deps: allow updating to openssl 3.1.x

[kvakil]

The tag in the new updating script only matches OpenSSL 3.0 releases. There is now 3.1.2 release of OpenSSL-quic (see ref). Update the script to grab any 3.x release of OpenSSL.

Drive-by: update the help message.
Refs: https://github.com/quictls/openssl/tree/openssl-3.1.2+quic

[nodejs-github-bot]

Review requested:

• @nodejs/security-wg

[kvakil]

@marco-ippolito: AFAICT this was changed in #48377. Just checking that it wasn't done intentionally for some reason.

[kvakil]

Hm, I guess part of the issue here is that OpenSSL 3.1.x is not supported as long as OpenSSL 3.0:

Note: The latest stable version is the 3.1 series supported until 14th March 2025. Also available is the 3.0 series which is a Long Term Support (LTS) version and is supported until 7th September 2026.

from https://www.openssl.org/source/

An EOL of 14th March 2025 is before any of our current release line EOLs: https://github.com/nodejs/release#release-schedule

So I'm not sure. It's unfortunate, because there are user reports of issues with 3.0 which are fixed in 3.1, e.g. #43128.

[kvakil]

Oops, already discussed here: #47177

Apologies for the noise :/