Merge stable into dev

.github/workflows/python-tests.yml

@@ -35,11 +35,11 @@ jobs:
     strategy:
       matrix:
         python-version:
-          - "3.10"
           - "3.11"
           - "3.12"
           - "3.13"
           - "3.14"
+          - "3.15"
 
     steps:
       - uses: actions/checkout@v7
@@ -144,7 +144,7 @@ jobs:
           PYO3_USE_ABI3_FORWARD_COMPATIBILITY: "1"
         with:
           target: ${{ matrix.platform.target }}
-          args: --release --out dist -i python3.10 -i python3.11 -i python3.12 -i python3.13 -i python3.14
+          args: --release --out dist -i python3.10 -i python3.11 -i python3.12 -i python3.13 -i python3.14 -i python3.15
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
           manylinux: manylinux_2_28
           before-script-linux: |
@@ -200,7 +200,7 @@ jobs:
           PYO3_USE_ABI3_FORWARD_COMPATIBILITY: "1"
         with:
           target: ${{ matrix.platform.target }}
-          args: --release --out dist -i python3.10 -i python3.11 -i python3.12 -i python3.13 -i python3.14
+          args: --release --out dist -i python3.10 -i python3.11 -i python3.12 -i python3.13 -i python3.14 -i python3.15
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
           manylinux: musllinux_1_2
           before-script-linux: |

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.10.1
+
+- Python 3.15 support: PyO3 0.30, and 3.15 wheels are published
+- CI tests 3.11 through 3.15; 3.10 wheels are still published but no longer tested
+- Dependency updates (brotli 9, hyper 1.12, tokio 1.53.3, and others)
+
 ## 0.10.0
 
 - Cookies set on a redirect hop are applied to the hops that follow it, the way a browser does. What a chain collects lives for that one request, so nothing carries between requests

Cargo.toml

@@ -1,9 +1,9 @@
 [package]
 name = "blasthttp"
-version = "0.10.0"
+version = "0.10.1"
 edition = "2024"
 description = "Offensive-first HTTP library with Python bindings"
-license = "GPL-3.0"
+license = "AGPL-3.0"
 # CI-only pin. Shipping it would override the toolchain of anyone building from the sdist.
 exclude = ["rust-toolchain.toml"]
 
@@ -64,8 +64,8 @@ serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 
 # Python bindings — optional, only when "python" feature is enabled
-pyo3 = { version = "0.27", features = ["extension-module"], optional = true }
-pyo3-async-runtimes = { version = "0.27", features = ["attributes", "tokio-runtime"], optional = true }
+pyo3 = { version = "0.30", features = ["extension-module"], optional = true }
+pyo3-async-runtimes = { version = "0.30", features = ["attributes", "tokio-runtime"], optional = true }
 
 [dev-dependencies]
 # TLS test server — uses our custom OpenSSL to serve with weak ciphers