Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 10, 2025

Updates the requirements on tungstenite to permit the latest version.
Updates tungstenite to 0.26.2

Changelog

Sourced from tungstenite's changelog.

0.26.2

  • Add WebSocketConfig::read_buffer_size docs explaining performance/memory tradeoff.
  • Implement traits and add helper methods for the UTF8 payloads making them comparable and more ergonomic.

0.26.1

  • Fix/revert unsoundness that could lead to UB with dodgy Read stream implementations.

0.26.0

  • Simplify Message to use Bytes payload directly with simpler Utf8Bytes for text.
  • Change CloseFrame to use Utf8Bytes for reason.
  • Re-export Bytes.

0.25.0

  • New Payload type for Message that allows sending messages with a payload that can be cheaply cloned (Bytes). Long standing issue solved!
  • Add WebSocketConfig::read_buffer_size default 128 KiB. This improves high load read performance. Note: This default increases memory usage compared to previous versions particularly for users expecting a high number of connections. Configure 4-8 KiB to get a similar memory usage to 0.24.
  • Make WebSocketConfig non-exhaustive & add builder style construction fns.
  • Remove deprecated WebSocketConfig::max_send_queue.
  • Trim spaces on Sec-WebSocket-Protocol header.
  • Eliminate data copies when reading complete messages & optimise read buffer. Improves performance.
  • Update thiserror to 2.

0.24.0

  • Raised MSRV to 1.63 to match tokio-tungstenite.
  • Connecting to WSS URL without TLS features specified results in a better error.
  • Handshake will now flush after completion to be safe (works better with buffered streams).

0.23.0

  • Disable default features for rustls giving the user more flexibility.

0.22.0

  • Make url optional.
  • Add a builder for convenient headers and subprotocols construction.
  • Update rustls dependency.

0.21.0

  • Fix read-predominant auto pong responses not flushing when hitting WouldBlock errors.
  • Improve FrameHeader::format write correctness.
  • Update rustls to 0.22.
  • Update webpki-roots to 0.26.
  • Update rustls-native-certs to 0.7.
  • Update http to 1.0.0.

0.20.1

... (truncated)

Commits
  • bb7a58a Bump version
  • 4eb26c5 Implement PartialOrd and Ord for Utf8Bytes
  • 34e417b Derive Hash for Utf8Bytes
  • d1229ec Implement Borrow\<str>, AsRef\<[u8]>, AsRef\<str> and AsRef\<Bytes> for `...
  • 8cfd027 Add WebSocketConfig::read_buffer_size docs explaining performance/memory trad...
  • 5e67ba6 Update rand requirement from 0.8.0 to 0.9.0 (#481)
  • c167787 Remove byteorder, use bytes::Buf::get_uint instead (#477)
  • 7632848 feat: add unsafe Utf8Bytes::from_bytes_unchecked (#476)
  • b7a7817 Keep the set-len refactor but use safe resize
  • f05398b Revert "Revert "Use set-len when reading into buffer""
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Updates the requirements on [tungstenite](https://github.com/snapview/tungstenite-rs) to permit the latest version.

Updates `tungstenite` to 0.26.2
- [Changelog](https://github.com/snapview/tungstenite-rs/blob/master/CHANGELOG.md)
- [Commits](snapview/tungstenite-rs@v0.17.0...v0.26.2)

---
updated-dependencies:
- dependency-name: tungstenite
  dependency-type: direct:production
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant