multipart-v0.8.0

Rich-Harris/degitmultipart-v0.8.0Jun 21, 2026by JohnTitor

AI Summary

Release adding multi-field multipart builders, fixing parsing panics, and updating the Minimum Supported Rust Version.

Key Highlights

Multi-field multipart payload builders
Unbounded memory growth fix via buffer limits
Minimum Supported Rust Version (MSRV) updated to 1.88

Breaking Changes

Unbounded multipart parsing is now capped to 64KB by default

New Features

Multipart form support for `Option<Vec<T>>`
Fix for user-triggerable panic in multipart parsing
Configurable buffer limit via `MultipartConfig::buffer_limit`

Full Release Notes

## 0.8.0

- Add multi-field multipart payload builders to `actix_multipart::test`. [#3575]
- Add `MultipartForm` support for `Option<Vec<T>>` fields. [#3577]
- Bound internal multipart parser buffering to prevent unbounded memory growth on malformed bodies.
  - behavior change notice: There's now a cap for buffering (64KB). It can be changed with `MultipartConfig::buffer_limit`.
- Fix user-triggerable panic when parsing multipart boundaries.
- Minimum supported Rust version (MSRV) is now 1.88.
- Update `rand` dependency to `0.10`.

[#3577]: https://github.com/actix/actix-web/pull/3577
[#3575]: https://github.com/actix/actix-web/issues/3575