actix-http-v3.19.0

actix/actix-webactix-http-v3.19.0Oct 15, 2026by robjtede

Upgrading?

AI Summary

This release includes multiple improvements for HTTP header quality value parsing, strict validation of WebSocket frame lengths to prevent overflow, and dependency updates.

Key Highlights

  • Fix `QualityItem` parsing to recognize quality parameters before other parameters.
  • Reject WebSocket frames with invalid 64-bit payload lengths using `ws::ProtocolError::Overflow`.
  • Update `zstd` dependency to `0.14`.
  • Update `brotli` dependency to `9`.

New Features

  • Fix `QualityItem` parsing to recognize quality parameters before other parameters.
  • Reject WebSocket frames with invalid 64-bit payload lengths using `ws::ProtocolError::Overflow`.

Full Release Notes

- Fix `QualityItem` parsing to recognize quality parameters before other parameters and ignore semicolons inside quoted values.
- Parse header quality values as exact decimals and reject invalid numeric syntax.
- Round float quality conversions to the nearest thousandth to preserve all three decimal places.
- Reject WebSocket frames whose 64-bit payload length has the most significant bit set, or whose length does not fit in `usize` on 32-bit targets, using `ws::ProtocolError::Overflow`.
- Update `zstd` dependency to `0.14`.
- Update `brotli` dependency to `9`.

Related Repositories