From fcc1c9d94da530cc32eceae26fef8b3e89f0ce67 Mon Sep 17 00:00:00 2001 From: David Pedersen Date: Sat, 10 Sep 2022 09:57:33 +0200 Subject: [PATCH] axum-core: Version 0.2.8 --- axum-core/CHANGELOG.md | 4 ++++ axum-core/Cargo.toml | 2 +- axum/Cargo.toml | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/axum-core/CHANGELOG.md b/axum-core/CHANGELOG.md index 536ea888..dc34140b 100644 --- a/axum-core/CHANGELOG.md +++ b/axum-core/CHANGELOG.md @@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 # Unreleased +- None. + +# 0.2.8 (10. September, 2022) + - **breaking:** Added default limit to how much data `Bytes::from_request` will consume. Previously it would attempt to consume the entire request body without checking its length. This meant if a malicious peer sent an large (or diff --git a/axum-core/Cargo.toml b/axum-core/Cargo.toml index 99fcefec..39f9b503 100644 --- a/axum-core/Cargo.toml +++ b/axum-core/Cargo.toml @@ -8,7 +8,7 @@ license = "MIT" name = "axum-core" readme = "README.md" repository = "https://github.com/tokio-rs/axum" -version = "0.2.7" # remember to also bump the version that axum depends on +version = "0.2.8" # remember to also bump the version that axum depends on [dependencies] async-trait = "0.1" diff --git a/axum/Cargo.toml b/axum/Cargo.toml index f7632d2b..afa1a5cd 100644 --- a/axum/Cargo.toml +++ b/axum/Cargo.toml @@ -26,7 +26,7 @@ ws = ["tokio-tungstenite", "sha-1", "base64"] [dependencies] async-trait = "0.1.43" -axum-core = { path = "../axum-core", version = "0.2.7" } +axum-core = { path = "../axum-core", version = "0.2.8" } bitflags = "1.0" bytes = "1.0" futures-util = { version = "0.3", default-features = false, features = ["alloc"] }