web-v4.14.0
triggerdotdev/trigger.devweb-v4.14.0Jun 21, 2026by JohnTitor
AI Summary
This release adds raw cookie access methods and dual-stack IPv6 support to Actix-web, alongside critical bug fixes for middleware handling and path matching.
Key Highlights
- Added `cookies_raw` methods for reading request cookies without percent-decoding
- Enabled dual-stack IPv6 sockets on Windows for listeners bound to `::`
- Panic added to `Route::to()`/`Route::service()` to prevent silent middleware drops
- Fixed `Readlines` handling of lines split across payload chunks
Breaking Changes
- Calling `Route::to()` or `Route::service()` after `Route::wrap()` now panics
New Features
- `HttpServer::h1_write_buffer_size()` method
- Raw cookie access methods for `HttpRequest` and `ServiceRequest`
Full Release Notes
## 4.14.0
- Add `HttpRequest::{cookies_raw,cookie_raw}` and `ServiceRequest::{cookies_raw,cookie_raw}` for reading request cookies without percent-decoding names and values. [#3542]
- Enable dual-stack IPv6 sockets on Windows when possible so that Actix-created listeners bound to `[::]` also accept IPv4 connections.
- Panic when calling `Route::to()` or `Route::service()` after `Route::wrap()` to prevent silently dropping route middleware. [#3944]
- Fix `HttpRequest::{match_pattern,match_name}` reporting path-only matches when route guards disambiguate overlapping resources. [#3346]
- Fix `Readlines` handling of lines split across payload chunks so combined line limits are enforced and complete lines are yielded.
- Fix app data being retained after graceful shutdown with in-flight slow request bodies. [#3100]
- Update `foldhash` dependency to `0.2`.
- Update `rand` dependency to `0.10`.
- Update `impl-more` dependency to `0.3`.
- Add `HttpServer::h1_write_buffer_size()`.
[#3944]: https://github.com/actix/actix-web/pull/3944
[#3346]: https://github.com/actix/actix-web/issues/3346
[#3542]: https://github.com/actix/actix-web/issues/3542
[#3100]: https://github.com/actix/actix-web/issues/3100