fix: v2 related fixed

Author: dancixx

.github/workflows/ci.yml

@@ -49,54 +49,83 @@ jobs:
       - uses: Swatinem/rust-cache@v2
         with:
           key: clippy-${{ matrix.label }}
-      - run: cargo clippy --workspace --no-deps ${{ matrix.features }} -- -D warnings
+      # `--tests --examples` extends the lint sweep to the integration test
+      # crate (`tako-rs/tests/*.rs`) and every example. Workspace-level
+      # `pedantic = warn` opts those in too, so `-D warnings` catches
+      # regressions like the ones surfaced by the v2 release audit (items
+      # after statements, ignored unit patterns, map_unwrap_or).
+      - run: cargo clippy --workspace --no-deps --tests --examples ${{ matrix.features }} -- -D warnings
 
   test:
-    name: test (${{ matrix.os }} / ${{ matrix.label }})
+    name: test (${{ matrix.os }} / ${{ matrix.toolchain }} / ${{ matrix.label }})
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
+        toolchain: [stable]
         label: [default]
         features: [""]
         include:
           - os: ubuntu-latest
+            toolchain: stable
             label: rich
             features: --features "tls,http2,plugins,signals,multipart,simd,protobuf,ip-filter,hmac-signature,json-schema,zstd,client,typed-header,zero-copy-extractors,jwt-simple,file-stream"
           - os: ubuntu-latest
+            toolchain: stable
             label: http3
             features: --features "tls,http2,http3,plugins,signals"
           - os: ubuntu-latest
+            toolchain: stable
             label: all-features
             # Regression guard for A1 (compio/tokio !Send mismatch under
             # workspace-wide --all-features test-build). Re-fixing the
             # gated test bins requires both runtimes resolved at once.
             features: --all-features
+          # Beta toolchain — early-warning for nightly→stable regressions
+          # picked up by upstream crates.
+          - os: ubuntu-latest
+            toolchain: beta
+            label: default
+            features: ""
+          # MSRV pin — make sure the declared `rust-version = "1.95"` actually
+          # builds AND passes tests. The plain `msrv` job below only builds;
+          # this one runs the rich feature set under the floor toolchain.
+          - os: ubuntu-latest
+            toolchain: "1.95"
+            label: msrv-rich
+            features: --features "tls,http2,plugins,signals,multipart,simd,protobuf,jwt-simple,client,typed-header,zero-copy-extractors,file-stream"
     env:
       # Tests don't need to break on every clippy nit; only enforce build-warnings
       # in build/clippy/doc jobs.
       RUSTFLAGS: ""
     steps:
       - uses: actions/checkout@v4
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: ${{ matrix.toolchain }}
       - uses: Swatinem/rust-cache@v2
         with:
-          key: test-${{ matrix.os }}-${{ matrix.label }}
+          key: test-${{ matrix.os }}-${{ matrix.toolchain }}-${{ matrix.label }}
       - run: cargo test --workspace ${{ matrix.features }}
 
   msrv:
-    name: MSRV (latest stable)
+    name: MSRV build (1.95)
     runs-on: ubuntu-latest
     env:
       RUSTFLAGS: ""
     steps:
       - uses: actions/checkout@v4
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: "1.95"
       - uses: Swatinem/rust-cache@v2
         with:
-          key: msrv-stable
-      - run: cargo build --workspace
+          key: msrv-1.95
+      # Plain `cargo build` on the declared MSRV — paired with the
+      # `toolchain: 1.95` row of the test matrix above so we catch both
+      # compilation errors and behaviour drift at the floor toolchain.
+      - run: cargo build --workspace --all-features
 
   doc:
     name: rustdoc
@@ -107,7 +136,11 @@ jobs:
       - uses: Swatinem/rust-cache@v2
         with:
           key: doc
-      - run: cargo doc --no-deps --workspace --features "tls,http2,http3,plugins,signals,multipart,simd,client,typed-header,zero-copy-extractors,utoipa,async-graphql,grpc"
+      # `--all-features` catches broken intra-doc links that only appear on
+      # feature-gated modules (timeout middleware, webtransport, compio
+      # adapters). `RUSTDOCFLAGS: -D rustdoc::broken-intra-doc-links` from the
+      # workflow `env` then turns those into hard failures.
+      - run: cargo doc --no-deps --workspace --all-features
 
   deny:
     name: cargo-deny

Cargo.toml

@@ -87,7 +87,7 @@ http-body = "1.0.1"
 http-body-util = "0.1.3"
 hyper = { version = "1.6.0", features = ["full"] }
 hyper-util = { version = "0.1.14", features = ["tokio"] }
-linkme = "0.3"
+linkme = "0.3.36"
 matchit = "0.9.1"
 mime = "0.3.17"
 mime_guess = "2.0.5"
@@ -99,9 +99,9 @@ serde = { version = "1.0.219", features = ["derive"] }
 serde_bytes = "0.11.17"
 serde_json = "1.0.140"
 serde_urlencoded = "0.7"
-serde_html_form = "0.2"
+serde_html_form = "0.2.8"
 sha1 = "0.10.6"
-smallvec = "1"
+smallvec = "1.15.1"
 tokio = { version = "1.52.1", features = ["full"] }
 tokio-stream = "0.1.17"
 tokio-tungstenite = "0.29.0"
@@ -113,18 +113,18 @@ urlencoding = "2.1.3"
 # Optional / feature-gated
 ahash = { version = "0.8.12", features = ["serde"] }
 brotli = "8.0.1"
-cron = "0.15"
-headers = "0.4"
+cron = "0.15.0"
+headers = "0.4.1"
 compio = { version = "0.18.0", features = ["macros", "rustls", "time", "fs", "net"] }
 cyper-core = "0.8.0"
 flate2 = "1.1.2"
 h3 = "0.0.8"
 h3-quinn = "0.0.10"
-hkdf = "0.12"
-hmac = "0.12"
-httpdate = "1.0"
-ipnet = "2.11"
-listenfd = "1.0"
+hkdf = "0.12.4"
+hmac = "0.12.1"
+httpdate = "1.0.3"
+ipnet = "2.11.0"
+listenfd = "1.0.2"
 multer = "3.1.0"
 opentelemetry = "0.31.0"
 opentelemetry-otlp = { version = "0.31.0", features = ["metrics", "http-proto"] }
@@ -133,25 +133,25 @@ prometheus = "0.13.4"
 jsonschema = { version = "0.30", default-features = false }
 prost = "0.14.1"
 quinn = "0.11.9"
-sha2 = "0.10"
+sha2 = "0.10.9"
 rustls = "0.23.28"
 rustls-pemfile = "2.2.0"
-send_wrapper = "0.6"
+send_wrapper = "0.6.0"
 simd-json = "0.15.1"
 sonic-rs = "0.5.6"
 subtle = "2.6.1"
 tikv-jemallocator = "0.6.0"
 tokio-rustls = "0.26.2"
-validator = { version = "0.20", features = ["derive"] }
-garde = { version = "0.22", features = ["derive"] }
-tokio-vsock = "0.7"
+validator = { version = "0.20.0", features = ["derive"] }
+garde = { version = "0.22.1", features = ["derive"] }
+tokio-vsock = "0.7.2"
 uuid = { version = "1.17.0", features = ["v4"] }
 webpki-roots = "1.0.1"
 rustls-native-certs = "0.8"
 zstd = "0.13.3"
 
 # Bench-only
-criterion = { version = "0.7", features = ["html_reports"] }
+criterion = { version = "0.7.0", features = ["html_reports"] }
 
 [profile.release]
 lto = "fat"

README.md

@@ -2,20 +2,6 @@
 [![Crates.io](https://img.shields.io/crates/v/tako-rs?style=flat-square)](https://crates.io/crates/tako-rs)
 ![License](https://img.shields.io/crates/l/tako-rs?style=flat-square)
 
-> **⚠️ Tako 2.0 is in progress on `main`.** The default branch carries breaking
-> changes (new `Server::builder`, `Router::with_state`, `nest`/`scope`, `405 +
-> Allow`, RFC 7807 `problem+json`, runtime-agnostic `ServerHandle`, …) that are
-> **not yet released**. For production, install the published 1.x line from
-> crates.io:
->
-> ```toml
-> [dependencies]
-> tako-rs = "1"
-> ```
->
-> Track 2.0 work in [`V2_ROADMAP.md`](./V2_ROADMAP.md). Expect API churn until
-> the 2.0 alpha is tagged.
-
 # 🐙 Tako — Multi-Transport Rust Framework for Modern Network Services
 
 > **Tako** (*"octopus"* in Japanese) is a pragmatic, ergonomic and extensible Rust framework for services that go beyond plain HTTP.
@@ -87,7 +73,8 @@ Choose Tako when your service needs one or more of these:
 | `PrivateCookieJar` | Encrypted cookies |
 | `BasicAuth` | HTTP Basic authentication |
 | `BearerAuth` | Bearer token extraction |
-| `JwtClaims<T>` | JWT token validation & claims |
+| `JwtClaimsUnverified<T>` | Unverified JWT claims decode (signature **not** checked) |
+| `JwtClaimsVerified<T>` | Signature-verified JWT claims (via `tako-plugins::JwtAuth`) |
 | `ApiKey` | API key from header/query |
 | `Accept` | Content negotiation |
 | `AcceptLanguage` | Language negotiation |
@@ -150,7 +137,11 @@ Choose Tako when your service needs one or more of these:
 
 [API Documentation](https://docs.rs/tako-rs/latest/tako/)
 
-MSRV 1.87.0 | Edition 2024
+MSRV 1.95 | Edition 2024
+
+See [`STABILITY.md`](./STABILITY.md) for the full semver and MSRV policy,
+[`MIGRATION_1_TO_2.md`](./MIGRATION_1_TO_2.md) for upgrading from 1.x, and
+[`CHANGELOG.md`](./CHANGELOG.md) for release notes.
 
 ## Tako in Production
 
@@ -181,7 +172,7 @@ Add **Tako** to your `Cargo.toml`:
 
 ```toml
 [dependencies]
-tako-rs = "1"
+tako-rs = "2"
 ```