Cargo: update h2 to 0.3.26 to fix HTTP/2 CONTINUATION flood

[dongsupark]

Update h2 to 0.3.26, to address HTTP/2 CONTINUATION flood issues.
Update related crates as well, reqwest to 0.11.26, hyper to 0.14.28, which are only patchlevel updates.

See also https://rustsec.org/advisories/RUSTSEC-2024-0332.html, https://nowotarski.info/http2-continuation-flood/, https://seanmonstar.com/blog/hyper-http2-continuation-flood/.

[dongsupark]

CI fails during clippy, which is a different issue happening also in trunk.

[pothos]

To fix that we need to bump uuid:

diff --git a/Cargo.toml b/Cargo.toml
index 5dda2de..97ed81b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -17,7 +17,7 @@ reqwest = { version = "0.11", features = ["blocking"] }
 sha2 = "0.10"
 tempfile = "3.8.1"
 url = "2"
-uuid = "1.2"
+uuid = "1.8"
 
 [dependencies.hard-xml]
 path = "vendor/hard-xml"
diff --git a/omaha/Cargo.toml b/omaha/Cargo.toml
index ef24690..9bc5170 100644
--- a/omaha/Cargo.toml
+++ b/omaha/Cargo.toml
@@ -6,7 +6,7 @@ edition = "2021"
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-uuid = "1.2"
+uuid = "1.8"
 ct-codecs = "1"
 url = "2"
 anyhow = "1.0.75"

(plus updating the .lock file)
Can you push this as commit?

[dongsupark]

@pothos CI passed. Thanks!

[pothos]

I think we also should update the .toml files because the .lock file gets recreated, or?
Currently we only require uuid 1.2, but I think we should require 1.8.