fix: resolve loading certificates root certs

Author: patrickjcasey

Cargo.lock

@@ -45,7 +45,10 @@ env_logger = { version = "0.11.6" }
 flate2 = "1.1.0"
 fs_extra = "1.3.0"
 futures = "0.3.31"
-gix = { version = "0.70.0", features = [
+gix = { version = "0.70.0", default-features = false, features = [
+    "basic",
+    "dirwalk",
+    "worktree-mutation",
     "max-control",
     # use reqwest/rustls to avoid needing openssl
     "blocking-http-transport-reqwest-rust-tls",
@@ -144,6 +147,18 @@ serde_with = "3.12.0"
 hipcheck-workspace-hack = { version = "0.1", path = "../library/hipcheck-workspace-hack" }
 gomod-rs = "0.1.1"
 
+# This is needed to force reqwest, which is used by gix, to build reqwest with support
+# for rustls-tls-native-roots, which is needed to automatically configure system certificates
+[dependencies.reqwest]
+version = "0.12"
+default-features = false
+features = [
+    "blocking",
+    "http2",
+    "rustls-tls-native-roots",
+    "macos-system-configuration",
+]
+
 [build-dependencies]
 
 anyhow = "1.0.97"