chore(deps): update rust crate actix-http to v3.20.0 #92

Open

renovate-bot wants to merge 1 commit from renovate/actix-http-3.x-lockfile into master

pull from: renovate/actix-http-3.x-lockfile

merge into: realaravinth:master

realaravinth:master

realaravinth:renovate/actix-web-4.x-lockfile

realaravinth:renovate/serde_json-1.x-lockfile

realaravinth:renovate/config-0.x-lockfile

realaravinth:renovate/rust-futures-monorepo

realaravinth:renovate/serde-monorepo

realaravinth:renovate/sailfish-0.x

realaravinth:renovate/graphql_client-0.x

realaravinth:renovate/bincode-3.x

realaravinth:renovate/reqwest-0.x

realaravinth:fix-secrets

realaravinth:fix-gh-36

realaravinth:chore-update-deps

realaravinth:chore-rm-gh-actions

realaravinth:gh-32

realaravinth:fix-woodpecker-pr-config

realaravinth:multi-arch

realaravinth:fix-gh-28

realaravinth:gh-libmedium

Conversation 0 Commits 1 Files changed 1 +19 -39

renovate-bot commented 2026-06-22 17:05:56 +05:30

Collaborator

Copy link

This PR contains the following updates:

Package	Type	Update	Change
actix-http (source)	dependencies	minor	3.13.0 -> 3.20.0

---

Release Notes

actix/actix-web (actix-http)

v3.20.0: actix-http: v3.20.0

Compare Source

• Release oversized HTTP/1 write buffers after flushing to reduce memory retained by idle connections.
• Minimum supported Rust version (MSRV) is now 1.89.

v3.19.0: actix-http: v3.19.0

Compare Source

• Fix QualityItem parsing to recognize quality parameters before other parameters and ignore semicolons inside quoted values.
• Parse header quality values as exact decimals and reject invalid numeric syntax.
• Round float quality conversions to the nearest thousandth to preserve all three decimal places.
• Reject WebSocket frames whose 64-bit payload length has the most significant bit set, or whose length does not fit in usize on 32-bit targets, using ws::ProtocolError::Overflow.
• Update zstd dependency to 0.14.
• Update brotli dependency to 9.

v3.18.13: actix-http: v3.18.13

• Emit required Connection options for HTTP/1 response upgrade advertisements without changing connection state.
• Parse all HTTP/1 Connection header options consistently.
• Only treat Expect: 100-continue as a continue expectation in HTTP/1.1 requests.
• Reject WebSocket handshakes with a Sec-WebSocket-Key value that is not valid Base64 or does not decode to 16 bytes.
• Reject WebSocket Close frames with payloads larger than 125 bytes.
• Return a 426 Upgrade Required response when an unsupported WebSocket version is requested.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actix-http](https://actix.rs) ([source](https://github.com/actix/actix-web)) | dependencies | minor | `3.13.0` -> `3.20.0` | --- ### Release Notes <details> <summary>actix/actix-web (actix-http)</summary> ### [`v3.20.0`](https://github.com/actix/actix-web/releases/tag/actix-http-v3.20.0): actix-http: v3.20.0 [Compare Source](https://github.com/actix/actix-web/compare/actix-http-v3.19.0...actix-http-v3.20.0) - Release oversized HTTP/1 write buffers after flushing to reduce memory retained by idle connections. - Minimum supported Rust version (MSRV) is now 1.89. ### [`v3.19.0`](https://github.com/actix/actix-web/releases/tag/actix-http-v3.19.0): actix-http: v3.19.0 [Compare Source](https://github.com/actix/actix-web/compare/actix-http-v3.18.13...actix-http-v3.19.0) - Fix `QualityItem` parsing to recognize quality parameters before other parameters and ignore semicolons inside quoted values. - Parse header quality values as exact decimals and reject invalid numeric syntax. - Round float quality conversions to the nearest thousandth to preserve all three decimal places. - Reject WebSocket frames whose 64-bit payload length has the most significant bit set, or whose length does not fit in `usize` on 32-bit targets, using `ws::ProtocolError::Overflow`. - Update `zstd` dependency to `0.14`. - Update `brotli` dependency to `9`. ### [`v3.18.13`](https://github.com/actix/actix-web/releases/tag/actix-http-v3.18.13): actix-http: v3.18.13 - Emit required `Connection` options for HTTP/1 response upgrade advertisements without changing connection state. - Parse all HTTP/1 `Connection` header options consistently. - Only treat `Expect: 100-continue` as a continue expectation in HTTP/1.1 requests. - Reject WebSocket handshakes with a `Sec-WebSocket-Key` value that is not valid Base64 or does not decode to 16 bytes. - Reject WebSocket Close frames with payloads larger than 125 bytes. - Return a 426 Upgrade Required response when an unsupported WebSocket version is requested. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41Mi44IiwidXBkYXRlZEluVmVyIjoiNDIuNTIuOCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS1ib3QiXX0=-->

renovate-bot added the

renovate-bot

label 2026-06-22 17:05:56 +05:30

renovate-bot force-pushed renovate/actix-http-3.x-lockfile from 8cb479681e to 1eb5b08247 2026-08-10 05:14:42 +05:30 Compare

renovate-bot changed title from chore(deps): update rust crate actix-http to v3.13.1 to chore(deps): update rust crate actix-http to v3.13.3 2026-08-10 05:14:43 +05:30

renovate-bot force-pushed renovate/actix-http-3.x-lockfile from 1eb5b08247 to 5459cc1e78 2026-09-07 05:13:03 +05:30 Compare

renovate-bot changed title from chore(deps): update rust crate actix-http to v3.13.3 to chore(deps): update rust crate actix-http to v3.13.5 2026-09-07 05:13:04 +05:30

renovate-bot force-pushed renovate/actix-http-3.x-lockfile from 5459cc1e78 to ca00e427e7 2026-09-21 05:13:10 +05:30 Compare

renovate-bot changed title from chore(deps): update rust crate actix-http to v3.13.5 to chore(deps): update rust crate actix-http to v3.13.6 2026-09-21 05:13:10 +05:30

renovate-bot force-pushed renovate/actix-http-3.x-lockfile from ca00e427e7 to 60e6a8f284 2026-09-28 05:13:23 +05:30 Compare

renovate-bot changed title from chore(deps): update rust crate actix-http to v3.13.6 to chore(deps): update rust crate actix-http to v3.18.12 2026-09-28 05:13:23 +05:30

renovate-bot force-pushed renovate/actix-http-3.x-lockfile from 60e6a8f284 to e345be03a8 2026-10-12 05:14:31 +05:30 Compare

renovate-bot changed title from chore(deps): update rust crate actix-http to v3.18.12 to chore(deps): update rust crate actix-http to v3.18.13 2026-10-12 05:14:32 +05:30

renovate-bot force-pushed renovate/actix-http-3.x-lockfile from e345be03a8 to 6e3392a1ed 2026-10-19 05:18:35 +05:30 Compare

renovate-bot changed title from chore(deps): update rust crate actix-http to v3.18.13 to chore(deps): update rust crate actix-http to v3.19.0 2026-10-19 05:18:36 +05:30

renovate-bot force-pushed renovate/actix-http-3.x-lockfile from 6e3392a1ed to 4a1c1f1fc4 2026-10-26 05:15:06 +05:30 Compare

renovate-bot changed title from chore(deps): update rust crate actix-http to v3.19.0 to chore(deps): update rust crate actix-http to v3.20.0 2026-10-26 05:15:07 +05:30

Some checks failed

Hide checks

ci/woodpecker/pull_request_metadata/woodpecker Pipeline was successful

Details

ci/woodpecker/push/woodpecker Pipeline was successful

Details

ci/woodpecker/pr/woodpecker Pipeline failed

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/actix-http-3.x-lockfile:renovate/actix-http-3.x-lockfile

git switch renovate/actix-http-3.x-lockfile

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff renovate/actix-http-3.x-lockfile

git switch renovate/actix-http-3.x-lockfile

git rebase master

git switch master

git merge --ff-only renovate/actix-http-3.x-lockfile

git switch renovate/actix-http-3.x-lockfile

git rebase master

git switch master

git merge --no-ff renovate/actix-http-3.x-lockfile

git switch master

git merge --squash renovate/actix-http-3.x-lockfile

git switch master

git merge --ff-only renovate/actix-http-3.x-lockfile

git switch master

git merge renovate/actix-http-3.x-lockfile

git push origin master

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

Something isn't working

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature or request

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

question

Further information is requested

  

renovate-bot

  

renovate-security

  

security

  

wontfix

This will not be worked on

No labels

bug

documentation

duplicate

enhancement

good first issue

help wanted

invalid

question

renovate-bot

renovate-security

security

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

realaravinth/libmedium!92

No description provided.