build(deps): bump isahc from 0.9.14 to 1.7.1

[dependabot]

Bumps isahc from 0.9.14 to 1.7.1.

Release notes

Sourced from isahc's releases.

Curl security updates

Security

• Update curl-sys to 0.4.54 to pull in libcurl 7.83.0, which contains security patches for CVE-2022-22576, CVE-2022-27774, CVE-2022-27775, and CVE-2022-27776. (#391) @​david-perez

HTTP version support detection

Added

• Add new is_http_version_supported function which allows you to check whether support for a particular HTTP version is available at runtime. When statically linking this will be entirely dependent on your build configuration, but if you are dynamically linking to libcurl then it will vary from system to system. (#368) @​sagebind

Changed

• Preallocate buffer for async JSON decoding to improve performance. (#367) @​michalmuskala
• Re-enable content-length request test (#383) @​sagebind
• Add minimal versions test to CI (#373) @​sagebind
• Refactor test server to support writing raw response data. (#366) @​sagebind

Dependency Updates

• Update test-case requirement from 1.1 to 2.0 (#376) @​dependabot

New cookie APIs

Added

• Expose new APIs for cookie construction, updating, and adding to cookie jar. You can now create your own cookies with Cookie::builder and put arbitrary cookies into the cookie jar with CookieJar::set. (#264, #349) @​jacobmischka
• Add bytes() convenience methods to ReadResponseExt and AsyncReadResponseExt which read the entire response body into a Vec<u8>. (#352) @​sagebind
• Speed up CI by adding caching to CI (#358) @​sagebind

Security

• Replace trivial internal usage of chrono with httpdate to avoid any potential reference to CVE-2020-26235 in time 0.2. (#361) @​sagebind

Dependency Updates

• Replace chrono with httpdate internally (#361) @​sagebind
• Update tracing-subscriber requirement from 0.2.12 to 0.3.0 (#360) @​dependabot
• Update Tarpaulin and re-enable doctest coverage (#357) @​sagebind
• Update tiny_http requirement from 0.8 to 0.9 (#356) @​dependabot

Stirring performance, boys.

Fixed

• Greatly reduce CPU usage, particularly when receiving long-running or large responses. This was caused by a bug where timeout timers were not being cleared once they expired, effectively creating a repeating timer that would cause repeated extra polls. Huge thanks to @​jacobmischka for finding and fixing this bug! (#348, #350)
• Return true for Body::is_empty for HEAD responses (#341, #343)
• Fix code coverage analysis failing to run in CI. (#351)

Expect configurability and connection info in errors

Added

• Expose connection info in errors with the addition of Error::local_addr and Error::remote_addr. This allows you to get the local & remote addresses involved in a request, if any, even if an error occurs. (#336, #337) @​sagebind

... (truncated)

Commits

• b2827ab Prepare 1.7.1 release
• 9211bdd Update curl-sys to 0.4.54 (#391)
• 00cf764 Revert "Add experimental rustls support (#309)"
• e995eb4 Prepare 1.7.0 release
• a90a8c0 Re-enable content-length request test (#383)
• fad86fd Update test-case requirement from 1.1 to 2.0 (#376)
• 3a49173 Add minimal versions test to CI (#373)
• 5175f9f Use version support detection to make version negotiation smarter
• 8872f19 Fix recent clippy warnings
• 37cdccd Allow checking HTTP version support at runtime (#368)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #154.