A set of tools for generating signed exchanges at serve time.

Google

Last update: Dec 26, 2022

Related tags

Date and time sxg-rs

Overview

sxg-rs

sxg-rs is a set of tools for generating signed exchanges at serve time:

cloudflare_worker runs on Cloudflare Workers.
fastly_compute runs on Fastly Compute@Edge.
sxg_rs is the Rust library that drives both, and could be used as a basis for other serverless platforms.

The tools here are designed to enable sites to be prefetched from Google Search in order to improve their Largest Contentful Paint, one of the Core Web Vitals.

Verify and monitor

This code was released in July 2021 and thus hasn't yet had a lot of real-world testing. After installing, please verify and monitor the results.

Preview in Chrome

To preview the results in the browser:

In development, set Chrome flags to allow the certificate.
Use an extension such as ModHeader to set the Accept header to text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3 (equivalent to what Googlebot sends).
Explore the results in the DevTools Network tab.

Ensure compatibility with SXG

The Google SXG Cache may reuse an SXG for several visits to the page, or for several users (until SXG expiration). Follow these instructions to ensure all signed pages are compatible with such reuse. To opt some pages out of signing, set the Cache-Control header to include private or no-store in the upstream server.

Preload subresources

LCP can be further improved by instructing Google Search to prefetch render-critical subresources for the page. To do so, add a Link: rel=preload header and a matching Link: rel=allowed-alt-sxg header in the upstream server, as in this example. To compute the header-integrity for each subresource, run:

$ go install github.com/WICG/webpackage/go/signedexchange/cmd/dump-signedexchange@latest
$ dump-signedexchange -uri $URL -headerIntegrity

To ensure the header-integrity remains stable, eliminate frequently changing headers from the upstream response such as Date.

Comments

Create a reverse proxy server

Create a reverse proxy server in Rust, similar to Web Packager Server as a wrapper around the sxg_rs library. This could be run as a typical server or as a service on Google Cloud Run (see docs).

opened by twifkak 11
Add User-Agent sniffing

Chromium M73 enabled SXG, but before this commit landed in M79, it had an Accept header that matches the PrefersSxg logic that is meant to differentiate SXG crawlers from SXG browsers, per this recommendation.

Without User-Agent sniffing to rule out Chromium M73-78, sxg-rs may result in broken experiences on those browsers on sites that use a service worker caching strategy, due to Chromium not interpreting SXG served from a SW. Those browsers represent ~0.19% of users.

(This doesn't happen on Cloudflare Automatic Signed Exchanges because they've implemented this UA sniffing downstream.)

opened by twifkak 6
Fix the backdating code not to cause invalid SXGs.

Subtract one hour from the SEVEN_DAYS constant so that expires-date is never

7d, even when date is backdated by an hour. Fixes a bug caused by e605b3c5.

/cc @banaag @caoboxiao I'm going to merge this without review, but please review after the fact and clean up if necessary. e.g. Add tests, and tweak the code structure to prevent errors like this in the future (e.g. maybe signature_duration should be changed to take a now param and return a start/end time pair instead of a duration; or maybe clipping expires to 7 days after date should occur in signature/mod.rs).

opened by twifkak 4
Make header methods and config public

The PR proposes to make the config and helper methods inside Headers public. The current SxgWorker requires user to gather all certificates before hand. However, it may not be the case when a system stores certificates elsewhere or want to construct SxgWorker dynamically.

opened by quangIO 3
Update Rust crate der-parser to v8
This PR contains the following updates:

| Package | Type | Update | Change | |---|---|---|---| | der-parser | dependencies | major | 7.0.0 -> 8.1.0 |

Release Notes

rusticata/der-parser

v8.1.0

Compare Source

Changed/Fixed

Upgrade asn1-rs to 0.5.0 (new features only: only increment minor number)

v8.0.0

Compare Source

Changed/Fixed

Upgrade asn1-rs to 0.4.0 This causes an increment of the major number, because asn1-rs is re-exported

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Mend Renovate. View repository job log here.
opened by renovate-bot 2
Bump crossbeam-utils from 0.8.5 to 0.8.8
Bumps crossbeam-utils from 0.8.5 to 0.8.8.

Release notes

Sourced from crossbeam-utils's releases.

crossbeam-utils 0.8.8

Fix a bug when unstable loom support is enabled. (#787)

crossbeam-utils 0.8.7

Add AtomicCell<{i*,u*}>::{fetch_max,fetch_min}. (#785)

Add AtomicCell<{i*,u*,bool}>::fetch_nand. (#785)

Fix unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64 (#781)

crossbeam-utils 0.8.6

Re-add AtomicCell<{i,u}64>::{fetch_add,fetch_sub,fetch_and,fetch_or,fetch_xor} that were accidentally removed in ~~0.8.0~~ 0.7.1 on targets that do not support Atomic{I,U}64. (#767)

Re-add AtomicCell<{i,u}128>::{fetch_add,fetch_sub,fetch_and,fetch_or,fetch_xor} that were accidentally removed in ~~0.8.0~~ 0.7.1. (#767)

Commits

5b4d808 Merge #800

6fa7246 Prepare for the next release

8efcd02 Merge #798

baedeb0 channel: Do not panic on very large timeout

113daf4 Merge #799

5cb7cac Update no_atomic.rs

0081fcc Merge #789 #797

7b2d65f Update to stabilized const_fn_trait_bound

bd75c3c Add force_push to ArrayQueue

b11f1a8 Merge #793

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies rust
opened by dependabot[bot] 2
Simplify content-type header parsing
We can safely assume the value of content-type follows convention and remove regex dependency (this could save ~100kb). The pull request simplifies the the regex matching to dumb string matches.

Only html document starts with text/html in its mime-type

If it is text/html then it should have charset directive only. So we can directly look for utf-8

Note: I think the current regex pattern does not match text/html;charset=non-utf-8
opened by quangIO 2
Current implementation will strip headers with same key

The Headers struct uses HashMap to hold key-value pairs. However, headers can have same keys. For conforming headers, we can join them into one string, but it is not the case for all headers, especially when their values can contain comma(s). Thus, sxg-rs should use a multi-map (e.g. HeaderMap in http).

I can help replacing the current implementation if you think it makes sense.

opened by quangIO 2
Update Rust dependencies
This PR contains the following updates:

| Package | Type | Update | Change | |---|---|---|---| | console | dependencies | minor | 0.14.1 -> 0.15.0 | | dialoguer | dependencies | minor | 0.8.0 -> 0.9.0 | | pem | dependencies | patch | 1.0.0 -> 1.0.1 | | wrangler | dependencies | patch | 1.19.3 -> 1.19.4 |

Configuration

📅 Schedule: "before 3am on Monday" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.
opened by renovate-bot 2
Reduce payload buffer size in cloudflare_worker

Per this TODO:

As a performance optimization, maybe start with a Content-Length sized buffer and resize exponentially if necessary. Alternatively, use the limitBytes() transformer in streamFrom, and construct a flyweight Response object here in order to call arrayBuffer().

opened by twifkak 2
Update Rust dependencies
This PR contains the following updates:

| Package | Type | Update | Change | |---|---|---|---| | anyhow | dependencies | patch | 1.0.43 -> 1.0.44 | | async-trait | dependencies | patch | 0.1.50 -> 0.1.51 | | cloudflare | dependencies | patch | 0.8.6 -> 0.8.7 | | fastly | dependencies | minor | ^0.7.3 -> ^0.8.0 | | futures | dependencies | patch | 0.3.14 -> 0.3.17 | | js-sys | dependencies | patch | 0.3.50 -> 0.3.55 | | log-fastly | dependencies | minor | 0.2.0 -> 0.8.0 | | nom | dependencies | minor | 6.1.2 -> 6.2.1 | | once_cell | dependencies | minor | 1.7.2 -> 1.8.0 | | serde | dependencies | patch | 1.0.125 -> 1.0.130 | | serde_json | dependencies | patch | 1.0.66 -> 1.0.68 | | serde_yaml | dependencies | patch | 0.8.17 -> 0.8.21 | | sha2 | dependencies | patch | 0.9.3 -> 0.9.8 | | wasm-bindgen | dependencies | patch | 0.2.73 -> 0.2.78 | | wasm-bindgen-futures | dependencies | patch | 0.4.23 -> 0.4.28 | | web-sys | dependencies | patch | 0.3.42 -> 0.3.55 |

Configuration

📅 Schedule: "before 3am on Monday" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.
opened by renovate-bot 2
fix(deps): update rust crate tokio to 1.23.1 [security]
This PR contains the following updates:

| Package | Type | Update | Change | |---|---|---|---| | tokio (source) | dependencies | patch | 1.23.0 -> 1.23.1 |

GitHub Vulnerability Alerts

CVE-2023-22466

Impact

When configuring a Windows named pipe server, setting pipe_mode will reset reject_remote_clients to false. If the application has previously configured reject_remote_clients to true, this effectively undoes the configuration. This also applies if reject_remote_clients is not explicitly set as this is the default configuration and is cleared by calling pipe_mode.

Remote clients may only access the named pipe if the named pipe's associated path is accessible via a publically shared folder (SMB).

Patches

The following versions have been patched:

1.23.1

1.20.3

1.18.4

The fix will also be present in all releases starting from version 1.24.0.

Named pipes were introduced to Tokio in version 1.7.0, so releases older than 1.7.0 are not affected.

Workarounds

Ensure that pipe_mode is set first after initializing a ServerOptions. For example:

let mut opts = ServerOptions::new(); opts.pipe_mode(PipeMode::Message); opts.reject_remote_clients(true);

References

https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-createnamedpipea#pipe_reject_remote_clients

Release Notes

tokio-rs/tokio

v1.23.1: Tokio v1.23.1

Compare Source

This release forward ports changes from 1.18.4.

Fixed

net: fix Windows named pipe server builder to maintain option when toggling pipe mode (#5336).

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.
opened by renovate-bot 0
Bump tokio from 1.23.0 to 1.23.1
Bumps tokio from 1.23.0 to 1.23.1.

Release notes

Sourced from tokio's releases.

Tokio v1.23.1

This release forward ports changes from 1.18.4.

Fixed

net: fix Windows named pipe server builder to maintain option when toggling pipe mode (#5336).

#5336: tokio-rs/tokio#5336

Commits

1a997ff chore: prepare Tokio v1.23.1 release

a8fe333 Merge branch 'tokio-1.20.x' into tokio-1.23.x

ba81945 chore: prepare Tokio 1.20.3 release

763bdc9 ci: run WASI tasks using latest Rust

9f98535 Merge remote-tracking branch 'origin/tokio-1.18.x' into fix-named-pipes-1.20

9241c3e chore: prepare Tokio v1.18.4 release

699573d net: fix named pipes server configuration builder

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies rust
opened by dependabot[bot] 0
Bump json5 from 2.2.0 to 2.2.3 in /playground
Bumps json5 from 2.2.0 to 2.2.3.

Release notes

Sourced from json5's releases.

v2.2.3

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Commits

c3a7524 2.2.3

94fd06d docs: update CHANGELOG for v2.2.3

3b8cebf docs(security): use GitHub security advisories

f0fd9e1 docs: publish a security policy

6a91a05 docs(template): bug -> bug report

14f8cb1 2.2.2

10cc7ca docs: update CHANGELOG for v2.2.2

7774c10 fix: add proto to objects and arrays

edde30a Readme: slight tweak to intro

97286f8 Improve example in readme

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 0
Bump json5 from 2.2.1 to 2.2.3 in /typescript_utilities
Bumps json5 from 2.2.1 to 2.2.3.

Release notes

Sourced from json5's releases.

v2.2.3

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

Commits

c3a7524 2.2.3

94fd06d docs: update CHANGELOG for v2.2.3

3b8cebf docs(security): use GitHub security advisories

f0fd9e1 docs: publish a security policy

6a91a05 docs(template): bug -> bug report

14f8cb1 2.2.2

10cc7ca docs: update CHANGELOG for v2.2.2

7774c10 fix: add proto to objects and arrays

edde30a Readme: slight tweak to intro

97286f8 Improve example in readme

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 0
Bump json5 from 2.2.0 to 2.2.3 in /cloudflare_worker/worker
Bumps json5 from 2.2.0 to 2.2.3.

Release notes

Sourced from json5's releases.

v2.2.3

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Commits

c3a7524 2.2.3

94fd06d docs: update CHANGELOG for v2.2.3

3b8cebf docs(security): use GitHub security advisories

f0fd9e1 docs: publish a security policy

6a91a05 docs(template): bug -> bug report

14f8cb1 2.2.2

10cc7ca docs: update CHANGELOG for v2.2.2

7774c10 fix: add proto to objects and arrays

edde30a Readme: slight tweak to intro

97286f8 Improve example in readme

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 0
fix(deps): update rust dependencies
This PR contains the following updates:

| Package | Type | Update | Change | |---|---|---|---| | anyhow | dependencies | patch | 1.0.66 -> 1.0.68 | | async-trait | dependencies | patch | 0.1.59 -> 0.1.61 | | base64 | dependencies | minor | 0.13.1 -> 0.21.0 | | ctrlc | dependencies | patch | 3.2.3 -> 3.2.4 | | lol_html | dependencies | patch | 0.3.1 -> 0.3.2 | | lru | dependencies | minor | 0.8.1 -> 0.9.0 | | nom | dependencies | patch | 7.1.1 -> 7.1.2 | | once_cell | dependencies | minor | 1.16.0 -> 1.17.0 | | serde (source) | dependencies | patch | 1.0.149 -> 1.0.152 | | serde_json | dependencies | patch | 1.0.89 -> 1.0.91 | | serde_yaml | dependencies | patch | 0.9.14 -> 0.9.16 | | thiserror | dependencies | patch | 1.0.37 -> 1.0.38 | | tls-listener | dependencies | minor | 0.5.1 -> 0.6.0 | | toml | dependencies | patch | 0.5.9 -> 0.5.10 |

Release Notes

dtolnay/anyhow

v1.0.68

Compare Source

Opt out of -Zrustdoc-scrape-examples on docs.rs for now

v1.0.67

Compare Source

Improve the backtrace captured when context() is used on an Option (#280)

dtolnay/async-trait

v0.1.61

Compare Source

Fix async function signatures that involve #[cfg(...)] attributes on parameters (#227, thanks @azriel91)

v0.1.60

Compare Source

Documentation improvements

marshallpierce/rust-base64

v0.21.0

Compare Source

(not yet released)

Migration

Functions

| < 0.20 function | 0.21 equivalent | |-------------------------|-------------------------------------------------------------------------------------| | encode() | engine::general_purpose::STANDARD.encode() or prelude::BASE64_STANDARD.encode() | | encode_config() | engine.encode() | | encode_config_buf() | engine.encode_string() | | encode_config_slice() | engine.encode_slice() | | decode() | engine::general_purpose::STANDARD.decode() or prelude::BASE64_STANDARD.decode() | | decode_config() | engine.decode() | | decode_config_buf() | engine.decode_vec() | | decode_config_slice() | engine.decode_slice() |

The short-lived 0.20 functions were the 0.13 functions with config replaced with engine.

Padding

If applicable, use the preset engines engine::STANDARD, engine::STANDARD_NO_PAD, engine::URL_SAFE, or engine::URL_SAFE_NO_PAD. The NO_PAD ones require that padding is absent when decoding, and the others require that canonical padding is present .

If you need the < 0.20 behavior that did not care about padding, or want to recreate < 0.20.0's predefined Configs precisely, see the following table.

| 0.13.1 Config | 0.20.0+ alphabet | encode_padding | decode_padding_mode | |-----------------|------------------|------------------|-----------------------| | STANDARD | STANDARD | true | Indifferent | | STANDARD_NO_PAD | STANDARD | false | Indifferent | | URL_SAFE | URL_SAFE | true | Indifferent | | URL_SAFE_NO_PAD | URL_SAFE | false | Indifferent |

v0.20.0

Compare Source

Breaking changes

Update MSRV to 1.57.0

Decoding can now either ignore padding, require correct padding, or require no padding. The default is to require correct padding.

The NO_PAD config now requires that padding be absent when decoding.

0.20.0-alpha.1

Breaking changes

Extended the Config concept into the Engine abstraction, allowing the user to pick different encoding / decoding implementations.

What was formerly the only algorithm is now the FastPortable engine, so named because it's portable (works on any CPU) and relatively fast.

This opens the door to a portable constant-time implementation (#153, presumably ConstantTimePortable?) for security-sensitive applications that need side-channel resistance, and CPU-specific SIMD implementations for more speed.

Standard base64 per the RFC is available via DEFAULT_ENGINE. To use different alphabets or other settings ( padding, etc), create your own engine instance.

CharacterSet is now Alphabet (per the RFC), and allows creating custom alphabets. The corresponding tables that were previously code-generated are now built dynamically.

Since there are already multiple breaking changes, various functions are renamed to be more consistent and discoverable.

MSRV is now 1.47.0 to allow various things to use const fn.

DecoderReader now owns its inner reader, and can expose it via into_inner(). For symmetry, EncoderWriter can do the same with its writer.

encoded_len is now public so you can size encode buffers precisely.

jeromefroe/lru-rs

v0.9.0

Compare Source

Update dependency on hashbrown to 0.13.

Change LruCache.map to hold a pointer, rather than owned LruEntry.

Geal/nom

v7.1.2

Compare Source

Thanks

@joubs

@Fyko

@LoganDark

@darnuria

@jkugelman

@barower

@puzzlewolf

@epage

@cky

@wolthom

@w1ll-i-code

Changed

documentation fixes

tests fixes

limit the initial capacity of the result vector of many_m_n to 64kiB

bits parser now accept Parser implementors instead of only functions

Added

implement Tuple parsing for the unit type as a special case

implement ErrorConvert on the unit type to make it usable as error type for bits parsers

bool parser for bits input

matklad/once_cell

v1.17.0

Compare Source

Add race::OnceRef for storing a &'a T.

serde-rs/serde

v1.0.152

Compare Source

Documentation improvements

v1.0.151

Compare Source

Update serde::{ser,de}::StdError to re-export core::error::Error when serde is built with feature="std" off and feature="unstable" on (#2344)

v1.0.150

Compare Source

Relax some trait bounds from the Serialize impl of HashMap and BTreeMap (#2334)

Enable Serialize and Deserialize impls of std::sync::atomic types on more platforms (#2337, thanks @badboy)

serde-rs/json

v1.0.91

Compare Source

Opt out of -Zrustdoc-scrape-examples on docs.rs for now

v1.0.90

Compare Source

Documentation improvements

dtolnay/serde-yaml

v0.9.16

Compare Source

Opt out of -Zrustdoc-scrape-examples on docs.rs for now

v0.9.15

Compare Source

Documentation improvements

dtolnay/thiserror

v1.0.38

Compare Source

Documentation improvements

tmccombs/tls-listener

v0.6.0

Compare Source

Added

Added additional tests and examples

Re-export tls engine crates as public modules.

Changed

Increased default handshake timeout to 10 seconds (technically a breaking change)

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.
opened by renovate-bot 0

Owner

Google

Google ❤️ Open Source

GitHub

rsdate connects to an ntp server, printing the returned time and/or sets the system clock.

?? ?? rsdate rsdate connects to an ntp server, printing the returned time and/or sets the system clock.

3 Dec 31, 2022

Time series anomaly detection for Rust

AnomalyDetection.rs Time series AnomalyDetection for Rust Learn how it works Installation Add this line to your application’s Cargo.toml under [depend

6 Nov 21, 2022

datez: convert a time into several timezones

datez: convert a time into several timezones In July, when it is 16:00 in Canberra, what time is it in Caracas, and where I am in Cambridge? $ datez 2

7 Nov 17, 2021

Get unix time (nanoseconds) in blazing low latency with high precision

RTSC Get unix time (nanoseconds) in blazing low latency with high precision. About 5xx faster than SystemTime::now(). Performance OS CPU benchmark rts

8 Jul 14, 2022

Generate perfect code headers every time.

111 Dec 28, 2022

A simple and fun way to view the time!

Concentric Time A simple and fun way to view the time! Screenshots Dark mode Light mode Dev This project uses Dioxus (a Rust-Wasm framework) and does

9 Oct 23, 2022

Date and time library for Rust. Feature rich, lightweight and easy-to-use.

Astrolabe Date and time library for Rust. Feature rich, lightweight and easy-to-use. Documentation | Github | Crate Example Status Astrolabe is curren

2 Sep 2, 2022

Bring the power of pre-signed URLs to your apps. Signway is a gateway for redirecting authentic signed URLs to the requested API

A gateway that proxies signed requests to other APIs. Check the docs for more info. If you are looking for the managed version checkout this link http

37 Jun 24, 2023

Easy c̵̰͠r̵̛̠ö̴̪s̶̩̒s̵̭̀-t̶̲͝h̶̯̚r̵̺͐e̷̖̽ḁ̴̍d̶̖̔ ȓ̵͙ė̶͎ḟ̴͙e̸̖͛r̶̖͗ë̶̱́ṉ̵̒ĉ̷̥e̷͚̍ s̷̹͌h̷̲̉a̵̭͋r̷̫̊ḭ̵̊n̷̬͂g̵̦̃ f̶̻̊ơ̵̜ṟ̸̈́ R̵̞̋ù̵̺s̷̖̅ţ̸͗!̸̼͋

Rust S̵̓i̸̓n̵̉ I̴n̴f̶e̸r̵n̷a̴l mutability! Howdy, friendly Rust developer! Ever had a value get m̵̯̅ð̶͊v̴̮̾ê̴̼͘d away right under your nose just when

294 Dec 23, 2022

A set of tools for generating isochrones and reverse isochrones from geographic coordinates

This library provides a set of tools for generating isochrones and reverse isochrones from geographic coordinates. It leverages OpenStreetMap data to construct road networks and calculate areas accessible within specified time limits.

3 Feb 22, 2024

An open source Rust high performance cryptocurrency trading API with support for multiple exchanges and language wrappers. written in rust(🦀) with ❤️

Les.rs - Rust Cryptocurrency Exchange Library An open source Rust high performance cryptocurrency trading API with support for multiple exchanges and

4 Jan 9, 2023

PyQIR is a set of APIs for generating, parsing, and evaluating Quantum Intermediate Representation (QIR).

PyQIR PyQIR is a set of APIs for generating, parsing, and evaluating Quantum Intermediate Representation (QIR). It consists of the following component

37 Dec 31, 2022

Given a set of kmers (fasta format) and a set of sequences (fasta format), this tool will extract the sequences containing the kmers.

Kmer2sequences Description Given a set of kmers (fasta / fastq [.gz] format) and a set of sequences (fasta / fastq [.gz] format), this tool will extra

22 Sep 16, 2023

A set of tools for generating signed exchanges at serve time.

Related tags

Overview

sxg-rs

Verify and monitor

Preview in Chrome

Ensure compatibility with SXG

Preload subresources

Comments

Release Notes

Changed/Fixed

Changed/Fixed

Configuration

crossbeam-utils 0.8.8

crossbeam-utils 0.8.7

crossbeam-utils 0.8.6

Configuration

Configuration

GitHub Vulnerability Alerts

Impact

Patches

Workarounds

References

Release Notes

v1.23.1: Tokio v1.23.1

Fixed

Configuration

Tokio v1.23.1

Fixed

v2.2.3

v2.2.2

v2.2.1

v2.2.3 [code, diff]

v2.2.2 [code, diff]

v2.2.1 [code, diff]

v2.2.3

v2.2.2

v2.2.3 [code, diff]

v2.2.2 [code, diff]

v2.2.3

v2.2.2

v2.2.1

v2.2.3 [code, diff]

v2.2.2 [code, diff]

v2.2.1 [code, diff]

Release Notes

Migration

Functions

Padding

Breaking changes

0.20.0-alpha.1

Breaking changes

Thanks

Changed

Added

Added

Changed

Configuration

Owner

Google

rsdate connects to an ntp server, printing the returned time and/or sets the system clock.

Time series anomaly detection for Rust

datez: convert a time into several timezones

Get unix time (nanoseconds) in blazing low latency with high precision

Generate perfect code headers every time.

A simple and fun way to view the time!

Date and time library for Rust. Feature rich, lightweight and easy-to-use.

Bring the power of pre-signed URLs to your apps. Signway is a gateway for redirecting authentic signed URLs to the requested API

Easy c̵̰͠r̵̛̠ö̴̪s̶̩̒s̵̭̀-t̶̲͝h̶̯̚r̵̺͐e̷̖̽ḁ̴̍d̶̖̔ ȓ̵͙ė̶͎ḟ̴͙e̸̖͛r̶̖͗ë̶̱́ṉ̵̒ĉ̷̥e̷͚̍ s̷̹͌h̷̲̉a̵̭͋r̷̫̊ḭ̵̊n̷̬͂g̵̦̃ f̶̻̊ơ̵̜ṟ̸̈́ R̵̞̋ù̵̺s̷̖̅ţ̸͗!̸̼͋

A set of tools for generating isochrones and reverse isochrones from geographic coordinates

An open source Rust high performance cryptocurrency trading API with support for multiple exchanges and language wrappers. written in rust(🦀) with ❤️

PyQIR is a set of APIs for generating, parsing, and evaluating Quantum Intermediate Representation (QIR).

Given a set of kmers (fasta format) and a set of sequences (fasta format), this tool will extract the sequences containing the kmers.

Morphosis is a work-in-progress set of tools to deal with Minecraft metadata, mainly for use with PolyMC.

Set of tools that make it easier for the operator to manage a TAPLE network.

Signed distance field font and image command line tool based on OpenCL.

Variable-length signed and unsigned integer encoding that is byte-orderable for Rust

Extended precision integer Rust library. Provides signed/unsigned integer 256 to 2048.

Authenticate a tarball through a signed tag in a git repository (with reproducible builds)

A fast and cross-platform Signed Distance Function (SDF) viewer, easily integrated with your SDF library.

`v1.23.1`: Tokio v1.23.1