deps(deps): bump the tls-stack group across 1 directory with 2 updates

[dependabot]

Bumps the tls-stack group with 2 updates in the / directory: rustls and webpki-roots.

Updates rustls from 0.23.36 to 0.23.40

Commits

• b44c09f Prepare 0.23.40
• e7a555f Prefer Ord::max to core::cmp
• c0005be ech: base inner name padding on actual extension
• 4e49529 ech: test inner name padding
• 3e06ef1 ech: add both name and "gross" padding
• c574ffd ech: avoid short-lived allocation for padding
• 8bf935c ech: pop comment from match arm
• 9088004 ech: expand maximum_name_length to usize ASAP
• a612901 Default require_ems based on CryptoProvider FIPS status
• 0541605 Cargo: version 0.23.38 -> 0.23.39
• Additional commits viewable in compare view

Updates webpki-roots from 0.26.11 to 1.0.6

Release notes

Sourced from webpki-roots's releases.

1.0.6

"e-Szigno TLS Root CA 2023" added, see https://bugzilla.mozilla.org/show_bug.cgi?id=1873057

What's Changed

• Update dependencies by @​djc in rustls/webpki-roots#111
• Trigger CI workflow on merge groups by @​djc in rustls/webpki-roots#113
• webpki-roots: 1.0.6 by @​ctz in rustls/webpki-roots#115

Full Changelog: rustls/webpki-roots@v/1.0.5...v/1.0.6

1.0.5

Removes the following trust anchors which have passed their distrust-after-last-issuance dates:

• Entrust Root Certification Authority - EC1
• Entrust Root Certification Authority - G2
• Entrust Root Certification Authority
• AffirmTrust Commercial
• AffirmTrust Networking
• AffirmTrust Premium
• AffirmTrust Premium ECC

What's Changed

• ccadb: add CertificateMetadata::test_website_revoked field by @​djc in rustls/webpki-roots#110
• webpki-root[s|-certs]: 1.0.4 -> 1.0.5 by @​cpu in rustls/webpki-roots#112

Full Changelog: rustls/webpki-roots@v/1.0.4...v/1.0.5

1.0.4

CommScope removal

https://bugzilla.mozilla.org/show_bug.cgi?id=1994866 tracks the voluntary removal of:

• CommScope Public Trust ECC Root-01
• CommScope Public Trust ECC Root-02
• CommScope Public Trust RSA Root-01
• CommScope Public Trust RSA Root-02

What's Changed

• 1.0.4: track removal of CommScope by @​ctz in rustls/webpki-roots#109

Full Changelog: rustls/webpki-roots@v/1.0.3...v/1.0.4

1.0.3

Addition of "OISTE Server Root RSA G1" & "OISTE Server Root ECC G1": https://bugzilla.mozilla.org/show_bug.cgi?id=1988913.

What's Changed

• 1.0.3: track October 2025 additions by @​ctz in rustls/webpki-roots#108

... (truncated)

Commits

• c97def9 webpki-roots: 1.0.6 (#115)
• d30d248 Trigger CI workflow on merge groups
• 2a4b845 Take semver-compatible dependency updates
• 17c2013 Bump webpki-ccadb version to 0.2.1
• 3883a16 Upgrade to x509-parser 0.18
• 6bfc62d Upgrade reqwest to 0.13
• a1f3433 webpki-root[s|-certs]: 1.0.4 -> 1.0.5
• 1daa071 ccadb: bump version to 0.2.0
• 194014d ccadb: add CertificateMetadata::test_website_revoked field
• 3807af8 ccadb: make CertificateMetadata non-exhaustive
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.