v0.6.7 — Dependency and CI Hardening
What changed
- Updated the Rust 1.85-compatible production dependencies:
thiserror2.x,rand0.10, andbase640.23 with only its safestdfeature enabled. - Retained reqwest 0.12.28 to preserve the public
Error::Http(reqwest::Error)API and existing TLS behavior. - Updated Criterion to 0.7 and restored warning-free benchmarks with
std::hint::black_box. - Hardened GitHub Actions with immutable commit pins, read-only default permissions, first-party coverage artifacts, and direct Criterion base/head comparisons.
- Added retry jitter-bound regression coverage.
Verification
RustSec, fmt, clippy with -D warnings, 119 unit tests, 80 active integration tests, 151 active doctests, warning-free docs, Rust 1.85, package verification, and crates.io publish verification all passed.
Full changelog: v0.6.6...v0.6.7