wreq 1.2.16-aarch64-linux → 1.3.0-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 72b66a73489b44c20e3103c6d92e202bf11a3465689fad7ad52e74455f31c51c
-  data.tar.gz: dbfe1d73a74d7724883bb822466f802c7b19fc0c693a2b6f934178647dd4512d
+  metadata.gz: f87dcba7562a09b49de04dcae968bc9f2d43c588b0d0bff67c3a28a4dc756fdb
+  data.tar.gz: 4a23583bbee6e0cd44bb6116b9afbfbd3836d0dea6d6f7f9099399d23ba324f9
 SHA512:
-  metadata.gz: ff68b2fbf55cf6bd3d24be6b19ac00aab402c2b141b1fcb16668293d0e12f7e8540c7750b3a051e182c094bba34d0095d1cfeaadb1de97c7fd21e58516741da6
-  data.tar.gz: b522e354da311bd02e5f50539ffc1d0fc344d7f0349a4a963f6872f05e0860330d1896b46db4c3ca4cb0c655b87f74ebb1e1a37b1b7a214dd13f5d8c6c568435
+  metadata.gz: ff0a87e6380582952797fff88c6a49b208fa328119b5a2844520e55703b05b3bc845f3dd799a95b83e83595e0e4484b5bc5294582ba259bbf51ee134947127c2
+  data.tar.gz: 8e5ec7df1c34be96b97d102f0ac037a038b036e8e649e71b27ef602646b3cf941f194fd4def577f93c0c0be336cdf201307dac963875333c4474f3e3386e63d3

data/crates/wreq-util/CHANGELOG.md

@@ -17,6 +17,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
+- Match Trust Anchor ID ordering by Chrome version: randomized per native configuration for 152/153, and sorted by raw ID bytes for 154.
+
 - *(emulate)* Fix Firefox 150 and 151 cipher suite lists.
 
 ## [3.0.0-rc.14](https://github.com/0x676e67/wreq-util/compare/v3.0.0-rc.13...v3.0.0-rc.14) - 2026-07-04

data/lib/wreq_ruby/emulate.rb

@@ -264,6 +264,14 @@ module Wreq
   # for HTTP/2 and automatic default headers. The actual implementation is
   # provided by Rust.
   #
+  # Construction generates the native configuration once. For Chrome 152/153,
+  # the TLS trust_anchors extension's ID order is randomized at construction;
+  # Chrome 154 sorts those IDs by their raw bytes instead. Reusing this object
+  # across clients or requests retains that order. Creating a new object generates
+  # a new configuration, including a fresh shuffle for Chrome 152/153.
+  # This does not freeze other per-handshake randomness or force a new handshake
+  # when a request reuses an existing connection.
+  #
   # `profile:` defaults to the library's default profile when omitted.
   # `platform:` defaults to the library's default platform when omitted.
   #
@@ -289,6 +297,10 @@ module Wreq
     # Native fields and methods are set by the extension.
     # This stub is for documentation only.
     unless singleton_methods(false).include?(:new)
+      # Generates a reusable native configuration. Chrome 152/153 Trust Anchor ID
+      # order is chosen here and retained when this object is reused; Chrome 154
+      # uses raw-byte sorted order. See {Emulation} for connection semantics.
+      #
       # @param profile [Wreq::Profile, nil] Fingerprint profile to emulate
       # @param platform [Wreq::Platform, nil] Operating system platform to emulate
       # @param http2 [Boolean, nil] Whether HTTP/2 emulation is enabled; defaults

data/test/emulation_test.rb

@@ -1,8 +1,28 @@
 # frozen_string_literal: true
 
 require "test_helper"
+require "socket"
+require "stringio"
+require "timeout"
 
 class EmulationTest < Minitest::Test
+  def test_reused_emulation_retains_trust_anchors_across_clients_and_requests
+    [Wreq::Profile::Chrome152, Wreq::Profile::Chrome153, Wreq::Profile::Chrome154].each do |profile|
+      emulation = Wreq::Emulation.new(profile: profile)
+      client = Wreq::Client.new(emulation: emulation, no_proxy: true)
+      expected = capture_trust_anchors { |url| client.get(url, timeout: 5) }
+      refute_empty expected, profile.to_s
+
+      request_client = Wreq::Client.new(no_proxy: true)
+      2.times do
+        actual = capture_trust_anchors do |url|
+          request_client.get(url, emulation: emulation, timeout: 5)
+        end
+        assert_equal expected, actual, "#{profile}: reusing an object must retain its configuration"
+      end
+    end
+  end
+
   def test_all_emulation_device_constants_are_non_nil
     Wreq::Profile.constants.each do |name|
       const = Wreq::Profile.const_get(name)
@@ -37,4 +57,60 @@ class EmulationTest < Minitest::Test
         "#{name} should be Platform, got #{const.inspect}"
     end
   end
+
+  private
+
+  # Each listener forces a new connection. Stop after ClientHello so this test
+  # inspects the extension bytes without depending on certificates or the network.
+  def capture_trust_anchors
+    server = TCPServer.new("127.0.0.1", 0)
+    thread = Thread.new do
+      socket = nil
+      Timeout.timeout(5) do
+        socket = server.accept
+        handshake = +"".b
+        loop do
+          header = read_tls_bytes(socket, 5)
+          raise "expected a TLS handshake record" unless header.getbyte(0) == 22
+          handshake << read_tls_bytes(socket, header.byteslice(3, 2).unpack1("n"))
+          next if handshake.bytesize < 4
+          length = handshake.byteslice(1, 3).bytes.reduce(0) { |n, byte| (n << 8) | byte }
+          break if handshake.bytesize >= length + 4
+        end
+        trust_anchors_from_client_hello(handshake)
+      end
+    ensure
+      socket&.close
+    end
+    thread.report_on_exception = false
+
+    assert_raises(Wreq::ConnectionError) { yield "https://127.0.0.1:#{server.addr[1]}/" }
+    thread.value
+  ensure
+    server&.close
+    thread&.kill if thread&.alive?
+    thread&.join
+  end
+
+  def read_tls_bytes(io, length)
+    bytes = io.read(length)
+    raise EOFError, "truncated ClientHello" unless bytes&.bytesize == length
+    bytes
+  end
+
+  def trust_anchors_from_client_hello(handshake)
+    io = StringIO.new(handshake)
+    raise "expected ClientHello" unless read_tls_bytes(io, 1).unpack1("C") == 1
+    read_tls_bytes(io, 3 + 2 + 32) # Handshake length, legacy version and random.
+    read_tls_bytes(io, read_tls_bytes(io, 1).unpack1("C")) # Session ID.
+    read_tls_bytes(io, read_tls_bytes(io, 2).unpack1("n")) # Cipher suites.
+    read_tls_bytes(io, read_tls_bytes(io, 1).unpack1("C")) # Compression methods.
+    extensions = StringIO.new(read_tls_bytes(io, read_tls_bytes(io, 2).unpack1("n")))
+    until extensions.eof?
+      type, length = read_tls_bytes(extensions, 4).unpack("nn")
+      data = read_tls_bytes(extensions, length)
+      return data if type == 51764
+    end
+    raise "missing trust_anchors extension"
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: wreq
 version: !ruby/object:Gem::Version
-  version: 1.2.16
+  version: 1.3.0
 platform: aarch64-linux
 authors:
 - SearchApi
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-09-21 00:00:00.000000000 Z
+date: 2026-09-24 00:00:00.000000000 Z
 dependencies: []
 description: An easy and powerful Ruby HTTP client with advanced browser fingerprinting
   that accurately emulates Chrome, Edge, Firefox, Safari, Opera, and OkHttp with precise