Bump the trillium group across 1 directory with 8 updates

[dependabot]

Bumps the trillium group with 8 updates in the / directory:

Package	From	To
trillium	0.2.20	1.1.0
trillium-http	0.3.17	1.2.2
trillium-logger	0.4.5	0.5.0
trillium-macros	0.0.6	0.1.0
trillium-router	0.4.1	0.5.0
trillium-rustls	0.9.0	0.11.1
trillium-testing	0.7.0	0.9.0
trillium-tokio	0.4.0	0.6.1

Updates trillium from 0.2.20 to 1.1.0

Release notes

Sourced from trillium's releases.

trillium-http-v1.1.0

This release adds http/2 support.

Added

• pub mod h2 — HTTP/2 protocol primitives: HPACK encode/decode, h2 framing, H2Connection, H2Driver, H2Transport. HTTP/2 is automatically negotiated when ALPN selects h2 or via prior-knowledge cleartext ("h2c"). 146/146 h2spec cases pass.
• HTTP/2 extended CONNECT (RFC 8441) — opt in via HttpConfig::with_extended_connect_enabled(); required for WebSockets-over-h2.
• KnownHeaderName::Refresh
• Conn::h2_connection(), Conn::h2_stream_id(), Conn::h3_stream_id() — for handlers that want to interact with the underlying h2/h3 stream
• Upgrade::h2_connection, Upgrade::h2_stream_id, Upgrade::h3_stream_id (and _mut / set_ / with_ / take_ variants where applicable) — used by trillium-websockets for WS-over-h2 (RFC 8441)
• Various HttpConfig::h2_* tuning knobs: h2_initial_connection_window_size, h2_initial_stream_window_size, h2_max_stream_recv_window_size, h2_max_concurrent_streams, h2_max_frame_size
• HttpConfig::dynamic_table_capacity (and setter / with_ / _mut variants) — HPACK/QPACK encoder dynamic table capacity, shared between h2 and h3
• HttpConfig::recent_pairs_size (and setter / with_ / _mut variants) — per-connection ring size for the HPACK/QPACK encoder's recent-pairs predictor
• HttpConfig::h3_blocked_streams (and setter / with_ / _mut variants) — maximum number of HTTP/3 streams that may be blocked waiting for QPACK dynamic-table updates
• Upgrade::response_headers: Headers — the response headers that had been set on the underlying Conn before the upgrade was negotiated. These have already been sent to the peer; preserved here so post-upgrade code can inspect what was sent. response_headers_mut, set_response_headers, with_response_headers, and into_response_headers round out the accessor surface.
• Upgrade::status (with _mut / set_ / take_ / with_ variants) — Option<Status> carrying the response status sent before the upgrade
• Upgrade::start_time (with _mut / set_ / with_ variants) — Instant recording when the Conn that became this Upgrade was constructed
• H3Connection::peer_settings_ready() -> PeerSettingsReady<'_> (gated on the unstable feature) — async future that resolves to Some(H3Settings) once the inbound control stream has applied the peer's SETTINGS frame, or None if the connection shut down before SETTINGS arrived. Required for senders of extended-CONNECT requests (RFC 9220 §3 — the spec forbids sending a :protocol HEADERS until the peer has advertised SETTINGS_ENABLE_CONNECT_PROTOCOL). On a pooled connection that has already exchanged SETTINGS, the future resolves on the first poll. Multiple awaiters on the same connection are supported.

The existing sync H3Connection::peer_settings(&self) -> Option<&H3Settings> accessor is unchanged.

trillium-v1.1.0

Added

• Transport::negotiated_alpn() -> Option<Cow<'_, [u8]>> — optional trait method (defaults to None); runtime adapters use the result to dispatch between HTTP/1.1 and HTTP/2 on the same TLS listener
• trillium::Upgrade now implements AsRef<trillium_http::Upgrade<Box<dyn Transport>>> and AsMut<...>, exposing the full underlying fieldwork accessor surface to downstream callers (e.g. trillium-webtransport) without Upgrade having to enumerate every accessor up front.

trillium-http-v1.0.1

Changed

• Compatible with trillium 1.0
• StateSet renamed to TypeSet and extracted to the type-set crate; re-exported as trillium_http::TypeSet
• Trillium 1.0 uses Swansong instead of Stopper; Conn::stopper() → Conn::swansong()
• Error variants renamed for consistency: MalformedHeader → InvalidHeaderValue, PartialHead → InvalidHead, MissingVersion → InvalidVersion, UnrecognizedStatusCode/MissingStatusCode → InvalidStatus/MissingStatus; HeaderMissing and UnexpectedHeader now carry HeaderName<'static> instead of &'static str; UnsupportedVersion now carries Version instead of u8
• Version::Http2_0 renamed to Version::Http2; Version::Http3_0 renamed to Version::Http3
• Upgrade is now #[non_exhaustive]; Upgrade::buffer changed from Option<Vec<u8>> to Buffer; Upgrade::stopper renamed to Upgrade::swansong; Upgrade::peer_ip: Option<IpAddr> added
• ReceivedBody no longer implements Stream; use AsyncRead instead
• Headers::contains_ignore_ascii_case removed (was deprecated)
• Headers::append and Headers::try_insert_with now return &mut HeaderValues instead of ()
• set_* setters on Conn (e.g. set_status, set_host) now return &mut Self, enabling chaining
• Handler futures in Conn::map and friends no longer require Send
• pub mod transport removed — the Transport trait is now at trillium::Transport
• Body::new_streaming no longer requires a Sync reader.
• Conn::request_body is synchronous now. 100-continue is sent, if necessary, on first read from the body.
• ReceivedBody no longer implements IntoFuture to make the transition to request_body being synchronous easier.

Added

• Headers::entry() — Entry API for inserting/modifying headers, mirroring HashMap::entry
• parse feature — opt-in alternative header parser (bypasses httparse; groundwork for H3)
• HttpContext is now public — Arc-shared per-server state (Swansong + TypeSet + HttpConfig) passed to every connection
• pub mod h3 — HTTP/3 protocol primitives: QPACK encode/decode, H3 framing, H3Connection, H3Body, H3Error; used by trillium-quinn and other QUIC adapter crates

trillium-http-v1.0.0-rc.1

... (truncated)

Commits

• a9428fe chore: release 1.1
• cee5db6 docs: add a note to indicate that KnownHeaderName's u8 representation is not ...
• c83b18d chore(changelogs): add today's date
• f60c867 chore: update changelogs to reflect 1.0.0 versions
• 72370cb chore: update versions on main to reflect reality
• 5ee3d08 docs: update changelogs for http, openssl, and quinn
• e36bc4c fix(http): semver fixes to keep 1.1 semver-nonbreaking
• 34c8e5b chore: update blog entries now that trillium 1.0 is actually released
• 3b990ec feat(client): webtransport
• 68a29a3 ci: use vendored openssl on windows in ci
• Additional commits viewable in compare view

Updates trillium-http from 0.3.17 to 1.2.2

Release notes

Sourced from trillium-http's releases.

trillium-http-v1.2.2

Added

• Error::Other and the Error::other(impl Error) constructor — a catchall variant for application-level errors that need to flow through trillium_http::Result.
• KnownHeaderName::CdnCacheControl

Changed

• From<ReceivedBody<'static, _>> for Body now propagates trailers from the source body through the conversion. Behavior change for the trailer-carrying case; equivalent for bodies without trailers.

trillium-http-v1.2.1

Fixed

• HTTP/2 client: interim 1xx HEADERS frames (early hints, etc.) are now discarded instead of being latched as the final response. Per RFC 9113 §8.1 a response may include zero or more informational HEADERS before the final, and per RFC 9110 §15.2 / RFC 8297 §2 their headers must not be merged into the final. 101 Switching Protocols continues to be treated as a final response. An interim HEADERS frame that erroneously carries END_STREAM now surfaces ConnectionAborted to the conn task instead of hanging.

trillium-http-v1.2.0

Added

• H3Connection::process_inbound_bidi_with_reset — process a bidi request stream with a caller-supplied closure that issues RESET_STREAM on stream-level protocol errors, as required by RFC 9114 §4.1.2.
• H3Connection::process_inbound_uni_with_close — process a uni stream with a caller-supplied closure that fires CONNECTION_CLOSE while the recv stream is still alive, avoiding a FINAL_SIZE_ERROR race with the peer's response to STOP_SENDING.

Deprecated

• H3Connection::process_inbound_bidi — use process_inbound_bidi_with_reset instead.
• H3Connection::process_inbound_uni — use process_inbound_uni_with_close instead.

Fixed

h3spec identified the following minor violations in trillium's h3 implementation, primarily focused on error handling. All of these are fixed in 1.2.0:

• RFC 9114 §4.1.2 — stream-level errors (notably H3_MESSAGE_ERROR) MUST RST the bidi stream.
• RFC 9114 §4.1.1 / §4.2 / §4.3.1 — malformed messages (duplicated pseudos, unknown pseudos, uppercase header bytes) are H3_MESSAGE_ERROR.
• RFC 9114 §4.3.1 — schemes with mandatory authority component (http/https) require :authority or Host on non-CONNECT requests.
• RFC 9114 §6.2.1 — first frame on the peer's control stream must be SETTINGS. Non-SETTINGS first frame OR a malformed first frame → H3_MISSING_SETTINGS.
• RFC 9114 §6.2.1 + RFC 9204 §4.2 — closure of control or QPACK streams is H3_CLOSED_CRITICAL_STREAM.
• RFC 9114 §7.2.1 / §7.2.2 / §7.2.4 / §7.2.5 — control stream must reject DATA, HEADERS, PUSH_PROMISE, second SETTINGS, and the WebTransport 0x41 signal as H3_FRAME_UNEXPECTED.
• RFC 9114 §4.1 — first-frame decode failure on a request bidi stream is H3_FRAME_UNEXPECTED.
• RFC 9204 §3.1 — invalid static-table index in a field-line representation is QPACK_DECOMPRESSION_FAILED.
• RFC 9204 §4.1.3 — Set Dynamic Table Capacity exceeding the limit is QPACK_ENCODER_STREAM_ERROR.
• RFC 9204 §4.4.3 — Insert Count Increment of 0 is QPACK_DECODER_STREAM_ERROR.
• RFC 9204 §6 — QPACK errors are connection-level, not stream-level.
• RFC 9114 §8.1 / RFC 9204 §6 — correct close error code on the wire.

trillium-http-v1.1.0

This release adds http/2 support.

... (truncated)

Commits

• ff267ff chore: use path base dev deps only
• b4ebf5b feat(http): add CDN-Cache-Control to KnownHeaderName
• 8ddf64b chore: clippy
• bd62ee7 feat(client)!: handlers
• da1a5e0 feat(client): set/take_response_body, ResponseBody Drop lifecycle
• f649a10 feat(http): unstable primitives for client response-body lifecycle
• 304a8a9 refactor(client): Conn holds a Client; export url
• 27b7390 feat(client)!: introduce client handlers
• 0144e92 feat(http): add a catchall Other error variant
• 0e76e8e feat(http): add unstable-gated Body::try_clone
• Additional commits viewable in compare view

Updates trillium-logger from 0.4.5 to 0.5.0

Release notes

Sourced from trillium-logger's releases.

trillium-logger-v0.5.0

Changed

• Compatible with trillium 1.0
• formatters::header() removed (was deprecated); use formatters::request_header() instead
• dev_formatter output now includes HTTP version as the first field: format changed from METHOD URL TIME STATUS to VERSION METHOD URL TIME STATUS

Added

• LogTarget — accessible via conn.shared_state::<LogTarget>(), allowing any handler to emit messages to the configured logger target

Added

• add deprecation warnings to 0.2 branch in preparation for 1.0

Other

• release
• release
• clippy
• Release only rustls
• release
• release

trillium-logger-v0.5.0-rc.1

Changed

• Compatible with trillium 1.0
• formatters::header() removed (was deprecated); use formatters::request_header() instead
• dev_formatter output now includes HTTP version as the first field: format changed from METHOD URL TIME STATUS to VERSION METHOD URL TIME STATUS

Added

• LogTarget — accessible via conn.shared_state::<LogTarget>(), allowing any handler to emit messages to the configured logger target

Commits

• ca48261 chore(release): longer timeout
• b2ae979 chore(release): fix changelogs
• 70a4482 chore(http,release): exclude qifs
• 4f980d7 chore: release 1.0.0!
• 42b0112 fix(client): correctly set version to http/1.1 when falling back from a hinte...
• b2101a1 fix(http): small http3 correctness fixes and significant test coverage
• 369d99f docs(guide): fix link to Handler
• 027d58e feat(client): add support for setting http version on the conn prior to exec
• 6532be5 chore(release): re-add quinn and webtransport to list of release-plz managed ...
• b8cf473 chore: fix new crate versions
• Additional commits viewable in compare view

Updates trillium-macros from 0.0.6 to 0.1.0

Release notes

Sourced from trillium-macros's releases.

trillium-macros-v0.1.0-rc.1

Changed

• Compatible with trillium 1.0

Commits

• c51cc50 (cargo-release) version 0.1.0
• 60446f8 (cargo-release) version 0.1.0
• d3389fb depend on the bot
• 91827d4 Create SECURITY.md
• 957efa1 Create FUNDING.yml
• 0c1398d update deps
• f254e84 add a little stability note to trillium_http
• c598d44 document the client on trillium_smol
• b0e2f0c tidy up the trillium crate rustdocs
• 493e52b whoops
• Additional commits viewable in compare view

Updates trillium-router from 0.4.1 to 0.5.0

Release notes

Sourced from trillium-router's releases.

trillium-router-v0.5.0

Changed

• Compatible with trillium 1.0

Added

• add deprecation warnings to 0.2 branch in preparation for 1.0

Other

• release

trillium-router-v0.5.0-rc.1

Changed

• Compatible with trillium 1.0

Commits

• ca48261 chore(release): longer timeout
• b2ae979 chore(release): fix changelogs
• 70a4482 chore(http,release): exclude qifs
• 4f980d7 chore: release 1.0.0!
• 42b0112 fix(client): correctly set version to http/1.1 when falling back from a hinte...
• b2101a1 fix(http): small http3 correctness fixes and significant test coverage
• 369d99f docs(guide): fix link to Handler
• 027d58e feat(client): add support for setting http version on the conn prior to exec
• 6532be5 chore(release): re-add quinn and webtransport to list of release-plz managed ...
• b8cf473 chore: fix new crate versions
• Additional commits viewable in compare view

Updates trillium-rustls from 0.9.0 to 0.11.1

Release notes

Sourced from trillium-rustls's releases.

trillium-rustls-v0.11.1

Fixed

• Bump trillium-server-common dependency specifier to 0.7 to match the 1.1 release; 0.11.0 was published with a stale 0.6 spec.

trillium-rustls-v0.11.0

Changed

• TLS now advertises h2 and http/1.1 in ALPN by default. RustlsConfig::without_http2() opts back out for HTTP/1.1-only deployments.

Added

• RustlsConfig::without_http2() — drop h2 from the advertised ALPN list
• RustlsAcceptor::from_single_cert_no_h2(cert, key) — convenience constructor for HTTP/1.1-only TLS, equivalent to from_single_cert(cert, key).without_http2()
• RustlsClientTransport::negotiated_alpn() / RustlsServerTransport::negotiated_alpn() — exposes the ALPN result for runtime/client dispatch

trillium-rustls-v0.10.0-rc.1

Changed

• Compatible with trillium 1.0
• Trillium 1.0 uses Swansong instead of Stopper; config().with_stopper(stopper) becomes config().with_swansong(swansong)
• RustlsConfig::spawn(fut) → RustlsConfig::runtime().spawn(fut)

Commits

• b1f2f6f chore: fix trillium-quinn's deps
• e2da7ea docs: update client description
• 7df89fb chore: re-release client, runtime adapters, quinn, and rustls
• a9428fe chore: release 1.1
• cee5db6 docs: add a note to indicate that KnownHeaderName's u8 representation is not ...
• c83b18d chore(changelogs): add today's date
• f60c867 chore: update changelogs to reflect 1.0.0 versions
• 72370cb chore: update versions on main to reflect reality
• 5ee3d08 docs: update changelogs for http, openssl, and quinn
• e36bc4c fix(http): semver fixes to keep 1.1 semver-nonbreaking
• Additional commits viewable in compare view

Updates trillium-testing from 0.7.0 to 0.9.0

Release notes

Sourced from trillium-testing's releases.

trillium-testing-v0.9.0

No release notes provided.

trillium-testing-v0.8.0

Changed

• Compatible with trillium 1.0
• init(&mut handler) is now async and returns Arc<HttpContext>: init(&mut handler).await; capture the returned value if you need to pass it to TestConn::with_context()
• ClientConfig struct removed; use the client_config() function or RuntimelessClientConfig directly
• SpawnHandle<F> removed; background task handles are now DroppableFuture from trillium-server-common

Added

• Introduce new testing approach described at TestHandler:

use trillium::{Conn, Status, conn_try};
use trillium_testing::TestServer;
async fn handler(mut conn: Conn) -> Conn {
let Ok(request_body) = conn.request_body_string().await else {
return conn.with_status(500).halt();
};
conn.with_body(format!("request body was: {}", request_body))
    .with_status(418)
    .with_response_header("request-id", "special-request")

}
let app = TestServer::new(handler).await;
app.post("/")
.with_body("hello trillium!")
.await
.assert_status(Status::ImATeapot)
.assert_body("request body was: hello trillium!")
.assert_headers([
("request-id", "special-request"),
("content-length", "33")
]);

• The assertion macros (assert_ok!, assert_status!, assert_not_handled!, etc.) and request builders are unchanged
• Zero-dependency testing: when no runtime feature is enabled, RuntimelessRuntime, RuntimelessServer, and RuntimelessClientConfig provide fully in-memory test infrastructure without requiring tokio, smol, or async-std
• with_runtime(|runtime| async { ... }) — test harness that injects a Runtime into the test closure, also usable as a test harness
• TestConn::with_context(Arc<HttpContext>) — pass a server config (including shared state initialized by init) to a test connection

Added

• (api) [breaking] make IoErrors respond with BadRequest
• deprecate set_state for insert_state

Other

... (truncated)

Commits

• 9bb38de chore: release trillium-testing 0.9
• 4cb4747 feat(native-tls): add NativeTlsAcceptor::from_cert_and_key
• 2fc25c5 chore: release additional crates that I missed yesterday
• 5b764ae chore: release proxy 0.7
• a4ae145 chore: use workspace deps to avoid release mistakes
• b1f2f6f chore: fix trillium-quinn's deps
• e2da7ea docs: update client description
• 7df89fb chore: re-release client, runtime adapters, quinn, and rustls
• a9428fe chore: release 1.1
• cee5db6 docs: add a note to indicate that KnownHeaderName's u8 representation is not ...
• Additional commits viewable in compare view

Updates trillium-tokio from 0.4.0 to 0.6.1

Release notes

Sourced from trillium-tokio's releases.

trillium-tokio-v0.6.1

Fixed

• Bump trillium-server-common dependency specifier to 0.7 to match the 1.1 release; 0.6.0 was published with a stale 0.6 spec.

trillium-tokio-v0.6.0

Added

• HTTP/2 support — when the TLS acceptor negotiates h2 via ALPN, connections are dispatched to the h2 driver instead of HTTP/1.1. Inherited from trillium-server-common 0.7; no code changes required to opt in.

trillium-tokio-v0.5.0

Changed

• Compatible with trillium 1.0
• Trillium 1.0 uses Swansong instead of Stopper; config().with_stopper(stopper) becomes config().with_swansong(swansong)
• Free functions spawn and block_on removed; use TokioRuntime::default().spawn(fut) and TokioRuntime::default().block_on(fut) respectively
• ClientConfig::spawn(fut) → ClientConfig::runtime().spawn(fut)

Added

• TokioRuntime implementing RuntimeTrait, with methods spawn, block_on, delay, interval, timeout, and signal hooks
• TokioUdpSocket — UDP transport type implementing UdpTransport, used by trillium-quinn for HTTP/3
• Config::spawn(handler) now returns a ServerHandle that is Clone and covers the full server lifecycle: await it to wait for shutdown, call handle.info().await to wait for the server to finish binding and get a BoundInfo (bound address, URL, shared state), and handle.shut_down() to initiate graceful shutdown
• HTTP/3 support: config().with_quic(trillium_quinn::QuicConfig::from_single_cert(&cert_pem, &key_pem)) — see the trillium changelog for details

Added

• (tokio) [breaking] use trillium-server-common 0.5

Other

• release
• release
• release
• clippy
• (deps) update env_logger requirement from 0.10.1 to 0.11.0

trillium-tokio-v0.5.0-rc.1

Changed

• Compatible with trillium 1.0
• Trillium 1.0 uses Swansong instead of Stopper; config().with_stopper(stopper) becomes config().with_swansong(swansong)
• Free functions spawn and block_on removed; use TokioRuntime::default().spawn(fut) and TokioRuntime::default().block_on(fut) respectively
• ClientConfig::spawn(fut) → ClientConfig::runtime().spawn(fut)

Added

• TokioRuntime implementing RuntimeTrait, with methods spawn, block_on, delay, interval, timeout, and signal hooks
• TokioUdpSocket — UDP transport type implementing UdpTransport, used by trillium-quinn for HTTP/3
• Config::spawn(handler) now returns a ServerHandle that is Clone and covers the full server lifecycle: await it to wait for shutdown, call handle.info().await to wait for the server to finish binding and get a BoundInfo (bound address, URL, shared state), and handle.shut_down() to initiate graceful shutdown
• HTTP/3 support: config().with_quic(trillium_quinn::QuicConfig::from_single_cert(&cert_pem, &key_pem)) — see the trillium changelog for details

Commits

• e2da7ea docs: update client description
• 7df89fb chore: re-release client, runtime adapters, quinn, and rustls
• a9428fe chore: release 1.1
• cee5db6 docs: add a note to indicate that KnownHeaderName's u8 representation is not ...
• c83b18d chore(changelogs): add today's date
• f60c867 chore: update changelogs to reflect 1.0.0 versions
• 72370cb chore: update versions on main to reflect reality
• 5ee3d08 docs: update changelogs for http, openssl, and quinn
• e36bc4c fix(http): semver fixes to keep 1.1 semver-nonbreaking
• 34c8e5b chore: update blog entries now that trillium 1.0 is actually released
• Additional commits viewable in compare view

[divviup-github-automation]

Auto-approving dependabot PR.

[dependabot]

None of your dependencies match this group anymore, you may need to update your configuration file to remove it or change its rules.