Merge branch 'bump-ic-agent-version' into 'master'

chore: [NET-1402] bump IC-agent version to 0.24

closes NET-1402

This MR is needed in order to upgrade IC-agent to version 0.24. The new ic-agent version is needed as part of a larger work item, where we are planning on changing the response body of rejected call requests, see the according [interface spec change](dfinity/interface-spec#143).

This MR also bumps the dependencies of `k256` and `p256` to `0.13.2` and adds them as workspace dependencies. The new version of `ic-agent` requires a type `SecretKey` in some of its APIs, where `SecretKey` is introduced in the newer versions of `k256` and `p256`. An example function of such as function is [from_private_key(private_key: SecretKey)](https://docs.rs/ic-agent/latest/ic_agent/identity/struct.Secp256k1Identity.html#method.from_private_key). 

Closes NET-1402

See merge request dfinity-lab/public/ic!12595

Author: DSharifi

Cargo.Bazel.StaticOpenSSL.json.lock

@@ -361,6 +361,17 @@ ciborium = { git = "https://github.com/enarx/ciborium", rev = "e719537c99b564c36
 pprof = { git = "https://github.com/tikv/pprof-rs", rev = "059d3c80395c74e9f82ca1f9cbb3c013acfffb75" }
 
 [workspace.dependencies]
-ic-agent = "0.23"
+ic-agent = "0.24.1"
 ic-btc-interface = { git = "https://github.com/dfinity/bitcoin-canister", rev = "e4e89f2caedffbe0cfdec6f9d4a77f66dcb9119e" }
-ic-utils = "0.23"
+ic-utils = "0.24.1"
+k256 = { version = "0.13", default_features = false, features = [
+  "arithmetic",
+  "ecdsa",
+  "pkcs8",
+] }
+p256 = { version = "0.13", default_features = false, features = [
+  "arithmetic",
+  "ecdsa",
+  "pem",
+  "pkcs8",
+] }

Cargo.Bazel.StaticOpenSSL.toml.lock

@@ -448,7 +448,7 @@ def external_crates_repository(name, static_openssl, cargo_lockfile, lockfile):
                 version = "0.18.9",
             ),
             "ic-agent": crate.spec(
-                version = "^0.23.0",
+                version = "^0.24.1",
                 features = [
                     "hyper",
                 ],
@@ -490,7 +490,7 @@ def external_crates_repository(name, static_openssl, cargo_lockfile, lockfile):
                 version = "^2.2.0",
             ),
             "ic-utils": crate.spec(
-                version = "^0.23.0",
+                version = "^0.24.1",
                 features = [
                     "raw",
                 ],
@@ -549,7 +549,7 @@ def external_crates_repository(name, static_openssl, cargo_lockfile, lockfile):
                 version = "^0.4.1",
             ),
             "k256": crate.spec(
-                version = "^0.12.0",
+                version = "^0.13.1",
                 features = [
                     "arithmetic",
                     "ecdsa",
@@ -691,7 +691,7 @@ def external_crates_repository(name, static_openssl, cargo_lockfile, lockfile):
                 version = "^0.11.0",
             ),
             "p256": crate.spec(
-                version = "^0.12.0",
+                version = "^0.13.2",
                 features = [
                     "arithmetic",
                     "ecdsa",
@@ -936,7 +936,7 @@ def external_crates_repository(name, static_openssl, cargo_lockfile, lockfile):
                 version = "^0.8.0",
             ),
             "sev": crate.spec(
-                version = "^1.1.0",
+                version = "=1.1.0",  # Pinned to 1.1.0. The crate broke semantic verisioning with breaking changes in 1.2.0 (https://github.com/virtee/sev/issues/81).
                 features = [
                     "openssl",
                 ],

Cargo.Bazel.json.lock

@@ -194,9 +194,7 @@ pub async fn start_replica(
             Ok(status) => {
                 ok = status.replica_health_status == Some("healthy".to_string());
                 if let Some(root_key) = status.root_key.as_ref() {
-                    agent
-                        .set_root_key(root_key.clone())
-                        .context("failed to set agent root key")?;
+                    agent.set_root_key(root_key.clone());
                 }
                 last_status = Some(status);
             }

Cargo.Bazel.toml.lock

@@ -1,5 +1,5 @@
 use candid::{Decode, Encode, Nat, Principal};
-use ic_agent::hash_tree::LookupResult;
+use ic_agent::hash_tree::{Label, LookupResult};
 use ic_agent::{Agent, Certificate};
 use icrc_ledger_types::icrc::generic_metadata_value::MetadataValue as Value;
 use icrc_ledger_types::icrc::generic_value::Hash;
@@ -192,14 +192,14 @@ impl Icrc1Agent {
     /// 2. Check whether the certified data at path ["canister", ledger_canister_id, "certified_data"] is equal to root_hash.
     pub async fn verify_root_hash(
         &self,
-        certificate: &Certificate<'_>,
+        certificate: &Certificate,
         root_hash: &Hash,
     ) -> Result<(), Icrc1AgentError> {
         self.agent
             .verify(certificate, self.ledger_canister_id)
             .map_err(Icrc1AgentError::AgentError)?;
 
-        let certified_data_path = [
+        let certified_data_path: [Label<Vec<u8>>; 3] = [
             "canister".into(),
             self.ledger_canister_id.as_slice().into(),
             "certified_data".into(),

Cargo.lock

@@ -205,7 +205,7 @@ impl<T: Export> Export for WithVerify<T> {
     ) -> Result<(Vec<Package>, IcCertificate), ExportError> {
         let (pkgs, iccert) = self.0.export(key.clone(), limit).await?;
 
-        let (cert, tree): (Certificate, HashTree) = (
+        let (cert, tree): (Certificate, HashTree<Vec<u8>>) = (
             serde_cbor::from_slice(&iccert.cert).context("failed to cbor-decode ic certificate")?,
             serde_cbor::from_slice(&iccert.tree).context("failed to cbor-decode tree")?,
         );