chore(deps): update rustls to 0.21.11 and 0.22.4 for security reason

[dcb9]

Motivation

details: https://cxsecurity.com/cveshow/CVE-2024-32650/

rustls::ConnectionCommon::complete_io could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a close_notify message immediately after client_hello, the server's complete_io will get in an infinite loop. This vulnerability is fixed in 0.23.5, 0.22.4, and 0.21.11.

Solution

The version of rustls foundry depends on both 0.21.10 and 0.22.3, so by upgrading them to 0.21.11 and 0.22.4 will solve the problem