2.0.0

Breaking Changes

This release includes a handful of breaking changes, primarily around TLS backends and the TLS API. For more detail on these changes and how to adapt your code when upgrading from 1.x, please see the migration guide.

• Isahc now supports choosing between multiple TLS backends, and crate features have been changed to reflect this. Support for rustls as a TLS backend has been added, and the default TLS backend has been changed to be rustls. (#491)
• Remove and replace all SSL-related options on Configurable with a new tls module consolidated into tls::TlsConfig. The names of all individual options have been renamed, and include several small breaking changes. (#491)
  • config::CaCertificate renamed to tls::TrustStore, and expanded with new methods for selecting entire providers of CA certificates, beyond just a single PEM bundle.
  • config::ClientCertificate has been renamed to tls::Identity with additional options for loading certificates and keys from other formats.
  • config::PrivateKey has been moved to tls::PrivateKey.
  • config::SslOption has been removed and merged into regular builder methods for tls::TlsConfig.
• Redesign NetworkInterface into multiple types in a new net::interface module, which has a more natural API and also supports combining multiple criteria for selecting an interface to bind to. (#494)
• Several network-related types have been moved from the config module into the net module. (#518)
  • config::Dialer and config::DialerParseError moved into net.
  • config::IpVersion moved to net::IpVersion.
  • config::DnCache and config::ResolveMap moved into net::dns.
• Support for log is now an optional feature, which is enabled by default. (e07e64bd)

Added

• TLS validation can now be augmented by validating a server's certificate is issued by a specific issuer chain using tls::Issuer. Not all backends support this option. (#491)
• Added optional support for using webpki-root-certs as a trust store for root certificates behind a trust-webpki-roots crate feature, which can be used with any TLS backend. This can be used automatically by default combined with rustls by enabling the rustls-tls-webpki-roots crate feature. (#492)

Changes

• Add some sanity checks that are performed at runtime when Isahc first initializes to make sure the linked version of libcurl is of a compatible version and seems to be configured to work properly. (#510)
• Internal blob handling has been revamped in order to reduce or even eliminate unnecessary copying of in-memory certificates and keys in TLS configuration. This may result in a small performance improvement and reduction in memory usage when using these options. (#516)

Maintenance

• Revamp and improve GitHub Actions workflows to test Isahc more comprehensively with more platforms, CPU architectures, and feature combinations. (#499) (#500) (#504)

Dependencies

• Bump http from 0.2.12 to 1.4.0 (#472)
• Bump codecov/codecov-action from 5 to 6 (#474)