actix-web: v4.13.0

• Minimum supported Rust version (MSRV) is now 1.88.
• Improve HTTP/2 upload throughput by increasing default flow control window sizes. #3638
• Add HttpServer::{h2_initial_window_size, h2_initial_connection_window_size} methods for tuning. #3638
• Add HttpRequest::url_for_map and HttpRequest::url_for_iter methods for named URL parameters. #3895
• Ignore unparsable cookies in Cookie request header.
• Add experimental-introspection feature to report configured routes #3594
• Add config/method for TCP_NODELAY. #3918
• Fix panic when NormalizePath rewrites a scoped dynamic path before extraction (e.g., scope("{tail:.*}") + Path<String>). #3562
• Do not compress 206 Partial Content responses. #3191

actix-router: v0.5.4

• Minimum supported Rust version (MSRV) is now 1.88.
• Support deserialize_any in PathDeserializer (enables derived #[serde(untagged)] enums in path segments). #2881
• Fix stale path segment indices after path rewrites, preventing out-of-bounds access during extraction. #3562

actix-http: v3.12.0

• Minimum supported Rust version (MSRV) is now 1.88.
• Increase default HTTP/2 flow control window sizes. #3638
• Expose configuration methods to improve upload throughput. #3638
• Fix truncated body ending without error when connection closed abnormally. #3067
• Add config/method for TCP_NODELAY. #3918
• Do not compress 206 Partial Content responses. #3191
• Fix lingering sockets and client stalls when responding early to dropped chunked request payloads. #2972

awc: v3.8.2

• Minimum supported Rust version (MSRV) is now 1.88.
• Fix empty streaming request bodies being sent with chunked transfer encoding.

actix-files: v0.6.10

0.6.10

Security Notice

We addressed 2 vulnerabilities in this release:

• Do not panic with empty Range header (GHSA-gcqf-3g44-vc9p).
• Avoid serving CWD on invalid Files::new inputs (GHSA-8v2v-wjwg-vx6r).

We encourage updating your actix-files version as soon as possible.

Other changes

• Minimum supported Rust version (MSRV) is now 1.88.
• PathBufWrap & UriSegmentError made public. #3694

actix-web: v4.12.1

• No significant changes since 4.12.0.

actix-files: v0.6.9

• Correct derive_more dependency feature requirements.

actix-web: v4.12.0

Short announcement

We've started GitHub Sponsors: https://github.com/sponsors/actix
Support our development!

v4.12.0

• actix_web::response::builder::HttpResponseBuilder::streaming() now sets Content-Type to application/octet-stream if Content-Type does not exist.
• actix_web::response::builder::HttpResponseBuilder::streaming() now calls actix_web::response::builder::HttpResponseBuilder::no_chunking() and returns SizedStream if Content-Length is set by user.
• Add ws crate feature (on-by-default) which forwards to actix-http and guards some of its ResponseError impls.
  • ⚠️ if you use default-feature = false and the web scoket feature, please make sure you enable the ws feature.
• Add public export for EitherExtractError in error module.

actix-http: v3.11.2

• Properly wake Payload receivers when feeding errors or EOF.
• Add ServiceConfigBuilder type to facilitate future configuration extensions.
• Add a configuration option to allow/disallow half closed connections in HTTP/1. This defaults to allow, reverting the change made in 3.11.1.
• Shutdown connections when HTTP Responses are written without reading full Requests.

awc: v3.8.1

• Fix a bug where GO_AWAY errors did not stop connections from returning to the pool.