h2

What's Changed

• feat: allow configuring the DATA frame budget by @muhamadazmy in #942
• docs: tighten wording on data_frame_budget() by @seanmonstar in #943

New Contributors

• @muhamadazmy made their first contribution in #942

Full Changelog: v0.4.17...v0.4.18

• Add data_frame_budget(n) methods to client and server builders.

What's Changed

• fix: dont budget DATA frames that are EOS by @seanmonstar in #940
• fix: cap max allowed encoder table size by @seanmonstar in #941

Full Changelog: v0.4.16...v0.4.17

• Fix limiting of excessive small DATA frames to ignore EOS frames.
• Fix HPACK encoding table to cap the max size to 4kb.

What's Changed

• fix: error instead of busy-looping when write returns Ok(0) by @ArniDagur in #921
• Revert "perf(header): optimize HeaderValue creation via zero-copy sharing" by @0x676e67 in #924
• fix: preserve received END_STREAM across HTTP/2 stream resets by @howardjohn in #922
• streams: reject connection-specific header fields in send_trailers (RFC 9113 §8.2.2) by @scadastrangelove in #925
• perf: optimize HPACK decoding with 8-bit tables by @seanmonstar in #926
• Avoid flushing h2 socket while holding stream locks by @brentechols in #918
• perf: reuse HPACK encode buffer across frames by @dorianverlaine in #929
• fix: CI failure on nightly due to deprecated std::usize and std::u32 use by @ArniDagur in #932
• fix: Missed wakeup in poll_trailers by @ArniDagur in #931
• fix: Release flow control capacity when RecvStream is dropped by @ArniDagur in #930
• fix: limit excessive amount of small DATA frames by @seanmonstar in #935
• fix: prevent double counting pushed streams after 1xx responses by @seanmonstar in #936

New Contributors

• @scadastrangelove made their first contribution in #925
• @brentechols made their first contribution in #918
• @dorianverlaine made their first contribution in #929

Full Changelog: v0.4.15...v0.4.16

• Fix limiting excessive amount of small DATA frames.
• Fix double counting pushed streams when receiving 1xx responses.
• Fix releasing of flow control capacity earlier, when RecvStream is dropped.
• Fix missed wakeup in poll_trailers.
• Fix extra memory retained when copying HeaderValues.
• Fix resets received after END_OF_STREAM to allow the data to still be received.
• Fix busy-looping when IO write returns 0 to mean connection closed.
• Optimize HPACK decoding tables from 4-bit states to 1-byte states.
• Optimize IO writing contention by not holding lock while flushing.

What's Changed

• fix: Discard buffered DATA when a scheduled reset is pending by @ArniDagur in #896
• fix: poll_capacity must not return Ready(Some(Ok(0))) by @ArniDagur in #898
• fix: Reject frames on streams whose HEADERS haven't been sent by @ArniDagur in #899
• chore(ci): update actions/checkout to v6 by @seanmonstar in #910
• fix: Remove unnecessary clones by @FranciscoTGouveia in #911
• fix: use HeaderMap::try_append to prevent panics on absurd amounts of headers by @imlk0 in #909
• fix: ignore library resets at connection poll loop level by @seanmonstar in #913
• fix: remove padded_len() u8 overflow in DATA frame padding release by @seanmonstar in #914
• fix: close connection when header size is way too large by @seanmonstar in #915
• Prepare v0.4.15 by @seanmonstar in #916

New Contributors

• @FranciscoTGouveia made their first contribution in #911
• @imlk0 made their first contribution in #909

Full Changelog: v0.4.14...v0.4.15

• Fix closing a connection when header size is "way too large" (currently x4 configured limit).
• Fix overflow calculating padding length if a DATA frame had 255 bytes of padding.
• Fix ignoring library-initiated resets in the connection state loop.
• Fix decoding panic with an absurd amount of headers and no limit to now use try_append().
• Fix rejecting frames on streams whose HEADERS have not been sent.
• Fix poll_capacity() to not return Some(Ok(0)).
• Fix discarding of buffered DATA frames when a reset is scheduled.

What's Changed

• fix(stream): avoid RST before initial HEADERS on idle streams by @DDtKey in #875
• fix: filter stream initiator in recv_go_away (#885) by @ofek-sha in #886
• perf(header): optimize HeaderValue creation via zero-copy sharing by @0x676e67 in #884
• Add header_table_size to server builder by @ArniDagur in #888
• check final response in poll_informational by @zh-jq in #889
• fix: Avoid capacity leak or panic when a stream is cancelled after reserve_capacity by @ArniDagur in #893
• fix: Flow control capacity leak with padded frames by @ArniDagur in #894
• fix: Account for connection flow control on DATA after GOAWAY by @ArniDagur in #895
• fix: set_reset must notify send task (missed wakeup) by @ArniDagur in #897
• Prepare v0.4.14 by @seanmonstar in #901

New Contributors

• @ofek-sha made their first contribution in #886
• @0x676e67 made their first contribution in #884
• @ArniDagur made their first contribution in #888
• @zh-jq made their first contribution in #889

Full Changelog: v0.4.13...v0.4.14

• Add header_table_size() option to server builder.
• Fix leaking connection flow control of padded DATA frames when stream is reset.
• Fix leaking connection flow control when canceling a stream after reserving capacity.
• Fix leaking connection flow control when receiving a DATA frame after GOAWAY.
• Fix waking the poll_capacity when locally reseting a stream from library.
• Fix sending HEADERS on a reset stream before the RST_STREAM frame.
• Fix receiving GOAWAY to not close peer-initiated streams.
• Optimize header value decoding to copy less bytes.

What's Changed

• Implement HTTP/2 informational responses (1xx) support by @apu031 in #865
• fix: Unparent connection span by @Jesse-Bakker in #868
• fix: auto-release padding from DATA frames by @seanmonstar in #869
• fix: do not assign capacity for pending streams by @benjaminp in #860
• perf: reduce huffman decode table size by @ariaandika in #871

New Contributors

• @Jesse-Bakker made their first contribution in #868
• @ariaandika made their first contribution in #871
• @apu031 made their first contribution in #865
• @benjaminp made their first contribution in #860

Full Changelog: v0.4.12...v0.4.13

• Add support for 1xx informational responses on client and server side.
• Fix auto-releasing of padding bytes of DATA frames for flow control windows.
• Fix to stop assigning capacity to pending streams which can't use it yet.
• Fix tracing to not grab the parent for the connection span.

What's Changed

• chore: update to webpki-roots 1 by @tottoto in #851
• docs: update readme about production readiness by @seanmonstar in #854
• refactor: reduce noise in fmt::Debug outputs by @seanmonstar in #855
• fix: adjust expiring reset stream limits by @seanmonstar in #858

Full Changelog: v0.4.11...v0.4.12

• Fix default limits on max stored reset streams and duration to more reasonable values.

What's Changed

• fix: not return UnexpectedEof when server drops without close_notify by @jmwample in #847

New Contributors

• @jmwample made their first contribution in #847

Full Changelog: v0.4.10...v0.4.11

• Fix client to not return an error when a clean shutdown otherwise doesn't get a TLS close_notify, which some servers don't bother sending.

What's Changed

• Fix RecvStream::is_end_stream(): return true only when END_STREAM is received by @eaufavor in #810

Full Changelog: v0.4.9...v0.4.10

• Fix is_end_stream() to return true only when ended cleanly, not when errored.

• Add sever::Connection::has_streams() method to check for active streams.

• Fix handling implicit stream resets at the more correct time.
• Fix window size decrements of send-closed streams.
• Fix reclaiming of reserved capacity when streams are closed.
• Fix to no longer call poll_flush after poll_shutdown.
• Fix busy loop in task when poll_shutdown returns pending.

• Fix treating HEADERS frames with a non-zero content-length but END_STREAM flag as malformed.
• Fix notifying the stream task when automatically reset on receipt of a stream error.

• Add current_max_send_streams() and current_max_recv_streams() to client::SendRequest.
• Fix sending a PROTOCOL_ERROR instead of REFUSED_STREAM when receiving oversized headers.
• Fix notifying a PushPromise task properly.
• Fix notifying a stream task when reset.

• Fix race condition that sometimes hung connections during shutdown.
• Fix pseudo header construction for CONNECT and OPTIONS requests.

• Limit number of CONTINUATION frames for misbehaving connections.

• Fix flow control limits to not apply until receiving SETTINGS ack.
• Fix not returning an error if IO ended without close_notify.
• Improve performance of decoding many headers.

• Limit error resets for misbehaving connections.
• Fix selecting MAX_CONCURRENT_STREAMS value if no value is advertised initially.

• Fix assigning connection capacity which could starve streams in some instances.

• Update to http 1.0.
• Remove deprecated Server::poll_close().

• Add header_table_size(usize) option to client and server builders.
• Improve throughput when vectored IO is not available.
• Update indexmap to 2.

• Fix opening of new streams over peer's max concurrent limit.
• Fix RecvStream to return data even if it has received a CANCEL stream error.
• Update MSRV to 1.63.

• Fix panic if a server received a request with a :status pseudo header in the 1xx range.
• Fix panic if a reset stream had pending push promises that were more than allowed.
• Fix potential flow control overflow by subtraction, instead returning a connection error.

• Fix counting reset streams when triggered by a GOAWAY.
• Send too_many_resets in opaque debug data of GOAWAY when too many resets received.

• Fix panic because of opposite check in is_remote_local().

• Add Error::is_library() method to check if the originated inside h2.
• Add max_pending_accept_reset_streams(usize) option to client and server builders.
• Fix theoretical memory growth when receiving too many HEADERS and then RST_STREAM frames faster than an application can accept them off the queue. (CVE-2023-26964)

• Set Protocol extension on requests when received Extended CONNECT requests.
• Remove B: Unpin + 'static bound requiremented of bufs
• Fix releasing of frames when stream is finished, reducing memory usage.
• Fix panic when trying to send data and connection window is available, but stream window is not.
• Fix spurious wakeups when stream capacity is not available.

• Remove B: Buf bound on SendStream's parameter
• add accessor for StreamId u32

• Add Error::is_reset function.
• Bump MSRV to Rust 1.56.
• Return RST_STREAM(NO_ERROR) when the server early responds.

• Update private internal tokio-util dependency.

• Avoid time operations that can panic (#599)
• Bump MSRV to Rust 1.49 (#606)
• Fix header decoding error when a header name is contained at a continuation header boundary (#589)
• Remove I/O type names from handshake tracing spans (#608)

• Make SendStream::poll_capacity never return Ok(Some(0)) (#596)
• Fix panic when receiving already reset push promise (#597)

• Add Error::is_go_away() and Error::is_remote() methods.
• Fix panic if receiving malformed PUSH_PROMISE with stream ID of 0.

• Fix hang related to new max_send_buffer_size.

• Add "extended CONNECT support". Adds h2::ext::Protocol, which is used for request and response extensions to connect new protocols over an HTTP/2 stream.
• Add max_send_buffer_size options to client and server builders, and a default of ~400MB. This acts like a high-water mark for the poll_capacity() method.
• Fix panic if receiving malformed HEADERS with stream ID of 0.

• Fix panic if server sends a malformed frame on a stream client was about to open.
• Fix server to treat :status in a request as a stream error instead of connection error.

• Fix regression of h2::Error that were created via From<h2::Reason> not returning their reason code in Error::reason().

• Fix sending of very large headers. Previously when a single header was too big to fit in a single HEADERS frame, an error was returned. Now it is broken up and sent correctly.
• Fix buffered data field to be a bigger integer size.
• Refactor error format to include what initiated the error (remote, local, or user), if it was a stream or connection-level error, and any received debug data.

• Fix panic when encoding header size update over a certain size.
• Fix SendRequest to wake up connection when dropped.
• Fix potential hang if RecvStream is placed in the request or response extensions.
• Stop calling Instant::now if zero reset streams are configured.

• Fix client being able to make CONNECT requests without a :path.
• Expose RecvStream::poll_data.
• Fix some docs.

• Fix incorrect handling of received 1xx responses on the client when the request body is still streaming.

• Add Connection::max_concurrent_recv_streams() getter.
• Add Connection::max_concurrent_send_streams() getter.
• Fix client to ignore receipt of 1xx headers frames.
• Fix incorrect calculation of pseudo header lengths when determining if a received header is too big.
• Reduce monomorphized code size of internal code.

• Update to Tokio v1 and Bytes v1.
• Disable tracing's log feature. (It can still be enabled by a user in their own Cargo.toml.)

• Fix stream ref count when sending a push promise
• Fix receiving empty DATA frames in response to a HEAD request
• Fix handling of client disabling SERVER_PUSH

• Integrate tracing directly where log was used. (For 0.2.x, logs are still emitted by default.)

• Fix rare debug assert failure in store shutdown.

• Fix when receiving SETTINGS_HEADER_TABLE_SIZE setting.

• Fix server being able to accept CONNECT requests without :scheme or :path.
• Fix receiving a GOAWAY frame from updating the recv max ID, it should only update max send ID.

• Reduce size of FlowControl and RecvStream.

• Relax Unpin bounds on the send Buf generic.

• Add server::Connection::set_initial_window_size and client::Connection::set_initial_window_size which can adjust the INITIAL_WINDOW_SIZE setting on an existing connection (#421).
• Update to http v0.2.
• Update to tokio v0.2.
• Change unstable-stream feature to stream.
• Change ReserveCapacity to FlowControl (#423).
• Remove From<io::Error> for Error.

• Update to futures 0.3.0-alpha.19.
• Update to tokio 0.2.0-alpha.6.

• Add server support for PUSH_PROMISEs (#327).
• Update to tokio 0.2.0-alpha.5.
• Change stream feature to unstable-stream.

• Update from futures 0.1 to std::future::Future.
• Update AsyncRead/AsyncWrite to tokio-io 0.2 alpha.
• Change Stream implementations to be optional, default disabled. Specific async and poll functions are now inherent, and Stream can be re-enabled with the stream cargo feature.

• Fix to send a RST_STREAM instead of GOAWAY if receiving a frame on a previously closed stream.
• Fix receiving trailers without an end-stream flag to be a stream error instead of connection error.