build(deps): Bump activestorage from 6.0.3.5 to 7.0.4.3

[dependabot]

Bumps activestorage from 6.0.3.5 to 7.0.4.3.

Release notes

Sourced from activestorage's releases.

v7.0.4.3

Active Support

• Implement SafeBuffer#bytesplice

  [CVE-2023-28120]

Active Model

• No changes.

Active Record

• No changes.

Action View

• Ignore certain data-* attributes in rails-ujs when element is contenteditable

  [CVE-2023-23913]

Action Pack

• No changes.

Active Job

• No changes.

Action Mailer

• No changes.

Action Cable

... (truncated)

Changelog

Sourced from activestorage's changelog.

Rails 7.0.4.3 (March 13, 2023)

• No changes.

Rails 7.0.4.2 (January 24, 2023)

• No changes.

Rails 7.0.4.1 (January 17, 2023)

• No changes.

Rails 7.0.4 (September 09, 2022)

• Fixes proxy downloads of files over 5MiB

  Previously, trying to view and/or download files larger than 5mb stored in services like S3 via proxy mode could return corrupted files at around 5.2mb or cause random halts in the download. Now, ActiveStorage::Blobs::ProxyController correctly handles streaming these larger files from the service to the client without any issues.

  Fixes #44679

  Felipe Raul

Rails 7.0.3.1 (July 12, 2022)

• No changes.

Rails 7.0.3 (May 09, 2022)

• Don't stream responses in redirect mode

  Previously, both redirect mode and proxy mode streamed their responses which caused a new thread to be created, and could end up leaking connections in the connection pool. But since redirect mode doesn't actually send any data, it doesn't need to be streamed.

  Luke Lau

Rails 7.0.2.4 (April 26, 2022)

• No changes.

... (truncated)

Commits

• c15ee6e Preparing for 7.0.4.3 release
• 7c70791 Version 7.0.4.2
• 23e0345 Version 7.0.4.1
• 8015c2c Version 7.0.4
• 8525e57 Merge pull request #45102 from feliperaul/fix_activestorage_proxy_downloads_f...
• a730810 Merge branch '7-0-sec' into 7-0-stable
• 04972d9 Preparing for 7.0.3.1 release
• 0c68c1f updating version and changelog
• 888b68e Merge pull request #45448 from jonathanhefner/active_storage-require-vips-bef...
• b2e75c6 Merge pull request #45420 from joelcogen/fix-require-mini_magick
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.