Sourced from http's releases.

v1.3.1

What's Changed

• fix: validate path bytes are at least utf8 by @​seanmonstar in hyperium/http#756

Full Changelog: https://github.com/hyperium/http/compare/v1.3.0...v1.3.1

Sourced from http's changelog.

1.3.1 (March 11, 2025)

• Fix validation that all characters are UTF-8 in URI path and query.

1.3.0 (March 11, 2025)

• Allow most UTF-8 characters in URI path and query.
• Fix HeaderMap::reserve() to allocate sufficient capacity.

1.2.0 (December 3, 2024)

• Add StatusCode::TOO_EARLY constant for 425 status.
• Loosen TryFrom<HashMap> for HeaderMap to work with any state generic.
• Change Builder methods to use TryInto instead of TryFrom arguments.
• Make StatusCode::as_u16 a const function.
• Fix Method parsing to allow #$%&' characters.
• Fix HeaderName parsing to reject " characters.
• Fix off by 1 error in Method::from_bytes that could cause extra allocations.

1.1.0 (March 4, 2024)

• Add methods to allow trying to allocate in the HeaderMap, returning an error if oversize instead of panicking.
• Add Extensions::get_or_insert() method.
• Implement From<Uri> for uri::Builder.
• Fix HeaderName::from_lowercase that could allow NUL bytes in some cases.

1.0.0 (November 15, 2023)

• Implement Clone for Request, Response, and Extensions. This breaking change requires that all extensions now implement Clone.
• Add a default-on std feature. Disabling it currently is not supported.
• Fix MIRI warnings in HeaderMap::iter().

0.2.10 (November 10, 2023)

• Fix parsing of Authority to handle square brackets in incorrect order.
• Fix HeaderMap::with_capacity() to handle arithmetic overflow.

0.2.9 (February 17, 2023)

• Add HeaderName constants for cache-status and cdn-cache-control.
• Implement Hash for PathAndQuery.
• Re-export HeaderName at crate root.

0.2.8 (June 6, 2022)

• Fix internal usage of uninitialized memory to use MaybeUninit inside HeaderName.

0.2.7 (April 28, 2022)

... (truncated)

• 8c1fb20 v1.3.1
• 6637a72 fix: validate path bytes are at least utf8 (#756)
• d0dd91e v1.3.0
• 64bd92b docs: Fixed encryption/compression typo for 'accept-encoding: identity'. (#695)
• b03ed6a chore: use range.contains in StatusCode methods (#748)
• a463fb5 chore(ci): use yq to get rust-version in manifest (#746)
• 68845bd fix: HeaderMap::reserve allocates insufficient capacity (#741)
• 4e02046 refactor(header): remove BytesMut inline optimization when creating (#738)
• 091ee9a feat(uri): allow utf8 char, not rfc 3986 compliant, in path and query (#715)
• a912445 v1.2.0
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)