chore(deps)(deps): bump reqwest from 0.12.14 to 0.13.2#8
chore(deps)(deps): bump reqwest from 0.12.14 to 0.13.2#8dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
📝 WalkthroughWalkthroughUpdated the Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 2 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (2 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Comment |
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.14 to 0.13.2. - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.14...v0.13.2) --- updated-dependencies: - dependency-name: reqwest dependency-version: 0.13.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/cargo/reqwest-0.13.2
branch
from
50d7838 to
d2fbfb6
Compare
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@Cargo.toml`:
- Line 39: The Cargo.toml entry for reqwest is using the wrong version and a
removed feature; update the dependency declared as reqwest = { ... } to version
"0.13.2" and replace the feature "rustls-tls-native-roots" with the current
rustls support (use "rustls" as the feature) so the crate and feature flags
match reqwest 0.13.x; if native root certificates are required, wire them up via
ClientBuilder::tls_config() in the code that constructs the reqwest client (look
for places referencing reqwest client construction to adjust TLS setup
accordingly).
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro
Run ID: 865c9467-11c5-4273-b7b8-cd1ec56a1eaf
⛔ Files ignored due to path filters (1)
Cargo.lockis excluded by!**/*.lock
📒 Files selected for processing (1)
Cargo.toml
| num_cpus = "1.16.0" | ||
| regex = "1.11.1" | ||
| reqwest = { version = "0.12.14", default-features = false, features = ["blocking", "json", "rustls-tls-native-roots"] } | ||
| reqwest = { version = "0.12.28", default-features = false, features = ["blocking", "json", "rustls-tls-native-roots"] } |
There was a problem hiding this comment.
🧩 Analysis chain
🌐 Web query:
What are the available features for reqwest version 0.12.28 and does rustls-tls-native-roots exist?
💡 Result:
For reqwest v0.12.28, the available Cargo features are: default, charset, default-tls, http2, system-proxy, h2, blocking, brotli, cookies, deflate, gzip, hickory-dns, http3, json, macos-system-configuration, multipart, native-tls, native-tls-alpn, native-tls-vendored, rustls-tls, rustls-tls-manual-roots, rustls-tls-manual-roots-no-provider, rustls-tls-native-roots, rustls-tls-native-roots-no-provider, rustls-tls-no-provider, rustls-tls-webpki-roots, rustls-tls-webpki-roots-no-provider, socks, stream, trust-dns, zstd. [1]
Yes—rustls-tls-native-roots does exist in reqwest 0.12.28. [1]
Sources: [1]
🌐 Web query:
What are the breaking changes and new features in reqwest 0.13.2 compared to 0.12.x?
💡 Result:
Breaking changes in reqwest 0.13.x vs 0.12.x
- TLS backend default changed:
rustlsis now the default TLS implementation (instead ofnative-tls). [1][2] - rustls crypto provider default changed: rustls now defaults to aws-lc instead of ring (use
rustls-no-providerif you want to pick a different provider yourself). [1] - Feature flag changes (TLS):
rustls-tlsfeature was renamed torustls. [1]- rustls “roots” features were removed; reqwest uses rustls-platform-verifier instead (and you can supply custom roots via
tls_certs_only(...)). [1]
- Serde no longer required by default:
RequestBuilder::query()andRequestBuilder::form()are now behind crate features (query,form) and are disabled by default, making it possible to build without serde. [1][2] - API surface cleanup/renames:
- Many TLS-related
ClientBuildermethods were renamed (old names kept as “soft-deprecated”, i.e., documented as deprecated but not warning). [1][2] - Some long-deprecated methods and crate features were removed. [1]
ClientBuilder::dns_resolverwas replaced withdns_resolver2. [1]
- Many TLS-related
New features / notable changes through 0.13.2 (relative to 0.12.x)
- 0.13.0: (besides the breaking changes above) enabled ALPN by default when using
native-tls. [3] - 0.13.1: HTTP/3 switched to depending on
quinn/rustls-aws-lc-rsto avoid aringdependency; also includes an Android rustls fix. [4] - 0.13.2: fixes and behavior changes:
- Fixes HTTP/2 +
native-tlsALPN feature combinations. - Fixes HTTP/3 to send the h3 ALPN.
- (wasm) fixes
RequestBuilder::json()so it doesn’t override a previously setcontent-type. - Docs note:
native-tls-alpnchanged tonative-tls-no-alpn. [3]
- Fixes HTTP/2 +
Sources: reqwest GitHub release notes for v0.13.0-rc.1 (breaking changes list) [1], maintainer blog post on v0.13 [2], GitHub release notes for v0.13.2 [3] and v0.13.1 [4].
🏁 Script executed:
#!/bin/bash
# Description: Check if query strings or form encoding are used in the codebase
# This is relevant because reqwest 0.13.0 disables query/form features by default
echo "=== Checking for query string usage ==="
rg -n --type rust -C2 '\.query\('
echo -e "\n=== Checking for form encoding usage ==="
rg -n --type rust -C2 '\.form\('
echo -e "\n=== Checking for reqwest usage patterns ==="
rg -n --type rust -C2 'reqwest::'Repository: fg-labs/redskull
Length of output: 2692
🏁 Script executed:
# Check git history or PR metadata for the change
git log -1 --format="%B" -- Cargo.toml | head -20Repository: fg-labs/redskull
Length of output: 640
🏁 Script executed:
# Also check if there's any PR or commit message that states the intended version
git log --all --oneline --grep="reqwest" -i | head -10Repository: fg-labs/redskull
Length of output: 188
Fix the reqwest version and features: PR requires 0.13.2 but code shows 0.12.28, with incompatible feature flags.
The commit message confirms this PR should update reqwest from 0.12.14 to 0.13.2, but line 39 specifies 0.12.28. Additionally, the feature rustls-tls-native-roots does not exist in 0.13.2—it was removed in favor of rustls-platform-verifier.
Update to:
- Version:
0.13.2 - Features: Change
rustls-tls-native-rootstorustls(and optionally configure native roots viaClientBuilder::tls_config()if needed)
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@Cargo.toml` at line 39, The Cargo.toml entry for reqwest is using the wrong
version and a removed feature; update the dependency declared as reqwest = { ...
} to version "0.13.2" and replace the feature "rustls-tls-native-roots" with the
current rustls support (use "rustls" as the feature) so the crate and feature
flags match reqwest 0.13.x; if native root certificates are required, wire them
up via ClientBuilder::tls_config() in the code that constructs the reqwest
client (look for places referencing reqwest client construction to adjust TLS
setup accordingly).
|
Closing: dependabot grouping now includes major updates, will be recreated as a single grouped PR. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps reqwest from 0.12.14 to 0.13.2.
Release notes
Sourced from reqwest's releases.
... (truncated)
Changelog
Sourced from reqwest's changelog.
... (truncated)
Commits
ad83b63v0.13.2c25f3dbchore: Add Windows and Linux arm64 to CI (#2960)761b89echore: upgrade wasm-streams to v0.5 (#2958)fd2d507fix(wasm): custom content-type overidden by json method for wasm (#2908)23eb7d4chore: update copyright year to 2026 (#2943)10c31c2fix(http3): specify h3 alpn for http3 connector (#2929)8530ec3docs: native-tls-alpn has changed to native-tls-no-alpn (#2940)04a216fchore(deps): remove unused webpki-roots and rustls-native-certs (#2932)406b59efix http2 feature is not enabled for native-tls ALPN (#2927)325a020Update readme for 0.13 (#2926)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit