Bump github.com/vapor/vapor from 4.115.1 to 4.119.1

[dependabot]

Bumps github.com/vapor/vapor from 4.115.1 to 4.119.1.

Release notes

Sourced from github.com/vapor/vapor's releases.

4.119.1 - Fix a couple of import issues

What's Changed

Fix a couple of import issues by @​0xTim in #3390

Fixes a couple of import issues seen recently:

• Sendable error with TOTP types on old macOS SDKs - CryptoKit types have Sendable annotations from Xcode 16.3 (Swift 6.1). If trying to compile on older versions of Xcode, which we support you get an error in Swift 6 mode
• Some UBI9 based images complain about a missing import for CNIOLinux

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.119.0...4.119.1

4.119.0 - Expose peer certificates in request handlers

What's Changed

Expose peer certificates in request handlers by @​josephnoir in #3362

Additional certificate information can be relevant in mTLS deployments. This PR exposes the certificate chain of the peer per request. In contrast to #3352, this includes not just the leaf but the validated peer certificate chain, i.e., the certificates that establish trust of the peer identity from the leaf to (and including) the root certificate.

The validated certificate chain is only available when setting a custom verification callback with metadata. Configuration of this callback is made available in this PR. It also adds a dependency on swift-certificates to use X509.ValidatedCertificateChain for the certificate chain.

Example usage:

app.get { req async in
  if let chain = req.peerCertificateChain {
    return "I am trusting you because I trust: \(chain.root.description)"
  } else {
    return "I am not trusting you."
  }
}

I suggest close #3352 in favor of this PR.

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.118.0...4.119.0

4.117.2 - Fixing error in documentation of HTTPHeaders accept variable

What's Changed

Fixing error in documentation of HTTPHeaders accept variable by @​VerticalHeretic in #3375

This fix is addressing an issue vapor/docs#1098, and it’s fixing one of two of the problem mentioned there. The one being that the accept variables is accessible on the headers variable of the httpRequest. I couldn’t reproduce the second problem while it is working correctly on Swift 6.2, and indeed I can make use .html as a condition for the media types.

As on the screenshot below:

... (truncated)

Commits

• ac3aeb7 Fix a couple of import issues (#3390)
• c84ffd3 Expose peer certificates in request handlers (#3362)
• a69c0ea Update minimum Swift version to 6.0 (#3365)
• 1757359 Fixing error in documentation of HTTPHeaders accept variable (#3375)
• 3869a55 Update api-docs.yml
• d07643b Add HEIC (HEVC in HEIF) HTTPMediaType Support (#3374)
• 25faea9 Make tracing test more resilient (#3371)
• 773ea6a Fix warnings in 6.2 (#3361)
• 636fbe6 Allow initializing Vapor.Application with a Logger (#3359)
• 19d8159 Fix test incompatibility with upcoming swift-nio changes (#3355)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #14.