Deps: Update transitive dependencies quinn-proto and aws-lc-sys

[tvpeter]

Description

This PR updates transitive dependencies quinn-proto and aws-lc-sys to fix identified vulnerabilities.
Other aws-lc-sys linked vulnerabilities fixed by this update include:

• AWS-LC has Timing Side-Channel in AES-CCM Tag Verification
• AWS-LC has PKCS7_verify Signature Validation Bypass

Fixes #249 and #250

All Submissions:

• I've signed all my commits
• I followed the contribution guidelines
• I ran cargo fmt and cargo clippy before committing

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 10.86%. Comparing base (a675935) to head (f45c616).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #251   +/-   ##
=======================================
  Coverage   10.86%   10.86%           
=======================================
  Files           8        8           
  Lines        2466     2466           
=======================================
  Hits          268      268           
  Misses       2198     2198           

Flag	Coverage Δ
rust	10.86% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[oleonardolima]

utACK

As far as I can tell, the aws-lc-rs and aws-lc-sys issues should be handled by a simple cargo update.

However, if you'd like to pin their version, you should also check if it's better to pin the rustls instead, as aws-lc-sys is a transitive dependency from it.

[tvpeter]

As far as I can tell, the aws-lc-rs and aws-lc-sys issues should be handled by a simple cargo update.

Yes, it was a simple cargo update with the specific affected library to avoid breaking the build. In the case of aws-lc-sys, I had to update the parent library aws-lc-rs to a compatible version. As for the quinn-proto, I updated it using cargo update -p quinn-proto, testing the build and other checks.