fix: upgrade reqwest to 0.13 with native CA cert support for non-Windows

[dwhoban]

This pull request updates the reqwest dependency across the workspace, both to a newer patch version and by adjusting its features for non-Windows platforms. The changes ensure more secure and compatible TLS support by switching from the deprecated rustls-tls feature to the recommended rustls and rustls-native-certs features.

Resolves #1014.

Dependency version and feature updates:

• Updated the reqwest crate version from 0.12 to 0.12.28 in the root Cargo.toml for improved stability and bug fixes.

TLS configuration improvements for non-Windows platforms:

• Replaced the deprecated rustls-tls feature with rustls and added rustls-native-certs to reqwest dependencies in crates/vite_error/Cargo.toml, crates/vite_install/Cargo.toml, and crates/vite_js_runtime/Cargo.toml to ensure better certificate handling and compatibility. [1] [2] [3]

[netlify]

✅ Deploy Preview for viteplus-preview canceled.

Name	Link
🔨 Latest commit	7f0ebe6
🔍 Latest deploy log	https://app.netlify.com/projects/viteplus-preview/deploys/69bd22648f006f00073919ab

[Copilot]

Pull request overview

This PR updates the workspace’s reqwest dependency pin and adjusts per-platform TLS feature flags, aiming to ensure non-Windows builds use system/native CA certificates (to work behind MITM proxies as described in #1014).

Changes:

• Pinned workspace reqwest from "0.12" to "0.12.28" in the root Cargo.toml.
• Updated non-Windows reqwest feature flags in several crates from rustls-tls to rustls + rustls-native-certs.
• Kept Windows using native-tls-vendored for reqwest.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File	Description
Cargo.toml	Pins reqwest to a specific 0.12.x patch release.
crates/vite_error/Cargo.toml	Switches non-Windows reqwest TLS features to native cert support.
crates/vite_install/Cargo.toml	Switches non-Windows reqwest TLS features to native cert support (incl. JSON).
crates/vite_js_runtime/Cargo.toml	Switches non-Windows reqwest TLS features to native cert support.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The PR title/description says reqwest is being upgraded to 0.13, but the workspace dependency is still pinned to 0.12.28. Either bump reqwest to 0.13.x (and adjust features accordingly) or update the PR title/description to match the actual version change.

[dwhoban]

@copilot open a new pull request to apply changes based on this feedback

[Copilot]

Non-Windows reqwest is now configured with ["rustls", "rustls-native-certs"], but the workspace dependency remains reqwest 0.12.28. Please ensure the selected feature flags are supported by that version and that the lockfile shows native cert support is pulled in; otherwise this change may not resolve the proxy/CA issue on Linux/macOS.

Suggested change

	reqwest = { workspace = true, features = ["stream", "rustls", "rustls-native-certs"] }
	reqwest = { workspace = true, features = ["stream", "rustls-tls-native-roots"] }