v1.9.0

Features

• client:
  • expose HTTP/2 current max stream count (#4026) (d51cb715)
  • add HTTP/2 max_local_error_reset_streams option (#4021) (57787459)
• error: add 'Error::is_parse_version_h2' method (393c77c7)
• http1: add UpgradeableConnection::into_parts (e21205cf)

Bug Fixes

• ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
• http1:
  • allow keep-alive for chunked requests with trailers (#4043) (7211ec25, closes #4044)
  • use case-insensitive matching for trailer fields (#4011) (3b344cac, closes #4010)
  • use httparse config for Servers (#4002) (bcb8ec57, closes #3923)
• http2:
  • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
  • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Refactors and chores

• docs(error): add more information about is_incomplete_message by @seanmonstar in #3978
• Run cargo-audit in CI to check for known vulnerabilities in dependencies. by @f0rki in #3246
• refactor(http1): simplify match of Token parse error by @seanmonstar in #3981
• refactor(http1): use saturating_sub instead of manual impl by @seanmonstar in #3983
• refactor(http1): replace many args of Chunked::step with struct by @seanmonstar in #3982
• docs: fix comment in put_slice() by @coryan in #3986
• test(lib): fix unused warnings due to feature gating test imports by @seanmonstar in #3997
• docs: improve Read trait and ReadBufCursor documentation by @majiayu000 in #4000
• fix: use h1 parser config when parsing server req by @0xPoe in #4002
• test(server): fix flaky disable_keep_alive_mid_request by @seanmonstar in #4009
• chore(ci): update to actions/checkout@v6 by @tottoto in #4005
• chore(ci): update to cargo-check-external-types 0.4.0 by @tottoto in #4006
• update copyright year to 2026 by @jasmyhigh in #4007
• refactor: avoid unwrap examples by @0xPoe in #4001
• fix(http1): use case-insensitive matching for trailer fields by @HueCodes in #4011
• chore: convert bug report template to GitHub form by @njg7194 in #4015
• chore(ci): force toml mode in yq selecting msrv by @seanmonstar in #4020
• fix: non-utf8 char may cause panic when calling to_str by @cuiweixie in #4019
• feat(http2/client): add max_local_error_reset_streams option by @ffuugoo in #4021
• chore: drop pin-utils dependency by @tottoto in #4023
• [minor] doc: Fix HTTP/2 max concurrent stream link by @dentiny in #4037
• fix(ffi): validate null pointers before dereferencing in request/resp… by @DhruvaD1 in #4038
• h2: expose current max stream count by @howardjohn in #4026
• fix(http1): allow keep-alive for chunked requests with trailers by @wi-adam in #4043
• fix(http2): cancel pipe_task and send RST_STREAM on response future drop by @mmishra100 in #4042
• Add APIs to allow switching an HTTP1 connection to HTTP2 if H2 preface is seen by @pborzenkov in #3996

New Contributors

• @f0rki made their first contribution in #3246
• @coryan made their first contribution in #3986
• @majiayu000 made their first contribution in #4000
• @0xPoe made their first contribution in #4002
• @jasmyhigh made their first contribution in #4007
• @HueCodes made their first contribution in #4011
• @njg7194 made their first contribution in #4015
• @cuiweixie made their first contribution in #4019
• @ffuugoo made their first contribution in #4021
• @dentiny made their first contribution in #4037
• @DhruvaD1 made their first contribution in #4038
• @wi-adam made their first contribution in #4043
• @mmishra100 made their first contribution in #4042
• @pborzenkov made their first contribution in #3996