Create macOS release builds with bundled root certificates

As reported in #244, some users
on macOS had problems with `rustls-tls-native-roots`. Since we did not
find the root cause of this, we'll build macOS release builds with
`rustls-tls-webpki-roots` instead.

I first tried to solve this issue with default features and conditional
dependencies in `Cargo.toml`, but ultimately gave up and resorted to
`sed`.

.github/workflows/ci.yml

@@ -37,6 +37,15 @@ jobs:
         with:
           command: test
           args: --all-features
+      # macOS-only steps
+      - name: Patch to use webpki roots (macOS only)
+        if: matrix.platform == 'macos-latest'
+        run: sed -i '' 's/rustls-tls-native-roots/rustls-tls-webpki-roots/' Cargo.toml
+      - name: Build with webpki roots (macOS only)
+        if: matrix.platform == 'macos-latest'
+        uses: actions-rs/cargo@v1
+        with:
+          command: build
 
   clippy:
     name: run clippy lints

.github/workflows/release.yml

@@ -79,6 +79,8 @@ jobs:
     runs-on: macos-11
     steps:
       - uses: actions/checkout@v2
+      - name: Patch to use webpki roots
+        run: sed -i '' 's/rustls-tls-native-roots/rustls-tls-webpki-roots/' Cargo.toml
       - name: Build
         uses: actions-rs/cargo@v1
         with:

Cargo.toml

@@ -26,7 +26,7 @@ atty = "0.2"
 clap = { version = "3", features = ["std", "derive", "suggestions", "color"], default-features = false }
 env_logger = { version = "0.9", optional = true }
 log = "0.4"
-reqwest = { version = "0.11.3", features = ["blocking", "rustls-tls", "rustls-tls-native-roots"], default-features = false }
+reqwest = { version = "0.11.3", features = ["blocking", "rustls-tls-native-roots"], default-features = false }
 serde = "1.0.21"
 serde_derive = "1.0.21"
 toml = "0.5.1"