wreq 1.2.16-x86_64-linux → 1.3.0-x86_64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8980a3d3905ee310c032e6f8011c9a7cff82959512db70a543511192f107b1e9
-  data.tar.gz: '062884466e05dc3eb1ca285fc683947f18c2eee1f866ab65655bd58bb61d7889'
+  metadata.gz: 11cb302df09d662922bf651bce01a4546d9837a0a3fbf72e91082389a12d0086
+  data.tar.gz: 2347b0838438abc24735ecfca4e3208fa803f664c4a949a8a008811120d7ea90
 SHA512:
-  metadata.gz: 88ea711ff0fa14bb309319857bf3ab9aaa7fce252678e11c8b194b1f09585dea0c14e14f5bf8c83b8d42f0e17865b613235b44b86b527fcdf236e6ef24b33c77
-  data.tar.gz: f64d4a623287953eefc5b732355bf2e5d7d7449174e6795396e1df954aab0c11aa34f5533f569273736e243c74eadf520d80e88e22292fb9d72e14fe86abbc20
+  metadata.gz: 773b652ce75c1eeb3fb68c337b3bf742fae06e6c04670dee6f21a3cbeff87cfb3f458ba8086008786eece70977ab64b6ad7a132b08385f6d936279ff44f0c15b
+  data.tar.gz: b00383d4fe2b8bf1fa688117fbba851256bd1a1d227aa03f9c8ce793a918cbb5261d38f588f9ea55b4c64e5e2da318143a298322c4d7d274131958d49910f2a6

data/crates/wreq-util/CHANGELOG.md

@@ -17,6 +17,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
+- Match Trust Anchor ID ordering by Chrome version: randomized per native configuration for 152/153, and sorted by raw ID bytes for 154.
+
 - *(emulate)* Fix Firefox 150 and 151 cipher suite lists.
 
 ## [3.0.0-rc.14](https://github.com/0x676e67/wreq-util/compare/v3.0.0-rc.13...v3.0.0-rc.14) - 2026-07-04

data/lib/wreq_ruby/emulate.rb

@@ -264,6 +264,14 @@ module Wreq
   # for HTTP/2 and automatic default headers. The actual implementation is
   # provided by Rust.
   #
+  # Construction generates the native configuration once. For Chrome 152/153,
+  # the TLS trust_anchors extension's ID order is randomized at construction;
+  # Chrome 154 sorts those IDs by their raw bytes instead. Reusing this object
+  # across clients or requests retains that order. Creating a new object generates
+  # a new configuration, including a fresh shuffle for Chrome 152/153.
+  # This does not freeze other per-handshake randomness or force a new handshake
+  # when a request reuses an existing connection.
+  #
   # `profile:` defaults to the library's default profile when omitted.
   # `platform:` defaults to the library's default platform when omitted.
   #
@@ -289,6 +297,10 @@ module Wreq
     # Native fields and methods are set by the extension.
     # This stub is for documentation only.
     unless singleton_methods(false).include?(:new)
+      # Generates a reusable native configuration. Chrome 152/153 Trust Anchor ID
+      # order is chosen here and retained when this object is reused; Chrome 154
+      # uses raw-byte sorted order. See {Emulation} for connection semantics.
+      #
       # @param profile [Wreq::Profile, nil] Fingerprint profile to emulate
       # @param platform [Wreq::Platform, nil] Operating system platform to emulate
       # @param http2 [Boolean, nil] Whether HTTP/2 emulation is enabled; defaults

data/test/emulation_test.rb

@@ -1,8 +1,28 @@
 # frozen_string_literal: true
 
 require "test_helper"
+require "socket"
+require "stringio"
+require "timeout"
 
 class EmulationTest < Minitest::Test
+  def test_reused_emulation_retains_trust_anchors_across_clients_and_requests
+    [Wreq::Profile::Chrome152, Wreq::Profile::Chrome153, Wreq::Profile::Chrome154].each do |profile|
+      emulation = Wreq::Emulation.new(profile: profile)
+      client = Wreq::Client.new(emulation: emulation, no_proxy: true)
+      expected = capture_trust_anchors { |url| client.get(url, timeout: 5) }
+      refute_empty expected, profile.to_s
+
+      request_client = Wreq::Client.new(no_proxy: true)
+      2.times do
+        actual = capture_trust_anchors do |url|
+          request_client.get(url, emulation: emulation, timeout: 5)
+        end
+        assert_equal expected, actual, "#{profile}: reusing an object must retain its configuration"
+      end
+    end
+  end
+
   def test_all_emulation_device_constants_are_non_nil
     Wreq::Profile.constants.each do |name|
       const = Wreq::Profile.const_get(name)
@@ -37,4 +57,60 @@ class EmulationTest < Minitest::Test
         "#{name} should be Platform, got #{const.inspect}"
     end
   end
+
+  private
+
+  # Each listener forces a new connection. Stop after ClientHello so this test
+  # inspects the extension bytes without depending on certificates or the network.
+  def capture_trust_anchors
+    server = TCPServer.new("127.0.0.1", 0)
+    thread = Thread.new do
+      socket = nil
+      Timeout.timeout(5) do
+        socket = server.accept
+        handshake = +"".b
+        loop do
+          header = read_tls_bytes(socket, 5)
+          raise "expected a TLS handshake record" unless header.getbyte(0) == 22
+          handshake << read_tls_bytes(socket, header.byteslice(3, 2).unpack1("n"))
+          next if handshake.bytesize < 4
+          length = handshake.byteslice(1, 3).bytes.reduce(0) { |n, byte| (n << 8) | byte }
+          break if handshake.bytesize >= length + 4
+        end
+        trust_anchors_from_client_hello(handshake)
+      end
+    ensure
+      socket&.close
+    end
+    thread.report_on_exception = false
+
+    assert_raises(Wreq::ConnectionError) { yield "https://127.0.0.1:#{server.addr[1]}/" }
+    thread.value
+  ensure
+    server&.close
+    thread&.kill if thread&.alive?
+    thread&.join
+  end
+
+  def read_tls_bytes(io, length)
+    bytes = io.read(length)
+    raise EOFError, "truncated ClientHello" unless bytes&.bytesize == length
+    bytes
+  end
+
+  def trust_anchors_from_client_hello(handshake)
+    io = StringIO.new(handshake)
+    raise "expected ClientHello" unless read_tls_bytes(io, 1).unpack1("C") == 1
+    read_tls_bytes(io, 3 + 2 + 32) # Handshake length, legacy version and random.
+    read_tls_bytes(io, read_tls_bytes(io, 1).unpack1("C")) # Session ID.
+    read_tls_bytes(io, read_tls_bytes(io, 2).unpack1("n")) # Cipher suites.
+    read_tls_bytes(io, read_tls_bytes(io, 1).unpack1("C")) # Compression methods.
+    extensions = StringIO.new(read_tls_bytes(io, read_tls_bytes(io, 2).unpack1("n")))
+    until extensions.eof?
+      type, length = read_tls_bytes(extensions, 4).unpack("nn")
+      data = read_tls_bytes(extensions, length)
+      return data if type == 51764
+    end
+    raise "missing trust_anchors extension"
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: wreq
 version: !ruby/object:Gem::Version
-  version: 1.2.16
+  version: 1.3.0
 platform: x86_64-linux
 authors:
 - SearchApi
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-09-21 00:00:00.000000000 Z
+date: 2026-09-24 00:00:00.000000000 Z
 dependencies: []
 description: An easy and powerful Ruby HTTP client with advanced browser fingerprinting
   that accurately emulates Chrome, Edge, Firefox, Safari, Opera, and OkHttp with precise