Dependency update request: support aws-lc-rs to 1.17

Hi all!

We discovered when attempting to bump rustls in https://github.com/DataDog/saluki to resolve RUSTSEC-2026-0285 that rustls was updated to use aws-lc-rs 1.18. aws-lc-rs 1.18 depends on a version of the FIPS module (aws-lc 4.x) that isn't yet FIPS certified and so we'd like to stick with aws-lc-rs 1.17 (which depends on the certified 3.x) until it is.

Checklist

• I've searched the issue tracker for similar requests
• I've confirmed my request is for a semver-incompatible update

Is your dependency update request related to a problem? Please describe.

Blocked from upgrading rustls to latest due to dependency on an uncertificed aws-lc-rs version.

Describe the solution you'd like

Would you be open to either:

• Maintaining a version of rustls with security updates that depends on aws-ls-rs 1.17 (AWS itself seems to be maintaining the 1.17 version in addition to 1.18 while FIPS certification proceeds)
• Simply downgrading rustls to depend on aws-rc-ls 1.17 for now

Describe alternatives you've considered

Simply ignoring the vulnerability in rustls. This is what we've done temporarily: https://github.com/DataDog/saluki/pull/2606