Upgrade vendored truststore to 0.10.0

[sethmlarson]

Closes #12901

[sbidoul]

Wondering why CI is complaining about the missing changelog entry...

[hugovk]

https://github.com/pypa/pip/pull/13041/checks?check_run_id=32009990415 says:

No files matching re.compile('news/(?P<issue_number>[^\\./]+).(?P<fragment_type>removal|feature|bugfix|vendor|doc|process|trivial)(.\d+)?(.[^\\./]+)*.rst$') pattern added

And the PR is modifying an existing news/truststore.vendor.rst

Other PRs add a changelog entry like news/12771.feature.rst

The regex seems to match news/truststore.vendor.rst even if it doesn't really have an issue number:

https://regex101.com/r/uZgPX3/1

But maybe the problem is the file was modified, not added?

[sbidoul]

But maybe the problem is the file was modified, not added?

Probably, yes. Thanks for the investigation.