Prepare v0.5.1 dependency security patch

[hardbyte]

Summary

• remove the vulnerable h2 0.3.27 path (RUSTSEC-2026-0258) by disabling unused Actix Web default features and retaining only macros
• refresh all compatible locked dependencies
• bump the crate to 0.5.1 and add patch-release notes

Validation

• cargo audit
• cargo fmt --all -- --check
• cargo build --verbose
• cargo clippy --all-targets --all-features -- -D warnings
• cargo doc --verbose
• cargo test --all-targets --all-features
• RUSTFLAGS="--cfg loom" cargo test --lib --release
• cargo publish --dry-run --allow-dirty
• git diff --check

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review for a one-time review, or @claude review always to subscribe this PR to a review on every future push.

_{Tip: disable this comment in your organization's Code Review settings.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-08-31T23:01:29.598491Z	d3936f1	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[Copilot]

Pull request overview

Prepares the v0.5.1 patch release of the Gatehouse crate by removing the vulnerable h2 0.3.x dependency path from the Actix Web example (per RUSTSEC-2026-0258) and refreshing the lockfile to updated compatible dependencies.

Changes:

• Bump crate version to 0.5.1 and add patch release notes.
• Disable Actix Web default features in dev-dependencies (keeping only macros) to avoid pulling the vulnerable HTTP/2 dependency path.
• Refresh Cargo.lock with updated dependency resolutions consistent with the new feature set.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
CHANGELOG.md	Adds 0.5.1 security release notes for the dependency security patch.
Cargo.toml	Bumps crate version and adjusts actix-web dev-dependency features to avoid the vulnerable transitive path.
Cargo.lock	Updates the resolved dependency graph and removes the vulnerable h2 0.3.x package from the lockfile.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated no new comments.