wreq 1.2.15 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cb297a1d40048f6a29833fe7eb1a8248e1460825be97802d82aece4e922b1b6a
-  data.tar.gz: eb8042d063690fa100cc63249f041e17724b5e8113c0611acb8c819d4ecc2afd
+  metadata.gz: a684244b1b3a988034a958ba6d5be4bd1c3233a958834eb103cabf8b57c7c7d2
+  data.tar.gz: 2246ef7c885c1d4c429b1a0630795b8fe24bd1923dd4205267dd727ff552bb90
 SHA512:
-  metadata.gz: 3e781f223de45ef1ad4b92c17d2af10e2060a2de89e940a69d5a4cab4fd3a8e3ec96c96d1553ab22bc782304596a2bc15403124b324e0dbc4fab41c48256212e
-  data.tar.gz: ca634efa4d997c7f96099929ff3b5163cc2fb236d9ba49f8502a99811dda441636ed05b1d05c89e58e1ee4e8954a97a47420963fe4f568c7cd4682f194c6adf2
+  metadata.gz: 4a1e164422249f5cc1df7d1259879e640c4e822ef3e9e2d0d67c11128e7f90c023119ddb6d1610a098b1d2c43657f72cdf0f0780f29f80f81e58be6b2cf66f72
+  data.tar.gz: 8298504fd0e17008572c3d0a7ed0ee1ef949bbce9c88a73729fcece75ba87fb54c43ce38fa1ae961fcf297db8e0c2ca58b528155d14aac588ee23499255b860e

data/Cargo.lock

@@ -1490,7 +1490,7 @@ dependencies = [
 
 [[package]]
 name = "wreq-ruby"
-version = "1.2.15"
+version = "1.3.0"
 dependencies = [
  "arc-swap",
  "bytes",

data/Cargo.toml

@@ -5,7 +5,7 @@ authors = ["SearchApi <support@searchapi.io>"]
 homepage = "https://github.com/SearchApi/wreq-ruby"
 repository = "https://github.com/SearchApi/wreq-ruby"
 edition = "2024"
-version = "1.2.15"
+version = "1.3.0"
 rust-version = "1.98"
 
 [lib]

data/README.md

@@ -91,7 +91,7 @@ Most browser device models share identical TLS and HTTP/2 configurations, differ
 
   | **Browser** | **Versions** |
   | ----------- | ------------ |
-  | **Chrome**  | `Chrome100`, `Chrome101`, `Chrome104`, `Chrome105`, `Chrome106`, `Chrome107`, `Chrome108`, `Chrome109`, `Chrome110`, `Chrome114`, `Chrome116`, `Chrome117`, `Chrome118`, `Chrome119`, `Chrome120`, `Chrome123`, `Chrome124`, `Chrome126`, `Chrome127`, `Chrome128`, `Chrome129`, `Chrome130`, `Chrome131`, `Chrome132`, `Chrome133`, `Chrome134`, `Chrome135`, `Chrome136`, `Chrome137`, `Chrome138`, `Chrome139`, `Chrome140`, `Chrome141`, `Chrome142`, `Chrome143`, `Chrome144`, `Chrome145`, `Chrome146`, `Chrome147`, `Chrome148`, `Chrome149`, `Chrome150`, `Chrome151`, `Chrome152`, `Chrome153` |
+  | **Chrome**  | `Chrome100`, `Chrome101`, `Chrome104`, `Chrome105`, `Chrome106`, `Chrome107`, `Chrome108`, `Chrome109`, `Chrome110`, `Chrome114`, `Chrome116`, `Chrome117`, `Chrome118`, `Chrome119`, `Chrome120`, `Chrome123`, `Chrome124`, `Chrome126`, `Chrome127`, `Chrome128`, `Chrome129`, `Chrome130`, `Chrome131`, `Chrome132`, `Chrome133`, `Chrome134`, `Chrome135`, `Chrome136`, `Chrome137`, `Chrome138`, `Chrome139`, `Chrome140`, `Chrome141`, `Chrome142`, `Chrome143`, `Chrome144`, `Chrome145`, `Chrome146`, `Chrome147`, `Chrome148`, `Chrome149`, `Chrome150`, `Chrome151`, `Chrome152`, `Chrome153`, `Chrome154` |
   | **Edge**    | `Edge101`, `Edge122`, `Edge127`, `Edge131`, `Edge134`, `Edge135`, `Edge136`, `Edge137`, `Edge138`, `Edge139`, `Edge140`, `Edge141`, `Edge142`, `Edge143`, `Edge144`, `Edge145`, `Edge146`, `Edge147`, `Edge148` |
   | **Firefox** | `Firefox109`, `Firefox117`, `Firefox128`, `Firefox133`, `Firefox135`, `FirefoxPrivate135`, `FirefoxAndroid135`, `Firefox136`, `FirefoxPrivate136`, `Firefox139`, `Firefox142`, `Firefox143`, `Firefox144`, `Firefox145`, `Firefox146`, `Firefox147`, `Firefox148`, `Firefox149`, `Firefox150`, `Firefox151`, `Firefox152` |
   | **Safari**  | `Safari15_3`, `Safari15_5`, `Safari15_6_1`, `Safari16`, `Safari16_5`, `Safari17_0`, `Safari17_2_1`, `Safari17_4_1`, `Safari17_5`, `Safari17_6`, `Safari18`, `Safari18_2`, `Safari18_3`, `Safari18_3_1`, `Safari18_5`, `Safari26`, `Safari26_1`, `Safari26_2`, `SafariIos16_5`, `SafariIos17_2`, `SafariIos17_4_1`, `SafariIos18_1_1`, `SafariIos26`, `SafariIos26_2`, `SafariIPad18`, `SafariIPad26`, `SafariIpad26_2` |

data/crates/wreq-util/CHANGELOG.md

@@ -12,10 +12,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - *(emulate)* Add Chrome 151 profile.
 - *(emulate)* Add Chrome 152 profile.
 - *(emulate)* Add Chrome 153 profile.
+- *(emulate)* Add Chrome 154 profile.
 - *(emulate)* Add Firefox 152 profile.
 
 ### Fixed
 
+- Match Trust Anchor ID ordering by Chrome version: randomized per native configuration for 152/153, and sorted by raw ID bytes for 154.
+
 - *(emulate)* Fix Firefox 150 and 151 cipher suite lists.
 
 ## [3.0.0-rc.14](https://github.com/0x676e67/wreq-util/compare/v3.0.0-rc.13...v3.0.0-rc.14) - 2026-07-04

data/crates/wreq-util/src/emulate/macros.rs

@@ -151,32 +151,27 @@ macro_rules! header_firefox_sec_fetch {
 
 macro_rules! header_firefox_accept {
     ($headers:expr) => {
-        $headers.insert(
-            ACCEPT,
-            HeaderValue::from_static(
-                "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
-            ),
-        );
-        $headers.insert(ACCEPT_LANGUAGE, HeaderValue::from_static("en-US,en;q=0.5"));
-        #[cfg(feature = "emulation-compression")]
-        $headers.insert(
-            ACCEPT_ENCODING,
-            HeaderValue::from_static("gzip, deflate, br"),
-        );
+        header_firefox_accept!(@build $headers, "en-US,en;q=0.5", "gzip, deflate, br");
     };
     (zstd, $headers:expr) => {
+        header_firefox_accept!(@build $headers, "en-US,en;q=0.5", "gzip, deflate, br, zstd");
+    };
+    // Firefox 147 changed the generated q-value from dividing 1.0 across the list to
+    // decrementing by 0.1 per entry, so a two-entry list became q=0.9 (Bugzilla 2000765,
+    // landed in 0e050ae5116d).
+    (zstd_q09, $headers:expr) => {
+        header_firefox_accept!(@build $headers, "en-US,en;q=0.9", "gzip, deflate, br, zstd");
+    };
+    (@build $headers:expr, $accept_language:expr, $accept_encoding:expr) => {
         $headers.insert(
             ACCEPT,
             HeaderValue::from_static(
                 "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
             ),
         );
-        $headers.insert(ACCEPT_LANGUAGE, HeaderValue::from_static("en-US,en;q=0.5"));
+        $headers.insert(ACCEPT_LANGUAGE, HeaderValue::from_static($accept_language));
         #[cfg(feature = "emulation-compression")]
-        $headers.insert(
-            ACCEPT_ENCODING,
-            HeaderValue::from_static("gzip, deflate, br, zstd"),
-        );
+        $headers.insert(ACCEPT_ENCODING, HeaderValue::from_static($accept_encoding));
     };
 }
 

data/crates/wreq-util/src/emulate/profile/chrome/tls.rs

@@ -50,13 +50,16 @@ macro_rules! tls_options {
             .alps_use_new_codepoint(true))
     };
     (9, $curves:expr) => {
+        tls_options!(9, $curves, shuffled_trust_anchors(crate::rand::fast_random))
+    };
+    (9, $curves:expr, $trust_anchors:expr) => {
         tls_options!(@build ChromeTlsConfig::builder()
             .permute_extensions(true)
             .enable_ech_grease(true)
             .pre_shared_key(true)
             .curves($curves)
             .sigalgs_list(NEW_SIGALGS_LIST)
-            .trust_anchors(CHROME_TRUST_ANCHORS)
+            .trust_anchors($trust_anchors)
             .grease_sigalgs_enabled(true)
             .alps_use_new_codepoint(true))
     };
@@ -115,6 +118,44 @@ pub const NEW_SIGALGS_LIST: &str = join!(
 // Encoded IDs and wreq's Chromium root store come from the same root set.
 pub(super) const CHROME_TRUST_ANCHORS: &[u8] = &chromium_roots::encoded_trust_anchor_ids();
 
+// Chrome 152/153 iterate a salted flat_hash_set held by SSLClientContext, rather than
+// the root store's source order. Generate an order once per native configuration;
+// connections using that client configuration retain the order.
+// https://chromium.googlesource.com/chromium/src/+/f7b831a4e249fbd98eae4b391c69f70300a849d1/net/ssl/ssl_config_service.cc
+pub(super) fn shuffled_trust_anchors(mut random: impl FnMut() -> u64) -> Vec<u8> {
+    let mut ids = chromium_roots::trust_anchor_ids();
+    for index in (1..ids.len()).rev() {
+        let bound = (index + 1) as u64;
+        let limit = u64::MAX - u64::MAX % bound;
+        let mut value = random();
+        while value >= limit {
+            value = random();
+        }
+        ids.swap(index, (value % bound) as usize);
+    }
+
+    encode_trust_anchors(&ids)
+}
+
+// Chrome 154 sorts the raw IDs before adding their length prefixes.
+// https://chromium.googlesource.com/chromium/src/+/731082f0a26ce4b3976c3d82943092f5d13daf13/net/cert/x509_util.cc
+pub(super) fn sorted_trust_anchors() -> Vec<u8> {
+    let mut ids = chromium_roots::trust_anchor_ids();
+    ids.sort_unstable();
+    encode_trust_anchors(&ids)
+}
+
+fn encode_trust_anchors(ids: &[&[u8]]) -> Vec<u8> {
+    let mut encoded = Vec::with_capacity(CHROME_TRUST_ANCHORS.len());
+    for id in ids {
+        // encoded_trust_anchor_ids() validates these same IDs at compile time:
+        // each length is nonzero and fits in one byte.
+        encoded.push(id.len() as u8);
+        encoded.extend_from_slice(id);
+    }
+    encoded
+}
+
 pub const CERTIFICATE_COMPRESSORS: &[&'static dyn CertificateCompressor] = &[&BrotliCompressor];
 
 #[derive(TypedBuilder)]
@@ -144,7 +185,7 @@ pub struct ChromeTlsConfig {
     pre_shared_key: bool,
 
     #[builder(default, setter(strip_option))]
-    trust_anchors: Option<&'static [u8]>,
+    trust_anchors: Option<Vec<u8>>,
 
     #[builder(default, setter(strip_option))]
     grease_sigalgs_enabled: Option<bool>,
@@ -181,3 +222,65 @@ impl From<ChromeTlsConfig> for TlsOptions {
         builder.build()
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use wreq::IntoEmulation;
+
+    #[test]
+    fn chrome_profiles_retain_trust_anchor_order_when_cloned() {
+        for profile in [
+            crate::Profile::Chrome152,
+            crate::Profile::Chrome153,
+            crate::Profile::Chrome154,
+        ] {
+            let native = profile.into_emulation();
+            let cloned = native.clone();
+            let ids = native.tls_options.unwrap().trust_anchors.unwrap();
+            assert_eq!(ids.len(), CHROME_TRUST_ANCHORS.len());
+            assert_eq!(ids, cloned.tls_options.unwrap().trust_anchors.unwrap());
+            let decoded = decode_ids(&ids);
+            let mut expected = chromium_roots::trust_anchor_ids();
+            expected.sort_unstable();
+            if profile == crate::Profile::Chrome154 {
+                assert_eq!(decoded, expected);
+            }
+            let mut actual = decoded;
+            actual.sort_unstable();
+            assert_eq!(actual, expected);
+        }
+        assert!(
+            crate::Profile::Chrome151
+                .into_emulation()
+                .tls_options
+                .unwrap()
+                .trust_anchors
+                .is_none()
+        );
+    }
+
+    #[test]
+    fn trust_anchor_shuffle_preserves_ids_without_pinning_the_first() {
+        // Choosing index zero at every step rotates the entire list left.
+        // Rejecting u64::MAX also covers the unbiased sampling boundary.
+        let mut samples = std::iter::once(u64::MAX).chain(std::iter::repeat(0));
+        let encoded = shuffled_trust_anchors(|| samples.next().unwrap());
+        let decoded = decode_ids(&encoded);
+        let mut expected = chromium_roots::trust_anchor_ids();
+        expected.rotate_left(1);
+        assert_eq!(decoded, expected);
+        assert_eq!(encoded.len(), CHROME_TRUST_ANCHORS.len());
+    }
+
+    fn decode_ids(mut remaining: &[u8]) -> Vec<&[u8]> {
+        let mut decoded = Vec::new();
+        while let Some((&length, rest)) = remaining.split_first() {
+            assert_ne!(length, 0);
+            let (id, rest) = rest.split_at(usize::from(length));
+            decoded.push(id);
+            remaining = rest;
+        }
+        decoded
+    }
+}

data/crates/wreq-util/src/emulate/profile/chrome.rs

@@ -1929,6 +1929,40 @@ mod_generator!(
     ]
 );
 
+mod_generator!(
+    v154,
+    tls_options!(9, CURVES_3, sorted_trust_anchors()),
+    http2_options!(3),
+    header_initializer_with_zstd_priority,
+    [
+        (
+            MacOS,
+            r#""Chromium";v="154", "Google Chrome";v="154", "Not A(Brand";v="99""#,
+            "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
+        ),
+        (
+            Linux,
+            r#""Chromium";v="154", "Google Chrome";v="154", "Not A(Brand";v="99""#,
+            "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
+        ),
+        (
+            Android,
+            r#""Chromium";v="154", "Google Chrome";v="154", "Not A(Brand";v="99""#,
+            "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Mobile Safari/537.36"
+        ),
+        (
+            Windows,
+            r#""Chromium";v="154", "Google Chrome";v="154", "Not A(Brand";v="99""#,
+            "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
+        ),
+        (
+            IOS,
+            r#""Chromium";v="154", "Google Chrome";v="154", "Not A(Brand";v="99""#,
+            "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/154.0.8037.41 Mobile/15E148 Safari/604.1"
+        )
+    ]
+);
+
 mod_generator!(
     edge143,
     v132::build_emulation,

data/crates/wreq-util/src/emulate/profile/firefox/header.rs

@@ -35,3 +35,25 @@ pub fn header_initializer_with_zstd(ua: &'static str) -> HeaderMap {
     );
     headers
 }
+
+/// Firefox 147 and later. Identical to [`header_initializer_with_zstd`] apart from the
+/// `Accept-Language` q-value, which Firefox changed in 147 (Bugzilla 2000765).
+pub fn header_initializer_with_zstd_q09(ua: &'static str) -> HeaderMap {
+    let mut headers = HeaderMap::new();
+    header_firefox_ua!(headers, ua);
+    header_firefox_accept!(zstd_q09, headers);
+    headers.insert(
+        HeaderName::from_static("upgrade-insecure-requests"),
+        HeaderValue::from_static("1"),
+    );
+    header_firefox_sec_fetch!(headers);
+    headers.insert(
+        HeaderName::from_static("priority"),
+        HeaderValue::from_static("u=0, i"),
+    );
+    headers.insert(
+        HeaderName::from_static("te"),
+        HeaderValue::from_static("trailers"),
+    );
+    headers
+}

data/crates/wreq-util/src/emulate/profile/firefox.rs

@@ -380,7 +380,7 @@ mod_generator!(
 mod_generator!(
     ff147,
     ff135::build_emulation,
-    header_initializer_with_zstd,
+    header_initializer_with_zstd_q09,
     [
         (
             Windows,
@@ -408,7 +408,7 @@ mod_generator!(
 mod_generator!(
     ff148,
     ff135::build_emulation,
-    header_initializer_with_zstd,
+    header_initializer_with_zstd_q09,
     [
         (
             Windows,
@@ -436,7 +436,7 @@ mod_generator!(
 mod_generator!(
     ff149,
     ff135::build_emulation,
-    header_initializer_with_zstd,
+    header_initializer_with_zstd_q09,
     [
         (
             Windows,
@@ -465,7 +465,7 @@ mod_generator!(
     ff150,
     tls_options!(4, CIPHER_LIST_3, CURVES_2, KEY_SHARES_2),
     http2_options!(1),
-    header_initializer_with_zstd,
+    header_initializer_with_zstd_q09,
     [
         (
             Windows,
@@ -493,7 +493,7 @@ mod_generator!(
 mod_generator!(
     ff151,
     ff150::build_emulation,
-    header_initializer_with_zstd,
+    header_initializer_with_zstd_q09,
     [
         (
             Windows,
@@ -521,7 +521,7 @@ mod_generator!(
 mod_generator!(
     ff152,
     ff150::build_emulation,
-    header_initializer_with_zstd,
+    header_initializer_with_zstd_q09,
     [
         (
             Windows,

data/crates/wreq-util/src/emulate.rs

@@ -64,6 +64,7 @@ define_enum!(
     Chrome151 => ("chrome_151", v151::emulation),
     Chrome152 => ("chrome_152", v152::emulation),
     Chrome153 => ("chrome_153", v153::emulation),
+    Chrome154 => ("chrome_154", v154::emulation),
 
     // Edge versions
     Edge101 => ("edge_101", edge101::emulation),
@@ -215,6 +216,11 @@ impl Platform {
 /// The `Emulation` struct allows you to configure various aspects of profile and platform
 /// emulation, including the profile, platform, and whether to enable certain features
 /// like HTTP/2 or headers.
+///
+/// Conversion through [`wreq::IntoEmulation`] creates a native configuration,
+/// including a randomized Trust Anchor ID order for Chrome 152/153 profiles.
+/// Client-level emulation retains that order for subsequent connections.
+/// Chrome 154 sorts the IDs by their raw bytes instead.
 #[derive(Default, Clone, TypedBuilder)]
 pub struct Emulation {
     /// Whether to change the profile (browser/okhttp) information.

data/crates/wreq-util/tests/emulate_chrome.rs

@@ -295,3 +295,13 @@ test_emulation!(
     ],
     "52d84b11737d980aef856699f885ca86"
 );
+
+test_emulation!(
+    test_chrome154,
+    Emulation::Chrome154,
+    [
+        "t13d1517h2_8daaf6152771_cb7bf5808d99",
+        "t13d1518h2_8daaf6152771_e2d80978ab2e"
+    ],
+    "52d84b11737d980aef856699f885ca86"
+);

data/crates/wreq-util/tests/emulate_firefox.rs

@@ -111,3 +111,61 @@ test_emulation!(
     ["t13d1617h2_86a278354501_3cbfd9057e0d"],
     "6ea73faa8fc5aac76bded7bd238f6433"
 );
+
+/// Firefox 147 changed the generated `Accept-Language` q-value: the list used to divide 1.0
+/// across its entries, giving `q=0.5` for two, and now decrements by 0.1 per entry, giving
+/// `q=0.9`. See Bugzilla 2000765, landed in mozilla-firefox 0e050ae5116d.
+///
+/// Every profile is listed rather than a range, so adding one is a deliberate choice about
+/// which side of 147 it falls on.
+#[test]
+fn firefox_accept_language_matches_the_profile_version() {
+    use wreq::IntoEmulation;
+    use wreq_util::{Platform, Profile};
+
+    const PRE_147: &[(&str, Profile)] = &[
+        ("Firefox109", Emulation::Firefox109),
+        ("Firefox117", Emulation::Firefox117),
+        ("Firefox128", Emulation::Firefox128),
+        ("Firefox133", Emulation::Firefox133),
+        ("Firefox135", Emulation::Firefox135),
+        ("FirefoxPrivate135", Emulation::FirefoxPrivate135),
+        ("FirefoxAndroid135", Emulation::FirefoxAndroid135),
+        ("Firefox136", Emulation::Firefox136),
+        ("FirefoxPrivate136", Emulation::FirefoxPrivate136),
+        ("Firefox139", Emulation::Firefox139),
+        ("Firefox142", Emulation::Firefox142),
+        ("Firefox143", Emulation::Firefox143),
+        ("Firefox144", Emulation::Firefox144),
+        ("Firefox145", Emulation::Firefox145),
+        ("Firefox146", Emulation::Firefox146),
+    ];
+    const POST_147: &[(&str, Profile)] = &[
+        ("Firefox147", Emulation::Firefox147),
+        ("Firefox148", Emulation::Firefox148),
+        ("Firefox149", Emulation::Firefox149),
+        ("Firefox150", Emulation::Firefox150),
+        ("Firefox151", Emulation::Firefox151),
+        ("Firefox152", Emulation::Firefox152),
+    ];
+
+    fn accept_language(profile: Profile) -> String {
+        Emulation::builder()
+            .profile(profile)
+            .platform(Platform::Linux)
+            .build()
+            .into_emulation()
+            .headers
+            .get("accept-language")
+            .and_then(|value| value.to_str().ok())
+            .unwrap_or_default()
+            .to_owned()
+    }
+
+    for (name, profile) in PRE_147 {
+        assert_eq!("en-US,en;q=0.5", accept_language(*profile), "{name}");
+    }
+    for (name, profile) in POST_147 {
+        assert_eq!("en-US,en;q=0.9", accept_language(*profile), "{name}");
+    }
+}

data/lib/wreq_ruby/emulate.rb

@@ -65,6 +65,7 @@ module Wreq
       Chrome151 = nil
       Chrome152 = nil
       Chrome153 = nil
+      Chrome154 = nil
 
       Edge101 = nil
       Edge122 = nil
@@ -263,6 +264,14 @@ module Wreq
   # for HTTP/2 and automatic default headers. The actual implementation is
   # provided by Rust.
   #
+  # Construction generates the native configuration once. For Chrome 152/153,
+  # the TLS trust_anchors extension's ID order is randomized at construction;
+  # Chrome 154 sorts those IDs by their raw bytes instead. Reusing this object
+  # across clients or requests retains that order. Creating a new object generates
+  # a new configuration, including a fresh shuffle for Chrome 152/153.
+  # This does not freeze other per-handshake randomness or force a new handshake
+  # when a request reuses an existing connection.
+  #
   # `profile:` defaults to the library's default profile when omitted.
   # `platform:` defaults to the library's default platform when omitted.
   #
@@ -288,6 +297,10 @@ module Wreq
     # Native fields and methods are set by the extension.
     # This stub is for documentation only.
     unless singleton_methods(false).include?(:new)
+      # Generates a reusable native configuration. Chrome 152/153 Trust Anchor ID
+      # order is chosen here and retained when this object is reused; Chrome 154
+      # uses raw-byte sorted order. See {Emulation} for connection semantics.
+      #
       # @param profile [Wreq::Profile, nil] Fingerprint profile to emulate
       # @param platform [Wreq::Platform, nil] Operating system platform to emulate
       # @param http2 [Boolean, nil] Whether HTTP/2 emulation is enabled; defaults

data/src/emulate.rs

@@ -1,5 +1,6 @@
 use ::serde::Deserialize;
 use magnus::{Error, Module, Object, RModule, Ruby, Value, function, method, typed_data::Obj};
+use wreq::IntoEmulation;
 
 use crate::options::{NativeOption, Options};
 
@@ -90,6 +91,7 @@ define_ruby_enum!(
     Chrome151,
     Chrome152,
     Chrome153,
+    Chrome154,
 
     Edge101,
     Edge122,
@@ -205,10 +207,13 @@ define_ruby_enum!(
     IOS => "ios",
 );
 
-/// A struct to represent the `EmulationOption` class.
+/// Materialized emulation configuration owned by the Ruby object.
+///
+/// Clients and requests clone this value rather than regenerating profile settings,
+/// preserving configuration-level randomness for the lifetime of the object.
 #[derive(Clone)]
 #[magnus::wrap(class = "Wreq::Emulation", free_immediately, size)]
-pub struct Emulation(pub wreq_util::Emulation);
+pub struct Emulation(pub wreq::Emulation);
 
 // ===== impl Emulation =====
 
@@ -245,7 +250,8 @@ impl Emulation {
             )
             .http2(params.http2.unwrap_or(true))
             .headers(params.headers.unwrap_or(true))
-            .build();
+            .build()
+            .into_emulation();
 
         Ok(Self(emulation))
     }

data/test/emulation_test.rb

@@ -1,8 +1,28 @@
 # frozen_string_literal: true
 
 require "test_helper"
+require "socket"
+require "stringio"
+require "timeout"
 
 class EmulationTest < Minitest::Test
+  def test_reused_emulation_retains_trust_anchors_across_clients_and_requests
+    [Wreq::Profile::Chrome152, Wreq::Profile::Chrome153, Wreq::Profile::Chrome154].each do |profile|
+      emulation = Wreq::Emulation.new(profile: profile)
+      client = Wreq::Client.new(emulation: emulation, no_proxy: true)
+      expected = capture_trust_anchors { |url| client.get(url, timeout: 5) }
+      refute_empty expected, profile.to_s
+
+      request_client = Wreq::Client.new(no_proxy: true)
+      2.times do
+        actual = capture_trust_anchors do |url|
+          request_client.get(url, emulation: emulation, timeout: 5)
+        end
+        assert_equal expected, actual, "#{profile}: reusing an object must retain its configuration"
+      end
+    end
+  end
+
   def test_all_emulation_device_constants_are_non_nil
     Wreq::Profile.constants.each do |name|
       const = Wreq::Profile.const_get(name)
@@ -22,6 +42,7 @@ class EmulationTest < Minitest::Test
     {
       Wreq::Profile::Chrome152 => "Chrome152",
       Wreq::Profile::Chrome153 => "Chrome153",
+      Wreq::Profile::Chrome154 => "Chrome154",
       Wreq::Profile::Firefox152 => "Firefox152"
     }.each do |profile, name|
       assert_equal name, profile.to_s
@@ -36,4 +57,60 @@ class EmulationTest < Minitest::Test
         "#{name} should be Platform, got #{const.inspect}"
     end
   end
+
+  private
+
+  # Each listener forces a new connection. Stop after ClientHello so this test
+  # inspects the extension bytes without depending on certificates or the network.
+  def capture_trust_anchors
+    server = TCPServer.new("127.0.0.1", 0)
+    thread = Thread.new do
+      socket = nil
+      Timeout.timeout(5) do
+        socket = server.accept
+        handshake = +"".b
+        loop do
+          header = read_tls_bytes(socket, 5)
+          raise "expected a TLS handshake record" unless header.getbyte(0) == 22
+          handshake << read_tls_bytes(socket, header.byteslice(3, 2).unpack1("n"))
+          next if handshake.bytesize < 4
+          length = handshake.byteslice(1, 3).bytes.reduce(0) { |n, byte| (n << 8) | byte }
+          break if handshake.bytesize >= length + 4
+        end
+        trust_anchors_from_client_hello(handshake)
+      end
+    ensure
+      socket&.close
+    end
+    thread.report_on_exception = false
+
+    assert_raises(Wreq::ConnectionError) { yield "https://127.0.0.1:#{server.addr[1]}/" }
+    thread.value
+  ensure
+    server&.close
+    thread&.kill if thread&.alive?
+    thread&.join
+  end
+
+  def read_tls_bytes(io, length)
+    bytes = io.read(length)
+    raise EOFError, "truncated ClientHello" unless bytes&.bytesize == length
+    bytes
+  end
+
+  def trust_anchors_from_client_hello(handshake)
+    io = StringIO.new(handshake)
+    raise "expected ClientHello" unless read_tls_bytes(io, 1).unpack1("C") == 1
+    read_tls_bytes(io, 3 + 2 + 32) # Handshake length, legacy version and random.
+    read_tls_bytes(io, read_tls_bytes(io, 1).unpack1("C")) # Session ID.
+    read_tls_bytes(io, read_tls_bytes(io, 2).unpack1("n")) # Cipher suites.
+    read_tls_bytes(io, read_tls_bytes(io, 1).unpack1("C")) # Compression methods.
+    extensions = StringIO.new(read_tls_bytes(io, read_tls_bytes(io, 2).unpack1("n")))
+    until extensions.eof?
+      type, length = read_tls_bytes(extensions, 4).unpack("nn")
+      data = read_tls_bytes(extensions, length)
+      return data if type == 51764
+    end
+    raise "missing trust_anchors extension"
+  end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: wreq
 version: !ruby/object:Gem::Version
-  version: 1.2.15
+  version: 1.3.0
 platform: ruby
 authors:
 - SearchApi