cargo: bump url and idna to address security advisory

cargo: bump url and idna to address security advisory #16982