chore(deps): bump actix-http from 3.12.0 to 3.13.5 in /reference-apps/rust

[dependabot]

Bumps actix-http from 3.12.0 to 3.13.5.

Release notes

Sourced from actix-http's releases.

actix-http: v3.13.5

• Reject invalid WebSocket close-frame status codes, malformed payloads, and invalid UTF-8 close reasons.
• Deprecate the Parser::parse_close_payload() method in favor of Parser::try_parse_close_payload().

actix-http: v3.13.4

• Reject WebSocket frames with reserved bits.
• Reject new WebSocket text or binary frames during a continuation.

actix-http: v3.13.3

• Close idle HTTP/1 keep-alive connections during graceful server shutdown and close active connections after their current request finishes.

actix-http: v3.13.2

• Fix MessageBody implementation for ByteString to signal completion after yielding its contents. #4177

#4177: actix/actix-web#4177

actix-http: v3.13.1

3.13.1

• Fix HTTP/1 WebSocket upgrade responses being overwritten with Connection: close when the upgraded request payload remains open. #4115

#4115: actix/actix-web#4115

actix-http: v3.13.0

3.13.0

• When configured, gracefully close HTTP/1 connections after early responses to unread request bodies. #3967
• Wake HTTP/1 payload receivers with an incomplete-payload error when the sender is dropped before EOF. #3100
• Update foldhash dependency to 0.2.

#3967: actix/actix-web#3967 #3100: actix/actix-web#3100

actix-http: v3.12.1

Notice: This release contains a security fix. Users are encouraged to update to this version ASAP.

• SECURITY: Reject HTTP/1 requests with ambiguous request framing from Content-Length and Transfer-Encoding headers to prevent request smuggling.
• Encode the HTTP/1 Connection: Upgrade header in Camel-Case when camel-case header formatting is enabled.#3953
• Fix HeaderMap iterators' len() and size_hint() implementations for multi-value headers.
• Update rand dependency to 0.10.
• Update sha1 dependency to 0.11.

#3953: actix/actix-web#3953

Commits

• c215607 build(deps): bump syn from 3.0.3 to 3.0.4 (#4221)
• e006162 chore(actix-http): prepare release 3.13.5
• 983981b fix: validate WebSocket close frames (#4218)
• 1d6c4b9 build(deps): bump actix-codec from 0.5.2 to 0.5.3 (#4224)
• 91302a6 build(deps): bump flate2 from 1.1.9 to 1.1.10 (#4225)
• 04d735d build(deps): bump rcgen from 0.14.9 to 0.14.10 (#4222)
• 27104ae chore(actix-http): prepare release 3.13.4
• 83ef570 fix(http): reject WebSocket frames with reserved bits (#4214)
• e52dd45 fix: reject data frames during WebSocket continuations (#4219)
• 1424e98 chore: avoid actix-rt reexports of tokio types
• Additional commits viewable in compare view

[NormB]

@dependabot recreate