cargo: bump url and idna to address security advisory

cargo: bump url and idna to address security advisory #12013