v1.1.3

v1.1.3 - 2026-04-21

Dependencies

Use minreq 3.0.0-rc.0 for native-tls and ureq 3.3.0 for rustls

The native-tls feature now uses minreq 3.0.0-rc.0 (system TLS), which produces the smallest binary (~540 KB). The rustls feature keeps ureq 3.3.0 because minreq's rustls backend uses aws-lc-rs rather than ring, adding ~1.7 MB. Both dependencies are now optional and only included when their respective feature is enabled.

v1.1.2

v1.1.2 - 2026-04-21

Security

Replace minreq with ureq 3.3.0 to fix RUSTSEC-2026-0098 and RUSTSEC-2026-0099

minreq 2.x depends on rustls 0.21 (EOL), which uses rustls-webpki 0.101.x — vulnerable to two name constraint validation bugs. No published version of minreq contains a fix. Switching to ureq 3.3.0 resolves both advisories by pulling in rustls-webpki 0.103.13. The public API and feature flags (native-tls, rustls) are unchanged.

v1.0.0

Bug Fixes

• Correct template leftovers and enhance release pipeline (#2)

Features

• Initial implementation of tiny-update-check