Using a workflow to trigger mirroring instead of a webhook allows us to reuse "Approving workflow runs from public forks" GitHub feature to somewhat protect us from malicious PRs

* refactor new jsonrpc middleware

* add jsonrpsee specific service trait

* use tower::ServiceBuilder for composable middleware

* revert changelog

* fix nits

* types: impl Clone

* clarify examples

* Update server/src/middleware/mod.rs

* Update server/src/transport/http.rs

* remove some boiler plate

* add back logging

* remove needless Arc

* remove clone bounds for Middleware

* add wrapper for tower::ServiceBuilder

* fix docs

* add modify request example

* add rate limit example

* fix some nits in rate limiting middleware example

* Meta -> Context

* restruct middleware module

* fix broken links

* grumbles: remove `Context`

* fix tests

* Update examples/examples/rpc_middleware_modify_request.rs

Co-authored-by: James Wilson <[email protected]>

* fix grumbles

* grumbles: adjust docs for method response

* grumbles: MethodKind::Unknown -> NotFound

* Update examples/examples/http_middleware.rs

* fix some nits in examples

---------

Co-authored-by: James Wilson <[email protected]>

Updates the requirements on [async-lock](https://github.com/smol-rs/async-lock) to permit the latest version.
- [Release notes](https://github.com/smol-rs/async-lock/releases)
- [Changelog](https://github.com/smol-rs/async-lock/blob/master/CHANGELOG.md)
- [Commits](https://github.com/smol-rs/async-lock/compare/v2.4.0...v3.0.0

)

---
updated-dependencies:
- dependency-name: async-lock
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.7.0 to 2.7.1.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/v2.7.0...v2.7.1

)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* graceful shutdown: distinguish between stopped and conn closed

* grumbles: ws_stream fuse

* graceful shutdown: terminate on error

* fix nits

* adress grumbles

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* server: graceful shutdown check `Incoming::Closed`

* Update server/src/transport/ws.rs

Updates the requirements on [proc-macro-crate](https://github.com/bkchr/proc-macro-crate) to permit the latest version.
- [Release notes](https://github.com/bkchr/proc-macro-crate/releases)
- [Commits](https://github.com/bkchr/proc-macro-crate/compare/v1.2.0...v2.0.0

)

---
updated-dependencies:
- dependency-name: proc-macro-crate
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Updates the requirements on [console-subscriber](https://github.com/tokio-rs/console) to permit the latest version.
- [Release notes](https://github.com/tokio-rs/console/releases)
- [Commits](https://github.com/tokio-rs/console/compare/console-subscriber-v0.1.8...console-subscriber-v0.2.0

)

---
updated-dependencies:
- dependency-name: console-subscriber
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This was intended to propogate the backpressure all the way down the
underlying socket but it's weird and doesn't work very well.

For subscriptions the backpressure will be handled by
implementation itself and just rely on that now.

Updates the requirements on [pprof](https://github.com/tikv/pprof-rs) to permit the latest version.
- [Changelog](https://github.com/tikv/pprof-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tikv/pprof-rs/commits

)

---
updated-dependencies:
- dependency-name: pprof
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: remove needless clone in ws background task

* fix(server): fix leak in FuturesUnordered

The tokio::spawn handles were never removed from `FutursUnordered`
which this commit fixes.

Reduces the memory usage signficantly but still slightly worse than v0.16.x

* Update server/src/transport/ws.rs

* cargo fmt

* wording

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.6.2 to 2.7.0.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/v2.6.2...v2.7.0

)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* refactor(server): async and sync subscription APIs

* grumbles: add helper to verify subscriptions

* proc macros: introduce sync/async subscriptions

* register_subscription -> register_subscription_raw

adds extra option to Websocket server, which can be used
to configure forceful disconnection clients, which are not
submitting any requests (including pongs).

Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...v3.6.0

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/v2.6.1...v2.6.2

)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

The HTTP connector is much faster than the HTTPs connector so
if the URL is a `http:://<....>` let's us it.

This can be enforced by disabling the TLS feature but as
it's part of the default features, it worth having.

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/v2.6.0...v2.6.1

)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Updates the requirements on [gloo-net](https://github.com/rustwasm/gloo) to permit the latest version.
- [Release notes](https://github.com/rustwasm/gloo/releases)
- [Changelog](https://github.com/rustwasm/gloo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rustwasm/gloo/compare/0.3.0...0.4.0

)

---
updated-dependencies:
- dependency-name: gloo-net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* update benches to v0.20

* fix nit

* chore: release v0.20.0

* Update CHANGELOG.md

* Update CHANGELOG.md

* add links to github profiles in changelog

* refactor: move host filtering to tower middleware

* fix tests

* commit missing file

* fix match on authority

* add some tests for authority

* grumbles: Arc<WhitelistedHosts>

* grumbles: split host filter code

* add example for host filter middleware

* Update examples/examples/host_filter_middleware.rs

* url.rs -> middleware/authority.rs

It is possible that the HOST is sent via the URI and when that is the case
the server should read the `Authority (host:port)` not only the host

* make ErrorObject::borrowed accept DST message type

* Update types/src/error.rs

* Update types/src/error.rs

---------

Co-authored-by: Niklas Adolfsson <[email protected]>

* refactor(client): support default port number

* fix nits

* Update client/transport/src/ws/mod.rs

* fix more nits

* refactor: server host filtering

Cleans up the host filtering by allowing `ipv6 addresses`, fixes a bug when
host filtering with `*` is configured when a request is missing the default port.

In addition the API on the server is stricter and hosts filtering with invalid
authorities are now rejected which wasn't the case before.

* fix some nits

* fix build again

* allow requests with/without default port

* switch to `route_recognizer` for URL recognition

* remove weird From impl

* Update core/src/server/host_filtering.rs

* Update tests/tests/integration_tests.rs

* refactor host filter API

* address grumbles

* fix clippy

* host filter: switch to TryFrom

* Update server/src/server.rs

* Update server/src/server.rs