Bump rustls-webpki to unblock CI

[macladson]

Issue Addressed

New audit failure from RUSTSEC-2026-0098

Proposed Changes

Bump rustls-webpki to an unaffected version, add an ignore for the old version used by warp 0.3

Additional Info

As with RUSTSEC-2026-0049, this ignore will also be fixed by the warp bump in #9001

[pawanjay176]

LGTM. the advisory is from the client perspective and doesn't affect our warp server

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-15 19:38 UTC · Rule: default
• ✅ Checks started — 2026-04-15 19:43 UTC · on draft merge queue: embarking unstable (d3c13c4) and [#9129 + #9130] together #9132
• ❌ Checks failed
• ✂️ Bisecting to identify the failing PR (round 1/1)
• ✅ Checks started · on draft merge queue: embarking unstable (d3c13c4) and #9130 together #9134
• ❌ Checks failed · identified as the failing PR
• 🚫 Left the queue — 2026-04-15 20:38 UTC · at ff53e86faa7bf1107a65a5db6b0ba74497c08451

This pull request spent 1 hour 20 seconds in the queue, including 36 minutes 16 seconds running CI.

Waiting for:

• check-success=local-testnet-success
• check-success=test-suite-success

All conditions

• check-success=local-testnet-success
• check-success=test-suite-success
• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • Bump rustls-webpki to unblock CI #9130
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • Bump rustls-webpki to unblock CI #9130

Reason

The merge conditions cannot be satisfied due to failing checks

Hint

You may have to fix your CI before adding the pull request to the queue again.
If you update this pull request, to fix the CI, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio queue comment.

[pawanjay176]

Ignored https://rustsec.org/advisories/RUSTSEC-2026-0099.html as well to unblock CI which is a similar issue

[pawanjay176]

@mergify requeue

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-15 22:02 UTC · Rule: default
• ✅ Checks started — 2026-04-15 22:04 UTC · on draft merge queue: embarking unstable (d3c13c4) and [#9129 + #9130] together #9135
• ❌ Checks failed
• ✂️ Bisecting to identify the failing PR (round 1/1)
• ✅ Checks started · on draft merge queue: embarking unstable (d3c13c4) and #9130 together #9137
• ❌ Checks failed · identified as the failing PR
• 🚫 Left the queue — 2026-04-15 23:00 UTC · at 132fe6441b0ed05c57b7b36877d6011c4376f0c6

This pull request spent 58 minutes 9 seconds in the queue, including 37 minutes 4 seconds running CI.

Waiting for:

• check-success=local-testnet-success
• check-success=test-suite-success

All conditions

• check-success=local-testnet-success
• check-success=test-suite-success
• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • Bump rustls-webpki to unblock CI #9130
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • Bump rustls-webpki to unblock CI #9130

Reason

The merge conditions cannot be satisfied due to failing checks

Hint

You may have to fix your CI before adding the pull request to the queue again.
If you update this pull request, to fix the CI, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio queue comment.

[pawanjay176]

@mergify requeue

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-15 23:39 UTC · Rule: default
• ✅ Checks passed · on draft merge queue: embarking unstable (d3c13c4) and [#9130 + #9129] together #9138
• ✅ Merged — 2026-04-16 00:07 UTC · at 132fe6441b0ed05c57b7b36877d6011c4376f0c6

This pull request spent 28 minutes 6 seconds in the queue, including 26 minutes 36 seconds running CI.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • Prefix VC root spans with lh_ so they get exported to tracing backend #9129
  • Bump rustls-webpki to unblock CI #9130
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • Prefix VC root spans with lh_ so they get exported to tracing backend #9129
  • Bump rustls-webpki to unblock CI #9130
• check-success=local-testnet-success
• check-success=test-suite-success