Bump tower-http from 0.6.11 to 0.7.1 in /backend #20

Open

dependabot[bot] wants to merge 1 commit from dependabot/cargo/backend/tower-http-0.7.1 into main

dependabot[bot] commented

2026-10-12 23:17:04 +00:00

(Migrated from github.com)

Bumps tower-http from 0.6.11 to 0.7.1.

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)

fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)

request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)

decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)

decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)

fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)

fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)

set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in tower-rs/tower-http#708

fix(compression): reject non-empty data frames after codec is EOF by @seanmonstar in tower-rs/tower-http#712

Remove Clone derivations from SetMultipleResponseHeader* types by @skeet70 in tower-rs/tower-http#714

feat(request-id): Allow request-id constructor in const context by @tottoto in tower-rs/tower-http#716

fs: Avoid unnecessary conversions between SystemTime and HttpDate by @tottoto in tower-rs/tower-http#717

fs: Use HeaderValue::is_empty to check for empty values by @tottoto in tower-rs/tower-http#720

fs: Use HeaderValue::to_str for date headers by @tottoto in tower-rs/tower-http#721

... (truncated)

Commits

c941451 chore(release): prepare 0.7.1 (#729)
9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
e2582e2 Allow ignoring multi-range requests (#727)
888f7fe feat(services): configure directory redirects (#728)
5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
d154adb fix: reject multipart ranges before validation (#661)
d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
90c072b Propagate ServeDir::try_call I/O errors (#718)
860922e fix(decompression): don't end the body on an empty data frame (#722)
8532252 docs(example)/custom future with multiple bodies (#711)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tower-http](https://github.com/tower-rs/tower-http) from 0.6.11 to 0.7.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tower-rs/tower-http/releases">tower-http's releases</a>.</em></p> <blockquote> <h2>tower-http-0.7.1</h2> <h2>Added</h2> <ul> <li><code>fs</code>: add <code>ServeDir::redirect_to_trailing_slash()</code> to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (<a href="https://redirect.github.com/tower-rs/tower-http/issues/728">#728</a>)</li> <li><code>fs</code>: add <code>ignore_multi_range_requests()</code> to <code>ServeDir</code> and <code>ServeFile</code>, serving the full representation when a request asks for multiple byte ranges. The existing <code>416 Range Not Satisfiable</code> response remains the default (<a href="https://redirect.github.com/tower-rs/tower-http/issues/727">#727</a>)</li> <li><code>request-id</code>: the constructors and accessors on the request-id layers, services, and <code>RequestId</code> are now <code>const fn</code>, so they can be used in const context (<a href="https://redirect.github.com/tower-rs/tower-http/issues/716">#716</a>)</li> </ul> <h2>Changed</h2> <ul> <li><code>fs</code>: the minimum <code>http-range-header</code> requirement is now 0.4.2 (<a href="https://redirect.github.com/tower-rs/tower-http/issues/661">#661</a>)</li> </ul> <h2>Fixed</h2> <ul> <li><strong>behavioral change:</strong> <code>fs</code>: make <code>ServeDir::try_call</code> propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to <code>404 Not Found</code> responses (<a href="https://redirect.github.com/tower-rs/tower-http/issues/718">#718</a>)</li> <li><code>decompression</code>: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (<a href="https://redirect.github.com/tower-rs/tower-http/issues/722">#722</a>)</li> <li><code>decompression</code>: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (<a href="https://redirect.github.com/tower-rs/tower-http/issues/712">#712</a>)</li> <li><code>fs</code>: multipart range requests are now rejected before range validation, so they consistently return <code>416 Range Not Satisfiable</code> with a <code>Cannot serve multipart range requests</code> body instead of a generic unsatisfiable-range response (<a href="https://redirect.github.com/tower-rs/tower-http/issues/661">#661</a>)</li> <li><code>fs</code>: range error responses no longer carry representation headers such as <code>Content-Type</code> and <code>Content-Encoding</code> (<a href="https://redirect.github.com/tower-rs/tower-http/issues/727">#727</a>)</li> <li><code>set-header</code>: <code>SetMultipleResponseHeadersLayer</code> and <code>SetMultipleResponseHeader</code> are now <code>Clone</code> regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (<a href="https://redirect.github.com/tower-rs/tower-http/issues/714">#714</a>)</li> </ul> <p><a href="https://redirect.github.com/tower-rs/tower-http/issues/661">#661</a>: <a href="https://redirect.github.com/tower-rs/tower-http/pull/661">tower-rs/tower-http#661</a> <a href="https://redirect.github.com/tower-rs/tower-http/issues/712">#712</a>: <a href="https://redirect.github.com/tower-rs/tower-http/pull/712">tower-rs/tower-http#712</a> <a href="https://redirect.github.com/tower-rs/tower-http/issues/714">#714</a>: <a href="https://redirect.github.com/tower-rs/tower-http/pull/714">tower-rs/tower-http#714</a> <a href="https://redirect.github.com/tower-rs/tower-http/issues/716">#716</a>: <a href="https://redirect.github.com/tower-rs/tower-http/pull/716">tower-rs/tower-http#716</a> <a href="https://redirect.github.com/tower-rs/tower-http/issues/718">#718</a>: <a href="https://redirect.github.com/tower-rs/tower-http/pull/718">tower-rs/tower-http#718</a> <a href="https://redirect.github.com/tower-rs/tower-http/issues/722">#722</a>: <a href="https://redirect.github.com/tower-rs/tower-http/pull/722">tower-rs/tower-http#722</a> <a href="https://redirect.github.com/tower-rs/tower-http/issues/727">#727</a>: <a href="https://redirect.github.com/tower-rs/tower-http/pull/727">tower-rs/tower-http#727</a> <a href="https://redirect.github.com/tower-rs/tower-http/issues/728">#728</a>: <a href="https://redirect.github.com/tower-rs/tower-http/pull/728">tower-rs/tower-http#728</a></p> <h2>All the changes</h2> <ul> <li>chore(deps): bump actions/checkout from 6 to 7 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tower-rs/tower-http/pull/708">tower-rs/tower-http#708</a></li> <li>fix(compression): reject non-empty data frames after codec is EOF by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/tower-rs/tower-http/pull/712">tower-rs/tower-http#712</a></li> <li>Remove Clone derivations from SetMultipleResponseHeader* types by <a href="https://github.com/skeet70"><code>@skeet70</code></a> in <a href="https://redirect.github.com/tower-rs/tower-http/pull/714">tower-rs/tower-http#714</a></li> <li>feat(request-id): Allow request-id constructor in const context by <a href="https://github.com/tottoto"><code>@tottoto</code></a> in <a href="https://redirect.github.com/tower-rs/tower-http/pull/716">tower-rs/tower-http#716</a></li> <li>fs: Avoid unnecessary conversions between SystemTime and HttpDate by <a href="https://github.com/tottoto"><code>@tottoto</code></a> in <a href="https://redirect.github.com/tower-rs/tower-http/pull/717">tower-rs/tower-http#717</a></li> <li>fs: Use HeaderValue::is_empty to check for empty values by <a href="https://github.com/tottoto"><code>@tottoto</code></a> in <a href="https://redirect.github.com/tower-rs/tower-http/pull/720">tower-rs/tower-http#720</a></li> <li>fs: Use HeaderValue::to_str for date headers by <a href="https://github.com/tottoto"><code>@tottoto</code></a> in <a href="https://redirect.github.com/tower-rs/tower-http/pull/721">tower-rs/tower-http#721</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tower-rs/tower-http/commit/c9414514a421b07b6520e040a3fd6a579b0c5e1b"><code>c941451</code></a> chore(release): prepare 0.7.1 (<a href="https://redirect.github.com/tower-rs/tower-http/issues/729">#729</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/9697702412f50dba61962d06d0436376a1e5a435"><code>9697702</code></a> chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (<a href="https://redirect.github.com/tower-rs/tower-http/issues/730">#730</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/e2582e2fde4ef768caedc1377d07169480d07cc4"><code>e2582e2</code></a> Allow ignoring multi-range requests (<a href="https://redirect.github.com/tower-rs/tower-http/issues/727">#727</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/888f7fe6c6f9ee006a6d882723b1cba26601dbc3"><code>888f7fe</code></a> feat(services): configure directory redirects (<a href="https://redirect.github.com/tower-rs/tower-http/issues/728">#728</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/5ad76544ce0eb15cd8ac185bef846eb4a80233a4"><code>5ad7654</code></a> chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (<a href="https://redirect.github.com/tower-rs/tower-http/issues/726">#726</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/d154adbace6abc98162620ea1b56d88629b40c91"><code>d154adb</code></a> fix: reject multipart ranges before validation (<a href="https://redirect.github.com/tower-rs/tower-http/issues/661">#661</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/d9e5c8a38d072e49f32b5602f5cca0b8d1402e05"><code>d9e5c8a</code></a> ci: Update to cargo-check-external-types 0.5.0 (<a href="https://redirect.github.com/tower-rs/tower-http/issues/724">#724</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/90c072b50eba4a47fe6b696416086c7e269bb3e9"><code>90c072b</code></a> Propagate ServeDir::try_call I/O errors (<a href="https://redirect.github.com/tower-rs/tower-http/issues/718">#718</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/860922e81da98f0813928816634b30a74cbbbb83"><code>860922e</code></a> fix(decompression): don't end the body on an empty data frame (<a href="https://redirect.github.com/tower-rs/tower-http/issues/722">#722</a>)</li> <li><a href="https://github.com/tower-rs/tower-http/commit/85322522af352a09a21ddc9dd147b4bfc122d979"><code>8532252</code></a> docs(example)/custom future with multiple bodies (<a href="https://redirect.github.com/tower-rs/tower-http/issues/711">#711</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tower-rs/tower-http/compare/tower-http-0.6.11...tower-http-0.7.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tower-http&package-manager=cargo&previous-version=0.6.11&new-version=0.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions