Sourced from hyper's releases.

v0.14.15

Bug Fixes

• client: cancel blocking DNS lookup if GaiFuture is dropped (174b553d)

Features

• http1: add http1_writev(bool) options to Client and Server builders, to allow forcing vectored writes (80627141)
• upgrade: allow http upgrades with any body type (ab469eb3)

New Contributors

• @​luqmana made their first contribution in hyperium/hyper#2680
• @​whentze made their first contribution in hyperium/hyper#2688
• @​ahmedsobeh made their first contribution in hyperium/hyper#2689

v0.14.14

Bug Fixes

• client:
  • make ResponseFuture implement Sync (bd6c35b9)
  • remove ipv6 square brackets before resolving (910e0268)

Features

• http2: always include original h2 error on broken pipe (6169db25)
• server: Remove Send + Sync requirement for Body in with_graceful_shutdown (1d553e52)

v0.14.13

Bug Fixes

• client: don't reuse a connection while still flushing (c88011da)
• server: convert panic to error if Connection::without_shutdown called on HTTP/2 conn (ea3e2282)

Features

• ffi: add hyper_request_set_uri_parts (a54689b9)
• lib:
  • Export more things with Cargo features (server, !http1, !http2) (0a4b56ac)
  • Export rt module independently of Cargo features (cf6f62c7)

v0.14.12

Bug Fixes

• ffi: on_informational callback had no headers (39b6d01a)
• http1: apply header title case for consecutive dashes (#2613) (684f2fa7)
• http2: improve errors emitted by HTTP2 Upgraded stream shutdown (#2622) (be08648e)

... (truncated)

Sourced from hyper's changelog.

v0.14.15 (2021-11-16)

Bug Fixes

• client: cancel blocking DNS lookup if GaiFuture is dropped (174b553d

Features

• http1: add http1_writev(bool) options to Client and Server builders, to allow forcing vectored writes (80627141)
• upgrade: allow http upgrades with any body type (ab469eb3)

v0.14.14 (2021-10-22)

Bug Fixes

• client:
  • make ResponseFuture implement Sync (bd6c35b9)
  • remove ipv6 square brackets before resolving (910e0268)

Features

• h2: always include original h2 error on broken pipe (6169db25)
• server: Remove Send + Sync requirement for Body in with_graceful_shutdown (1d553e52)

v0.14.13 (2021-09-16)

Bug Fixes

• client: don't reuse a connection while still flushing (c88011da)
• server: convert panic to error if Connection::without_shutdown called on HTTP/2 conn (ea3e2282)

Features

• ffi: add hyper_request_set_uri_parts (a54689b9)
• lib:
  • Export more things with Cargo features (server, !http1, !http2) (0a4b56ac)
  • Export rt module independently of Cargo features (cf6f62c7)

v0.14.12 (2021-08-24)

Bug Fixes

... (truncated)

• d0b1d9e v0.14.15
• a1502e1 docs(http1): clarify HTTP1 preserve case option
• a12db28 docs(upgrade): add module documentation for HTTP upgrades
• 7f5e853 refactor(benches): make benchmark names more consistent
• 174b553 fit(client): cancel blocking DNS lookup if GaiFuture dropped (#2689)
• 913be88 docs(client): fix missing feature attrs in another doctest
• 3221f57 docs(body) fix doctest failing due to missing features
• 8062714 feat(http1): Add http1_writev(bool) to client and server Builders
• ab469eb feat(upgrade): allow http upgrades with any body type
• b5022f3 v0.14.14
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Sourced from tokio's releases.

Tokio v1.16.1

1.16.1 (January 28, 2022)

This release fixes a bug in #4428 with the change #4437.

#4428: tokio-rs/tokio#4428 #4437: tokio-rs/tokio#4437

Tokio v1.16.0

Fixes a soundness bug in io::Take (#4428). The unsoundness is exposed when leaking memory in the given AsyncRead implementation and then overwriting the supplied buffer:

impl AsyncRead for Buggy {
    fn poll_read(
        self: Pin<&mut Self>,
        cx: &mut Context<'_>,
        buf: &mut ReadBuf<'_>
    ) -> Poll<Result<()>> {
      let new_buf = vec![0; 5].leak();
      *buf = ReadBuf::new(new_buf);
      buf.put_slice(b"hello");
      Poll::Ready(Ok(()))
    }
}

Also, this release includes improvements to the multi-threaded scheduler that can increase throughput by up to 20% in some cases (#4383).

Fixed

• io: soundness don't expose uninitialized memory when using io::Take in edge case (#4428)
• fs: ensure File::write results in a write syscall when the runtime shuts down (#4316)
• process: drop pipe after child exits in wait_with_output (#4315)
• rt: improve error message when spawning a thread fails (#4398)
• rt: reduce false-positive thread wakups in the multi-threaded scheduler (#4383)
• sync: don't inherit Send from parking_lot::*Guard (#4359)

Added

• net: TcpSocket::linger() and set_linger() (#4324)
• net: impl UnwindSafe for socket types (#4384)
• rt: impl UnwindSafe for JoinHandle (#4418)
• sync: watch::Receiver::has_changed() (#4342)
• sync: oneshot::Receiver::blocking_recv() (#4334)
• sync: RwLock blocking operations (#4425)

Unstable

... (truncated)

• 91b9850 chore: prepare Tokio v1.16.1 release (#4438)
• 3c46705 io: fix take pointer check (#4437)
• afd2189 chore: prepare Tokio v1.16 release (#4431)
• 986b88b chore: update year in LICENSE files (#4429)
• 257053e util: add spawn_pinned (#3370)
• 5af9e0d sync: add blocking lock methods to RwLock (#4425)
• 8f77ee8 net: add generic trait to combine UnixListener and TcpListener (#4385)
• 2747043 tests: enable running wasm32-unknown-unknown tests (#4421)
• 2a5071f feat: implement Framed::map_codec (#4427)
• 621790e io: fix take when using evil reader (#4428)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.