chore(deps): bump reqwest from 0.12.25 to 0.13.1
Open
Number: #552
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Unknown
Comments: 1
Association: Unknown
Comments: 1
Created:
January 05, 2026 at 09:03 AM UTC
(5 months ago)
(5 months ago)
Updated:
February 06, 2026 at 04:22 PM UTC
(4 months ago)
(4 months ago)
Labels:
dependencies rust
dependencies rust
Description:
Bumps reqwest from 0.12.25 to 0.13.1.
Release notes
Sourced from reqwest's releases.
v0.13.1
What's Changed
- http3: depend on quinn/rustls-aws-lc-rs to avoid ring dependency by
@djcin seanmonstar/reqwest#2917- fix rustls on android by
@seanmonstarin seanmonstar/reqwest#2918Full Changelog: https://github.com/seanmonstar/reqwest/compare/v0.13.0...v0.13.1
v0.13.0
Breaking changes
rustlsis now the default TLS backend, instead ofnative-tls.rustlscrypto provider defaults to aws-lc instead of ring. (rustls-no-providerexists if you want a different crypto provider)rustls-tlshas been renamed torustls.- rustls roots features removed,
rustls-platform-verifieris used by default.
- To use different roots, call
tls_certs_only(your_roots).native-tlsnow includes ALPN. To disable, usenative-tls-no-alpn.queryandformare now crate features, disabled by default.- Long-deprecated methods and crate features have been removed (such as
trust-dns, which was renamedhickory-dnsa while ago).- Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
- For example, prefer
tls_backend_rustls()overuse_rustls_tls().Pull Requests in General
- start 0.13 dev by
@seanmonstarin seanmonstar/reqwest#2894- Make
serdeoptional by introducingquery,formfeatures, and re-working WASM header parsing by@CathalMullanin seanmonstar/reqwest#2858- replace
ClientBuilder::dns_resolverwithdns_resolver2by@seanmonstarin seanmonstar/reqwest#2898- feat: make Rustls the default TLS provider by
@calaverain seanmonstar/reqwest#2897- feat: consolidate TLS options with rustls-platform-verifier by
@seanmonstarin seanmonstar/reqwest#2891- remove long-deprecated methods: trust-dns and non-wasm-cors by
@seanmonstarin seanmonstar/reqwest#2899- rename rustls-tls feature to just rustls by
@seanmonstarin seanmonstar/reqwest#2900- remove deprecated features trust-dns and macos-system-configuration by
@seanmonstarin seanmonstar/reqwest#2901- chore: separate rustls and rustls-no-provider features by
@seanmonstarin seanmonstar/reqwest#2903- rustls: allow windows to use extra roots by
@seanmonstarin seanmonstar/reqwest#2904- v0.13.0-rc.1 by
@seanmonstarin seanmonstar/reqwest#2905- Enable ALPN by default in native-tls by
@ducaalein seanmonstar/reqwest#2907- v0.13.0 by
@seanmonstarin seanmonstar/reqwest#2915New Contributors
@CathalMullanmade their first contribution in seanmonstar/reqwest#2858Full Changelog: https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.0
v0.13.0-rc.1
👀 Discussion here if you give it try, thanks!
Main breaking changes
- rustls is now default instead of native-tls
- rustls provider defaults to aws-lc instead of ring (
rustls-no-providerexists if you want to enable a different one)- rustls-tls renamed to rustls
- rustls roots features removed, platform-verifier is used instead
... (truncated)
Changelog
Sourced from reqwest's changelog.
v0.13.1
- Fixes compiling with rustls on Android targets.
v0.13.0
- Breaking changes:
rustlsis now the default TLS backend, instead ofnative-tls.rustlscrypto provider defaults to aws-lc instead of ring. (rustls-no-providerexists if you want a different crypto provider)rustls-tlshas been renamed torustls.- rustls roots features removed,
rustls-platform-verifieris used by default.
- To use different roots, call
tls_certs_only(your_roots).native-tlsnow includes ALPN. To disable, usenative-tls-no-alpn.queryandformare now crate features, disabled by default.- Long-deprecated methods and crate features have been removed (such as
trust-dns, which was renamedhickory-dnsa while ago).- Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
- For example, prefer
tls_backend_rustls()overuse_rustls_tls().v0.12.28
- Fix compiling on Windows if TLS and SOCKS features are not enabled.
v0.12.27
- Add
ClientBuilder::windows_named_pipe(name)option that will force all requests over that Windows Named Piper.v0.12.26
- Fix sending
Accept-Encodingheader only with values configured with reqwest, regardless of underlying tower-http config.
Commits
10fb98cv0.13.1438098achore: refer to h2 as dep:h2 (#2919)43aac91chore(ci): bump actions/checkout from 5 to 6 (#2864)175f5b2fix rustls on android (#2918)1afe88eDepend on quinn/rustls-aws-lc-rs to avoid ring dependency (#2917)62a80afv0.13.0e8d89f4enable ALPN by default in native-tls (#2907)9a9daa7v0.13.0-rc.1d518e45rustls: allow windows to use extra roots (#2904)934bc84chore: separate rustls and rustls-no-provider features (#2903)- Additional commits viewable in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Package Dependencies
Technical Details
| ID: | 13590072 |
| UUID: | 3780701653 |
| Node ID: | PR_kwDOGfyLd867fhEF |
| Host: | GitHub |
| Repository: | Shopify/function-runner |