v1.9.0

Features

• client:
  • expose HTTP/2 current max stream count (#4026) (d51cb715)
  • add HTTP/2 max_local_error_reset_streams option (#4021) (57787459)
• error: add 'Error::is_parse_version_h2' method (393c77c7)
• http1: add UpgradeableConnection::into_parts (e21205cf)

Bug Fixes

• ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
• http1:
  • allow keep-alive for chunked requests with trailers (#4043) (7211ec25, closes #4044)
  • use case-insensitive matching for trailer fields (#4011) (3b344cac, closes #4010)
  • use httparse config for Servers (#4002) (bcb8ec57, closes #3923)
• http2:
  • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
  • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Refactors and chores

• docs(error): add more information about is_incomplete_message by @seanmonstar in #3978
• Run cargo-audit in CI to check for known vulnerabilities in dependencies. by @f0rki in #3246
• refactor(http1): simplify match of Token parse error by @seanmonstar in #3981
• refactor(http1): use saturating_sub instead of manual impl by @seanmonstar in #3983
• refactor(http1): replace many args of Chunked::step with struct by @seanmonstar in #3982
• docs: fix comment in put_slice() by @coryan in #3986
• test(lib): fix unused warnings due to feature gating test imports by @seanmonstar in #3997
• docs: improve Read trait and ReadBufCursor documentation by @majiayu000 in #4000
• fix: use h1 parser config when parsing server req by @0xPoe in #4002
• test(server): fix flaky disable_keep_alive_mid_request by @seanmonstar in #4009
• chore(ci): update to actions/checkout@v6 by @tottoto in #4005
• chore(ci): update to cargo-check-external-types 0.4.0 by @tottoto in #4006
• update copyright year to 2026 by @jasmyhigh in #4007
• refactor: avoid unwrap examples by @0xPoe in #4001
• fix(http1): use case-insensitive matching for trailer fields by @HueCodes in #4011
• chore: convert bug report template to GitHub form by @njg7194 in #4015
• chore(ci): force toml mode in yq selecting msrv by @seanmonstar in #4020
• fix: non-utf8 char may cause panic when calling to_str by @cuiweixie in #4019
• feat(http2/client): add max_local_error_reset_streams option by @ffuugoo in #4021
• chore: drop pin-utils dependency by @tottoto in #4023
• [minor] doc: Fix HTTP/2 max concurrent stream link by @dentiny in #4037
• fix(ffi): validate null pointers before dereferencing in request/resp… by @DhruvaD1 in #4038
• h2: expose current max stream count by @howardjohn in #4026
• fix(http1): allow keep-alive for chunked requests with trailers by @wi-adam in #4043
• fix(http2): cancel pipe_task and send RST_STREAM on response future drop by @mmishra100 in #4042
• Add APIs to allow switching an HTTP1 connection to HTTP2 if H2 preface is seen by @pborzenkov in #3996

New Contributors

• @f0rki made their first contribution in #3246
• @coryan made their first contribution in #3986
• @majiayu000 made their first contribution in #4000
• @0xPoe made their first contribution in #4002
• @jasmyhigh made their first contribution in #4007
• @HueCodes made their first contribution in #4011
• @njg7194 made their first contribution in #4015
• @cuiweixie made their first contribution in #4019
• @ffuugoo made their first contribution in #4021
• @dentiny made their first contribution in #4037
• @DhruvaD1 made their first contribution in #4038
• @wi-adam made their first contribution in #4043
• @mmishra100 made their first contribution in #4042
• @pborzenkov made their first contribution in #3996

v1.8.1

Bug Fixes

• http1: fix consuming extra CPU from previous change (#3977) (4492f31e)

Full Changelog: v1.8.0...v1.8.1

v1.8.0

Highlights

Features

• rt: add Timer::now() method to allow overriding the instant returned (#3965) (5509ebe6)

Bug Fixes

• http1: fix rare missed write wakeup on connections (#3952) (2377b893)
• http2: fix internals of HTTP/2 CONNECT upgrades (#3967) (58e0e7dc, closes #3966)

Breaking Changes

While technically breaking, it's assumed you will not need to do anything or be affected.

• The HTTP/2 client connection no longer allows an executor
  that can not spawn itself.

  This was an oversight originally. The client connection will now include spawning
  a future that keeps a copy of the executor to spawn other futures. Thus, if it is
  !Send, it needs to spawn !Send futures. The likelihood of executors that match
  the previously allowed behavior should be very remote.

  There is also technically a semver break in here, which is that the
  Http2ClientConnExec trait no longer dyn-compatible, because it now expects to
  be Clone. This should not break usage of the conn builder, because it already
  separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec,
  that will break. However, there is no purpose for doing so, and it is not usable
  otherwise, since the trait only exists to propagate bounds into hyper. Thus, the
  breakage should not affect anyone.
  (58e0e7dc)

What's Changed

• chore(ci): update to actions/checkout@v5 by @tottoto in #3935
• refactor(ffi): specify "C" ABI explicitly in ffi_fn! macro by @1911860538 in #3937
• Update documented default values for http1::Builder by @Will-Low in #3938
• fix(client): port tests to in-memory socket by @cratelyn in #3947
• feat: allow overriding the instant returned from Timer by @arielb1 in #3965
• fix(http1): poll_loop writes when ready by @lthiery in #3952
• test(ready_stream): replace tracing with printlns by @seanmonstar in #3973
• fix(http2): fix internals of HTTP/2 CONNECT upgrades by @seanmonstar in #3967
• Release v1.8.0 by @seanmonstar in #3974

New Contributors

• @Will-Low made their first contribution in #3938
• @arielb1 made their first contribution in #3965
• @lthiery made their first contribution in #3952

v1.7.0

Highlights

Features

• client:
  • add a TrySendError::error() method (#3885) (efa0b269)
  • add a TrySendError::message() method (#3884) (03fd6aff)
• error: add Error::is_shutdown() (#3863) (b8affd8a, closes #2745)
• server: add allow_multiple_spaces_in_request_line_delimiters http1 builder method (#3929) (9749184f)

Bug Fixes

• server: improve caching accuracy of Date header (#3887) (436cadd1)

What's Changed

• chore: remove redundant backticks by @jimmycathy in #3855
• Gate tests with features they test by @WhyNotHugo in #3864
• docs(service): add HttpService documentation by @cratelyn in #3869
• docs(examples): alias Builder for clarity by @Muffeter in #3873
• docs(MAINTAINERS): add katelyn martin as collaborator by @seanmonstar in #3878
• chore(proto/h2): fix module-level documentation by @cratelyn in #3881
• feat(client): add a TrySendError::message() method by @cratelyn in #3884
• feat(client): add a TrySendError::error() method by @cratelyn in #3885
• fix(http2): add decriptive error for non-zero connect request by @samp5 in #3886
• refactor(lib): drop futures-util except in ffi by @hanna-kruppe in #3890
• fix(date): improve caching accuracy by @Patryk27 in #3887
• docs(SECURITY): update policy to use GSA drafts when reporting vulnerabilities by @seanmonstar in #3894
• feat: add Error::is_shutdown() by @joshka in #3863
• docs: improve ext module overview by @seanmonstar in #3921
• docs(rt): improve rt module overview by @seanmonstar in #3920
• chore(ci): update to cargo-check-external-types-0.3.0 by @tottoto in #3928
• test(common): add missing assertion in full_rewind test by @1911860538 in #3926
• fix(lib): avoid implicit cargo feature by @hanna-kruppe in #3931
• feat(http1): add allow_multiple_spaces_in_request_line_delimiters h1 builder config method by @mccordryan in #3929
• Prepare v1.7.0 by @seanmonstar in #3933

New Contributors

• @jimmycathy made their first contribution in #3855
• @Muffeter made their first contribution in #3873
• @samp5 made their first contribution in #3886
• @hanna-kruppe made their first contribution in #3890
• @Patryk27 made their first contribution in #3887
• @joshka made their first contribution in #3863
• @1911860538 made their first contribution in #3926
• @mccordryan made their first contribution in #3929

Full Changelog: v1.6.0...v1.7.0

v1.6.0

Features

• ext: add ext::on_informational() callback extension (#3818) (8ce1fcfa, closes #2565)
• server: add http1::Builder::ignore_invalid_headers(bool) option (#3824) (3817a79b)

Bug Fixes

• server:
  • start http1 header read timeout when conn is idle (#3828) (10b09ffc, closes #3780, #3781)
  • change max_local_error_reset_streams function to &mut self (#3820) (e981a91e)

Breaking Changes

• http2::Builder::max_local_error_reset_streams() now takes &mut self and returns &mut Self. In practice, this shouldn't break almost anyone. It was the wrong receiver and return types.
  (e981a91e)

New Contributors

• @finnbear made their first contribution in #3820

Thanks

• @GlenDC
• @tottoto
• @seanmonstar

Full Changelog: v1.5.2...v1.6.0

v1.5.2

Bug Fixes

• http1:
  • fix intermitent panic parsing partial headers (#3812) (a131111f, closes #3811)
  • skip debug assertion of content length for HEAD responses (#3795) (eaf2267c, closes #3794)

Features

• ffi: (unstable) add cargo-c support (#3787) (7f4a6826, closes #3786)

New Contributors

• @23doors made their first contribution in #3795
• @ionionascu made their first contribution in #3799
• @linyihai made their first contribution in #3800
• @suzp1984 made their first contribution in #3807

Thanks

• @seanmonstar

Full Changelog: v1.5.1...v1.5.2

v0.14.32

Features

• server: add Builder::max_pending_accept_reset_streams(num) option (a24f0c0)

Bug Fixes

• http1: fix intermittent panic parsing partial headers (0f274ae)

New Contributors

• @cratelyn made their first contribution in #3796

Full Changelog: v0.14.31...v0.14.32

v1.5.1

Bug Fixes

• http2:
  • pass proper value to h2 max_local_error_reset_streams (4a20147a)
  • improve graceful shutdown during handshake (#3729) (13b05943)

What's Changed

• test(client): unflake client try_send_request unit test by @seanmonstar in #3770
• docs(lib): fix up misleading example about unstable features by @seanmonstar in #3771
• docs(lib): do not inline http rexports by @seanmonstar in #3772
• Change graceful_shutdown function behavior. by @ionut-slaveanu in #3729
• chore(ci): pin hashbrown in MSRV job by @seanmonstar in #3783
• fix(http2): pass proper value to h2 max_local_error_reset_streams by @magurotuna in #3782
• chore(dependencies): remove libc crate from dependencies by @tottoto in #3377

New Contributors

• @ionut-slaveanu made their first contribution in #3729

Thanks

• @seanmonstar
• @ionut-slaveanu
• @magurotuna
• @tottoto

Full Changelog: v1.5.0...v1.5.1

v1.5.0

Features

• client: Add HTTP/2 builder options header_table_size() and max_concurrent_streams() (4c84e8c1)
• rt: add ReadBufCursor methods remaining() and put_slice() (#3700) (5a13041e)

Bug Fixes

• http1:
  • improve performance of parsing sequentially partial messages (#3764) (3900a23)
  • send 'connection: close' when connection is ending (#3725) (c86a6bcb, closes #3720)
  • make date_header effective (#3718) (7de02373)
• http2: strip content-length header in response to CONNECT requests (#3748) (67a4a498)

New Contributors

• @yinheli made their first contribution in #3712
• @yhx-12243 made their first contribution in #3718
• @friendlyping made their first contribution in #3739
• @WhyNotHugo made their first contribution in #3742
• @fasterthanlime made their first contribution in #3745
• @hongmengning made their first contribution in #3753
• @n1haldev made their first contribution in #3702

Thanks!

• @nox
• @seanmonstar
• @tottoto
• @0x676e67
• @SabrinaJewson
• @dndx

Full Changelog: v1.4.1...v1.5.0

v0.14.31

Bug Fixes

• http1: improve performance of parsing sequentially partial messages (97b595e)