deps: bump github.com/vapor/vapor from 4.120.0 to 4.121.4

[dependabot]

Bumps github.com/vapor/vapor from 4.120.0 to 4.121.4.

Release notes

Sourced from github.com/vapor/vapor's releases.

4.121.4 - Fix Response Compression Bug when Content Type header is empty

What's Changed

Fix Response Compression Bug when Content Type header is empty by @​0xTim in #3453

Fixes a bug in the response compression pipeline where the response would be compressed, even if response compression is disabled, if no content-type header was set for the response.

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.121.3...4.121.4

4.121.3 - Parse directives from all Cookie headers, not just the first

What's Changed

Parse directives from all Cookie headers, not just the first by @​gwynne in #3436

Fixes #3435.

Reviewers

Thanks to the reviewers for their help:

• @​ptoffy
• @​MahdiBM

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.121.2...4.121.3

4.121.2 - Add Sendable conformance to application testing Method type

What's Changed

Add Sendable conformance to application testing Method type by @​tib in #3424

This PR adds Sendable conformance to the Method type in the VaporTestUtils target.

New Contributor

• @​tib made their first contribution in #3424 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.121.1...4.121.2

4.121.1 - Do not create a session if no cookie was provided

What's Changed

Do not create a session if no cookie was provided by @​czechboy0 in #3372

Summary

When using SessionsMiddleware and a custom AsyncSessionAuthenticator together, we were seeing that even in cases when no cookie is provided in the request, and no error was thrown by e.g. a guard middleware or the handler, we were still seeing a set-cookie header in the response, which isn’t desired.

... (truncated)

Commits

• cfd8f43 Fix Response Compression Bug when Content Type header is empty (#3453)
• 77eeecf Name the CodeQL workflow
• c57f440 Remove C/C++ from CodeQL setup
• 70c37e5 Add manual CodeQL workflow
• ff88583 Bump actions/create-github-app-token from 2 to 3 in the dependencies group (#...
• a8db2db Parse directives from all Cookie headers, not just the first (#3436)
• 6c5ed03 Add dependency submission
• 4193ae1 Enable Swift dependency tracking in dependabot.yml
• 2239adf Add permissions to sponsors.yml
• c3ca5da Add permissions to test.yml
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[MrSaneApps]

Closing this dependency bump for now. I tested the combined SaneVideo dependency refresh on the Mini; the update lane failed, and a clean main-branch verify then hung in InspectorRegressionTests.testFileRelinking. Until the SaneVideo base Mini verify lane is green and non-hanging, these lockfile bumps are not safe to merge. We can reopen as a single verified dependency refresh after the base lane is fixed.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.