use rustls where possible

[getchoo]

this should fix issues with TLS v1.3 (see the commit message). a few security issues in our dependencies have also been resolved

for the future, i would highly recommend using dependabot. many of the dependencies here are very outdated and there are still some lower priority warnings scattered about

[ToBinio]

@getchoo just wanted to let you know that this PR has merge conflicts because of #1103 sry...