Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2025

Bumps hyper-util from 0.1.11 to 0.1.17.

Release notes

Sourced from hyper-util's releases.

v0.1.17

Highlights

  • Fix legacy::Client to allow absolute-form URIs when Connected::proxy(true) is passed and the scheme is https.

What's Changed

Full Changelog: hyperium/hyper-util@v0.1.16...v0.1.17

v0.1.16

Highlights

  • Add impl Clone for proxy::Tunnel service.
  • Fix proxy::Matcher to detect SOCKS4 schemes.
  • Fix legacy::Client pool idle checker to trigger less aggresively, saving CPU.

What's Changed

New Contributors

Full Changelog: hyperium/hyper-util@v0.1.15...v0.1.16

v0.1.15

tl;dr

  • Add header casing options to auto::Builder.
  • Fix proxy::Socksv5 to check for enough bytes before parsing ipv6 responses.
  • Fix including client-proxy in the full feature set.

What's Changed

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.17 (2025-09-15)

  • Fix legacy::Client to allow absolute-form URIs when Connected::proxy(true) is passed and the scheme is https.

0.1.16 (2025-07-22)

  • Add impl Clone for proxy::Tunnel service.
  • Fix proxy::Matcher to detect SOCKS4 schemes.
  • Fix legacy::Client pool idle checker to trigger less aggresively, saving CPU.

0.1.15 (2025-07-07)

  • Add header casing options to auto::Builder.
  • Fix proxy::Socksv5 to check for enough bytes before parsing ipv6 responses.
  • Fix including client-proxy in the full feature set.

0.1.14 (2025-06-04)

  • Fix HttpConnector to defer address family order to resolver sort order.
  • Fix proxy::Matcher to find HTTPS system proxies on Windows.

0.1.13 (2025-05-27)

  • Fix HttpConnector to always prefer IPv6 addresses first, if happy eyeballs is enabled.
  • Fix legacy::Client to return better errors if available on the connection.

0.1.12 (2025-05-19)

  • Add client::legacy::proxy::Tunnel connector that wraps another connector with HTTP tunneling.
  • Add client::legacy::proxy::{SocksV4, SocksV5} connectors that wraps another connector with SOCKS.
  • Add client::proxy::matcher::Matcher type that can use environment variables to match proxy rules.
  • Add server::graceful::Watcher type that can be sent to watch a connection in another task.
  • Add GracefulShutdown::count() method to get number of currently watched connections.
  • Fix missing must_use attributes on Connection futures.
  • Fix tracing span in GAI resolver that can cause panics.
Commits
  • 3021828 v0.1.17
  • 9fb7cd5 fix(client): allow absolute-form if is_proxied is set even on HTTPS (#225)
  • 00035ba refactor: set correct cfg on common::{rewind, Exec, Lazy, SyncWrapper} (#224)
  • ad8c7c5 refactor(connect): safely convert Socket to Tokio TcpSocket (#223)
  • 00911ec chore(test): remove some miri exception config (#222)
  • 5cefcd8 v0.1.16
  • 0d4ca3f chore(cargo): move tokio/net feature to client (#218)
  • 89b2cff fix(proxy): Fix SOCKS4 proxy protocol parsing and matching (#219)
  • 39fd779 tests(client): fix flaky pool test (#220)
  • 24714a3 fix(client): cap pool idle interval to a minimum (#217)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Nov 10, 2025
Bumps [hyper-util](https://github.com/hyperium/hyper-util) from 0.1.11 to 0.1.17.
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.11...v0.1.17)

---
updated-dependencies:
- dependency-name: hyper-util
  dependency-version: 0.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/hyper-util-0.1.17 branch from 2f9c161 to b461f41 Compare November 14, 2025 14:03
@tobz tobz merged commit e182e75 into main Nov 14, 2025
14 checks passed
@tobz tobz deleted the dependabot/cargo/hyper-util-0.1.17 branch November 14, 2025 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants