chore: Upgrade quinn 0.11, rustls 0.23, hickory-resolver 0.26

[dimartiro]

Description

Upgrades the QUIC/TLS/DNS stack to current releases, clearing the CVE-flagged transitives that show up as Dependabot alerts on litep2p consumers.

crate	before	after
quinn	0.9.3	0.11.9
rustls	0.20.7	0.23.38
hickory-resolver	0.25.2	0.26

Key API changes:

• rustls: pki_types cert/key types, danger-module verifiers, explicit ring CryptoProvider, and an AlwaysResolvesCert resolver (the libp2p critical extension is rejected by with_single_cert).
• quinn: QuicClient/ServerConfig wrappers, Endpoint::accept() → Incoming, UFCS on stream poll_* (now ambiguous via the new inherent poll_write).
• hickory: TokioRuntimeProvider, build() returns Result.

Breaking: Error::CannotReadSystemDnsConfig now wraps NetError; rustls 0.23 types are re-exported. MSRV is 1.88 (already the CI Test toolchain).

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	hickory-resolver@​0.26.1

View full report

[gilescope]

This would be good to land - will bring it into line with hickory version libp2p main is using.