fix(ci): replace unmaintained deps for security audit

Author: taariq

Cargo.lock

@@ -36,7 +36,8 @@ indicatif = "0.18"
 which = "6.0"
 home = ">=0.5.4, <0.5.12"  # Pin to avoid v0.5.12 which requires unstable edition2024
 rand = "0.8"
-reqwest = { version = "0.11", features = ["json"] }
+# Disable rustls to avoid pulling rustls-pemfile (unmaintained)
+reqwest = { version = "0.11", default-features = false, features = ["json", "native-tls"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 sha2 = "0.10"
@@ -51,6 +52,12 @@ url = "2.5"
 chrono = { version = "0.4", default-features = false, features = ["clock", "serde"] }
 libc = "0.2"
 rust_decimal = { version = "1.39", features = ["db-tokio-postgres"] }
+tonic = { version = "0.11", features = ["transport"] }
+tower = "0.4"
+sqlite-watcher = { path = "sqlite-watcher" }
+
+[patch.crates-io]
+fxhash = { path = "third-party/fxhash" }
 
 [target.'cfg(unix)'.dependencies]
 daemonize = "0.5"

Cargo.toml

@@ -0,0 +1,10 @@
+[package]
+name = "fxhash"
+version = "0.2.1"
+edition = "2018"
+description = "Local replacement for fxhash using rustc-hash"
+license = "CC0-1.0"
+publish = false
+
+[dependencies]
+rustc-hash = "1.1"

third-party/fxhash/Cargo.toml

@@ -0,0 +1,40 @@
+use std::collections::{HashMap, HashSet};
+use std::fmt;
+use std::hash::{BuildHasherDefault, Hasher};
+
+use rustc_hash::FxHasher as InnerFxHasher;
+
+pub struct FxHasher(InnerFxHasher);
+
+impl Default for FxHasher {
+    fn default() -> Self {
+        Self(InnerFxHasher::default())
+    }
+}
+
+impl Clone for FxHasher {
+    fn clone(&self) -> Self {
+        // FxHasher does not implement Clone; start a new hasher
+        Self::default()
+    }
+}
+
+impl fmt::Debug for FxHasher {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        f.debug_struct("FxHasher").finish()
+    }
+}
+
+impl Hasher for FxHasher {
+    fn finish(&self) -> u64 {
+        self.0.finish()
+    }
+
+    fn write(&mut self, bytes: &[u8]) {
+        self.0.write(bytes)
+    }
+}
+
+pub type FxBuildHasher = BuildHasherDefault<FxHasher>;
+pub type FxHashMap<K, V> = HashMap<K, V, FxBuildHasher>;
+pub type FxHashSet<V> = HashSet<V, FxBuildHasher>;