Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps reqwest from 0.12.24 to 0.13.1.

Release notes

Sourced from reqwest's releases.

v0.13.1

What's Changed

Full Changelog: seanmonstar/reqwest@v0.13.0...v0.13.1

v0.13.0

Breaking changes

  • rustls is now the default TLS backend, instead of native-tls.
  • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
  • rustls-tls has been renamed to rustls.
  • rustls roots features removed, rustls-platform-verifier is used by default.
    • To use different roots, call tls_certs_only(your_roots).
  • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
  • query and form are now crate features, disabled by default.
  • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

Pull Requests in General

New Contributors

Full Changelog: seanmonstar/reqwest@v0.12.28...v0.13.0

v0.13.0-rc.1

👀 Discussion here if you give it try, thanks!

Main breaking changes

  • rustls is now default instead of native-tls
  • rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you want to enable a different one)
  • rustls-tls renamed to rustls
  • rustls roots features removed, platform-verifier is used instead

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 1, 2026
@dependabot dependabot bot requested a review from djmitche as a code owner January 1, 2026 01:04
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 1, 2026
@dependabot dependabot bot requested review from mgeisler and qwandor as code owners January 1, 2026 01:04
@dependabot dependabot bot added the rust Pull requests that update Rust code label Jan 1, 2026
@gribozavr
Copy link
Collaborator

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/cargo/reqwest-0.13.1 branch from 7d85f95 to 4b84a67 Compare January 1, 2026 01:58
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.24 to 0.13.1.
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.24...v0.13.1)

---
updated-dependencies:
- dependency-name: reqwest
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/reqwest-0.13.1 branch from 4b84a67 to 7691e5d Compare January 1, 2026 01:59
@gribozavr gribozavr merged commit 5d21068 into main Jan 1, 2026
38 checks passed
@gribozavr gribozavr deleted the dependabot/cargo/reqwest-0.13.1 branch January 1, 2026 02:32
timClicks pushed a commit to accelerant-dev/comprehensive-rust that referenced this pull request Jan 5, 2026
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.24 to
0.13.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/seanmonstar/reqwest/releases">reqwest's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.1</h2>
<h2>What's Changed</h2>
<ul>
<li>http3: depend on quinn/rustls-aws-lc-rs to avoid ring dependency by
<a href="https://github.com/djc"><code>@​djc</code></a> in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2917">seanmonstar/reqwest#2917</a></li>
<li>fix rustls on android by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2918">seanmonstar/reqwest#2918</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/seanmonstar/reqwest/compare/v0.13.0...v0.13.1">https://github.com/seanmonstar/reqwest/compare/v0.13.0...v0.13.1</a></p>
<h2>v0.13.0</h2>
<h2>Breaking changes</h2>
<ul>
<li><code>rustls</code> is now the default TLS backend, instead of
<code>native-tls</code>.</li>
<li><code>rustls</code> crypto provider defaults to aws-lc instead of
<em>ring</em>. (<code>rustls-no-provider</code> exists if you want a
different crypto provider)</li>
<li><code>rustls-tls</code> has been renamed to
<code>rustls</code>.</li>
<li>rustls roots features removed, <code>rustls-platform-verifier</code>
is used by default.
<ul>
<li>To use different roots, call
<code>tls_certs_only(your_roots)</code>.</li>
</ul>
</li>
<li><code>native-tls</code> now includes ALPN. To disable, use
<code>native-tls-no-alpn</code>.</li>
<li><code>query</code> and <code>form</code> are now crate features,
disabled by default.</li>
<li>Long-deprecated methods and crate features have been removed (such
as <code>trust-dns</code>, which was renamed <code>hickory-dns</code> a
while ago).</li>
<li>Many TLS-related methods renamed to improve autocompletion and
discovery, but previous name left in place with a &quot;soft&quot;
deprecation. (just documented, no warnings)
<ul>
<li>For example, prefer <code>tls_backend_rustls()</code> over
<code>use_rustls_tls()</code>.</li>
</ul>
</li>
</ul>
<h2>Pull Requests in General</h2>
<ul>
<li>start 0.13 dev by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2894">seanmonstar/reqwest#2894</a></li>
<li>Make <code>serde</code> optional by introducing <code>query</code>,
<code>form</code> features, and re-working WASM header parsing by <a
href="https://github.com/CathalMullan"><code>@​CathalMullan</code></a>
in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2858">seanmonstar/reqwest#2858</a></li>
<li>replace <code>ClientBuilder::dns_resolver</code> with
<code>dns_resolver2</code> by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2898">seanmonstar/reqwest#2898</a></li>
<li>feat: make Rustls the default TLS provider by <a
href="https://github.com/calavera"><code>@​calavera</code></a> in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2897">seanmonstar/reqwest#2897</a></li>
<li>feat: consolidate TLS options with rustls-platform-verifier by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2891">seanmonstar/reqwest#2891</a></li>
<li>remove long-deprecated methods: trust-dns and non-wasm-cors by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2899">seanmonstar/reqwest#2899</a></li>
<li>rename rustls-tls feature to just rustls by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2900">seanmonstar/reqwest#2900</a></li>
<li>remove deprecated features trust-dns and macos-system-configuration
by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2901">seanmonstar/reqwest#2901</a></li>
<li>chore: separate rustls and rustls-no-provider features by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2903">seanmonstar/reqwest#2903</a></li>
<li>rustls: allow windows to use extra roots by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2904">seanmonstar/reqwest#2904</a></li>
<li>v0.13.0-rc.1 by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2905">seanmonstar/reqwest#2905</a></li>
<li>Enable ALPN by default in native-tls by <a
href="https://github.com/ducaale"><code>@​ducaale</code></a> in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2907">seanmonstar/reqwest#2907</a></li>
<li>v0.13.0 by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2915">seanmonstar/reqwest#2915</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/CathalMullan"><code>@​CathalMullan</code></a>
made their first contribution in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2858">seanmonstar/reqwest#2858</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.0">https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.0</a></p>
<h2>v0.13.0-rc.1</h2>
<p>👀 <strong><a
href="https://github.com/seanmonstar/reqwest/discussions/2906">Discussion
here</a> if you give it try, thanks!</strong></p>
<h2>Main breaking changes</h2>
<ul>
<li>rustls is now default instead of native-tls</li>
<li>rustls provider defaults to aws-lc instead of ring
(<code>rustls-no-provider</code> exists if you want to enable a
different one)</li>
<li>rustls-tls renamed to rustls</li>
<li>rustls roots features removed, platform-verifier is used
instead</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md">reqwest's
changelog</a>.</em></p>
<blockquote>
<h2>v0.13.1</h2>
<ul>
<li>Fixes compiling with rustls on Android targets.</li>
</ul>
<h1>v0.13.0</h1>
<ul>
<li><strong>Breaking changes</strong>:
<ul>
<li><code>rustls</code> is now the default TLS backend, instead of
<code>native-tls</code>.</li>
<li><code>rustls</code> crypto provider defaults to aws-lc instead of
<em>ring</em>. (<code>rustls-no-provider</code> exists if you want a
different crypto provider)</li>
<li><code>rustls-tls</code> has been renamed to
<code>rustls</code>.</li>
<li>rustls roots features removed, <code>rustls-platform-verifier</code>
is used by default.
<ul>
<li>To use different roots, call
<code>tls_certs_only(your_roots)</code>.</li>
</ul>
</li>
<li><code>native-tls</code> now includes ALPN. To disable, use
<code>native-tls-no-alpn</code>.</li>
<li><code>query</code> and <code>form</code> are now crate features,
disabled by default.</li>
<li>Long-deprecated methods and crate features have been removed (such
as <code>trust-dns</code>, which was renamed <code>hickory-dns</code> a
while ago).</li>
</ul>
</li>
<li>Many TLS-related methods renamed to improve autocompletion and
discovery, but previous name left in place with a &quot;soft&quot;
deprecation. (just documented, no warnings)
<ul>
<li>For example, prefer <code>tls_backend_rustls()</code> over
<code>use_rustls_tls()</code>.</li>
</ul>
</li>
</ul>
<h2>v0.12.28</h2>
<ul>
<li>Fix compiling on Windows if TLS and SOCKS features are not
enabled.</li>
</ul>
<h2>v0.12.27</h2>
<ul>
<li>Add <code>ClientBuilder::windows_named_pipe(name)</code> option that
will force all requests over that Windows Named Piper.</li>
</ul>
<h2>v0.12.26</h2>
<ul>
<li>Fix sending <code>Accept-Encoding</code> header only with values
configured with reqwest, regardless of underlying tower-http
config.</li>
</ul>
<h2>v0.12.25</h2>
<ul>
<li>Add <code>Error::is_upgrade()</code> to determine if the error was
from an HTTP upgrade.</li>
<li>Fix sending <code>Proxy-Authorization</code> if only username is
configured.</li>
<li>Fix sending <code>Proxy-Authorization</code> to HTTPS proxies when
the target is HTTP.</li>
<li>Refactor internal decompression handling to use tower-http.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/10fb98c673ca040405aa03ac057f73bedbf4715f"><code>10fb98c</code></a>
v0.13.1</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/438098af71b3e210e529ed2116d0276e19e71eef"><code>438098a</code></a>
chore: refer to h2 as dep:h2 (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2919">#2919</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/43aac91963a0a8584472e95d98fe42994e598ea8"><code>43aac91</code></a>
chore(ci): bump actions/checkout from 5 to 6 (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2864">#2864</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/175f5b2a7ffb58aa76ec036e9e3331254e004a4a"><code>175f5b2</code></a>
fix rustls on android (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2918">#2918</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/1afe88eaf38fedc48f4010ea438a2ffc6b22174a"><code>1afe88e</code></a>
Depend on quinn/rustls-aws-lc-rs to avoid ring dependency (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2917">#2917</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/62a80af8fbb743a2c7bfcb64d8896f80a3b9f6fa"><code>62a80af</code></a>
v0.13.0</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/e8d89f4fc4e1a30a224682eb95281c1c7200f2cc"><code>e8d89f4</code></a>
enable ALPN by default in native-tls (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2907">#2907</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/9a9daa7921dc875b90dd1798d2edbd86e476a30a"><code>9a9daa7</code></a>
v0.13.0-rc.1</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/d518e453084827365f2fe39259ac344bfe87b714"><code>d518e45</code></a>
rustls: allow windows to use extra roots (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2904">#2904</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/934bc84bd8cc529a676df4afc85f97a39aa62b76"><code>934bc84</code></a>
chore: separate rustls and rustls-no-provider features (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2903">#2903</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/seanmonstar/reqwest/compare/v0.12.24...v0.13.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=reqwest&package-manager=cargo&previous-version=0.12.24&new-version=0.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
timClicks pushed a commit to accelerant-dev/comprehensive-rust that referenced this pull request Jan 6, 2026
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.24 to
0.13.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/seanmonstar/reqwest/releases">reqwest's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.1</h2>
<h2>What's Changed</h2>
<ul>
<li>http3: depend on quinn/rustls-aws-lc-rs to avoid ring dependency by
<a href="https://github.com/djc"><code>@​djc</code></a> in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2917">seanmonstar/reqwest#2917</a></li>
<li>fix rustls on android by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2918">seanmonstar/reqwest#2918</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/seanmonstar/reqwest/compare/v0.13.0...v0.13.1">https://github.com/seanmonstar/reqwest/compare/v0.13.0...v0.13.1</a></p>
<h2>v0.13.0</h2>
<h2>Breaking changes</h2>
<ul>
<li><code>rustls</code> is now the default TLS backend, instead of
<code>native-tls</code>.</li>
<li><code>rustls</code> crypto provider defaults to aws-lc instead of
<em>ring</em>. (<code>rustls-no-provider</code> exists if you want a
different crypto provider)</li>
<li><code>rustls-tls</code> has been renamed to
<code>rustls</code>.</li>
<li>rustls roots features removed, <code>rustls-platform-verifier</code>
is used by default.
<ul>
<li>To use different roots, call
<code>tls_certs_only(your_roots)</code>.</li>
</ul>
</li>
<li><code>native-tls</code> now includes ALPN. To disable, use
<code>native-tls-no-alpn</code>.</li>
<li><code>query</code> and <code>form</code> are now crate features,
disabled by default.</li>
<li>Long-deprecated methods and crate features have been removed (such
as <code>trust-dns</code>, which was renamed <code>hickory-dns</code> a
while ago).</li>
<li>Many TLS-related methods renamed to improve autocompletion and
discovery, but previous name left in place with a &quot;soft&quot;
deprecation. (just documented, no warnings)
<ul>
<li>For example, prefer <code>tls_backend_rustls()</code> over
<code>use_rustls_tls()</code>.</li>
</ul>
</li>
</ul>
<h2>Pull Requests in General</h2>
<ul>
<li>start 0.13 dev by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2894">seanmonstar/reqwest#2894</a></li>
<li>Make <code>serde</code> optional by introducing <code>query</code>,
<code>form</code> features, and re-working WASM header parsing by <a
href="https://github.com/CathalMullan"><code>@​CathalMullan</code></a>
in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2858">seanmonstar/reqwest#2858</a></li>
<li>replace <code>ClientBuilder::dns_resolver</code> with
<code>dns_resolver2</code> by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2898">seanmonstar/reqwest#2898</a></li>
<li>feat: make Rustls the default TLS provider by <a
href="https://github.com/calavera"><code>@​calavera</code></a> in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2897">seanmonstar/reqwest#2897</a></li>
<li>feat: consolidate TLS options with rustls-platform-verifier by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2891">seanmonstar/reqwest#2891</a></li>
<li>remove long-deprecated methods: trust-dns and non-wasm-cors by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2899">seanmonstar/reqwest#2899</a></li>
<li>rename rustls-tls feature to just rustls by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2900">seanmonstar/reqwest#2900</a></li>
<li>remove deprecated features trust-dns and macos-system-configuration
by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2901">seanmonstar/reqwest#2901</a></li>
<li>chore: separate rustls and rustls-no-provider features by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2903">seanmonstar/reqwest#2903</a></li>
<li>rustls: allow windows to use extra roots by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2904">seanmonstar/reqwest#2904</a></li>
<li>v0.13.0-rc.1 by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2905">seanmonstar/reqwest#2905</a></li>
<li>Enable ALPN by default in native-tls by <a
href="https://github.com/ducaale"><code>@​ducaale</code></a> in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2907">seanmonstar/reqwest#2907</a></li>
<li>v0.13.0 by <a
href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in
<a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2915">seanmonstar/reqwest#2915</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/CathalMullan"><code>@​CathalMullan</code></a>
made their first contribution in <a
href="https://redirect.github.com/seanmonstar/reqwest/pull/2858">seanmonstar/reqwest#2858</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.0">https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.0</a></p>
<h2>v0.13.0-rc.1</h2>
<p>👀 <strong><a
href="https://github.com/seanmonstar/reqwest/discussions/2906">Discussion
here</a> if you give it try, thanks!</strong></p>
<h2>Main breaking changes</h2>
<ul>
<li>rustls is now default instead of native-tls</li>
<li>rustls provider defaults to aws-lc instead of ring
(<code>rustls-no-provider</code> exists if you want to enable a
different one)</li>
<li>rustls-tls renamed to rustls</li>
<li>rustls roots features removed, platform-verifier is used
instead</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md">reqwest's
changelog</a>.</em></p>
<blockquote>
<h2>v0.13.1</h2>
<ul>
<li>Fixes compiling with rustls on Android targets.</li>
</ul>
<h1>v0.13.0</h1>
<ul>
<li><strong>Breaking changes</strong>:
<ul>
<li><code>rustls</code> is now the default TLS backend, instead of
<code>native-tls</code>.</li>
<li><code>rustls</code> crypto provider defaults to aws-lc instead of
<em>ring</em>. (<code>rustls-no-provider</code> exists if you want a
different crypto provider)</li>
<li><code>rustls-tls</code> has been renamed to
<code>rustls</code>.</li>
<li>rustls roots features removed, <code>rustls-platform-verifier</code>
is used by default.
<ul>
<li>To use different roots, call
<code>tls_certs_only(your_roots)</code>.</li>
</ul>
</li>
<li><code>native-tls</code> now includes ALPN. To disable, use
<code>native-tls-no-alpn</code>.</li>
<li><code>query</code> and <code>form</code> are now crate features,
disabled by default.</li>
<li>Long-deprecated methods and crate features have been removed (such
as <code>trust-dns</code>, which was renamed <code>hickory-dns</code> a
while ago).</li>
</ul>
</li>
<li>Many TLS-related methods renamed to improve autocompletion and
discovery, but previous name left in place with a &quot;soft&quot;
deprecation. (just documented, no warnings)
<ul>
<li>For example, prefer <code>tls_backend_rustls()</code> over
<code>use_rustls_tls()</code>.</li>
</ul>
</li>
</ul>
<h2>v0.12.28</h2>
<ul>
<li>Fix compiling on Windows if TLS and SOCKS features are not
enabled.</li>
</ul>
<h2>v0.12.27</h2>
<ul>
<li>Add <code>ClientBuilder::windows_named_pipe(name)</code> option that
will force all requests over that Windows Named Piper.</li>
</ul>
<h2>v0.12.26</h2>
<ul>
<li>Fix sending <code>Accept-Encoding</code> header only with values
configured with reqwest, regardless of underlying tower-http
config.</li>
</ul>
<h2>v0.12.25</h2>
<ul>
<li>Add <code>Error::is_upgrade()</code> to determine if the error was
from an HTTP upgrade.</li>
<li>Fix sending <code>Proxy-Authorization</code> if only username is
configured.</li>
<li>Fix sending <code>Proxy-Authorization</code> to HTTPS proxies when
the target is HTTP.</li>
<li>Refactor internal decompression handling to use tower-http.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/10fb98c673ca040405aa03ac057f73bedbf4715f"><code>10fb98c</code></a>
v0.13.1</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/438098af71b3e210e529ed2116d0276e19e71eef"><code>438098a</code></a>
chore: refer to h2 as dep:h2 (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2919">#2919</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/43aac91963a0a8584472e95d98fe42994e598ea8"><code>43aac91</code></a>
chore(ci): bump actions/checkout from 5 to 6 (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2864">#2864</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/175f5b2a7ffb58aa76ec036e9e3331254e004a4a"><code>175f5b2</code></a>
fix rustls on android (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2918">#2918</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/1afe88eaf38fedc48f4010ea438a2ffc6b22174a"><code>1afe88e</code></a>
Depend on quinn/rustls-aws-lc-rs to avoid ring dependency (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2917">#2917</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/62a80af8fbb743a2c7bfcb64d8896f80a3b9f6fa"><code>62a80af</code></a>
v0.13.0</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/e8d89f4fc4e1a30a224682eb95281c1c7200f2cc"><code>e8d89f4</code></a>
enable ALPN by default in native-tls (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2907">#2907</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/9a9daa7921dc875b90dd1798d2edbd86e476a30a"><code>9a9daa7</code></a>
v0.13.0-rc.1</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/d518e453084827365f2fe39259ac344bfe87b714"><code>d518e45</code></a>
rustls: allow windows to use extra roots (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2904">#2904</a>)</li>
<li><a
href="https://github.com/seanmonstar/reqwest/commit/934bc84bd8cc529a676df4afc85f97a39aa62b76"><code>934bc84</code></a>
chore: separate rustls and rustls-no-provider features (<a
href="https://redirect.github.com/seanmonstar/reqwest/issues/2903">#2903</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/seanmonstar/reqwest/compare/v0.12.24...v0.13.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=reqwest&package-manager=cargo&previous-version=0.12.24&new-version=0.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant