Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2025

Updates the requirements on tungstenite to permit the latest version.

Changelog

Sourced from tungstenite's changelog.

0.26.2

  • Add WebSocketConfig::read_buffer_size docs explaining performance/memory tradeoff.
  • Implement traits and add helper methods for the UTF8 payloads making them comparable and more ergonomic.

0.26.1

  • Fix/revert unsoundness that could lead to UB with dodgy Read stream implementations.

0.26.0

  • Simplify Message to use Bytes payload directly with simpler Utf8Bytes for text.
  • Change CloseFrame to use Utf8Bytes for reason.
  • Re-export Bytes.

0.25.0

  • New Payload type for Message that allows sending messages with a payload that can be cheaply cloned (Bytes). Long standing issue solved!
  • Add WebSocketConfig::read_buffer_size default 128 KiB. This improves high load read performance. Note: This default increases memory usage compared to previous versions particularly for users expecting a high number of connections. Configure 4-8 KiB to get a similar memory usage to 0.24.
  • Make WebSocketConfig non-exhaustive & add builder style construction fns.
  • Remove deprecated WebSocketConfig::max_send_queue.
  • Trim spaces on Sec-WebSocket-Protocol header.
  • Eliminate data copies when reading complete messages & optimise read buffer. Improves performance.
  • Update thiserror to 2.

0.24.0

  • Raised MSRV to 1.63 to match tokio-tungstenite.
  • Connecting to WSS URL without TLS features specified results in a better error.
  • Handshake will now flush after completion to be safe (works better with buffered streams).

0.23.0

  • Disable default features for rustls giving the user more flexibility.

0.22.0

  • Make url optional.
  • Add a builder for convenient headers and subprotocols construction.
  • Update rustls dependency.

0.21.0

  • Fix read-predominant auto pong responses not flushing when hitting WouldBlock errors.
  • Improve FrameHeader::format write correctness.
  • Update rustls to 0.22.
  • Update webpki-roots to 0.26.
  • Update rustls-native-certs to 0.7.
  • Update http to 1.0.0.

0.20.1

... (truncated)

Commits
  • bb7a58a Bump version
  • 4eb26c5 Implement PartialOrd and Ord for Utf8Bytes
  • 34e417b Derive Hash for Utf8Bytes
  • d1229ec Implement Borrow\<str>, AsRef\<[u8]>, AsRef\<str> and AsRef\<Bytes> for `...
  • 8cfd027 Add WebSocketConfig::read_buffer_size docs explaining performance/memory trad...
  • 5e67ba6 Update rand requirement from 0.8.0 to 0.9.0 (#481)
  • c167787 Remove byteorder, use bytes::Buf::get_uint instead (#477)
  • 7632848 feat: add unsafe Utf8Bytes::from_bytes_unchecked (#476)
  • b7a7817 Keep the set-len refactor but use safe resize
  • f05398b Revert "Revert "Use set-len when reading into buffer""
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [tungstenite](https://github.com/snapview/tungstenite-rs) to permit the latest version.
- [Changelog](https://github.com/snapview/tungstenite-rs/blob/master/CHANGELOG.md)
- [Commits](snapview/tungstenite-rs@v0.24.0...v0.26.2)

---
updated-dependencies:
- dependency-name: tungstenite
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 24, 2025
@digizeph digizeph closed this May 15, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 15, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/cargo/tungstenite-0.26.2 branch May 15, 2025 19:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants