Merge branch 'main' into dependabot/cargo/bots/echidnabot/bytes-1.12.0

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -4,8 +4,10 @@ name: CodeQL Security Analysis
 on:
   push:
     branches: [main, master]
+  # No `branches:` filter — a required check whose workflow is branch-gated is
+  # never created on a non-matching base and blocks merge forever at
+  # "Expected — Waiting for status to be reported" (cf. affinescript#645).
   pull_request:
-    branches: [main, master]
   schedule:
     - cron: '0 6 1 * *'
 

.github/workflows/hypatia-scan.yml

@@ -7,8 +7,10 @@ name: Hypatia Security Scan
 on:
   push:
     branches: [main, master, develop]
+  # No `branches:` filter — a required check whose workflow is branch-gated is
+  # never created on a non-matching base and blocks merge forever at
+  # "Expected — Waiting for status to be reported" (cf. affinescript#645).
   pull_request:
-    branches: [main, master]
   schedule:
     - cron: '0 0 * * 0'
   workflow_dispatch:

bots/echidnabot/Cargo.lock

@@ -28,7 +28,7 @@ tokio = { version = "1.52.3", features = ["full"] }
 # HTTP framework
 axum = { version = "0.8.9", features = ["macros"] }
 tower = "0.5.3"
-tower-http = { version = "0.6.11", features = ["cors", "trace", "request-id"] }
+tower-http = { version = "0.7.0", features = ["cors", "trace", "request-id"] }
 
 # GraphQL
 async-graphql = { version = "7.2.1", features = ["uuid", "chrono"] }

bots/echidnabot/Cargo.toml

@@ -20,7 +20,7 @@ tokio = { version = "1.52.3", features = ["full"] }
 # Web framework
 axum = "0.8.9"
 tower = "0.5.3"
-tower-http = { version = "0.6.11", features = ["trace", "cors"] }
+tower-http = { version = "0.7.0", features = ["trace", "cors"] }
 
 # HTTP client
 reqwest = { version = "0.12.28", features = ["json", "rustls-tls"], default-features = false }

bots/rhodibot/Cargo.lock

@@ -34,7 +34,7 @@ clap = { version = "4.6.1", features = ["derive", "env"] }
 # Web framework (for webhook receiver)
 axum = { version = "0.8.9", features = ["macros"] }
 tower = "0.5.3"
-tower-http = { version = "0.6.11", features = ["trace", "cors"] }
+tower-http = { version = "0.7.0", features = ["trace", "cors"] }
 
 # HTTP client (for GitHub API)
 reqwest = { version = "0.12.28", features = ["json", "rustls-tls"], default-features = false }