Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 16, 2025

Updates the requirements on tungstenite to permit the latest version.

Changelog

Sourced from tungstenite's changelog.

0.27.0

  • Fix large message read performance by enforcing max read_buffer_size read chunks.
  • Make Hash implementation consistent for Utf8Bytes payloads.

0.26.2

  • Add WebSocketConfig::read_buffer_size docs explaining performance/memory tradeoff.
  • Implement traits and add helper methods for the UTF8 payloads making them comparable and more ergonomic.

0.26.1

  • Fix/revert unsoundness that could lead to UB with dodgy Read stream implementations.

0.26.0

  • Simplify Message to use Bytes payload directly with simpler Utf8Bytes for text.
  • Change CloseFrame to use Utf8Bytes for reason.
  • Re-export Bytes.

0.25.0

  • New Payload type for Message that allows sending messages with a payload that can be cheaply cloned (Bytes). Long standing issue solved!
  • Add WebSocketConfig::read_buffer_size default 128 KiB. This improves high load read performance. Note: This default increases memory usage compared to previous versions particularly for users expecting a high number of connections. Configure 4-8 KiB to get a similar memory usage to 0.24.
  • Make WebSocketConfig non-exhaustive & add builder style construction fns.
  • Remove deprecated WebSocketConfig::max_send_queue.
  • Trim spaces on Sec-WebSocket-Protocol header.
  • Eliminate data copies when reading complete messages & optimise read buffer. Improves performance.
  • Update thiserror to 2.

0.24.0

  • Raised MSRV to 1.63 to match tokio-tungstenite.
  • Connecting to WSS URL without TLS features specified results in a better error.
  • Handshake will now flush after completion to be safe (works better with buffered streams).

0.23.0

  • Disable default features for rustls giving the user more flexibility.

0.22.0

  • Make url optional.
  • Add a builder for convenient headers and subprotocols construction.
  • Update rustls dependency.

0.21.0

  • Fix read-predominant auto pong responses not flushing when hitting WouldBlock errors.
  • Improve FrameHeader::format write correctness.
  • Update rustls to 0.22.
  • Update webpki-roots to 0.26.
  • Update rustls-native-certs to 0.7.
  • Update http to 1.0.0.

... (truncated)

Commits
  • 3ffeb33 Prepare 0.27.0 release
  • 5e15390 When reading avoid over-reserving the in the case WouldBlock causes multiple ...
  • d8b45ee Add end to end "send+recv" benchmarks (#497)
  • f20436c Update src/protocol/frame/frame.rs
  • e4fb204 Don't allow zero in_buf_max_read
  • 1dc706c Fix large message read performance by enforcing max read_buffer_size read c...
  • 255aaa2 add more details for utf8 errors for debugging
  • 75b59d9 Implement From\<Bytes> for Message
  • 56d758b fix(Utf8Bytes): hash consistency for Borrow + Hash traits
  • bb7a58a Bump version
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [tungstenite](https://github.com/snapview/tungstenite-rs) to permit the latest version.
- [Changelog](https://github.com/snapview/tungstenite-rs/blob/master/CHANGELOG.md)
- [Commits](snapview/tungstenite-rs@v0.24.0...v0.27.0)

---
updated-dependencies:
- dependency-name: tungstenite
  dependency-version: 0.27.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 16, 2025
@digizeph
Copy link
Member

Close in favor of PR #220

@digizeph digizeph closed this Jul 10, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 10, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@digizeph digizeph deleted the dependabot/cargo/tungstenite-0.27.0 branch July 10, 2025 23:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants