chore(deps): Bump actix-web from 4.14.1 to 4.15.0 in /components/core

[dependabot]

Bumps actix-web from 4.14.1 to 4.15.0.

Release notes

Sourced from actix-web's releases.

actix-web: v4.15.0

• Add Error::add_response_mapper() to allow middleware to modify error-generated responses before they are sent.
• Remove the experimental experimental-io-uring crate feature.

Commits

• 5723cf4 chore(actix-web): prepare release 4.15.0
• 7ae209e fix(multipart): include inner error in Payload and Parse display strings (#4186)
• e5e9911 refactor(web): remove experimental io-uring feature (#4204)
• dab8c5a add methods for mapping error responses (#2979)
• 525dfb3 test(router): increase actix-router test coverage (#4196)
• 9bf4fb2 chore(actix-files): prepare release 0.7.0
• 3bb0007 refactor(files)!: remove experimental io-uring support (#4198)
• 5b43241 build(deps): bump futures-core from 0.3.33 to 0.3.34 (#4200)
• db14111 build(deps): bump rcgen from 0.14.8 to 0.14.9 (#4201)
• 22a0760 chore: ignore RUSTSEC-2026-0258 (#4203)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 Hypatia Security Scan

Findings: 68 issues detected

Severity	Count
🔴 Critical	7
🟠 High	34
🟡 Medium	27

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in build.yml",
    "type": "missing_timeout_minutes",
    "file": "build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in label-triage.yml",
    "type": "missing_timeout_minutes",
    "file": "label-triage.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in labels.yml",
    "type": "missing_timeout_minutes",
    "file": "labels.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in push-email-notify.yml",
    "type": "missing_timeout_minutes",
    "file": "push-email-notify.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "secret_action_without_presence_gate",
    "file": "instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

The PR aims to update actix-web from 4.14.1 to 4.15.0. While the Cargo.lock file reflects this change and Codacy indicates the PR is up to standards, the Cargo.toml manifest has not been modified in the provided diff. This inconsistency should be resolved to ensure project metadata matches the locked dependencies. Furthermore, there is a lack of automated test scenarios to verify that the version bump—and the associated removal of the experimental io-uring feature—does not introduce regressions.

About this PR

• The Cargo.toml manifest file was not modified in this PR. Updating only the lockfile without a corresponding change in the manifest can lead to configuration drift and unexpected behavior during future dependency resolution.
• No tests were included to verify the stability of the web server after the version bump or to ensure the removal of the experimental-io-uring feature does not impact functionality.

Test suggestions

• Verify the application builds successfully with the updated actix-web version
• Verify that existing web server functionality remains stable after the version bump
• Ensure no configuration issues arise from the removal of the 'experimental-io-uring' feature

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify the application builds successfully with the updated actix-web version
2. Verify that existing web server functionality remains stable after the version bump
3. Ensure no configuration issues arise from the removal of the 'experimental-io-uring' feature

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}