deps(deps): bump tungstenite from 0.24.0 to 0.30.0

[dependabot]

Bumps tungstenite from 0.24.0 to 0.30.0.

Changelog

Sourced from tungstenite's changelog.

0.30.0

• Reject non-compliant clients (incorrect Sec-WebSocket-Key length/format) on the server side.
• Update rand and sha dependencies and raise MSRV to 1.85.

0.29.0

• Update MSRV to 1.71 due to syn (the dependency of thiserror) requiring it.
• Allow users to send headers with non-visible ASCII values (as long as they constitute a correct HeaderValue).

0.28.0

• Reduce Error size 136 -> 32 by boxing internals of Error::Http, Error::WriteBufferFull, ProtocolError::InvalidHeader, TlsError::Native, TlsError::Rustls.
• Dependency update (socket to 0.6.0).
• Add into_inner() to the WebSocket, so that the user can extract the underlying stream.
• Address the edge-case for the WebSocket request generation when tungstenite is built with -Zfmt-debug=none.

0.27.0

• Fix large message read performance by enforcing max read_buffer_size read chunks.
• Make Hash implementation consistent for Utf8Bytes payloads.

0.26.2

• Add WebSocketConfig::read_buffer_size docs explaining performance/memory tradeoff.
• Implement traits and add helper methods for the UTF8 payloads making them comparable and more ergonomic.

0.26.1

• Fix/revert unsoundness that could lead to UB with dodgy Read stream implementations.

0.26.0

• Simplify Message to use Bytes payload directly with simpler Utf8Bytes for text.
• Change CloseFrame to use Utf8Bytes for reason.
• Re-export Bytes.

0.25.0

• New Payload type for Message that allows sending messages with a payload that can be cheaply cloned (Bytes). Long standing issue solved!
• Add WebSocketConfig::read_buffer_size default 128 KiB. This improves high load read performance. Note: This default increases memory usage compared to previous versions particularly for users expecting a high number of connections. Configure 4-8 KiB to get a similar memory usage to 0.24.
• Make WebSocketConfig non-exhaustive & add builder style construction fns.
• Remove deprecated WebSocketConfig::max_send_queue.
• Trim spaces on Sec-WebSocket-Protocol header.
• Eliminate data copies when reading complete messages & optimise read buffer. Improves performance.
• Update thiserror to 2.

Commits

• 7f4aeaf Bump version to 0.30.0
• 172280f Update rand and sha as well as raise the MSRV
• 16ca0fc check frame length against max_size before narrowing to usize (#545)
• 8585370 Fix #377
• d3e4e91 Validate Sec-WebSocket-Key length per RFC 6455 §4.2.1.5 (#543)
• c292171 Suppress clippy warnings in tests/
• 0938f1c Bump version
• 4a457f6 Add missing word to the comment (#521)
• aef3223 Fix grammar in WebSocketContext::from_partially_read docs (#534)
• ad6539b Inline the utf-8 crate (#536)
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: a9b86fa0-a270-48f4-9fb8-08735f0b3fbc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[proggeramlug]

Landed on main in merge train 265 (#11108), released as v0.5.1648 at 9d26936298.

Cherry-picked from this PR's head db275f96fb and validated as one tree with 15 other PRs — CI 22/22 green, all 6 gap-suite shards. A train rebase gives the commits new SHAs, so GitHub cannot auto-close the source PR; closing by hand.

Nothing needed from you. Thanks.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.