fix: use rustls instead of native-tls for tokio-tungstenite

native-tls pulls openssl-sys which breaks cross-compilation for arm64.
rustls is already in the dependency tree via reqwest.

Author: max-lt

Cargo.lock

@@ -54,7 +54,8 @@ tracing-opentelemetry = { version = "0.32", optional = true }
 opentelemetry-appender-tracing = { version = "0.31", features = ["experimental_use_tracing_span_context"], optional = true }
 sqlx = { version = "0.8.6", features = [ "runtime-tokio", "postgres", "uuid", "bigdecimal", "rust_decimal", "tls-rustls" ] }
 reqwest = { version = "0.13.1", default-features = false, features = ["rustls", "json", "stream"] }
-tokio-tungstenite = { version = "0.26", features = ["native-tls"] }
+tokio-tungstenite = { version = "0.26", features = ["rustls-tls-webpki-roots"] }
+rustls = { version = "0.23", features = ["ring"] }
 
 # Core types
 openworkers-core = { git = "https://github.com/openworkers/openworkers-core", tag = "v0.14.0", features = ["hyper"] }

Cargo.toml

@@ -683,6 +683,9 @@ impl OperationsHandler for RunnerOperations {
             use tokio_tungstenite::tungstenite;
             use tungstenite::client::IntoClientRequest;
 
+            // Ensure rustls CryptoProvider is installed (no-op if already set)
+            let _ = rustls::crypto::ring::default_provider().install_default();
+
             // Parse URL, converting http(s) to ws(s) if needed
             let ws_url = if url.starts_with("http://") {
                 url.replacen("http://", "ws://", 1)