabled but TLS negotiated h2 (#2194)
  • d5051f9 Update version number in Readme
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/LGUG2Z/komorebi/pull/729 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/1/2024 **Status:** ✅ Merged **Merged:** 4/1/2024 **Merged by:** [@LGUG2Z](https://github.com/LGUG2Z) **Base:** `master` ← **Head:** `dependabot/cargo/reqwest-0.12.2` --- ### 📝 Commits (1) - [`89a5a6f`](https://github.com/LGUG2Z/komorebi/commit/89a5a6f9a3ed5d8a66899a766ac2dea645c2b4fe) chore(deps): bump reqwest from 0.11.27 to 0.12.2 ### 📊 Changes **2 files changed** (+115 additions, -25 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.lock` (+113 -23) 📝 `komorebic/Cargo.toml` (+2 -2) </details> ### 📄 Description Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.11.27 to 0.12.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/releases">reqwest's releases</a>.</em></p> <blockquote> <h2>v0.12.2</h2> <h2>What's Changed</h2> <ul> <li>Fix missing ALPN when connecting to socks5 proxy with rustls.</li> <li>Fix TLS version limits with rustls.</li> <li>Fix not detected ALPN h2 from server with native-tls.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/cxw620"><code>@​cxw620</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2165">seanmonstar/reqwest#2165</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.1...v0.12.2">https://github.com/seanmonstar/reqwest/compare/v0.12.1...v0.12.2</a></p> <h2>v0.12.1</h2> <h2>What's Changed</h2> <ul> <li>Fix <code>ClientBuilder::interface()</code> when no TLS is enabled.</li> <li>Fix <code>TlsInfo::peer_certificate()</code> being truncated with rustls.</li> <li>Fix panic if <code>http2</code> feature disabled but TLS negotiated h2 in ALPN.</li> <li>Fix <code>Display</code> for <code>Error</code> to not include its source error.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/atouchet"><code>@​atouchet</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2193">seanmonstar/reqwest#2193</a></li> <li><a href="https://github.com/mbme"><code>@​mbme</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2195">seanmonstar/reqwest#2195</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.0...v0.12.1">https://github.com/seanmonstar/reqwest/compare/v0.12.0...v0.12.1</a></p> <h2>v0.12.0</h2> <h2>What's Changed</h2> <ul> <li>Upgrade to <code>hyper</code>, <code>http</code>, and <code>http-body</code> v1.</li> <li>Add better support for converting to and from <code>http::Request</code> and <code>http::Response</code>.</li> <li>Add <code>http2</code> optional cargo feature, default on.</li> <li>Add <code>charset</code> optional cargo feature, default on.</li> <li>Add <code>macos-system-configuration</code> cargo feature, default on.</li> <li>Change all optional dependencies to no longer be exposed as implicit features.</li> <li>Add <code>ClientBuilder::interface(str)</code> to specify the local interface to bind to.</li> <li>Experimental: disables the <code>http3</code> feature temporarily.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.11.27...v0.12.0">https://github.com/seanmonstar/reqwest/compare/v0.11.27...v0.12.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md">reqwest's changelog</a>.</em></p> <blockquote> <h2>v0.12.2</h2> <ul> <li>Fix missing ALPN when connecting to socks5 proxy with rustls.</li> <li>Fix TLS version limits with rustls.</li> <li>Fix not detected ALPN h2 from server with native-tls.</li> </ul> <h2>v0.12.1</h2> <ul> <li>Fix <code>ClientBuilder::interface()</code> when no TLS is enabled.</li> <li>Fix <code>TlsInfo::peer_certificate()</code> being truncated with rustls.</li> <li>Fix panic if <code>http2</code> feature disabled but TLS negotiated h2 in ALPN.</li> <li>Fix <code>Display</code> for <code>Error</code> to not include its source error.</li> </ul> <h1>v0.12.0</h1> <ul> <li>Upgrade to <code>hyper</code>, <code>http</code>, and <code>http-body</code> v1.</li> <li>Add better support for converting to and from <code>http::Request</code> and <code>http::Response</code>.</li> <li>Add <code>http2</code> optional cargo feature, default on.</li> <li>Add <code>charset</code> optional cargo feature, default on.</li> <li>Add <code>macos-system-configuration</code> cargo feature, default on.</li> <li>Change all optional dependencies to no longer be exposed as implicit features.</li> <li>Add <code>ClientBuilder::interface(str)</code> to specify the local interface to bind to.</li> <li>Experimental: disables the <code>http3</code> feature temporarily.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/seanmonstar/reqwest/commit/6768a8e81849faebd044b65009f09fd119b600eb"><code>6768a8e</code></a> v0.12.2</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/fff307bc6975144479b3067fead1756e9d80f47f"><code>fff307b</code></a> fix(connect): ALPN missed when using socks5 proxy with rustls backend (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2164">#2164</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/04bf45f4ecc4e3f62cb6cd3e9ecea5476a728d7c"><code>04bf45f</code></a> fix: tls version limit for rustls (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2203">#2203</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/056f8c4ff4434811dcd3ed0230dcbab4bcf58b68"><code>056f8c4</code></a> fix(connect): not negotiate h2 when using native-tls backend (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2165">#2165</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/e0ea15bd659561b236e8e507a0f704dca7091e1f"><code>e0ea15b</code></a> v0.12.1</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/3d78fcbbb5af7eaf0aeef9b9c30a508ce44b4b08"><code>3d78fcb</code></a> fix: Display for Error shouldn't include source (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2199">#2199</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/c53572410dcc6bc6a0b4c15b3ddf09450da0358b"><code>c535724</code></a> Fix binding interface when no TLS is used (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2200">#2200</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/d5adcba6a2d7a6431d8cb1a193c8a6710fe40741"><code>d5adcba</code></a> fix: rustls extraction of <code>TlsInfo::peer_certificate()</code> being truncated (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2195">#2195</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/7a5df2126081b83d29758ef31f9f38369ac85ae4"><code>7a5df21</code></a> fix: could panic if http2 disabled but TLS negotiated h2 (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2194">#2194</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/d5051f9bee34378e86faba0a9c8399e6e27e79fd"><code>d5051f9</code></a> Update version number in Readme</li> <li>Additional commits viewable in <a href="https://github.com/seanmonstar/reqwest/compare/v0.11.27...v0.12.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=reqwest&package-manager=cargo&previous-version=0.11.27&new-version=0.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
adam added the pull-request label 2026-01-05 14:54:00 +01:00
adam closed this issue 2026-01-05 14:54:00 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/komorebi#1075