chore(actix-http): prepare release 3.19.0

Author: robjtede

Cargo.lock

@@ -2,13 +2,14 @@
 
 ## Unreleased
 
+## 3.19.0
+
 - Fix `QualityItem` parsing to recognize quality parameters before other parameters and ignore semicolons inside quoted values.
 - Parse header quality values as exact decimals and reject invalid numeric syntax.
 - Round float quality conversions to the nearest thousandth to preserve all three decimal places.
+- Reject WebSocket frames whose 64-bit payload length has the most significant bit set, or whose length does not fit in `usize` on 32-bit targets, using `ws::ProtocolError::Overflow`.
 - Update `zstd` dependency to `0.14`.
 - Update `brotli` dependency to `9`.
-- Reject WebSocket frames whose 64-bit payload length has the most significant bit set, or whose length does not fit in `usize` on 32-bit targets.
-- Reword the `ws::ProtocolError::Overflow` message, which described only the size limit, to cover an invalid payload length.
 
 ## 3.18.13
 

actix-http/CHANGES.md

@@ -1,6 +1,6 @@
 [package]
 name = "actix-http"
-version = "3.18.13"
+version = "3.19.0"
 authors = ["Nikolay Kim <fafhrd91@gmail.com>", "Rob Ede <robjtede@icloud.com>"]
 description = "HTTP types and services for the Actix ecosystem"
 keywords = ["actix", "http", "framework", "async", "futures"]

actix-http/Cargo.toml

@@ -5,11 +5,11 @@
 <!-- prettier-ignore-start -->
 
 [![crates.io](https://img.shields.io/crates/v/actix-http?label=latest)](https://crates.io/crates/actix-http)
-[![Documentation](https://docs.rs/actix-http/badge.svg?version=3.18.13)](https://docs.rs/actix-http/3.18.13)
+[![Documentation](https://docs.rs/actix-http/badge.svg?version=3.19.0)](https://docs.rs/actix-http/3.19.0)
 ![Version](https://img.shields.io/badge/rustc-1.88+-ab6000.svg)
 ![MIT or Apache 2.0 licensed](https://img.shields.io/crates/l/actix-http.svg)
 <br />
-[![dependency status](https://deps.rs/crate/actix-http/3.18.13/status.svg)](https://deps.rs/crate/actix-http/3.18.13)
+[![dependency status](https://deps.rs/crate/actix-http/3.19.0/status.svg)](https://deps.rs/crate/actix-http/3.19.0)
 [![Download](https://img.shields.io/crates/d/actix-http.svg)](https://crates.io/crates/actix-http)
 [![Chat on Discord](https://img.shields.io/discord/771444961383153695?label=chat&logo=discord)](https://discord.gg/NWpN5mmg3x)
 

actix-http/README.md

@@ -668,7 +668,7 @@ mod tests {
     // The payload length of the #3723 repro, whose MSB is set. That report was an unchecked
     // addition that overflowed; `checked_add` was added to fix it, and the most-significant-bit
     // check now rejects this input before either runs, so this pins the regression only.
-    // The 32-bit test that covers the `checked_add` guard is not compiled on this target.
+    // The `checked_add` guard is covered separately by a 32-bit-only test.
     #[test]
     fn test_parse_rejects_msb_length_from_3723() {
         let buf: [u8; 14] = [

actix-http/src/ws/frame.rs

@@ -255,16 +255,6 @@ mod tests {
     use super::*;
     use crate::{header, test::TestRequest};
 
-    // The message is user-visible, so pin it: it describes every case the variant covers, not only
-    // the payload size limit it used to name.
-    #[test]
-    fn test_overflow_message_covers_invalid_lengths() {
-        assert_eq!(
-            ProtocolError::Overflow.to_string(),
-            "Payload length is invalid or exceeds the size limit"
-        );
-    }
-
     #[test]
     fn test_handshake() {
         let req = TestRequest::default().method(Method::POST).finish();

actix-http/src/ws/mod.rs

@@ -135,7 +135,7 @@ actix-service = "2"
 actix-tls = { version = "3.4", default-features = false, optional = true }
 actix-utils = "3"
 
-actix-http = "3.13.3"
+actix-http = "3.19"
 actix-router = { version = "0.5.4", default-features = false, features = ["http"] }
 actix-web-codegen = { version = "=4.4.0", optional = true, default-features = false }
 

actix-web/Cargo.toml

@@ -98,7 +98,7 @@ dangerous-h2c = []
 
 [dependencies]
 actix-codec = "0.5"
-actix-http = { version = "3.13.1", features = ["http2", "ws"] }
+actix-http = { version = "3.19", features = ["http2", "ws"] }
 actix-rt = { version = "2.1", default-features = false }
 actix-service = "2"
 actix-tls = { version = "3.4", features = ["connect", "uri"] }