[dependabot]

Bumps httpmock from 0.8.3 to 0.9.0.

Release notes

Sourced from httpmock's releases.

v0.9.0

The crate was upgraded to the Rust 2024 edition. The minimum supported Rust version remains 1.88.

Breaking changes

• server::matchers is now crate-private (#312). Its matcher, comparator and reader types are implementation details rather than a supported extension API; there is no replacement public path. Custom predicates remain possible with When::is_true.
• The body helpers is_blank, contains_str, contains_slice and contains_vec were removed (#246). Use request.body_string().contains(".."), which also works inside respond_with, or request.body_ref().windows(n).any(|w| w == b"..") with a non-empty needle, and When::body_includes when matching.
• HttpMockRequest::query_params_map() was removed (#246). Collect query_params() instead: let params: HashMap<String, String> = request.query_params().into_iter().collect(); keeps the last value for duplicate keys, as the removed method did. query_params() has returned Vec<(String, String)> since 0.8.2.
• The MockExt trait was removed and Mock's public id field is now private (#285). Remove MockExt imports and replace direct mock.id field access with mock.id(). Mock::new(id, &server) is unchanged.
• The mock server only accepts cleartext HTTP/2 connections (prior knowledge, as gRPC clients send it) when the http2 cargo feature is enabled (#297). Previously this worked without the feature. It fails at runtime, not at compile time: the client sees the connection closed after the preface and the server logs "invalid HTTP version parsed (found HTTP2 preface)". Enable http2 to keep serving such clients; standalone and the Docker image already include it. HTTPS via ALPN is unaffected, as h2 was already only offered with the feature enabled. The crate also no longer enables tokio/signal or hyper/http2 for other crates in the build, so a crate that relied on that has to enable them itself.
• server::state::MockServerState and server::state::HttpMockStateManager are now crate-private (#289, #326). Neither could be used from outside the crate beyond constructing it; code using the MockServer API is unaffected.
• The empty experimental Cargo feature was removed (#316). Remove it from your dependency's feature list; it did not enable any functionality.
• The Docker image now uses a slim Debian runtime without the Rust toolchain or source tree (#202, 1231c63). curl and wget are no longer installed, so healthchecks that call them need another probe: an httpGet probe against /__httpmock__/ping, or from inside the container bash -c 'exec 3<>/dev/tcp/127.0.0.1/5050'. The CA files are no longer in the image either; use certs/ca.pem from the repository or server::DEFAULT_CA_CERTIFICATE. The executable is now at /usr/local/bin/httpmock, with a compatibility symlink at /usr/local/cargo/bin/httpmock so existing absolute paths continue to work.
• The tls-detect cargo feature was removed

... (truncated)

Changelog

Sourced from httpmock's changelog.

Version 0.9.0

The crate was upgraded to the Rust 2024 edition. The minimum supported Rust version remains 1.88.

Breaking changes

• server::matchers is now crate-private (#312). Its matcher, comparator and reader types are implementation details rather than a supported extension API; there is no replacement public path. Custom predicates remain possible with When::is_true.
• The body helpers is_blank, contains_str, contains_slice and contains_vec were removed (#246). Use request.body_string().contains(".."), which also works inside respond_with, or request.body_ref().windows(n).any(|w| w == b"..") with a non-empty needle, and When::body_includes when matching.
• HttpMockRequest::query_params_map() was removed (#246). Collect query_params() instead: let params: HashMap<String, String> = request.query_params().into_iter().collect(); keeps the last value for duplicate keys, as the removed method did. query_params() has returned Vec<(String, String)> since 0.8.2.
• The MockExt trait was removed and Mock's public id field is now private (#285). Remove MockExt imports and replace direct mock.id field access with mock.id(). Mock::new(id, &server) is unchanged.
• The mock server only accepts cleartext HTTP/2 connections (prior knowledge, as gRPC clients send it) when the http2 cargo feature is enabled (#297). Previously this worked without the feature. It fails at runtime, not at compile time: the client sees the connection closed after the preface and the server logs "invalid HTTP version parsed (found HTTP2 preface)". Enable http2 to keep serving such clients; standalone and the Docker image already include it. HTTPS via ALPN is unaffected, as h2 was already only offered with the feature enabled. The crate also no longer enables tokio/signal or hyper/http2 for other crates in the build, so a crate that relied on that has to enable them itself.
• server::state::MockServerState and server::state::HttpMockStateManager are now crate-private (#289, #326). Neither could be used from outside the crate beyond constructing it; code using the MockServer API is unaffected.
• The empty experimental Cargo feature was removed (#316). Remove it from your dependency's feature list; it did not enable any functionality.
• The Docker image now uses a slim Debian runtime without the Rust toolchain or source tree (#202, 1231c63). curl and wget are no longer installed, so healthchecks that call them need another probe: an httpGet probe against /__httpmock__/ping, or from inside the container bash -c 'exec 3<>/dev/tcp/127.0.0.1/5050'. The CA files are no longer in the image either; use certs/ca.pem from the repository or server::DEFAULT_CA_CERTIFICATE. The executable is now at /usr/local/bin/httpmock, with a compatibility symlink at /usr/local/cargo/bin/httpmock so existing absolute paths continue to work.

... (truncated)

Commits

• d6fe1cc Release 0.9.0
• 3926545 Stop exposing optional dependencies as cargo features
• 8e4c443 Make HttpMockStateManager crate-private
• 3a8cb6d chore: drop a stale comment about moving body helpers
• e8699b5 docs: apply the 0.9 breaking-change review to the changelog
• a1dbc8f docs: point the docs.rs front page at the guide and badge feature-gated items
• 4ecf44c Use is_some_and for the authority IP check in the TLS resolver
• 7f52d59 Take an AsyncFn in with_retry instead of a closure plus future pair
• ee5a062 docs: regenerate website method docs for up_to_n_times
• 95f07c3 ci(deps): bump the npm_and_yarn group across 1 directory with 3 updates (#334)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Oct 26, 2026 6:37pm UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Microck/kagi-cli
• Branch: main
• File: .coderabbit.yaml
• Commit: d7bf4f5
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: cc842c3c-a242-4d9c-a946-ba38853bea56

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-26T18:36:59.815538Z	6133a1f	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.