Bump actix-http from 3.12.0 to 3.13.3

[dependabot]

Bumps actix-http from 3.12.0 to 3.13.3.

Release notes

Sourced from actix-http's releases.

actix-http: v3.13.3

• Close idle HTTP/1 keep-alive connections during graceful server shutdown and close active connections after their current request finishes.

actix-http: v3.13.2

• Fix MessageBody implementation for ByteString to signal completion after yielding its contents. #4177

#4177: actix/actix-web#4177

actix-http: v3.13.1

3.13.1

• Fix HTTP/1 WebSocket upgrade responses being overwritten with Connection: close when the upgraded request payload remains open. #4115

#4115: actix/actix-web#4115

actix-http: v3.13.0

3.13.0

• When configured, gracefully close HTTP/1 connections after early responses to unread request bodies. #3967
• Wake HTTP/1 payload receivers with an incomplete-payload error when the sender is dropped before EOF. #3100
• Update foldhash dependency to 0.2.

#3967: actix/actix-web#3967 #3100: actix/actix-web#3100

actix-http: v3.12.1

Notice: This release contains a security fix. Users are encouraged to update to this version ASAP.

• SECURITY: Reject HTTP/1 requests with ambiguous request framing from Content-Length and Transfer-Encoding headers to prevent request smuggling.
• Encode the HTTP/1 Connection: Upgrade header in Camel-Case when camel-case header formatting is enabled.#3953
• Fix HeaderMap iterators' len() and size_hint() implementations for multi-value headers.
• Update rand dependency to 0.10.
• Update sha1 dependency to 0.11.

#3953: actix/actix-web#3953

Commits

• 4d435ab chore(actix-web): prepare release 4.14.1
• a732456 chore(actix-http): prepare release 3.13.3
• 0df37ac Drain HTTP/1 connections during graceful shutdown (#4169)
• 51603bf chore(actix-http): prepare release 3.13.2
• d1e2e89 fix(http): terminate ByteString message bodies (#4178)
• 3108963 chore: update actions (#4176)
• 937960c chore: update syn to 3 (#4175)
• 61b655e build(deps): bump time from 0.3.54 to 0.3.55 (#4171)
• bf2c859 chore: migrate to GitHub-builtin coverage (#4132)
• d5c282f build(deps): bump syn from 2.0.119 to 3.0.3 (#4165)
• Additional commits viewable in compare view

[tsauvajon]

@dependabot rebase

[tsauvajon]

@dependabot rebase