chore(deps): Bump actix-cors from 0.7.1 to 0.7.2 in /components/core

[dependabot]

Bumps actix-cors from 0.7.1 to 0.7.2.

Release notes

Sourced from actix-cors's releases.

actix-session: v0.7.2

• Set SameSite attribute when adding a session removal cookie. #284
• Minimum supported Rust version (MSRV) is now 1.59 due to transitive time dependency.

#284: actix/actix-extras#284

actix-cors: v0.7.2

• Add configured CORS response headers to error responses.
• Minimum supported Rust version (MSRV) is now 1.88.

Commits

• ef0dcbc chore(actix-cors): prepare release 0.7.2
• d03d67a chore: ignore RUSTSEC-2026-0258
• 6a73994 fix(cors): add CORS headers to error responses (#809)
• 40f820c chore: address clippy warnings
• f90860c chore(actix-limitation): prepare release 0.6.0
• 30736af build(deps): bump redis from 1.5.0 to 1.6.0 (#807)
• 61fe214 build(deps): bump uuid from 1.24.0 to 1.24.1 (#808)
• 4031c91 ci: move cargo deny checks to lint workflows (#810)
• 412a4da ci: fix coverage job
• 7626ffd chore: format markdown
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[github-actions]

🔍 Hypatia Security Scan

Findings: 68 issues detected

Severity	Count
🔴 Critical	7
🟠 High	34
🟡 Medium	27

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in build.yml",
    "type": "missing_timeout_minutes",
    "file": "build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in label-triage.yml",
    "type": "missing_timeout_minutes",
    "file": "label-triage.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in labels.yml",
    "type": "missing_timeout_minutes",
    "file": "labels.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in push-email-notify.yml",
    "type": "missing_timeout_minutes",
    "file": "push-email-notify.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "secret_action_without_presence_gate",
    "file": "instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

[codacy-production]

Pull Request Overview

The PR updates actix-cors to resolve issues with CORS headers in error responses. While Codacy reports that the change is up to standards, the update is currently incomplete because the manifest file was not modified alongside the lockfile. Additionally, the update imposes a higher Minimum Supported Rust Version requirement. These factors, combined with a lack of verification for the header fixes in the current diff, should be addressed to ensure stability and requirement alignment.

About this PR

• The update introduces a higher Minimum Supported Rust Version requirement. This change may cause build failures in CI/CD pipelines or environments using older toolchains; please verify environment compatibility.
• The manifest file was not updated in this PR. While the lockfile reflects the change, the primary configuration file should also be updated to ensure dependency constraints are correctly defined for future builds.

Test suggestions

• Verify that CORS headers (e.g., Access-Control-Allow-Origin) are present on error responses (4xx/5xx).
• Confirm successful compilation and test execution on the required Minimum Supported Rust Version (MSRV).

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify that CORS headers (e.g., Access-Control-Allow-Origin) are present on error responses (4xx/5xx).
2. Confirm successful compilation and test execution on the required Minimum Supported Rust Version (MSRV).

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}