[dependabot]

Bumps actix-web from 4.18.1 to 4.18.2.

Release notes

Sourced from actix-web's releases.

actix-web: v4.18.2

• Increase the default form payload limit to 32 KiB.
• Bound decompressed request payloads using the same configured size limits for form, JSON, bytes, and string extractors. GHSA-qph8-7859-gq2f
• Add UrlencodedError::OverflowUnknownLength error enum variant for form payloads that exceed the limit while streaming.
• Add a UTF-8 encoded filename* parameter in ContentDisposition::attachment() for non-ASCII filenames.
• Return 405 with an Allow header from the built-in app default when method guards reject matching resources, including macro routes.

Commits

• d51138c chore(actix-web): prepare release 4.18.2
• dd8342b chore(actix-http): prepare release 3.20.1
• 0d0be61 fix(web): bound decompressed request payloads
• 41b54d2 fix(actix-http): add Decoder::limit()
• 036c0f4 chore(actix-multipart): prepare release 0.8.6
• 3396bd8 fix(multipart): keep bare CR before boundary text as field data (#4376)
• 41687b5 build(deps): bump useblacksmith/checkout from 1.8.1 to 1.8.2 (#4382)
• 45d9858 build(deps): bump taiki-e/install-action from 2.87.31 to 2.89.0 (#4383)
• c843c64 build(deps): bump local-waker from 0.1.4 to 0.1.5 (#4384)
• 0e93068 build(deps): bump log from 0.4.34 to 0.4.35 (#4385)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[automate-by-sierra-softworks]

This pull request has been automatically approved because it was raised by a trusted account.