chore(deps): bump the rust-dependencies group across 1 directory with 55 updates

[dependabot]

Bumps the rust-dependencies group with 55 updates in the / directory:

Package	From	To
clap	4.6.1	4.6.7
aws-lc-rs	1.17.0	1.18.1
thiserror	2.0.18	2.0.20
anyhow	1.0.102	1.0.104
libc	0.2.186	0.2.189
tokio	1.52.3	1.53.1
tokio-util	0.7.18	0.7.19
futures	0.3.32	0.3.34
async-trait	0.1.89	0.1.92
http	1.4.1	1.5.0
hyper	1.10.1	1.11.1
http-body-util	0.1.3	0.1.5
bytes	1.11.1	1.12.1
tokio-stream	0.1.18	0.1.19
tokio-rustls	0.26.4	0.26.5
webpki-roots	1.0.7	1.0.9
quinn	0.11.9	0.11.12
quinn-proto	0.11.14	0.11.18
maxminddb	0.28.1	0.32.0
hickory-net	0.26.1	0.26.3
hickory-proto	0.26.1	0.26.3
hickory-resolver	0.26.1	0.26.3
ipnet	2.12.0	2.12.2
sysinfo	0.39.3	0.39.6
serde	1.0.228	1.0.229
serde_json	1.0.150	1.0.151
prost	0.14.3	0.14.4
regex	1.12.3	1.13.1
zstd	0.13.3	0.14.0
rustls	0.23.40	0.23.45
rcgen	0.14.8	0.14.10
uuid	1.23.2	1.26.1
dhcproto	0.14.0	0.15.0
educe	0.6.0	0.8.1
socket2	0.6.4	0.6.5
rand	0.10.1	0.10.3
blake2	0.10.6	0.11.0
tokio-tungstenite	0.29.0	0.30.0
tun-rs	2.8.1	2.8.11
smoltcp	0.13.1	0.14.0
etherparse	0.20.1	0.21.0
base64	0.22.1	0.23.1
tower-http	0.6.11	0.7.1
log	0.4.32	0.4.34
memchr	2.8.1	2.8.3
blake3	1.8.5	1.8.7
rtnetlink	0.21.0	0.23.0
bollard	0.21.0	0.21.1
mockall	0.14.0	0.15.0
serial_test	3.5.0	4.0.1
syn	2.0.117	3.0.6
hickory-server	0.26.1	0.26.3
env_logger	0.11.10	0.11.11
netstack-smoltcp	0.2.2	0.2.4
futures-util	0.3.32	0.3.34

Updates clap from 4.6.1 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates aws-lc-rs from 1.17.0 to 1.18.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.1

What's Changed

• Add ECDSA P-256 SHA-1 ASN.1 signature verification by @​assafvayner in aws/aws-lc-rs#1214
  • Adds ECDSA_P256_SHA1_ASN1 for verifying ASN.1 DER-encoded ECDSA P-256 signatures over SHA-1, so applications can verify legacy signatures such as CloudFront signed URLs using ECDSA P-256 with the default SHA-1 hash.
  • SHA-1 remains available for legacy verification only. This release does not add a corresponding signing algorithm.
• Tighten AEAD, cipher IV, HKDF, ECDH, and RSA API contracts by @​justsmth in aws/aws-lc-rs#1215
  • In-place AEAD sealing now verifies that Extend produced exactly enough space for the plaintext and authentication tag before passing the buffer to AWS-LC. Non-conforming custom buffers now return Err(Unspecified).
  • Streaming cipher constructors now reject missing or mismatched IV contexts, matching the validation already performed by the one-shot APIs.
  • Salt::from(Okm) now uses the output algorithm selected by the Okm, rather than the algorithm from the source PRK.
  • ECDH shared-secret storage is now zeroized on fallible derive paths.
  • RSA verify_digest_sig now requires the supplied digest to match the digest configured by RsaParameters, for both parsed and unparsed public keys.
  • Valid inputs are unaffected. Calls using inconsistent algorithms, IV contexts, or custom AEAD buffers now fail closed with Err(Unspecified).

Upstream AWS-LC

• aws-lc-sys v0.45.0 aligns with AWS-LC v5.7.0 (previously v5.5.0). See also the release notes for v5.6.0.
  • v5.7.0 corrects EVP_DecryptUpdate for padded block ciphers so it modifies only the output range reported through out_len. aws-lc-rs now includes canary-based regression coverage around the documented minimum output-buffer sizes.
• aws-lc-fips-sys v0.14.2 moves to AWS-LC FIPS v4.2.0.
  • Includes the equivalent EVP_DecryptUpdate correction for FIPS builds.
  • Restores FIPS builds with Clang 20 and newer.
  • Removes the FIPS compiler wrapper's dependency on /usr/bin/env, fixing builds in Nix and similar sandboxed environments.

Build Improvements

• Export cargo:root metadata when linking against a system-installed AWS-LC by @​weihanglo in aws/aws-lc-rs#1208
  • The system-library path now exposes the installation prefix through DEP_AWS_LC_*_ROOT, consistently with the CC and CMake builders, so downstream build scripts can rely on the metadata regardless of how AWS-LC was built.
• Fix -Wa,--debug-prefix-map handling with Clang and LTO by @​justsmth in aws/aws-lc-rs#1212
  • Fixes Clang builds when CFLAGS contains -flto or -flto=thin. The assembler-specific flag is now used only with GCC; Clang's integrated assembler uses -ffile-prefix-map directly.
• Filter raw target-triple CFLAGS spellings when compiling jitterentropy by @​justsmth in aws/aws-lc-rs#1207
  • Prevents inherited optimization flags from overriding jitterentropy's required -O0, including when environment variables are set by a parent process using raw or legacy-normalized target triples.

Issues Being Closed

• aws-lc-fips-sys v0.14.0 fails to build with Clang newer than 19 -- aws/aws-lc-rs#1202
• FIPS compiler wrapper fails in Nix build environments -- aws/aws-lc-rs#1204
• Raw target-triple CFLAGS should be filtered for jitterentropy -- aws/aws-lc-rs#1205
• aws-lc-sys fails to build with Clang when CFLAGS includes -flto -- aws/aws-lc-rs#1211

Other Merged PRs

• Prepare aws-lc-fips-sys v0.14.1 by @​justsmth in aws/aws-lc-rs#1203
• fix(publish): verify packaged crate with cargo build instead of cargo test by @​justsmth in aws/aws-lc-rs#1201
• fix: address clippy::assert_is_empty lints in ECB cipher modes by @​justsmth in aws/aws-lc-rs#1210
• ci: replace removed llvm-devel-lite package in FreeBSD jobs by @​justsmth in aws/aws-lc-rs#1213
• Prepare aws-lc-sys v0.45.0 by @​justsmth in aws/aws-lc-rs#1220
• Prepare aws-lc-fips-sys v0.14.2 by @​justsmth in aws/aws-lc-rs#1221
• Prepare v1.18.1 by @​justsmth in aws/aws-lc-rs#1224

... (truncated)

Commits

• 22e629d Prepare v1.18.1 (#1224)
• c4fde5c Prepare aws-lc-fips-sys v0.14.2 (#1221)
• 7943223 Prepare aws-lc-sys v0.45.0 (#1220)
• 8ea2229 fix: tighten AEAD, cipher IV, and digest API contracts (#1215)
• bcca4d1 Add ECDSA P-256 SHA-1 ASN.1 verification algorithm (#1214)
• 32338a5 fix(builder): filter the raw-triple CFLAGS spelling for jitterentropy (#1207)
• af422bd Fix -Wa,--debug-prefix-map probe (#1212)
• 749b26f ci: replace removed llvm-devel-lite package in FreeBSD jobs (#1213)
• 36c7a68 fix(publish): verify packaged crate with cargo build, not cargo test (#1201)
• c71ab00 fix: address clippy::assert_is_empty lints in ECB cipher modes (#1210)
• Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

• Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

• Update to syn 3

Commits

• b1d5db5 Release 2.0.20
• c4c3ebd Merge pull request #454 from dtolnay/clippy
• 2266152 Suppress redundant_field_names clippy lint
• 2901cfd Raise minimum tested compiler to rust 1.88
• aa9d91f Update ui tests for version 2.0.19
• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

• uClibc now supports a similar configuration option:

  RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
• uClibc now supports a similar configuration option:

... (truncated)

Commits

• ef0906e libc: Release 0.2.189
• 5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
• 3e51062 psp: Fix overflowing_literals warnings
• e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
• 63221b3 macros: Require safe in safe_f! invocations
• 707ab52 macros: Require unsafe in f! invocations
• 8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
• 8427909 windows: Add back link names for time-related symbols
• b4863fa nuttx: fix wchar_t definition under arm
• 41c683d nuttx: mirror type definitions
• Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

• signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

• time: fix alt timer cancellation and insertion race (#8252)

Documented

• runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

• fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
• metrics: add task schedule latency metric (#7986)
• net: add SocketAddr methods to Unix sockets (#8144)

Changed

• io: add #[inline] to IO trait impls for in-memory types (#8242)
• net: implement UCred::pid on FreeBSD (#8086)
• net: support Nuttx target os (#8259)
• signal: refactor global variables on Windows (#8231)
• sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
• taskdump: support taskdumps on s390x (#8192)
• time: add #[track_caller] to timeout_at() (#8077)
• time: consolidate mutex locks on spurious poll (#8124)
• time: defer waker clone on spurious poll (#8107)
• time: move lazy-registration state into Sleep (#8132)
• tracing: remove unnecessary span clone (#8126)

Fixed

• io: do not treat zero-length reads as EOF in Chain (#8251)
• net: use getpeereid for QNX peer credentials (#8270)
• runtime: avoid illegal state in FastRand (#8078)
• sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
• taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
• time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• be689a3 chore: prepare Tokio v1.53.0 (#8294)
• 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
• f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
• efdba5f chore: prepare Tokio v1.52.4 (#8289)
• b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
• Additional commits viewable in compare view

Updates tokio-util from 0.7.18 to 0.7.19

Commits

• f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
• 52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
• ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• be689a3 chore: prepare Tokio v1.53.0 (#8294)
• 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
• Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

0.3.33

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Commits

• 705e6b5 Release 0.3.34
• 616dac7 compat: Inline RawWaker clone function
• 4176369 Inline remaining RawWaker clone functions
• f17a895 Fix cloned FuturesUnordered waker identity
• 51d62ad macro: bump syn to v3 (#3028)
• 9e26177 ci: Reduce timeout-minutes
• b2d0983 tsan: Enable Adaptive Delay
• f733d0e Miri: Ignore compat tests
• e5def2f Rename default branch to main
• 89cc254 Release 0.3.33
• Additional commits viewable in compare view

Updates async-trait from 0.1.89 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

• Resolve double_must_use clippy lint in generated code (#303)

0.1.91

• Update to syn 3 (#299)
• Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits

• 82e7e9e Release 0.1.92
• 9a35cb8 Merge pull request #303 from dtolnay/mustuse
• 875ceec Resolve double_must_use clippy lint
• 62993a5 Raise minimum tested compiler to rust 1.88
• d049ee0 Release 0.1.91
• 7a0961f Merge pull request #301 from dtolnay/mutability
• 740f86f Ignore mut_mut pedantic clippy lint in test
• 4699cd3 Fix mutability for by-reference receivers
• 6dd3573 Add regression test for issue 300
• 2371797 Release 0.1.90
• Additional commits viewable in compare view

Updates http from 1.4.1 to 1.5.0

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

• feat(method): add QUERY method by @​seanmonstar in hyperium/http#798
• fix(uri): allow empty paths in uri::Builder by @​seanmonstar in hyperium/http#853
• perf(header,uri): faster value validation, URI parse/format, map inserts by @​geeknoid in hyperium/http#852
• fix(uri): enforce max length in PathAndQuery by @​seanmonstar in hyperium/http#856

New Contributors

• @​geeknoid made their first contribution in hyperium/http#852

Full Changelog: hyperium/http@v1.4.2...v1.5.0

v1.4.2

What's Changed

• feat(method): impl PartialOrd + Ord by @​mmirate in hyperium/http#840
• fix(uri): allow STAR paths with scheme/auth by @​seanmonstar in hyperium/http#843
• fix: reject DEL character by @​Isvane in hyperium/http#842

New Contributors

• @​mmirate made their first contribution in hyperium/http#840
• @​Isvane made their first contribution in hyperium/http#842

Full Changelog: hyperium/http@v1.4.1...v1.4.2

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

• Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
• Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
• Fix uri::PathAndQuery parsing to enforce URI max length.

1.4.2 (June 8, 2026)

• Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
• Fix Uri to properly reject DEL characters.

Commits

• 16fc9a7 v1.5.0
• e559023 fix(uri): enforce max length in PathAndQuery (#856)
• 2178e17 perf(header,uri): faster value validation, URI parse/format, map inserts (#852)
• 03c8cd7 fix(uri): allow empty paths in uri::Builder (#853)
• bb8705b feat(method): add QUERY method (#798)
• 82db5b8 v1.4.2
• a9cdbf8 fix(uri): reject DEL character (#842)
• df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
• ec3f8ce feat(method): impl PartialOrd + Ord (#840)
• See full diff in compare view

Updates hyper from 1.10.1 to 1.11.1

Release notes

Sourced from hyper's releases.

v1.11.1

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
  • flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#4110) (da19be08)

---

What's Changed

• fix(http1): evict pooled conn on request-side Connection: close by @​samlandfried in hyperium/hyper#4110
• test(http1): rewrite disabled old 0.1-futures conn tests by @​seanmonstar in hyperium/hyper#4138
• Update CONTRIBUTING.md by @​Catwoman08 in hyperium/hyper#4140
• refactor(error/upgrade): move from the use of ref patterns to & and remove allow for lint ref_patterns by @​logan-bobo in hyperium/hyper#4141
• fix(http1): flush bytes buffered by the write re-check before yielding by @​ricochet in hyperium/hyper#4143
• Fix documentation typo by @​latent-9 in hyperium/hyper#4146
• perf(http2): reserve minimal send capacity when piping request bodies by @​sandersaares in hyperium/hyper#4149
• chore(lib): cleanup old commented code by @​dswij in hyperium/hyper#4151
• fix(http1): recognize \n\r\n as a head terminator in the partial-read fast path by @​nam2ee in hyperium/hyper#4147
• docs(body): add streaming read examples by @​fzlzjerry in hyperium/hyper#4148
• fix(http1): detect TE: trailers caselessly and with other values by @​seanmonstar in hyperium/hyper#4152
• fix missing_errors_doc lint by @​CinisBorn in hyperium/hyper#4154
• refactor: drop redundant continue and remove needless_continue allow by @​MsfPablo in hyperium/hyper#4157
• docs: expand crate-level cancel safety section with HTTP/1 vs HTTP/2 by @​MsfPablo in hyperium/hyper#4156
• style(lib): temporarily allow some new clippy lints by @​seanmonstar in hyperium/hyper#4165
• Add an initial COLLABORATORS guide by @​seanmonstar in hyperium/hyper#4158
• clippy: remove lints removed in newer clippy versions by @​tangaac in hyperium/hyper#4167
• Prepare v1.11.1 by @​seanmonstar in hyperium/hyper#4169

New Contributors

• @​samlandfried made their first contribution in hyperium/hyper#4110
• @​Catwoman08 made their first contribution in hyperium/hyper#4140
• @​logan-bobo made their first contribution in hyperium/hyper#4141
• @​ricochet made their first contribution in hyperium/hyper#4143
• @​latent-9 made their first contribution in hyperium/hyper#4146
• @​sandersaares made their first contribution in hyperium/hyper#4149
• @​nam2ee made their first contribution in hyperium/hyper#4147
• @​fzlzjerry made their first contribution in hyperium/hyper#4148
• @​CinisBorn made their first contribution in hyperium/hyper#4154
• @​MsfPablo made their first contribution in hyperium/hyper#4157
• @​tangaac made their first contribution in hyperium/hyper#4167

Full Changelog: hyperium/hyper@v1.11.0...v1.11.1

v1.11.0

Features

• rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.11.1 (2026-08-27)

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
  • flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#4110) (da19be08)

v1.11.0 (2026-07-20)

Bug Fixes

• http1:
  • discard content-length header when received before transfer-encoding (#4124) (540fff91, closes #4123)
  • use append for repeat trailer values in encoder (#4118) (de1483d7)
  • allow up to max_headers trailers (Description has been truncated