Update ring crate and necessary dependencies

[cr-tk]

Summary & Motivation (Problem vs. Solution)

The GHSA-4p46-pwfr-66x6 vulnerability in the ring Rust crate was recently published. We think this does not affect production builds of QOS since the issue requires overflow-checks = true, which is not enabled by default on release builds. Additionally, the problem only represents a Denial of Service (DoS) impact and has additional attack requirements, which we think are unlikely to be met in common QOS usage scenarios.

Despite the low risk, the best way forward is to patch the ring crate. The amount of necessary dependency changes is minimal.

How I Tested These Changes

Local tests.

Pre merge check list

• Update CHANGELOG.MD

[cr-tk]

I've done the dependency security review, namely of the ring crate 0.17.11->0.17.14 diff (we had 0.17.8 here but also trusted 0.17.11 already). For more information, see the corresponding internal documentation.

This is ready for review by a second person.