What's Changed

• fix: backport upstream bug fixes across forked crates by @deedy5 in #149
• perf: avoid Arc clones in root cert store paths and Safari emulator by @deedy5 in #150

Release v1.3.1 details

✨ Security

• fix(reqwest): Add scheme check to remove_sensitive_headers — prevents credential leakage on https→http same-host:port redirects

🐛 Fixes

• fix(h2): Backport 8 upstream fixes — missing notify_send() in set_reset, goaway stream filtering, connection flow control release after GOAWAY, guard for informational responses, dropping buffered DATA on scheduled reset, RFC 9113 idle stream frame rejection, capacity exhaustion handling
• fix(hyper): Backport 5 upstream fixes — SenderDropGuard for mid-body drop data loss, missed write wakeup deadlock in H1 dispatch, H2 capacity reservation deadlock, NO_ERROR handling in poll_trailers, 32-bit overflow in body size calculation
• fix(reqwest): Backport 3 upstream fixes — URL context in JSON decode errors, Hickory DNS init error propagation (no more panics), Google DNS fallback
• fix(primp-python): Resolve redirect race by applying policy on cloned client; RAII temp file cleanup

⚡ Performance

• perf(safari): Cache emulators per OS (iOS/macOS) to avoid Arc::make_mut deep clones on every build_safari_settings call
• perf(reqwest): default_root_store_arc() returns Arc so callers share the cached store via refcount instead of cloning

🏗️ Refactors & Chores

• chore(hyper-util): Sync upstream through v0.1.20 — modernize to std::future::poll_fn, std::task::ready, std::pin::pin!, drop futures-core dep, add RPITIT bounds, update system-configuration to ≥0.7

Full Changelog: v1.3.0...v1.3.1

What's Changed

• chore: merge upstream dependency bumps and apply clippy fixes by @deedy5 in #144
• Misc fixes and refactors by @deedy5 in #145
• refactor: deduplicate browser impersonation, add H2 window update fingerprinting, clean up Python response bindings by @deedy5 in #146
• DNS resolver customization (DoH/DoT/plain), hickory-resolver 0.26 upgrade, and minor fixes by @deedy5 in #147
• perf: cache CryptoProvider/RootCertStore/BrowserEmulator, optimize Python iterators, fix Random OS consistency by @deedy5 in #148

Release v1.3.0 details

✨ Features

• DNS resolver customization — DoH, DoT, and plain DNS resolvers with Python bindings (primp-reqwest)
• Firefox WINDOW_UPDATE support — initial_stream_window_increment for HTTP/2 flow control across h2 → hyper → reqwest
• New browser profiles — Chrome 147/148, Edge 147/148, Opera 130/131; refactored impersonation infrastructure with Arc
• Cached emulators — OnceLock-cached browser emulators eliminate per-request construction overhead
• deflate field — added to BrowserSettings and apply_impersonation

🐛 Fixes

• Consistent ImpersonateOS::Random — resolved once at top of build_*_settings so User-Agent, os_platform, and sec-ch-ua-mobile all agree
• Header order & Sec-CH-UA corrections — fixed positions, grease values, brand permutations matching Chromium's GenerateBrandVersionList
• DohResolver timeout — per-query timeout prevents hang, enables ChainedResolver fallback
• WASM gating — h2-referencing code and impersonate code properly #[cfg]-gated
• Python error chains — exception messages include full source chain; non-object data sent as raw body
• max_local_error_reset_streams — wrapped in Some() for correct h2 API type
• primp-h2 clippy — replaced modulo with is_multiple_of
• primp-rustls — removed duplicate debug log in ClientHello
• Docs.rs build — excluded incompatible http3 feature, added rustc-args for reqwest_unstable

⚡ Performance

• Cache CryptoProvider and RootCertStore; Arc in OnceLock
• Eliminate recursion in os_platform/build_user_agent
• Python: cache encoding per iterator, pre-alloc buffers, eliminate headers.clone(), reduce lock scope
  🔧 Upstream Merges
• primp-hyper 1.8.1 → 1.9.0 (15 files, removed pin-utils, added max_local_error_reset_streams)
• primp-reqwest 0.13.2 → 0.13.3 (H3 fixes, CRL PEM parsing, debug logging)
• primp-rustls 0.23.38 → 0.23.40 (runtime FIPS detection, ECH padding fixes)
• primp-hyper-rustls 0.27.7 → 0.27.9 (removed pki-types dep, rustls-platform-verifier 0.7)
• hickory-resolver 0.25.2 → 0.26.1 (fixes NSEC3 DoS vulnerability)

🏗️ Refactors & Chores

• Python: extracted shared response/body logic into response_shared.rs (~300 lines eliminated)
• Python: replaced once_cell with std::sync::LazyLock
• MSRV bumped to 1.89.0
• CI: removed pinned maturin version, updated attest action
• Workspace-wide clippy fixes (io::Error::other(), module attributes, etc.)

Full Changelog: v1.2.3...v1.3.0

What's Changed

• feat: rename all forked crates to unique package names by @deedy5 in #138
• fix(primp-python): resolve parallel client initialization deadlock by @deedy5 in #142

Full Changelog: v1.2.2...v1.2.3

What's Changed

• fix(tls): GREASE improvements, Firefox/Chrome key_share fixes, ECH payload fix by @deedy5 in #135
• style+test: modernize Python type stubs & expand test coverage by @deedy5 in #136
• feat[py]: add timeouts, base_url, cookies, follow_redirects; unify Response types by @deedy5 in #137

Full Changelog: v1.2.1...v1.2.2

What's Changed

• feat: native OS root CAs, custom cert impersonation fix, unknown extension tolerance by @deedy5 in #133

Full Changelog: v1.2.0...v1.2.1

What's new in v1.2.0

• Impersonation: ChromeV146, EdgeV146, OperaV128/V129, SafariV26.3, FirefoxV147/V148. Random selection support (Impersonate::Chrome, ::Random, etc).

• HTTP/2 fingerprinting: Custom header ordering, initial stream ID config, simplified priority settings.

• TLS: Fixed Firefox cipher suite order, added status_request_v2 for Safari, expanded Firefox named groups.

• Python bindings: __version__ export, improved cookie/URL handling.

• Cleanup: Removed large amount of unused tests and fixtures.

• MSRV: 1.84, license MIT, workspace resolver 3.

What's Changed

• Fix security vulnerabilities

Release v1.0.0

🏗️ Custom Crates Stack

Built on custom forked crates providing full control over browser impersonation and TLS fingerprinting:

🎭 Impersonate Profiles

Browser Profiles

OS Impersonation

Usage Example

import primp

# Browser impersonation
client = primp.Client(impersonate="chrome_145", impersonate_os="windows")

# Random browser/OS
client = primp.Client(impersonate="random", impersonate_os="random")

⚠️ Exception Hierarchy

Comprehensive exception hierarchy mirroring Python's requests library for familiar error handling:

RequestException (base class)
├── HTTPError                    # HTTP 4xx/5xx status codes
├── ConnectionError              # Connection-related failures
│   ├── ConnectTimeout          # Connection establishment timeout
│   ├── SSLError                # SSL/TLS certificate errors
│   └── ProxyError              # Proxy connection errors
├── Timeout                      # Timeout-related failures
│   └── ReadTimeout             # Data read timeout
├── RequestError                 # Request building/sending errors
│   ├── InvalidURL              # URL format errors
│   └── InvalidHeader           # Header format errors
├── BodyError                    # Body-related errors
│   ├── StreamConsumedError     # Stream already consumed
│   └── ChunkedEncodingError    # Chunked encoding errors
├── DecodeError                  # Decoding errors
│   └── ContentDecodingError    # Content decode errors (gzip, brotli, etc.)
├── JSONError                    # JSON-related errors
│   ├── InvalidJSONError        # Invalid JSON in request body
│   └── JSONDecodeError         # JSON decode failure in response
└── TooManyRedirects            # Redirect limit exceeded

🚀 Key Features

• Async Support - Native AsyncClient with async/await, context managers, and concurrent requests
• HTML Conversion - Convert responses to Markdown, plain text, or rich text
• Response Streaming - Memory-efficient chunk streaming and line iteration
• Cookie Management - Persistent cookie store with automatic handling
• Proxy Support - HTTP, HTTPS, SOCKS5 proxies with authentication and system proxy detection
• SSL/TLS Options - Custom CA certificates, verification controls, HTTPS-only mode

📦 Requirements

Python Support

Platform Support

Linux (glibc/manylinux)

Linux (musllinux)

Windows

macOS

📚 Documentation

Documentation Files

Example Scripts

🔧 Installation

pip install -U primp

📄 License

MIT License

What's Changed

• Implement Client(impersonate="random", impersonate_os="random") by @deedy5 in #106
• Implement Client.headers_update() by @deedy5 in #107

Full Changelog: v0.14.0...v0.15.0

What's Changed

• Implement response.stream() by @deedy5 in #99
• Remove Client.cookies setter and getter by @deedy5 in #100

Full Changelog: v0.13.0...v0.14.0

What's Changed

• Improve response logic by @deedy5 in https://github.com/deedy5/primp/pull/95
• Cookies logic improve by @deedy5 in https://github.com/deedy5/primp/pull/96
• feat: add chrome_133, firefox_135

Full Changelog: https://github.com/deedy5/primp/compare/v0.12.1...v0.13.0

What's Changed

• Typing: improve by @deedy5 in https://github.com/deedy5/primp/pull/92
• Benchmark(async): add aiohttp by @deedy5 in https://github.com/deedy5/primp/pull/94
• tests: simplify asyncclient tests
• cargo update

Full Changelog: https://github.com/deedy5/primp/compare/v0.12.0...v0.12.1

What's Changed

• refactor: move request functions to python by @deedy5 in https://github.com/deedy5/primp/pull/83
• Client: add getter and setter to impersonate, impersonate_os by @deedy5 in https://github.com/deedy5/primp/pull/84
• AsyncClient by @deedy5 in https://github.com/deedy5/primp/pull/88
• fix: remove the redirection of the Proxy-Authorization header
• feat: python format + lint (ruff, mypy)
• docs(python): improve docstrings

Full Changelog: https://github.com/deedy5/primp/compare/v0.11.0...v0.12.0

What's Changed

• Add impersonate_os by @deedy5 in https://github.com/deedy5/primp/pull/78
  • add impersonate_os
  • bump rquest to v2.0.3
  • cargo update
  • update tests

Full Changelog: https://github.com/deedy5/primp/compare/v0.10.1...v0.11.0

What's Changed

• Use tracing crate instead of log by @deedy5 in https://github.com/deedy5/primp/pull/76

  Use tracing crate instead of log Enable proxy authentication during HTTP redirects traits: small performance improvements

Full Changelog: https://github.com/deedy5/primp/compare/v0.10.0...v0.10.1

What's Changed

• Bugfix get_encoding_from_content by @deedy5 in https://github.com/deedy5/primp/pull/69
• files: take file paths instead of contents; post files as streams by @deedy5 in https://github.com/deedy5/primp/pull/70
• [stubs] Create primp.pyi by @deedy5 in https://github.com/deedy5/primp/pull/71
• README: impersonates: add firefox_117
• impersonates: add firefox_128
• Bump rquest to v1.3

Full Changelog: https://github.com/deedy5/primp/compare/v0.9.3...0.10.0

What's Changed

• [bugfix] POST Multipart-Encoded Files by @deedy5 in https://github.com/deedy5/primp/pull/67
• Bump rquest to v1.2
• README: impersonates: add firefox_117
• optimize code

Full Changelog: https://github.com/deedy5/primp/compare/v0.9.2...v0.9.3

What's Changed

• Client: add [getter, setter] for cookies by @deedy5 in https://github.com/deedy5/primp/pull/63

1. Client: add [getter, setter] for cookies
2. Small performance improvements
3. README: impersonates - add firefox_109, firefox_133
4. cargo update

Full Changelog: https://github.com/deedy5/primp/compare/v0.9.1...v0.9.2

• Build with webpki-root-certs
• Client: add https_only, http2_only parameters; remove http1, http2
• Client: add [getter, setter] for auth, auth_bearer, params, headers
• Client: add [getter, setter] for proxy, timeout
• IndexMap: change ahash to foldhash
• Bump rquest to v0.33.3, cargo update
• Readme: impersonates - add edge_131, safari_18.1.1, safari_18.2

Full Changelog: https://github.com/deedy5/primp/compare/v0.8.2...v0.9.1

What's Changed

• Bugfix errors with data and json parameters when post a request by @deedy5 in https://github.com/deedy5/primp/pull/55
• Bump pyo3 from 0.23.2 to 0.23.3 in the cargo group across 1 directory by @dependabot in https://github.com/deedy5/primp/pull/56
• Add env vars PRIMP_PROXY, PRIMP_CA_BUNDLE by @deedy5 in https://github.com/deedy5/primp/pull/58
• Bump rquest to v0.30.5, cargo update

New Contributors

• @dependabot made their first contribution in https://github.com/deedy5/primp/pull/56

Full Changelog: https://github.com/deedy5/primp/compare/v0.8.1...v0.8.2

What's Changed

• Add armv7 build by @deedy5 in https://github.com/deedy5/primp/pull/52
• Bump pyo3 to v0.23, cargo update

Full Changelog: https://github.com/deedy5/primp/compare/v0.8.0...v0.8.1

• Use env variable CA_CERT_FILE to specify the CA Certificates
• Bump rquest to v0.27.7, cargo update
• README: impersonate - add chrome_131
• CI: macos - rust-toolchain: stable; release - add permissions and step Generate artifact attestation
• tests: add test impersonate=chrome_131

Full Changelog: https://github.com/deedy5/primp/compare/v0.7.0...v0.8.0

What's Changed

• Using the pythonize crate to handle data and json parameters, and return the responce as json by @deedy5 in https://github.com/deedy5/primp/pull/47
• Bump rquest to v0.27, cargo update
• README: impersonate="chrome_130" in examples

Full Changelog: https://github.com/deedy5/primp/compare/v0.6.5...v0.7.0

What's Changed

• Bump rquest to v0.26 by @deedy5 in https://github.com/deedy5/primp/pull/45
• Readme: impersonate parameter - add "chrome_130"

Full Changelog: https://github.com/deedy5/primp/compare/v0.6.4...v0.6.5

What's Changed

• ca_cert_file: updated the code to match the changes in the upstream package by @deedy5 in https://github.com/deedy5/primp/pull/44
• Bump html2text to v0.13

Full Changelog: https://github.com/deedy5/primp/compare/v0.6.3...v0.6.4

• Bump rquest to v0.21, cargo update
• README: impersonate - add "chrome_129", "safari_18", "safari_ipad_18"
• CI: pytest - add python 3.13

Full Changelog: https://github.com/deedy5/primp/compare/v0.6.2...v0.6.3

• cargo update
• README: impersonate param - add chrome_128

Full Changelog: https://github.com/deedy5/primp/compare/v0.6.1...v0.6.2

What's Changed

• Use Exception to raise error by @deedy5 in https://github.com/deedy5/primp/pull/40
• CI: [linux] [x_86_64] - use zig to build for manylinux_2_17 by @deedy5 in https://github.com/deedy5/primp/pull/41
• params data, json: replace clone() with as_unbound()
• recode headers
• Remove PyException
• README: update precompiled wheels compatibility info

Full Changelog: https://github.com/deedy5/primp/compare/v0.6.0...v0.6.1

What's Changed

• CI: bugfix after dependencies update by @deedy5 in https://github.com/deedy5/primp/pull/33
• Use anyhow for error handling by @deedy5 in https://github.com/deedy5/primp/pull/34
• Improve response code by @deedy5 in https://github.com/deedy5/primp/pull/35
• [Client]: add ca_cert_file parameter by @deedy5 in https://github.com/deedy5/primp/pull/36
• [Utils] Recode fn json_dumps, json_loads, url_encode by @deedy5 in https://github.com/deedy5/primp/pull/37
• [html2text] Response object: 1) add attribute text_rich
• [logging]: send Rust log messages to Python
• small code improvements

Full Changelog: https://github.com/deedy5/primp/compare/v0.5.5...v0.6.0

• README: impersonate param - add chrome_127
• resp.text_markdown, resp.text_plain: set default width=100
• Benchmark: add session.close()
• README: improve readability
• cargo update

• Rename library to primp
• Create LICENSE
• Bugfix fn get_encoding_from_content()
• Optimize fn get_encoding_from_headers()
• text_markdown, text_plain: release the GIL
• README: impersonate param - add "edge_127"

Full Changelog: https://github.com/deedy5/primp/compare/v0.5.3...v0.5.4

What's Changed

• [html2text] Response object: 1) add attribute text_plain, 2) rename attribute plaintext to text_markdown by @deedy5 in https://github.com/deedy5/pyreqwest_impersonate/pull/27
• README: add Features section

Full Changelog: https://github.com/deedy5/pyreqwest_impersonate/compare/v0.5.2...v0.5.3