Skip to content

chore(deps): bump actix-http from 3.13.3 to 3.13.5 - #1376

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/actix-http-3.13.5
Open

chore(deps): bump actix-http from 3.13.3 to 3.13.5#1376
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/actix-http-3.13.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps actix-http from 3.13.3 to 3.13.5.

Release notes

Sourced from actix-http's releases.

actix-http: v3.13.5

  • Reject invalid WebSocket close-frame status codes, malformed payloads, and invalid UTF-8 close reasons.
  • Deprecate the Parser::parse_close_payload() method in favor of Parser::try_parse_close_payload().

actix-http: v3.13.4

  • Reject WebSocket frames with reserved bits.
  • Reject new WebSocket text or binary frames during a continuation.
Commits
  • c215607 build(deps): bump syn from 3.0.3 to 3.0.4 (#4221)
  • e006162 chore(actix-http): prepare release 3.13.5
  • 983981b fix: validate WebSocket close frames (#4218)
  • 1d6c4b9 build(deps): bump actix-codec from 0.5.2 to 0.5.3 (#4224)
  • 91302a6 build(deps): bump flate2 from 1.1.9 to 1.1.10 (#4225)
  • 04d735d build(deps): bump rcgen from 0.14.9 to 0.14.10 (#4222)
  • 27104ae chore(actix-http): prepare release 3.13.4
  • 83ef570 fix(http): reject WebSocket frames with reserved bits (#4214)
  • e52dd45 fix: reject data frames during WebSocket continuations (#4219)
  • 1424e98 chore: avoid actix-rt reexports of tokio types
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 7, 2026
@robjtede
robjtede added this pull request to the merge queue Sep 7, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to a conflict with the base branch Sep 7, 2026
Bumps [actix-http](https://github.com/actix/actix-web) from 3.13.3 to 3.13.5.
- [Release notes](https://github.com/actix/actix-web/releases)
- [Changelog](https://github.com/actix/actix-web/blob/main/CHANGES.md)
- [Commits](actix/actix-web@http-v3.13.3...http-v3.13.5)

---
updated-dependencies:
- dependency-name: actix-http
  dependency-version: 3.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/actix-http-3.13.5 branch from 9ec25e3 to 3b72d50 Compare September 7, 2026 18:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant