Bump rustls and related crates to latest versions

[tnull]

Fixes #553.
Alternative to #536, which also bumps rustls-webpki and other related crates.

Since there have recently been some advisories, we bump rustls and related crates such as rustls-webpki to latest versions.

[luisschwab]

You could add a cargo audit CI job here as well.

[luisschwab]

You need to alllow the duplicate deps on bitreq's Cargo.toml to fix linting

[tnull]

You could add a cargo audit CI job here as well.

Eh, well, yes, see #557.

You need to alllow the duplicate deps on bitreq's Cargo.toml to fix linting

I'm aware, still trying to keep the duplicates minimal though, will update in abit.

[luisschwab]

@tcharding if we could get new bitreq and electrsd releases after this is merged it would be great. Thanks.

[tnull]

Should be fixed now.

[luisschwab]

ACK 9ddc66f

[tcharding]

@tcharding if we could get new bitreq and electrsd releases after this is merged it would be great. Thanks.

You mean electrsd because it depends on bitreq, right. If so we need jsonrpc and bitcoind to be released too. @jamillambert can you do a release tracking PR that does all those please bro? And I'll ack, merge, and publish.

[tcharding]

Its weird to see std here (but I see its there in the serde_json dep too). I am surprised this doesn't break the no-std build. Both of these commands are clean, no clue why?

• cargo test --no-default-features --features=rustls
• cargo test --no-default-features --features=json-using-serde

[tnull]

Its weird to see std here (but I see its there in the serde_json dep too). I am surprised this doesn't break the no-std build. Both of these commands are clean, no clue why?

• cargo test --no-default-features --features=rustls
• cargo test --no-default-features --features=json-using-serde

Note that before this bump std was implicit for rustls. Only rustls 0.23 introduced no_std support.. That said, given that v0.23 was releases Feb 2024, I'm not sure why we started off with v0.21in bitreq to begin with. However, only now we could entertain the possibility to make bitreq with rustls really no_std compatible.

[luisschwab]

You mean electrsd because it depends on bitreq

Exactly. Yeah, jsonrpc will need it too since it's on the dep tree. BDK uses electrsd so we need a new release for CI to be green again.