[DB] Pin the rustls Quaint connector and drop CLI OpenSSL

Author: kageiit

.github/workflows/compatibility.yaml

@@ -17,10 +17,10 @@ jobs:
             features: postgresql,mocking
           - target: x86_64-unknown-linux-gnu
             runner: namespace-profile-gitar
-            features: postgresql,mocking,vendored-openssl
+            features: postgresql,mocking
           - target: aarch64-unknown-linux-gnu
             runner: namespace-profile-gitar
-            features: postgresql,mocking,vendored-openssl
+            features: postgresql,mocking
     runs-on: ${{ matrix.runner }}
     steps:
       - uses: namespacelabs/nscloud-checkout-action@v8
@@ -42,6 +42,13 @@ jobs:
       - name: Build portable Linux binary
         if: matrix.target != 'aarch64-apple-darwin'
         run: cargo zigbuild --locked --release -p prisma-cli --features ${{ matrix.features }} --target ${{ matrix.target }}.2.28
+      - name: Verify the CLI dependency tree uses rustls
+        shell: bash
+        run: |
+          cargo tree --locked -p prisma-cli --features postgresql,mocking --target ${{ matrix.target }} -e normal,build --prefix none > /tmp/prisma-dependencies.txt
+          if grep -E '^(native-tls|openssl|openssl-sys|postgres-native-tls) v' /tmp/prisma-dependencies.txt; then
+            exit 1
+          fi
       - name: Package binary and source revision
         env:
           TARGET: ${{ matrix.target }}