[dependabot]

Bumps the ntex group with 5 updates in the / directory:

Package	From	To
ntex-h2	4.4.0	4.4.1
ntex-macros	4.2.0	4.3.0
ntex-service	5.6.0	5.7.1
ntex-tls	4.7.1	4.7.2
ntex-util	4.6.0	4.7.0

Updates ntex-h2 from 4.4.0 to 4.4.1

Release notes

Sourced from ntex-h2's releases.

ntex-h2 v4.4.1

Changes

• Manually implement forward_xxx macros

Changelog

Sourced from ntex-h2's changelog.

[4.4.1] - 2026-11-04

• Manually implement forward_xxx macros

Commits

• 59436e4 Manually implement forward_xxx macros
• See full diff in compare view

Updates ntex-macros from 4.2.0 to 4.3.0

Updates ntex-service from 5.6.0 to 5.7.1

Release notes

Sourced from ntex-service's releases.

ntex-service v5.7.1

Changes

• Prune ReadyNotifier subscriptions and pipeline links of dropped scopes, releasing their waiter stores; long-lived notifiers no longer grow with every subscribed connection

ntex-service v5.7.0

Changes

• Require matching error types when constructing ServiceChain::and_then and ServiceChain::then, rejecting incompatible chains at composition and inferring the error type of unannotated Ok results. Generic wrappers must carry the corresponding Error equality bounds

• Remove deprecated ServiceBinding and ServiceBindingMiddleware aliases, use ReadyBinding and ReadyBindingMiddleware

• Remove deprecated Ctx::call_nowait, use Ctx::call

• Remove forward_pl_bind!, forward_pl_ready!, and forward_pl_shutdown! macros, call Pipeline::bind_to(), Pipeline::ready(), and Pipeline::shutdown() directly

• Make missing-bind and cross-pipeline panic messages describe the fix

• Add forward! macro that forwards bind, ready, and shutdown to one or several service fields. Common misuse, such as a missing state type or self.field, reports a compile error describing the fix

• Add #[diagnostic::on_unimplemented] hints to Service, ServiceFactory, IntoService, IntoServiceFactory, Middleware, and RequestState

• Document fn_layer() as the recommended way to write middleware

Commits

• be81786 Prune dead subscriptions
• b6b5366 Fix services shutdown
• 0b7efd3 Add framework guide page on http client
• b12e0e2 Add framework guide page on timers
• 08de30a Add grpc framework guide
• 70d0efc Add a section on TLS support to the framework guide
• d7642ab Require matching error types when constructing ServiceChain::and_then and
• 8ea9519 Consistency for server factory types
• 17adb3f Improve ntex::web usability
• 9053e2d Use forward macro instead of forward_xxx
• Additional commits viewable in compare view

Updates ntex-tls from 4.7.1 to 4.7.2

Release notes

Sourced from ntex-tls's releases.

ntex-tls v4.7.2

Changes

• Use native CNG (BCrypt) hashing on Windows and drop the symcrypt dependency

Commits

• 0d39f80 Use native CNG (BCrypt) hashing on Windows and drop the symcrypt dependency
• 19940c5 Add bytes tracker documentation
• 4897986 Add WebSocket framework doc
• bbca0fd Coverage tests for debug impls
• 7568405 Add ReadyBinding service helpers
• 0b1f7f2 Add Reconnect service
• 78781c5 Improve quoting performance (#1174)
• 6e49e75 Speedup ntex-rt tests
• 65b8ed3 Update tests docs for ntex tests
• 928b589 Document tests for bytes and io
• Additional commits viewable in compare view

Updates ntex-util from 4.6.0 to 4.7.0

Release notes

Sourced from ntex-util's releases.

ntex-net v4.7.0

Changes

• compio: abort the process if dropping the runtime panics after the event loop panicked

ntex-tls v4.7.0

Changes

• Add public x509 module: certificate parsing, thumbprints, peer certificates, CA trust verification (CaCerts), identity loading and client identities, backed by Crypt32/CNG/SymCrypt on Windows and otherwise rustls/WebPKI or OpenSSL according to enabled features

• Enable x509 automatically with either TLS backend or on Windows; explicit x509 without a backend is an error.

• Add portable PEM/DER PKCS#8 identity loading, opaque signing keys and TLS adapters. PKCS#12 uses native Windows import or requires openssl on Unix, even when rustls handles trust. Native keys remain non-exportable.

• Add testgen feature with public x509::testgen test certificate generators (CNG/Crypt32 on Windows, OpenSSL on Unix), and testgen-rcgen feature with an rcgen backend for rustls-only builds

• Rustls X.509 uses an installed crypto provider (or the explicit rustls-ring fallback), with independent SHA-1/SHA-256 thumbprint hashing. WebPKI enforces client-auth EKU and rejects verification times before 1970; anchor validity, exact leaf pinning and verified-path expiry are preserved.

• schannel module is always compiled on Windows, the schannel feature is kept for compatibility

ntex-util v4.7.0

Changes

• Timeout and Retry use cache-aware Ctx::call instead of removed Ctx::call_nowait

ntex-io v4.7.0

Changes

• Add tokio feature, implements tokio AsyncRead and AsyncWrite for Io<F> and IoBoxed. Writes wait while write backpressure is active, poll_flush waits for a full flush

ntex v4.7.0

Changes

• Security: the default OpenSSL HTTP client (Client::new(), ClientBuilder::new()) now verifies server certificates against the system trust store and checks the hostname; previously it accepted any certificate. To trust a private root or a self-signed test certificate, pass your own SslConnector to ClientBuilder::openssl()

... (truncated)

Commits

• 8bf0932 Add tokio feature, implements tokio AsyncRead and AsyncWrite for `Io<F>...
• 421761c Add mqtt client and service framework guide
• 36c97b7 Update rt guide page
• 8356ca9 Add http2 client and service framework guide
• be81786 Prune dead subscriptions
• b6b5366 Fix services shutdown
• 0b7efd3 Add framework guide page on http client
• b12e0e2 Add framework guide page on timers
• 08de30a Add grpc framework guide
• 70d0efc Add a section on TLS support to the framework guide
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions