deps: bump github.com/vapor/websocket-kit from 2.16.1 to 2.16.2

[dependabot]

Bumps github.com/vapor/websocket-kit from 2.16.1 to 2.16.2.

Release notes

Sourced from github.com/vapor/websocket-kit's releases.

2.16.2 - Fix WebSocket proxy URL construction and missing configuration parameter

What's Changed

Fix WebSocket proxy URL construction and missing configuration parameter by @​Weixi779 in #160

Background

I noticed issue #147 regarding the incorrect WebSocket proxy URL construction. I also saw a similar solution proposed in PR #149 by @​GEverding, which correctly identified the root cause of the problem.

However, PR #149 received a change request from @​0xTim asking for tests to verify the proxy URI generation. Since that PR has not been updated, I have created this PR with the complete fix including the requested test modifications.

Changes

1. Fix proxy URL construction order - Fixes #147

• Changed URL format from ws://host/path:port to ws://host:port/path
• Updated test assertion in testProxy to expect the correct URL format
• Credit to @​GEverding for identifying this issue in PR #149

2. Add missing configuration parameter

• Pass configuration parameter when connecting through proxy
• Ensures client configuration is properly forwarded to the underlying connection

3. Use correct URI form for wss + proxy connections

• For wss with proxy: use origin-form (/path) after CONNECT tunnel per RFC 7230 …

Reviewers

Thanks to the reviewers for their help:

• @​ptoffy

This patch was released by @​0xTim

Full Changelog: vapor/websocket-kit@2.16.1...2.16.2

Commits

• 90bbbda Fix WebSocket proxy URL construction and missing configuration parameter (#160)
• 7e5dfaf Add permissions to api-docs.yml
• d263f71 Add permissions to test.yml
• 7ffd8cd [skip ci] Create dependabot.yml
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[MrSaneApps]

Closing this dependency bump for now. I tested the combined SaneVideo dependency refresh on the Mini; the update lane failed, and a clean main-branch verify then hung in InspectorRegressionTests.testFileRelinking. Until the SaneVideo base Mini verify lane is green and non-hanging, these lockfile bumps are not safe to merge. We can reopen as a single verified dependency refresh after the base lane is fixed.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.