[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
ureq	workspace.dependencies	minor	3.4.2 → 3.5.0	3.5.1

---

Release Notes

algesten/ureq (ureq)

v3.5.0

Compare Source

• Prepare 3.5.0 and fix dependency advisories and warnings - #​1217
  • Add Agent::shutdown() to interrupt requests in flight and close all connections #​1211
  • Preserve validated request header casing with RequestBuilder::header_raw #​1214
  • Decode proxy URL credentials once; literal percent signs must be escaped as %25 #​1215
  • Encode ProxyBuilder credentials and preserve colons in proxy passwords #​1215
  • Apply remaining timeout budgets to SOCKS setup and drop the socks dependency #​1209
  • Check NO_PROXY before resolving a SOCKS proxy, so excluded hosts connect directly #​1209
  • Clarify timeout budgets, phase boundaries, and proxy DNS #​1213
  • Bound TLS handshake I/O by the remaining connect/global timeout #​1208
  • Retry socket reads interrupted by EINTR when timeout (technically breaking) #​1205
  • Fix native-tls-no-default enabling dependencies without enabling the TLS connector
  • Add timeout_per_read and timeout_per_write independently of total phase budgets

v3.4.3

Compare Source

• Update TLS dependencies for security fixes #​1218

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codspeed]

Merging this PR will not alter performance

✅ 2 untouched benchmarks
⏩ 11 skipped benchmarks¹

---

_{Comparing renovate/ureq-3.x-lockfile (fe24d9d) with main (ffab3c6)²}

Footnotes

1. 11 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on main (8bb82f3) during the generation of this report, so ffab3c6 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩