Skip to content

chore(deps): Bump s3s-aws from 0.16.1 to 0.17.0 - #412

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/s3s-aws-0.17.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/s3s-aws-0.17.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps s3s-aws from 0.16.1 to 0.17.0.

Changelog

Sourced from s3s-aws's changelog.

v0.17.0 - 2026-09-24

MSRV of this minor version: 1.96.0

s3s

Migration: v0.17.0 replaces the POST Object form parser with the s3s-multipart crate, which accepts forms the previous parser rejected and rejects trailing content it silently dropped, and removes two HttpError helpers. The new behaviour is the one to adopt; no option restores the previous parsing behaviour.

  • A part may carry more header fields than the parser reads, and the surplus fields are ignored.
  • Content-Disposition is parsed tolerantly: parameter names are case-insensitive, the parameter order is free, unknown parameters are ignored, and quoted and token values are both accepted.
  • A preamble before the first boundary is accepted, and the boundary must be 1 to 70 characters as RFC 2046 requires.
  • A part without a usable Content-Disposition name fails immediately with MalformedPOSTRequest instead of re-parsing the accumulated buffer.
  • A chunked POST Object whose file part is followed by another part or an epilogue is rejected with MalformedPOSTRequest instead of being silently truncated.
  • HttpError::new is removed; use HttpError::from_std_error. impl From<HttpError> for StdError is removed; use into_std_error() for the allocation-free path, or rely on the standard blanket impl, which boxes the HttpError itself.

BREAKING: previously accepted requests are now rejected, and two HttpError APIs are removed:

  • Parse multipart with s3s-multipart (#845) (fixes #803)
  • Implement the std error traits for HttpError (#834)

s3s-multipart

  • Make parsing chunk-independent and always progress (#836)
  • Benchmark the parser and compare all three multipart parsers (#832)
  • Implement the streaming multipart/form-data parser (#831)

This crate joins the published set with this release; it was on the 0.17.0-alpha track before.

s3s-fs

  • Keep listings working while objects are deleted (#856)
  • Validate checksums before committing writes (#829)

s3s-test

  • Fix nightly clippy::double-must-use error (#852)

Fuzz

  • Add a multipart parser fuzz target (#837)

Testing

  • Move the signature unit tests into ops/tests (#842)
  • Share one routing harness across ops tests and benches (#841)
  • Collect the remaining test files under ops/tests (#840)
  • Split ops/tests.rs into per-subject files (#839)
  • Collect the ops micro-benchmarks under ops/benches (#838)

Documentation

... (truncated)

Commits
  • b21ba20 release v0.17.0 (#858)
  • 8b888d6 fix(s3s-fs): keep listings working while objects are deleted (#856)
  • e761166 build(deps): bump the dependencies group with 9 updates (#855)
  • f3da7ca Fix clippy::double-must-use error on nightly Rust (#852)
  • 1a18a02 refactor(s3s)!: parse multipart with s3s-multipart (#845)
  • 8ac6442 build(deps): bump soupsieve from 2.8.4 to 2.9 (#848)
  • bfe60c0 fix(ci): only promote docker latest and major tags forward (#846)
  • 58eea6f docs(changelog): record the v0.16.1 maintenance release (#844)
  • a305100 test(s3s/ops): move the signature unit tests into ops/tests (#842)
  • 8be36f9 test(s3s/ops): share one routing harness across ops tests and benches (#841)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 28, 2026 11:45
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 28, 2026
github-actions[bot]
github-actions Bot previously approved these changes Sep 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/s3s-aws-0.17.0 branch from c47e4cc to 72769cc Compare September 28, 2026 18:34
Bumps [s3s-aws](https://github.com/Nugine/s3s) from 0.16.1 to 0.17.0.
- [Changelog](https://github.com/s3s-project/s3s/blob/main/CHANGELOG.md)
- [Commits](s3s-project/s3s@v0.16.1...v0.17.0)

---
updated-dependencies:
- dependency-name: s3s-aws
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/s3s-aws-0.17.0 branch from 72769cc to 0b5d5bc Compare September 30, 2026 21:55

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code waiting-on-maintainers

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants