chore(deps): bump the prod-deps group across 1 directory with 27 updates

[dependabot]

Bumps the prod-deps group with 26 updates in the / directory:

Package	From	To
clap	4.6.1	4.6.4
serde-saphyr	0.0.27	0.0.29
serde_json	1.0.150	1.0.151
thiserror	2.0.18	2.0.19
rustls	0.23.40	0.23.43
tokio	1.52.3	1.53.1
which	8.0.4	8.0.5
turso	0.7.1	0.7.2
rmcp	1.7.0	2.2.0
futures	0.3.32	0.3.33
http	1.4.2	1.5.0
http-body-util	0.1.3	0.1.4
hyper	1.10.1	1.11.0
sse-stream	0.2.3	0.2.5
schemars	1.2.1	1.2.2
frankenstein	0.50.0	0.50.2
uuid	1.23.3	1.24.0
tokio-util	0.7.18	0.7.19
cron	0.16.0	0.17.0
cron-descriptor	0.1.1	0.1.2
rand	0.10.1	0.10.2
base64	0.22.1	0.23.0
anyhow	1.0.102	1.0.104
arc-swap	1.9.1	1.9.2
fastrand	2.4.1	2.5.0
tokio-stream	0.1.18	0.1.19

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• 87ec1ad chore: Release
• 78f2529 docs: Update changelog
• b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
• 74c6666 fix(complete): Keep zsh candidate order
• d142d8f Merge pull request #6360 from epage/string
• ba89563 style: Prefer explicit string operations
• bea966e Merge pull request #6359 from epage/man
• b811986 chore(man):Remove unused required-features
• 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
• bab9b24 chore(deps): Update compatible (dev) (#6357)
• Additional commits viewable in compare view

Updates serde-saphyr from 0.0.27 to 0.0.29

Release notes

Sourced from serde-saphyr's releases.

0.0.28 Property interpolation extensions and even faster builds

Significant extension of property interpolation ( @​CommanderStorm)

• Added support for default property interpolation in plain scalars: ${NAME:-default} now resolves to default when NAME is unset or explicitly empty.
• ${VAR}: Values that must be configured (DB URLs, API keys). An unset var is a misconfiguration, not something to paper over -> a loud error at parse time
• ${VAR-fallback}: Empty value is meaningful and distinct from "not configured". F.ex. PREFIX="" -> "no prefix".
• ${VAR:-fallback}: The "regular" default, so f.ex. ${PORT:-8080}
• ${VAR+text}: F.ex. ${DEBUG+--verbose} emits the flag whenever DEBUG exists in the environment, regardless of value.
• ${VAR:+text}: Same as above, but differentiating empty <-> null

Also

• Fix #120 LastWins not honored when deserializing struct. This was implemented and well tested, but only with maps.
• Reduced owning of comment strings (parsing very heavily commented YAML while discarding comments should be lighter on resources).
• Fixed indentation enforcement (@​CommanderStorm), making sure it also works for multiline scalars.
• Fixed tuple serialization (@​CommanderStorm)
• New SingleQuoted<..> and DoubleQuoted<..> wrappers to emit quoted strings. SingleQuoted may provide additional safety, as control characters will be rejected (with error), rather than written as YAML escape sequences. NullableTilde<T> is like Option and emits tilde ( ~ ) rather than null.

Faster compilation times with serde_core

serde-saphyr now avoids compiling serde_derive by default. The crate core uses serde_core instead that allows building serde-saphyr in parallel with serde_derive. However this also means that we needed to drop the previously built-in (de)serialization support for some serde-saphyr own configuration and reporting types like Options. (De)serialization support for these types can be re-enabled with the new feature serde_derived_types:

serde-saphyr = { version = "...", features = ["serde_derived_types"] }

This does not affect normal use of serde-saphyr for user data, you can still serialize and deserialize your own structs as before.

Commits

• f23c28c Advance version number
• fc36c3f Removed benchmarking section from README.md - this needs to be re-benchmarked...
• 9a727e3 Fix Clippy warning.
• 3bd9fde Rearrange and reasonably name the test suites
• 436edfe Two divergent hand-rolled escape tables in the serializer
• 6a30736 Remove over-engineered Divisible(0) macro handling
• 87afba3 Dead code removals
• c656d3f Remove unnecessary #[path ..] constructs
• 27c3959 Remove unnecessary #[path ..] constructs
• 6f74db4 Improve code quality of budget.rs
• Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

• Update to syn 3

Commits

• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
• c50e387 chore: improve thiserror maintenance path
• d4a2507 Raise minimum tested compiler to rust 1.85
• 99e8a6c Unpin CI miri toolchain
• 9ac165c Pin CI miri to nightly-2026-02-11
• Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.43

Commits

• fcf61cd Prepare 0.23.43
• f0dad4c Check server's proposed suite against actual offer
• b480cc6 Test for server choosing a non-QUIC TLS1.3 suite
• 883a44d Consider Protocol in ServerConfig::supports_version
• c2f1fd9 Check suitability of server version in QUIC client
• d98e1b9 Add test for server Tls13RequiredForQuic
• e63d9bf Bound ticket age calculation
• 79cd462 Defensiveness improvement for binder suffix arithmetic
• 4a9f025 use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt
• 3131e5c Accept that libcrux deps are vulnerable
• Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

• signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

• time: fix alt timer cancellation and insertion race (#8252)

Documented

• runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

• fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
• metrics: add task schedule latency metric (#7986)
• net: add SocketAddr methods to Unix sockets (#8144)

Changed

• io: add #[inline] to IO trait impls for in-memory types (#8242)
• net: implement UCred::pid on FreeBSD (#8086)
• net: support Nuttx target os (#8259)
• signal: refactor global variables on Windows (#8231)
• sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
• taskdump: support taskdumps on s390x (#8192)
• time: add #[track_caller] to timeout_at() (#8077)
• time: consolidate mutex locks on spurious poll (#8124)
• time: defer waker clone on spurious poll (#8107)
• time: move lazy-registration state into Sleep (#8132)
• tracing: remove unnecessary span clone (#8126)

Fixed

• io: do not treat zero-length reads as EOF in Chain (#8251)
• net: use getpeereid for QNX peer credentials (#8270)
• runtime: avoid illegal state in FastRand (#8078)
• sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
• taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
• time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• be689a3 chore: prepare Tokio v1.53.0 (#8294)
• 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
• f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
• efdba5f chore: prepare Tokio v1.52.4 (#8289)
• b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
• Additional commits viewable in compare view

Updates which from 8.0.4 to 8.0.5

Release notes

Sourced from which's releases.

8.0.5

What's Changed

• Fix absolute path lookup when cwd is disabled by @​weifanglab in harryfei/which-rs#126

New Contributors

• @​weifanglab made their first contribution in harryfei/which-rs#126

Full Changelog: harryfei/which-rs@8.0.4...8.0.5

Changelog

Sourced from which's changelog.

8.0.5

• Bug fix: #126 Do not use current directory for search when provided path is absolute. Thanks @​weifanglab for your contribution to which!

Commits

• 7fba0e0 bump version number, update CHANGELOG.md
• e28a3bf Fix absolute path lookup when cwd is disabled (#126)
• See full diff in compare view

Updates turso from 0.7.1 to 0.7.2

Release notes

Sourced from turso's releases.

v0.7.2

Install turso_cli 0.7.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.2/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.2/turso_cli-installer.ps1 | iex"

Download turso_cli 0.7.2

File	Platform	Checksum
turso_cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
turso_cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
turso_cli-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
turso_cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.7.2-pre.6

Install turso_cli 0.7.2-pre.6

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.2-pre.6/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

</tr></table> 

... (truncated)

Commits

• 046e9cb Turso 0.7.2
• 8ee137b Turso 0.7.2-pre.6
• 8a929b3 Merge 'sync: auto-detect the remote pull protocol' from Preston Thorpe
• 2cc44a8 Merge 'sync/engine: temporarily use truncate checkpoint only in mvcc mode' fr...
• a303869 Turso 0.7.2-pre.5
• fbcb6e5 ci: pin Ruff lint version
• 4755d65 sync/engine: fix test build against v0.7 Database::open_file signature
• 458214a Turso 0.7.2-pre.4
• 1bf2045 Merge 'bindings/javascript: pin playwright to 1.61.0 to match container image...
• 20576a1 Turso 0.7.2-pre.3
• Additional commits viewable in compare view

Updates turso_core from 0.7.1 to 0.7.2

Release notes

Sourced from turso_core's releases.

v0.7.2

Install turso_cli 0.7.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.2/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.2/turso_cli-installer.ps1 | iex"

Download turso_cli 0.7.2

File	Platform	Checksum
turso_cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
turso_cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
turso_cli-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
turso_cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.7.2-pre.6

Install turso_cli 0.7.2-pre.6

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.2-pre.6/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

</tr></table> 

... (truncated)

Commits

• 046e9cb Turso 0.7.2
• 8ee137b Turso 0.7.2-pre.6
• 8a929b3 Merge 'sync: auto-detect the remote pull protocol' from Preston Thorpe
• 2cc44a8 Merge 'sync/engine: temporarily use truncate checkpoint only in mvcc mode' fr...
• a303869 Turso 0.7.2-pre.5
• fbcb6e5 ci: pin Ruff lint version
• 4755d65 sync/engine: fix test build against v0.7 Database::open_file signature
• 458214a Turso 0.7.2-pre.4
• 1bf2045 Merge 'bindings/javascript: pin playwright to 1.61.0 to match container image...
• 20576a1 Turso 0.7.2-pre.3
• Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 2.2.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.2.0

Added

• [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

• fill missing fully qualified syntax in prompt_handler macros (#866)

Other

• align README examples with v2 model API (#928)

rmcp-v2.2.0

Added

• reject auth servers lacking S256 PKCE support (#955)

Fixed

• pass client conformance suite (#960)
• don't respond to cancelled requests (#957)
• fail orphaned streamable HTTP responses on reinit (#914)
• address 2025-11-25 conformance audit findings (#951)

rmcp-macros-v2.1.0

Added

• [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

• fill missing fully qualified syntax in prompt_handler macros (#866)

Other

• align README examples with v2 model API (#928)

rmcp-v2.1.0

Added

• add SEP-414 trace context meta accessors (#910)
• add SEP-2575 meta helpers (#942)

Fixed

• (transport) make AsyncRwTransport::receive cancel-safe (#941) (#947)
• (auth) preserve refresh_token when refresh response omits it (#949)
• block redirect header leaks (#936)
• don't respond to unparsable messages (#940)

... (truncated)

Commits

• 5195776 chore: release v2.2.0 (#953)
• 6dd7b85 chore(deps): update p256 requirement from 0.13 to 0.14 (#959)
• a037935 fix: pass client conformance suite (#960)
• dbda50c fix: don't respond to cancelled requests (#957)
• 45f2f72 fix: fail orphaned streamable HTTP responses on reinit (#914)
• 95490fa feat: reject auth servers lacking S256 PKCE support (#955)
• bdf0c32 fix: address 2025-11-25 conformance audit findings (#951)
• 8e44af4 chore: release v2.1.0 (#950)
• 4833ec7 fix(transport): make AsyncRwTransport::receive cancel-safe (#941) (#947)
• 5837e22 fix(auth): preserve refresh_token when refresh response omits it (#949)
• Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.33

Release notes

Sourced from futures's releases.

0.3.33

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.33 - 2026-07-18

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Commits

• 89cc254 Release 0.3.33
• cd9f5be ci: Update release workflow
• d79a499 Resolve rustdoc::broken_intra_doc_links warning
• 95bbcf8 Resolve rustdoc ambiguous link error
• 303c165 Resolve rustdoc::redundant_explicit_links warning
• f34e3f5 ci: Cleanup
• 66591a2 Enable Miri for more tests
• ab1072f Simplify target_has_atomic cfg in utility crates
• cf5d23b Fix unsound compat01as03 implementation (fixes #2514) (#3012)
• 8ae794f Add portable-atomic-alloc feature and use it in FuturesUnordered (#3007)
• Additional commits viewable in compare view

Updates http from 1.4.2 to 1.5.0

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

• feat(method): add QUERY method by @​seanmonstar in hyperium/http#798
• fix(uri): allow empty paths in uri::Builder by @​seanmonstar in hyperium/http#853
• perf(header,uri): faster value validation, URI parse/format, map inserts by @​geeknoid in hyperium/http#852
• fix(uri): enforce max length in PathAndQuery by @​seanmonstar in hyperium/http#856

New Contributors

• @​geeknoid made their first contribution in hyperium/http#852

Full Changelog: hyperium/http@v1.4.2...v1.5.0

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

• Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
• Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
• Fix uri::PathAndQuery parsing to enforce URI max length.

Commits

• 16fc9a7 v1.5.0
• e559023 fix(uri): enforce max length in PathAndQuery (#856)
• 2178e17 perf(header,uri): faster value validation, URI parse/format, map inserts (#852)
• 03c8cd7 fix(uri): allow empty paths in uri::Builder (#853)
• bb8705b feat(method): add QUERY method (#798)
• See full diff in compare view

Updates http-body-util from 0.1.3 to 0.1.4

Release notes

Sourced from http-body-util's releases.

http-body-util-v0.1.4

What's Changed

• Add Fused body combinator that always returns None once completed.
• Add BodyExt::into_stream() to convert a body into a Stream.
• Add Full::into_inner() to get the full Buf.
• Add InspectFrame and InspectErr combinators.

Commits

• 7685047 http-body-util v0.1.4
• 3396328 http-body v1.1.0
• 2fb78de chore: bump license year (#170)
• b16554b chore(ci): bump checkout to v7
• c0c53ca chore(ci): use msrv aware update for msrv job
• 5ed15d2 tests: fix clippy::double_parens
• c8cb37f Derive Copy trait to SizeHint struct (#164)
• 915d6d5 feat(util): add InspectErr, InspectFrame combinators (#161)
• 0fc0a94 docs: fix broken intradoc links (#162)
• 5a849d4 chore: add FUNDING.yml
• Additional commits viewable in compare view

Updates hyper from 1.10.1 to 1.11.0

Release notes

Sourced from hyper's releases.

v1.11.0

Features

• rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

Bug Fixes

• http1:
  • discard content-length header when received before transfer-encoding (#4124) (540fff91, closes #4123)
  • use append for repeat trailer values in encoder (#4118) (de1483d7)
  • allow up to max_headers trailers (#4108) (f584091a)
  • use append for repeat trailers (#4107) (876effe1)
  • flush buffered data before shutdown (#4018) (72046cc7, closes #4022)
  • more strictly enforce max_buf_size when parsing (#4093) (90ede307, closes #4081)
• http2: avoid buffering Upgraded writes without send capacity (#4102) (aecf5abf)

All PRs

• removing cast_lossless lint by @​josetorrs in hyperium/hyper#4087
• Fix the borrow_as_ptr lint by @​xd009642 in hyperium/hyper#4082
• removing empty_structs_with_brackets lint by @​josetorrs in hyperium/hyper#4088
• style(proto): removing explicit_iter_loop lint by @​josetorrs in hyperium/hyper#4089
• Fix the ptr_as_ptr lint by @​nakaryo716 in hyperium/hyper#4091
• style(lib): remove manual_assert_eq lint by @​josetorrs in hyperium/hyper#4090
• style(http2): allow an instance of large_enum_variant, deny otherwise by @​seanmonstar in hyperium/hyper#4092
• Removing 'undocumented_unsafe_blocks' lint allowance by @​Lori-Shu in hyperium/hyper#4083
• style(http2): use an enum instead of bool in strip_connection_headers() by @​seanmonstar in hyperium/hyper#4094
• fix(http1): more strictly enforce max_buf_size when parsing by @​seanmonstar in hyperium/hyper#4093
• h1 servers can shutdown connections with pending buffered data on filled sockets by @​deven96 in hyperium/hyper#4018
• refactor(http1): remove ref_option lint by @​nakaryo716 in hyperium/hyper#4101
• style(lib): remove unnecessary_semicolon lint by @​josetorrs in hyperium/hyper#4103
• style(lib): remove uninlined_format_args lint by @​josetorrs in hyperium/hyper#4104
• style(lib): remove semicolon_if_nothing_returned lint by @​MonkieeBoi in hyperium/hyper#4106
• style(lib): remove single_match_else lint by @​yunz-dev in hyperium/hyper#4105
• style(lib): remove default_trait_access lint by @​nakaryo716 in hyperium/hyper#4111
• fix(http1): use append for repeat trailers by @​seanmonstar in hyperium/hyper#4107
• fix(http1): allow up to max_headers trailers by @​seanmonstar in hyperium/hyper#4108
• fix(http2): avoid buffering Upgraded writes without send capacity by @​seanmonstar in hyperium/hyper#4102
• style(headers): small refactor to remove question_mark lint by @​josetorrs in hyperium/hyper#4116
• fix(h1): append duplicate trailer values when encoding (match #4107) by @​greymoth-jp in hyperium/hyper#4118
• style(proto): fix decimal_literal_representation lint by @​josetorrs in hyperium/hyper#4117
• docs(governance): define Advisor role by @​seanmonstar in hyperium/hyper#4098
• docs(maintainers): move some collaborators to emeriti by @​seanmonstar in hyperium/hyper#4125
• feat: add initialized_unfilled to ReadBufCursor by @​abh1nav10 in hyperium/hyper#4115
• fix(http1): discard content-length header when received before transfer-encoding by @​seanmonstar in hyperium/hyper#4124

New Contributors

• @​josetorrs made their first contribution in hyperium/hyper#4087
• @​nakaryo716 made their first contribution in hyperium/hyper#4091
• @​deven96 made their first contribution in hyperium/hyper#4018

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.11.0 (2026-07-20)

Bug Fixes

• http1:
  • discard content-length header when received before transfer-encoding (#4124) (540fff91, closes #4123)
  • use append for repeat trailer values in encoder (#4118) (de1483d7)
  • allow up to max_headers trailers (#4108) (f584091a)
  ...

  Description has been truncated