Using a workflow to trigger mirroring instead of a webhook allows us to reuse "Approving workflow runs from public forks" GitHub feature to somewhat protect us from malicious PRs

Updates the requirements on [async-lock](https://github.com/smol-rs/async-lock) to permit the latest version.
- [Release notes](https://github.com/smol-rs/async-lock/releases)
- [Changelog](https://github.com/smol-rs/async-lock/blob/master/CHANGELOG.md)
- [Commits](https://github.com/smol-rs/async-lock/compare/v2.4.0...v3.0.0

)

---
updated-dependencies:
- dependency-name: async-lock
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.7.0 to 2.7.1.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/v2.7.0...v2.7.1

)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* graceful shutdown: distinguish between stopped and conn closed

* grumbles: ws_stream fuse

* graceful shutdown: terminate on error

* fix nits

* adress grumbles

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* server: graceful shutdown check `Incoming::Closed`

* Update server/src/transport/ws.rs

Updates the requirements on [proc-macro-crate](https://github.com/bkchr/proc-macro-crate) to permit the latest version.
- [Release notes](https://github.com/bkchr/proc-macro-crate/releases)
- [Commits](https://github.com/bkchr/proc-macro-crate/compare/v1.2.0...v2.0.0

)

---
updated-dependencies:
- dependency-name: proc-macro-crate
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Updates the requirements on [console-subscriber](https://github.com/tokio-rs/console) to permit the latest version.
- [Release notes](https://github.com/tokio-rs/console/releases)
- [Commits](https://github.com/tokio-rs/console/compare/console-subscriber-v0.1.8...console-subscriber-v0.2.0

)

---
updated-dependencies:
- dependency-name: console-subscriber
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This was intended to propogate the backpressure all the way down the
underlying socket but it's weird and doesn't work very well.

For subscriptions the backpressure will be handled by
implementation itself and just rely on that now.

Updates the requirements on [pprof](https://github.com/tikv/pprof-rs) to permit the latest version.
- [Changelog](https://github.com/tikv/pprof-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tikv/pprof-rs/commits

)

---
updated-dependencies:
- dependency-name: pprof
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: remove needless clone in ws background task

* fix(server): fix leak in FuturesUnordered

The tokio::spawn handles were never removed from `FutursUnordered`
which this commit fixes.

Reduces the memory usage signficantly but still slightly worse than v0.16.x

* Update server/src/transport/ws.rs

* cargo fmt

* wording

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.6.2 to 2.7.0.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/v2.6.2...v2.7.0

)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* refactor(server): async and sync subscription APIs

* grumbles: add helper to verify subscriptions

* proc macros: introduce sync/async subscriptions

* register_subscription -> register_subscription_raw

adds extra option to Websocket server, which can be used
to configure forceful disconnection clients, which are not
submitting any requests (including pongs).

Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...v3.6.0

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/v2.6.1...v2.6.2

)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

The HTTP connector is much faster than the HTTPs connector so
if the URL is a `http:://<....>` let's us it.

This can be enforced by disabling the TLS feature but as
it's part of the default features, it worth having.

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/v2.6.0...v2.6.1

)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Updates the requirements on [gloo-net](https://github.com/rustwasm/gloo) to permit the latest version.
- [Release notes](https://github.com/rustwasm/gloo/releases)
- [Changelog](https://github.com/rustwasm/gloo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rustwasm/gloo/compare/0.3.0...0.4.0

)

---
updated-dependencies:
- dependency-name: gloo-net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* update benches to v0.20

* fix nit

* chore: release v0.20.0

* Update CHANGELOG.md

* Update CHANGELOG.md

* add links to github profiles in changelog

* refactor: move host filtering to tower middleware

* fix tests

* commit missing file

* fix match on authority

* add some tests for authority

* grumbles: Arc<WhitelistedHosts>

* grumbles: split host filter code

* add example for host filter middleware

* Update examples/examples/host_filter_middleware.rs

* url.rs -> middleware/authority.rs

It is possible that the HOST is sent via the URI and when that is the case
the server should read the `Authority (host:port)` not only the host

* make ErrorObject::borrowed accept DST message type

* Update types/src/error.rs

* Update types/src/error.rs

---------

Co-authored-by: Niklas Adolfsson <[email protected]>

* refactor(client): support default port number

* fix nits

* Update client/transport/src/ws/mod.rs

* fix more nits

* refactor: server host filtering

Cleans up the host filtering by allowing `ipv6 addresses`, fixes a bug when
host filtering with `*` is configured when a request is missing the default port.

In addition the API on the server is stricter and hosts filtering with invalid
authorities are now rejected which wasn't the case before.

* fix some nits

* fix build again

* allow requests with/without default port

* switch to `route_recognizer` for URL recognition

* remove weird From impl

* Update core/src/server/host_filtering.rs

* Update tests/tests/integration_tests.rs

* refactor host filter API

* address grumbles

* fix clippy

* host filter: switch to TryFrom

* Update server/src/server.rs

* Update server/src/server.rs

* refactor(async client): refactor background task

Split send and receive to separate tasks to support multiplexing reads/writes

* fix tests

* dont rely on tokio::spawn handles anymore

* fix build

* fix build again

* switch to std::sync::Mutex

* fix tests again

* bench stuff

* don't block in read task

* fix build

* fix nits

* works now

* revert bench code

* replace unreachable with None

* Revert "replace unreachable with None"

This reverts commit 49edaeef.

* fix nits

* use dashmap instead of Arc<Mutex<RequestManager>

* Revert "use dashmap instead of Arc<Mutex<RequestManager>"

This reverts commit d73aeeb6.

* refactor select loops prio for closed futs

* grumbles: save waker to wake when new items are pushed

* fix build

* fix build again

* fix some nits