Merge branch 'main' into dependabot/cargo/robot-repo-automaton/tower-http-0.7.0

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -4,8 +4,10 @@ name: CodeQL Security Analysis
 on:
   push:
     branches: [main, master]
+  # No `branches:` filter — a required check whose workflow is branch-gated is
+  # never created on a non-matching base and blocks merge forever at
+  # "Expected — Waiting for status to be reported" (cf. affinescript#645).
   pull_request:
-    branches: [main, master]
   schedule:
     - cron: '0 6 1 * *'
 

.github/workflows/hypatia-scan.yml

@@ -7,8 +7,10 @@ name: Hypatia Security Scan
 on:
   push:
     branches: [main, master, develop]
+  # No `branches:` filter — a required check whose workflow is branch-gated is
+  # never created on a non-matching base and blocks merge forever at
+  # "Expected — Waiting for status to be reported" (cf. affinescript#645).
   pull_request:
-    branches: [main, master]
   schedule:
     - cron: '0 0 * * 0'
   workflow_dispatch:

bots/rhodibot/Cargo.lock

@@ -20,7 +20,7 @@ tokio = { version = "1.52.3", features = ["full"] }
 # Web framework
 axum = "0.8.9"
 tower = "0.5.3"
-tower-http = { version = "0.6.11", features = ["trace", "cors"] }
+tower-http = { version = "0.7.0", features = ["trace", "cors"] }
 
 # HTTP client
 reqwest = { version = "0.12.28", features = ["json", "rustls-tls"], default-features = false }