[PR #3423] [MERGED] build(deps): bump reqwest from 0.12.24 to 0.13.1 #3830

Closed
opened 2026-03-16 12:05:07 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/3423
Author: @dependabot[bot]
Created: 1/1/2026
Status: Merged
Merged: 1/1/2026
Merged by: @djc

Base: mainHead: dependabot/cargo/reqwest-0.13.1


📝 Commits (1)

  • fd3f279 build(deps): bump reqwest from 0.12.24 to 0.13.1

📊 Changes

2 files changed (+5 additions, -26 deletions)

View changed files

📝 Cargo.lock (+4 -25)
📝 Cargo.toml (+1 -1)

📄 Description

Bumps reqwest from 0.12.24 to 0.13.1.

Release notes

Sourced from reqwest's releases.

v0.13.1

What's Changed

Full Changelog: https://github.com/seanmonstar/reqwest/compare/v0.13.0...v0.13.1

v0.13.0

Breaking changes

  • rustls is now the default TLS backend, instead of native-tls.
  • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
  • rustls-tls has been renamed to rustls.
  • rustls roots features removed, rustls-platform-verifier is used by default.
    • To use different roots, call tls_certs_only(your_roots).
  • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
  • query and form are now crate features, disabled by default.
  • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

Pull Requests in General

New Contributors

Full Changelog: https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.0

v0.13.0-rc.1

👀 Discussion here if you give it try, thanks!

Main breaking changes

  • rustls is now default instead of native-tls
  • rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you want to enable a different one)
  • rustls-tls renamed to rustls
  • rustls roots features removed, platform-verifier is used instead

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/3423 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 1/1/2026 **Status:** ✅ Merged **Merged:** 1/1/2026 **Merged by:** [@djc](https://github.com/djc) **Base:** `main` ← **Head:** `dependabot/cargo/reqwest-0.13.1` --- ### 📝 Commits (1) - [`fd3f279`](https://github.com/hickory-dns/hickory-dns/commit/fd3f27926962f79bf332b8656c7bdd304915d859) build(deps): bump reqwest from 0.12.24 to 0.13.1 ### 📊 Changes **2 files changed** (+5 additions, -26 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.lock` (+4 -25) 📝 `Cargo.toml` (+1 -1) </details> ### 📄 Description Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.24 to 0.13.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/releases">reqwest's releases</a>.</em></p> <blockquote> <h2>v0.13.1</h2> <h2>What's Changed</h2> <ul> <li>http3: depend on quinn/rustls-aws-lc-rs to avoid ring dependency by <a href="https://github.com/djc"><code>@​djc</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2917">seanmonstar/reqwest#2917</a></li> <li>fix rustls on android by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2918">seanmonstar/reqwest#2918</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.13.0...v0.13.1">https://github.com/seanmonstar/reqwest/compare/v0.13.0...v0.13.1</a></p> <h2>v0.13.0</h2> <h2>Breaking changes</h2> <ul> <li><code>rustls</code> is now the default TLS backend, instead of <code>native-tls</code>.</li> <li><code>rustls</code> crypto provider defaults to aws-lc instead of <em>ring</em>. (<code>rustls-no-provider</code> exists if you want a different crypto provider)</li> <li><code>rustls-tls</code> has been renamed to <code>rustls</code>.</li> <li>rustls roots features removed, <code>rustls-platform-verifier</code> is used by default. <ul> <li>To use different roots, call <code>tls_certs_only(your_roots)</code>.</li> </ul> </li> <li><code>native-tls</code> now includes ALPN. To disable, use <code>native-tls-no-alpn</code>.</li> <li><code>query</code> and <code>form</code> are now crate features, disabled by default.</li> <li>Long-deprecated methods and crate features have been removed (such as <code>trust-dns</code>, which was renamed <code>hickory-dns</code> a while ago).</li> <li>Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a &quot;soft&quot; deprecation. (just documented, no warnings) <ul> <li>For example, prefer <code>tls_backend_rustls()</code> over <code>use_rustls_tls()</code>.</li> </ul> </li> </ul> <h2>Pull Requests in General</h2> <ul> <li>start 0.13 dev by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2894">seanmonstar/reqwest#2894</a></li> <li>Make <code>serde</code> optional by introducing <code>query</code>, <code>form</code> features, and re-working WASM header parsing by <a href="https://github.com/CathalMullan"><code>@​CathalMullan</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2858">seanmonstar/reqwest#2858</a></li> <li>replace <code>ClientBuilder::dns_resolver</code> with <code>dns_resolver2</code> by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2898">seanmonstar/reqwest#2898</a></li> <li>feat: make Rustls the default TLS provider by <a href="https://github.com/calavera"><code>@​calavera</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2897">seanmonstar/reqwest#2897</a></li> <li>feat: consolidate TLS options with rustls-platform-verifier by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2891">seanmonstar/reqwest#2891</a></li> <li>remove long-deprecated methods: trust-dns and non-wasm-cors by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2899">seanmonstar/reqwest#2899</a></li> <li>rename rustls-tls feature to just rustls by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2900">seanmonstar/reqwest#2900</a></li> <li>remove deprecated features trust-dns and macos-system-configuration by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2901">seanmonstar/reqwest#2901</a></li> <li>chore: separate rustls and rustls-no-provider features by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2903">seanmonstar/reqwest#2903</a></li> <li>rustls: allow windows to use extra roots by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2904">seanmonstar/reqwest#2904</a></li> <li>v0.13.0-rc.1 by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2905">seanmonstar/reqwest#2905</a></li> <li>Enable ALPN by default in native-tls by <a href="https://github.com/ducaale"><code>@​ducaale</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2907">seanmonstar/reqwest#2907</a></li> <li>v0.13.0 by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2915">seanmonstar/reqwest#2915</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/CathalMullan"><code>@​CathalMullan</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2858">seanmonstar/reqwest#2858</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.0">https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.0</a></p> <h2>v0.13.0-rc.1</h2> <p>👀 <strong><a href="https://github.com/seanmonstar/reqwest/discussions/2906">Discussion here</a> if you give it try, thanks!</strong></p> <h2>Main breaking changes</h2> <ul> <li>rustls is now default instead of native-tls</li> <li>rustls provider defaults to aws-lc instead of ring (<code>rustls-no-provider</code> exists if you want to enable a different one)</li> <li>rustls-tls renamed to rustls</li> <li>rustls roots features removed, platform-verifier is used instead</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md">reqwest's changelog</a>.</em></p> <blockquote> <h2>v0.13.1</h2> <ul> <li>Fixes compiling with rustls on Android targets.</li> </ul> <h1>v0.13.0</h1> <ul> <li><strong>Breaking changes</strong>: <ul> <li><code>rustls</code> is now the default TLS backend, instead of <code>native-tls</code>.</li> <li><code>rustls</code> crypto provider defaults to aws-lc instead of <em>ring</em>. (<code>rustls-no-provider</code> exists if you want a different crypto provider)</li> <li><code>rustls-tls</code> has been renamed to <code>rustls</code>.</li> <li>rustls roots features removed, <code>rustls-platform-verifier</code> is used by default. <ul> <li>To use different roots, call <code>tls_certs_only(your_roots)</code>.</li> </ul> </li> <li><code>native-tls</code> now includes ALPN. To disable, use <code>native-tls-no-alpn</code>.</li> <li><code>query</code> and <code>form</code> are now crate features, disabled by default.</li> <li>Long-deprecated methods and crate features have been removed (such as <code>trust-dns</code>, which was renamed <code>hickory-dns</code> a while ago).</li> </ul> </li> <li>Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a &quot;soft&quot; deprecation. (just documented, no warnings) <ul> <li>For example, prefer <code>tls_backend_rustls()</code> over <code>use_rustls_tls()</code>.</li> </ul> </li> </ul> <h2>v0.12.28</h2> <ul> <li>Fix compiling on Windows if TLS and SOCKS features are not enabled.</li> </ul> <h2>v0.12.27</h2> <ul> <li>Add <code>ClientBuilder::windows_named_pipe(name)</code> option that will force all requests over that Windows Named Piper.</li> </ul> <h2>v0.12.26</h2> <ul> <li>Fix sending <code>Accept-Encoding</code> header only with values configured with reqwest, regardless of underlying tower-http config.</li> </ul> <h2>v0.12.25</h2> <ul> <li>Add <code>Error::is_upgrade()</code> to determine if the error was from an HTTP upgrade.</li> <li>Fix sending <code>Proxy-Authorization</code> if only username is configured.</li> <li>Fix sending <code>Proxy-Authorization</code> to HTTPS proxies when the target is HTTP.</li> <li>Refactor internal decompression handling to use tower-http.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/seanmonstar/reqwest/commit/10fb98c673ca040405aa03ac057f73bedbf4715f"><code>10fb98c</code></a> v0.13.1</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/438098af71b3e210e529ed2116d0276e19e71eef"><code>438098a</code></a> chore: refer to h2 as dep:h2 (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2919">#2919</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/43aac91963a0a8584472e95d98fe42994e598ea8"><code>43aac91</code></a> chore(ci): bump actions/checkout from 5 to 6 (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2864">#2864</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/175f5b2a7ffb58aa76ec036e9e3331254e004a4a"><code>175f5b2</code></a> fix rustls on android (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2918">#2918</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/1afe88eaf38fedc48f4010ea438a2ffc6b22174a"><code>1afe88e</code></a> Depend on quinn/rustls-aws-lc-rs to avoid ring dependency (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2917">#2917</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/62a80af8fbb743a2c7bfcb64d8896f80a3b9f6fa"><code>62a80af</code></a> v0.13.0</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/e8d89f4fc4e1a30a224682eb95281c1c7200f2cc"><code>e8d89f4</code></a> enable ALPN by default in native-tls (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2907">#2907</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/9a9daa7921dc875b90dd1798d2edbd86e476a30a"><code>9a9daa7</code></a> v0.13.0-rc.1</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/d518e453084827365f2fe39259ac344bfe87b714"><code>d518e45</code></a> rustls: allow windows to use extra roots (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2904">#2904</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/934bc84bd8cc529a676df4afc85f97a39aa62b76"><code>934bc84</code></a> chore: separate rustls and rustls-no-provider features (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2903">#2903</a>)</li> <li>Additional commits viewable in <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.24...v0.13.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=reqwest&package-manager=cargo&previous-version=0.12.24&new-version=0.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-16 12:05:07 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/hickory-dns#3830
No description provided.