• Reject invalid WebSocket close-frame status codes, malformed payloads, and invalid UTF-8 close reasons.
• Deprecate the Parser::parse_close_payload() method in favor of Parser::try_parse_close_payload().

• Reject WebSocket frames with reserved bits.
• Reject new WebSocket text or binary frames during a continuation.

• Fix multipart field parsing when boundary delimiter is split across payload chunks.
• Improve detail in some error messages.

• Add Error::add_response_mapper() to allow middleware to modify error-generated responses before they are sent.
• Remove the experimental experimental-io-uring crate feature.

• Remove the experimental experimental-io-uring crate feature and its implementation, including the NamedFile::open_async() method.
• Add support for passing multiple root directories to Files::new.
• Add Files::try_compressed() to support serving pre-compressed static files.
• Fix handling of Range: bytes=0-.
• Fix panic in Files when use_hidden_files() is enabled and request paths contain . segments.
• Fix NamedFile panic when serving files with pre-UNIX epoch modification times.
• Fix invalid Content-Encoding: identity header in NamedFile range responses.

• Close idle HTTP/1 keep-alive connections during graceful shutdown and let active connections finish only their current request before closing.

• Close idle HTTP/1 keep-alive connections during graceful server shutdown and close active connections after their current request finishes.

• Fix MessageBody implementation for ByteString to signal completion after yielding its contents. #4177

3.13.1

• Fix HTTP/1 WebSocket upgrade responses being overwritten with Connection: close when the upgraded request payload remains open. #4115

4.14.0

• Add HttpRequest::{cookies_raw,cookie_raw} and ServiceRequest::{cookies_raw,cookie_raw} for reading request cookies without percent-decoding names and values. #3542
• Enable dual-stack IPv6 sockets on Windows when possible so that Actix-created listeners bound to [::] also accept IPv4 connections.
• Panic when calling Route::to() or Route::service() after Route::wrap() to prevent silently dropping route middleware. #3944
• Fix HttpRequest::{match_pattern,match_name} reporting path-only matches when route guards disambiguate overlapping resources. #3346
• Fix Readlines handling of lines split across payload chunks so combined line limits are enforced and complete lines are yielded.
• Fix app data being retained after graceful shutdown with in-flight slow request bodies. #3100
• Update foldhash dependency to 0.2.
• Update rand dependency to 0.10.
• Update impl-more dependency to 0.3.
• Add HttpServer::h1_write_buffer_size().