build(deps): bump rustls-webpki from 0.104.0-alpha.6 to 0.104.0-alpha.7

[dependabot]

Bumps rustls-webpki from 0.104.0-alpha.6 to 0.104.0-alpha.7.

Release notes

Sourced from rustls-webpki's releases.

0.104.0-alpha.7

• Fix reachable panic in parsing a CRL. This was reported to us as GHSA-82j2-j2ch-gfr8. Users who don't use CRLs are not affected.
• For name constraints on URI names, we incorrectly processed excluded subtrees in a way which inverted the desired meaning. See rustls/webpki#471. This was a case missing in the fix for GHSA-965h-392x-2mh5.

What's Changed

• Actually fail closed for URI matching against excluded subtrees by @​djc in rustls/webpki#471
• Adjust imports for tests by @​ctz in rustls/webpki#472
• GHSA-82j2-j2ch-gfr8

Full Changelog: rustls/webpki@v/0.104.0-alpha.6...v/0.104.0-alpha.7

Commits

• d3b9a6d Improve tests for padding of BitStringFlags
• 1ab78e1 Correct validation of BIT STRING constraints
• 0a011f7 Adjust imports for tests
• c6996cf Bump version to 0.104.0-alpha.7
• 4ad751f Actually fail closed for URI matching against excluded subtrees
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codspeed-hq]

Merging this PR will not alter performance

✅ 4 untouched benchmarks

---

_{Comparing dependabot/cargo/rustls-webpki-0.104.0-alpha.7 (385c506) with main (98e23c4)}