[decebal]

Moves tauri-plugin-http and tauri-plugin-upload to reqwest 0.13, against v3.

tauri-plugin-http re-exports reqwest, so this is breaking and cannot land on v2 — that is the conclusion in #3462, and why Renovate's #3579 targets the wrong branch. tauri-plugin-updater already moved in #3213, and this follows its shape.

rustls

rustls-tls maps to reqwest/rustls-no-provider plus rustls with ring, and the provider is installed as the process default only when none is set, exactly as the updater does:

#[cfg(feature = "rustls-tls")]
if rustls::crypto::CryptoProvider::get_default().is_none() {
    let _ = rustls::crypto::ring::default_provider().install_default();
}

In upload that lives in one http_client() helper, since both commands build their own client and reqwest::Client::new() panics when the builder has no provider.

Features reqwest 0.13 removed

Removed here rather than silently remapped, so a user gets a "no such feature" error instead of different TLS behaviour:

Removed	Replacement
native-tls-alpn	ALPN is part of native-tls
rustls-tls-manual-roots, rustls-tls-webpki-roots, rustls-tls-native-roots	the platform verifier, via rustls-tls
trust-dns	hickory-dns
macos-system-configuration	system-proxy, already in the default set

The macos-system-configuration removal follows the deprecation note added in #3528.

Verification

Per-package CI commands, on macOS:

• cargo clippy --package tauri-plugin-http --all-targets -- -D warnings: clean
• cargo clippy --package tauri-plugin-http --all-targets --all-features -- -D warnings: clean
• cargo clippy --package tauri-plugin-upload --all-targets --all-features -- -D warnings: clean
• cargo test --package tauri-plugin-http --all-targets: 8 passed
• cargo test --package tauri-plugin-upload --all-targets --all-features: 7 passed
• cargo fmt --all -- --check: clean

Change files are included for both packages.

[FabianLars]

imo we should completely remove the re-export until reqwest hits v1. I think we'll be on v3 a bit longer than on v2. wdyt @Legend-Master

[Legend-Master]

Why did we export it at the first place? 😂

[FabianLars]

as a replacement for the actual rust apis we had in v1 / added on mobile. For the record, i was against it :P

[Legend-Master]

Remove the re-export then, just add it directly in your rust code if you want to use it in rust side

[github-actions]

Package Changes Through 9286494

There are 4 changes which include http with prerelease, http-js with prerelease, upload with prerelease, upload-js with prerelease

Planned Package Versions

The following package releases are the planned based on the context of changes in this pull request.

package	current	next
api-example	3.0.0-alpha.3	3.0.0-alpha.4
api-example-js	2.0.44-alpha.3	2.0.44-alpha.4
http	3.0.0-alpha.2	3.0.0-alpha.3
http-js	3.0.0-alpha.2	3.0.0-alpha.3
upload	3.0.0-alpha.2	3.0.0-alpha.3
upload-js	3.0.0-alpha.2	3.0.0-alpha.3

Add another change file through the GitHub UI by following this link.

---

Read about change files or the docs at github.com/jbolda/covector