build(deps): bump the prod group across 1 directory with 24 updates

[dependabot]

Bumps the prod group with 24 updates in the / directory:

Package	From	To
clap	4.5.13	4.5.18
indexmap	2.3.0	2.5.0
serde	1.0.204	1.0.210
tokio	1.39.2	1.40.0
tokio-stream	0.1.15	0.1.16
tower	0.4.13	0.5.0
thiserror	1.0.63	1.0.64
hyper-util	0.1.6	0.1.9
bytes	1.7.1	1.7.2
regex	1.10.6	1.11.0
insta	1.39.0	1.40.0
serde_json	1.0.122	1.0.128
tempfile	3.11.0	3.13.0
prost	0.13.1	0.13.3
tonic	0.12.1	0.12.3
tonic-build	0.12.1	0.12.3
primitive-types	0.12.2	0.13.1
uint	0.9.5	0.10.0
tokio-util	0.7.11	0.7.12
rlimit	0.10.1	0.10.2
tonic-reflection	0.12.1	0.12.3
owo-colors	4.0.0	4.1.0
syn	2.0.72	2.0.79
quote	1.0.36	1.0.37

Updates clap from 4.5.13 to 4.5.18

Release notes

Sourced from clap's releases.

v4.5.18

[4.5.18] - 2024-09-20

Features

• (builder) Expose Arg::get_display_order and Command::get_display_order

v4.5.17

[4.5.17] - 2024-09-04

Fixes

• (help) Style required argument groups
• (derive) Improve error messages when unsupported fields are used

v4.5.16

[4.5.16] - 2024-08-15

Fixes

• (derive) Improve error messages when derive feature is missing

v4.5.15

[4.5.15] - 2024-08-10

Compatiblity

• (unstable-ext) Arg::remove changed return types

Fixes

• (unstable-ext) Make Arg::remove return the removed item

v4.5.14

[4.5.14] - 2024-08-08

Features

• (unstable-ext) Added Arg::add for attaching arbitrary state, like completion hints, to Arg without Arg knowing about it

Changelog

Sourced from clap's changelog.

[4.5.18] - 2024-09-20

Features

• (builder) Expose Arg::get_display_order and Command::get_display_order

[4.5.17] - 2024-09-04

Fixes

• (help) Style required argument groups
• (derive) Improve error messages when unsupported fields are used

[4.5.16] - 2024-08-15

Fixes

• (derive) Improve error messages when derive feature is missing

[4.5.15] - 2024-08-10

Compatiblity

• (unstable-ext) Arg::remove changed return types

Fixes

• (unstable-ext) Make Arg::remove return the removed item

[4.5.14] - 2024-08-08

Features

• (unstable-ext) Added Arg::add for attaching arbitrary state, like completion hints, to Arg without Arg knowing about it

Commits

• d811585 chore: Release
• ab948b3 docs: Update changelog
• 82e599e Merge pull request #5602 from shannmu/delimiter_values
• 59bf26d feat(clap_complete): Support delimiter values in native completions
• ccecab3 test(clap_complete): Add test cases for delimiter_values support
• a3a4764 docs(derive): Specify Parser::update_from semantics
• df165a2 docs(derive): Flatten isn't just for update
• 5488bcf docs(derive): Connect more dots for Args/Subcommand
• 6013ad4 chore: Release
• f98e3ee docs: Update changelog
• Additional commits viewable in compare view

Updates indexmap from 2.3.0 to 2.5.0

Changelog

Sourced from indexmap's changelog.

2.5.0

• Added an insert_before method to IndexMap and IndexSet, as an alternative to shift_insert with different behavior on existing entries.
• Added first_entry and last_entry methods to IndexMap.
• Added From implementations between IndexedEntry and OccupiedEntry.

2.4.0

• Added methods IndexMap::append and IndexSet::append, moving all items from one map or set into another, and leaving the original capacity for reuse.

Commits

• 48ed490 Release 2.5.0
• 139d7ad Merge pull request #340 from cuviper/insert-bounds
• 1d9b5e3 Add doc examples for insert_before and shift_insert
• 8ca01b0 Use insert_before for "new" entries in insert_sorted
• 7224def Add insert_before as an alternate to shift_insert
• 0247a15 Document and assert index bounds in shift_insert
• 922c6ad Update the CI badge
• e482e17 Merge pull request #342 from cuviper/btree-like
• b63e4a1 Merge pull request #341 from cuviper/from-entry
• 264e5b7 Add doc aliases like BTreeMap/BTreeSet
• Additional commits viewable in compare view

Updates serde from 1.0.204 to 1.0.210

Release notes

Sourced from serde's releases.

v1.0.210

• Support serializing and deserializing IpAddr and SocketAddr in no-std mode on Rust 1.77+ (#2816, thanks @​MathiasKoch)
• Make serde::ser::StdError and serde::de::StdError equivalent to core::error::Error on Rust 1.81+ (#2818)

v1.0.209

• Fix deserialization of empty structs and empty tuples inside of untagged enums (#2805, thanks @​Mingun)

v1.0.208

• Support serializing and deserializing unit structs in a flatten field (#2802, thanks @​jonhoo)

v1.0.207

• Improve interactions between flatten attribute and skip_serializing/skip_deserializing (#2795, thanks @​Mingun)

v1.0.206

• Improve support for flatten attribute inside of enums (#2567, thanks @​Mingun)

v1.0.205

• Use serialize_entry instead of serialize_key + serialize_value when serialize flattened newtype enum variants (#2785, thanks @​Mingun)
• Avoid triggering a collection_is_never_read lint in the deserialization of enums containing flattened fields (#2791)

Commits

• 89c4b02 Release 1.0.210
• eeb8e44 Merge pull request #2818 from dtolnay/coreerror
• 785c2d9 Stabilize no-std StdError trait
• d549f04 Reformat parse_ip_impl definition and calls
• 4c0dd63 Delete attr support from core::net deserialization macros
• 26fb134 Relocate cfg attrs out of parse_ip_impl and parse_socket_impl
• 07e614b Merge pull request #2817 from dtolnay/corenet
• b1f899f Delete doc(cfg) attribute from impls that are supported in no-std
• b4f860e Merge pull request #2816 from MathiasKoch/chore/core-net
• d940fe1 Reuse existing Buf wrapper as replacement for std::io::Write
• Additional commits viewable in compare view

Updates tokio from 1.39.2 to 1.40.0

Release notes

Sourced from tokio's releases.

Tokio v1.40.0

1.40.0 (August 30th, 2024)

Added

• io: add util::SimplexStream (#6589)
• process: stabilize Command::process_group (#6731)
• sync: add {TrySendError,SendTimeoutError}::into_inner (#6755)
• task: add JoinSet::join_all (#6784)

Added (unstable)

• runtime: add Builder::{on_task_spawn, on_task_terminate} (#6742)

Changed

• io: use vectored io for write_all_buf when possible (#6724)
• runtime: prevent niche-optimization to avoid triggering miri (#6744)
• sync: mark mpsc types as UnwindSafe (#6783)
• sync,time: make Sleep and BatchSemaphore instrumentation explicit roots (#6727)
• task: use NonZeroU64 for task::Id (#6733)
• task: include panic message when printing JoinError (#6753)
• task: add #[must_use] to JoinHandle::abort_handle (#6762)
• time: eliminate timer wheel allocations (#6779)

Documented

• docs: clarify that [build] section doesn't go in Cargo.toml (#6728)
• io: clarify zero remaining capacity case (#6790)
• macros: improve documentation for select! (#6774)
• sync: document mpsc channel allocation behavior (#6773)

#6589: tokio-rs/tokio#6589 #6724: tokio-rs/tokio#6724 #6727: tokio-rs/tokio#6727 #6728: tokio-rs/tokio#6728 #6731: tokio-rs/tokio#6731 #6733: tokio-rs/tokio#6733 #6742: tokio-rs/tokio#6742 #6744: tokio-rs/tokio#6744 #6753: tokio-rs/tokio#6753 #6755: tokio-rs/tokio#6755 #6762: tokio-rs/tokio#6762 #6773: tokio-rs/tokio#6773 #6774: tokio-rs/tokio#6774 #6779: tokio-rs/tokio#6779 #6783: tokio-rs/tokio#6783 #6784: tokio-rs/tokio#6784 #6790: tokio-rs/tokio#6790

... (truncated)

Commits

• ea6d652 chore: prepare Tokio v1.40.0 (#6806)
• 11f66f4 chore: replace ready! with std::task::ready! (#6804)
• 479a56a time: eliminate timer wheel allocations (#6779)
• b37f0de runtime: implement initial set of task hooks (#6742)
• c9fad08 codec: fix typo in the docs for Encoder::Error (#6800)
• cc70a21 task: add join_all method to JoinSet (#6784)
• 1ac8dff task: add AbortOnDropHandle type (#6786)
• ff3f2a8 io: add SimplexStream (#6589)
• 5b9a290 io: clarify zero remaining capacity case (#6790)
• 70569bd task: fix typo in TaskTracker docs (#6792)
• Additional commits viewable in compare view

Updates tokio-stream from 0.1.15 to 0.1.16

Commits

• 4ed0fa2 chore: prepare tokio-stream v0.1.16 (#6825)
• 12b2567 chore: use poll_fn from std (#6810)
• 35f244a chore: prepare tokio-util v0.7.12 (#6823)
• 1166ecc config: enable full for tokio-util in the playground (#6818)
• 27539ae runtime: fix race in yield_defers_until_park test (#6809)
• ea6d652 chore: prepare Tokio v1.40.0 (#6806)
• 11f66f4 chore: replace ready! with std::task::ready! (#6804)
• 479a56a time: eliminate timer wheel allocations (#6779)
• b37f0de runtime: implement initial set of task hooks (#6742)
• c9fad08 codec: fix typo in the docs for Encoder::Error (#6800)
• Additional commits viewable in compare view

Updates tower from 0.4.13 to 0.5.0

Release notes

Sourced from tower's releases.

tower 0.5.0

Fixed

• util: BoxService is now Sync (#702)

Changed

• util: Removed deprecated ServiceExt::ready_and method and ReadyAnd future (#652)
• retry: Breaking Change retry::Policy::retry now accepts &mut Req and &mut Res instead of the previous mutable versions. This increases the flexibility of the retry policy. To update, update your method signature to include mut for both parameters. (#584)
• retry: Breaking Change Change Policy to accept &mut self (#681)
• retry: Add generic backoff utilities (#685)
• retry: Add Budget trait. This allows end-users to implement their own budget and bucket implementations. (#703)
• reconnect: Breaking Change Remove unused generic parameter from Reconnect::new (#755)
• ready-cache: Allow iteration over ready services (#700)
• discover: Implement Clone for Change (#701)
• util: Add a BoxCloneServiceLayer (#708)
• rng: use a simpler random 2-sampler (#716)
• filter: Derive Clone for AsyncFilterLayer (#731)
• general: Update IndexMap (#741)
• MSRV: Increase MSRV to 1.63.0 (#741)

#702: tower-rs/tower#702 #652: tower-rs/tower#652 #584: tower-rs/tower#584 #681: tower-rs/tower#681 #685: tower-rs/tower#685 #703: tower-rs/tower#703 #755: tower-rs/tower#755 #700: tower-rs/tower#700 #701: tower-rs/tower#701 #708: tower-rs/tower#708 #716: tower-rs/tower#716 #731: tower-rs/tower#731 #741: tower-rs/tower#741

Commits

• fec9e55 tower-layer: drop versions from dev dependencies (#782)
• 646804d chore: prepare to release tower-0.5.0, tower-layer-0.3.3, tower-service-0.3.3...
• 7202cfe chore: fix a few typos (#780)
• 85080a5 use workspace dependencies for tower (#778)
• 88a7d3e fix warnings found when running check/doc commands (#779)
• a6e98a7 chore: update GitHub Actions CI (#740)
• 74e925d chore: fix spelling errors (#775)
• 89ac74f feat: Make new functions const when possible (#760)
• 032d17f ensure that re-exported symbols show feature label in root (#754)
• 05a0a25 Upgrade to indexmap v2 (MSRV 1.63) (#741)
• Additional commits viewable in compare view

Updates thiserror from 1.0.63 to 1.0.64

Release notes

Sourced from thiserror's releases.

1.0.64

• Exclude derived impls from coverage instrumentation (#322, thanks @​oxalica)

Commits

• 84484bc Release 1.0.64
• 023f036 Merge pull request #322 from oxalica/feat/mark-auto-derived
• ae1f47e Mark #[automatically_derived] for generated impls
• ab5b5e3 Upload CI Cargo.lock for reproducing failures
• 00b3c14 Work around new dead code warning in test
• See full diff in compare view

Updates hyper-util from 0.1.6 to 0.1.9

Release notes

Sourced from hyper-util's releases.

v0.1.9

What's Changed

• Add support for client::legacy DNS resolvers to set non-zero ports on returned addresses.
• Fix client::legacy wrongly retrying pooled connections that were created successfully but failed immediately after, resulting in a retry loop.

New Contributors

• @​Nuhvi made their first contribution in hyperium/hyper-util#148
• @​ahl made their first contribution in hyperium/hyper-util#150

Full Changelog: hyperium/hyper-util@v0.1.8...v0.1.9

v0.1.8

What's Changed

• Add server::conn::auto::upgrade::downcast() for use with auto connection upgrades.

New Contributors

• @​joshka made their first contribution in hyperium/hyper-util#134

Full Changelog: hyperium/hyper-util@v0.1.7...v0.1.8

v0.1.7

What's Changed

• Add Connected::poison() to legacy client, a port from hyper v0.14.x.
• Add Error::connect_info() to legacy client, a port from hyper v0.14.x.

New Contributors

• @​nox made their first contribution in hyperium/hyper-util#135
• @​aaronriekenberg made their first contribution in hyperium/hyper-util#137

Full Changelog: hyperium/hyper-util@v0.1.6...v0.1.7

Changelog

Sourced from hyper-util's changelog.

0.1.9 (2024-09-24)

• Add support for client::legacy DNS resolvers to set non-zero ports on returned addresses.
• Fix client::legacy wrongly retrying pooled connections that were created successfully but failed immediately after, resulting in a retry loop.

0.1.8 (2024-09-09)

• Add server::conn::auto::upgrade::downcast() for use with auto connection upgrades.

0.1.7 (2024-08-06)

• Add Connected::poison() to legacy client, a port from hyper v0.14.x.
• Add Error::connect_info() to legacy client, a port from hyper v0.14.x.

Commits

• fcb8565 v0.1.9
• 8b246a1 chore: remove tower dep by vendoring Oneshot (#151)
• d3e9699 fix: erroneous retries on a failed request to a newly opened socket (#150)
• 2639193 feat(client): use non-zero ports resolved by dns resolvers (#148)
• 4a8a261 chore(ci): pin tokio-util in MSRV CI job (#149)
• ad4a376 v0.1.8
• 164d926 Introduce hyper_util::server::conn::auto::upgrade::downcast (#147)
• df55aba refactor: run dns resolution in the same tracing-span as the caller (#134)
• 9fcc7f6 refactor(client): Add conditional compilation for interface field in HttpCo...
• cbe098a tests: rewrite drop_client_closes_idle_connection in async (#141)
• Additional commits viewable in compare view

Updates bytes from 1.7.1 to 1.7.2

Release notes

Sourced from bytes's releases.

Bytes 1.7.2

1.7.2 (September 17, 2024)

Fixed

• Fix default impl of Buf::{get_int, get_int_le} (#732)

Documented

• Fix double spaces in comments and doc comments (#731)

Internal changes

• Ensure BytesMut::advance reduces capacity (#728)

Changelog

Sourced from bytes's changelog.

1.7.2 (September 17, 2024)

Fixed

• Fix default impl of Buf::{get_int, get_int_le} (#732)

Documented

• Fix double spaces in comments and doc comments (#731)

Internal changes

• Ensure BytesMut::advance reduces capacity (#728)

Commits

• d7c1d65 chore: prepare bytes v1.7.2 (#736)
• ac46ebd ci: update nightly to nightly-2024-09-15 (#734)
• 79fb853 fix: apply sign extension when decoding int (#732)
• 291df5a Fix double spaces in comments and doc comments (#731)
• ed7d5ff test: ensure BytesMut::advance reduces capacity (#728)
• See full diff in compare view

Updates regex from 1.10.6 to 1.11.0

Changelog

Sourced from regex's changelog.

1.11.0 (2024-09-29)

This is a new minor release of regex that brings in an update to the Unicode Character Database. Specifically, this updates the Unicode data used by regex internally to the version 16 release.

New features:

• [FEATURE #1228](rust-lang/regex#1228): Add new regex::SetMatches::matched_all method.
• [FEATURE #1229](rust-lang/regex#1229): Update to Unicode Character Database (UCD) version 16.

Commits

• bcbe403 1.11.0
• 9e17e56 deps: bump regex-automata
• 58e16f5 regex-automata-0.4.8
• 4bb1e3d deps: bump regex-syntax
• cba0fbc regex-syntax-0.8.5
• 1533257 changelog: 1.11.0
• 9239e7e data: update to UCD 16
• 7691e49 cli: include \w, \s and \d in Unicode data table generation
• b790aa5 api: add SetMatches::matched_all
• d3d3ff7 cli: remove some dead code
• Additional commits viewable in compare view

Updates insta from 1.39.0 to 1.40.0

Release notes

Sourced from insta's releases.

1.40.0

Release Notes

• cargo-insta no longer panics when running cargo test --accept --workspace on a workspace with a default crate. #532

• MSRV for insta has been raised to 1.60, and for cargo-insta to 1.64.

• Added support for compact debug snapshots (assert_compact_debug_snapshot). #514

• Deprecate --no-force-pass in cargo-insta. The --check option covers the same functionality and has a clearer name. #513

• Inline snapshots now use the required number of #s to escape the snapshot value, rather than always using ###. This allows snapshotting values which themselves contain ###. If there are no existing # characters in the snapshot value, a single # will be used. #540

• Inline snapshots can now be updated with --force-update-snapshots. #569

• cargo insta test accepts multiple --exclude flags. #520

• test runner in insta's yaml config works. #544

• Print a warning when encountering old snapshot formats. #503

• Group the options in cargo insta --help, upgrade to clap from structopt. #518

• No longer suggest running cargo insta message when running cargo insta test --check. #515

• Print a clearer error message when accepting a snapshot that was removed. #516

• Mark require-full-match as experimental, given some corner-cases are currently difficult to manage. #497

• Add a new integration test approach for cargo-insta and a set of integration tests. #537

• Enable Filters to be created from IntoIterator types, rather than just Vecs. #570

• Implemented total sort order for an internal Key type correctly. This prevents potential crashes introduced by the new sort algorithm in Rust 1.81. #586

Install cargo-insta 1.40.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.40.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

... (truncated)

Changelog

Sourced from insta's changelog.

1.40.0

• cargo-insta no longer panics when running cargo insta test --accept --workspace on a workspace with a default crate. #532

• MSRV for insta has been raised to 1.60, and for cargo-insta to 1.64.

• Added support for compact debug snapshots (assert_compact_debug_snapshot). #514

• Deprecate --no-force-pass in cargo-insta. The --check option covers the same functionality and has a clearer name. #513

• Inline snapshots now use the required number of #s to escape the snapshot value, rather than always using ###. This allows snapshotting values which themselves contain ###. If there are no existing # characters in the snapshot value, a single # will be used. #540

• Inline snapshots can now be updated with --force-update-snapshots. #569

• cargo insta test accepts multiple --exclude flags. #520

• test runner in insta's yaml config works. #544

• Print a warning when encountering old snapshot formats. #503

• Group the options in cargo insta --help, upgrade to clap from structopt. #518

• No longer suggest running cargo insta message when running cargo insta test --check. #515

• Print a clearer error message when accepting a snapshot that was removed. #516

• Mark require-full-match as experimental, given some corner-cases are currently difficult to manage. #497

• Add a new integration test approach for cargo-insta and a set of integration tests. #537

• Enable Filters to be created from IntoIterator types, rather than just Vecs. #570

• Implemented total sort order for an internal Key type correctly. This prevents potential crashes introduced by the new sort algorithm in Rust 1.81. #586

Commits

• 83f3365 1.40.0
• 8893db7 Implement total ord for Key (#586)
• a4231cc Add test for find_snapshot_macro (#582)
• d609d7d Add integration test for force updating (#580)
• 02665ea Mask insta env vars in integration tests (#579)
• ef7abb8 Use different tests for redactions (#578)
• 597199d Make test_normalize_inline_snapshot easier to read (#577)
• ca87b84 Fix latest clippy (#574)
• 4bea0fb Unify handling of file & inline snapshots (compat) (#528)
• c29db01 Enable inline snapshots to be force-updated (#569)
• Additional commits viewable in compare view

Updates serde_json from 1.0.122 to 1.0.128

Release notes

Sourced from serde_json's releases.

1.0.128

• Support serializing maps containing 128-bit integer keys to serde_json::Value (#1188, thanks @​Mrreadiness)

1.0.127

• Add more removal methods to OccupiedEntry (#1179, thanks @​GREsau)

1.0.126

• Improve string parsing on targets that use 32-bit pointers but also have fast 64-bit integer arithmetic, such as aarch64-unknown-linux-gnu_ilp32 and x86_64-unknown-linux-gnux32 (#1182, thanks @​CryZe)

1.0.125

• Speed up \uXXXX parsing and improve handling of unpaired surrogates when deserializing to bytes (#1172, #1175, thanks @​purplesyringa)

v1.0.124

• Fix a bug in processing string escapes in big-endian architectures (#1173, thanks @​purplesyringa)

v1.0.123

• Optimize string parsing by applying SIMD-within-a-register: 30.3% improvement on twitter.json from 613 MB/s to 799 MB/s (#1161, thanks @​purplesyringa)

Commits

• d96b1d9 Release 1.0.128
• 599228d Merge pull request #1188 from Mrreadiness/feat/add-hashmap-key-128-serializer
• 5416cee feat: add support for 128 bit HashMap key serialization
• 27a4ca9 Upload CI Cargo.lock for reproducing failures
• 5ebf65c Release 1.0.127
• f287a3b Merge pull request 1179 from GREsau/patch-1
• ec980b0 Release 1.0.126
• e6282b0 Merge pull request #1184 from serde-rs/fastarithmetic
• ffc4a43 Improve cfg names for fast arithmetic
• 4b1048d Merge pull request #1183 from serde-rs/arithmetic
• Additional commits viewable in compare view

Updates tempfile from 3.11.0 to 3.13.0

Changelog

Sourced from tempfile's changelog.

3.13.0

• Add with_suffix constructors for easily creating new temporary files with a specific suffix (e.g., a specific file extension). Thanks to @​Borgerr.
• Update dependencies (fastrand & rustix).

3.12.0

• Add a keep(keep: bool) function to builder that suppresses delete-on-drop behavior (thanks to @​RalfJung).
• Update windows-sys from 0.52 to 0.59.

Commits

• a354f8c chore: release 3.13.0
• d21b602 chore: update deps
• d6600da Add for with_suffix (#299)
• 19280c5 Document current default permissions for tempdirs (#296)
• c5eac9f fix: address clippy unnecessary deref lint in test (#294)
• 5b90d96 chore: release v3.12.0
• 6e99572 add keep() function to builder that suppresses delete-on-drop behavior (#293)
• 96f2e7e build(deps): update windows-sys requirement from 0.52 to 0.59 (#290)
• ddd633e build(deps): bump EmbarkStudios/cargo-deny-action from 1 to 2 (#291)
• See full diff in compare view

Updates prost from 0.13.1 to 0.13.3

Changelog

Sourced from prost's changelog.

Prost version 0.13.3

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

Features

• (prost-types) Add normalized functions (#1158)

Bug Fixes

• (prost-build) Remove derived(Copy) on boxed fields (#1157)

Documentation

• (prost-types) Add description of using Any (#1141)
• (prost-build) Use cargo add in example (#1149)

Styling

• Use Path::display() when printing a path (#1150)
• MessageGraph::new() can't actually fail (#1151)
• (generated-code) Use Self in as_str_name (#1154)

Testing

• Actually test skip_debug for prost::Oneof (#1148)
• (prost-build) Validate error texts (#1152)
• (prost-build) Fix error texts (#1156)

Build

• Increase MSRV to 1.71.1 (#1135)
• (deps) Update pulldown-cmark to 0.12 and pulldown-cmark-to-cmark to 16 (

[oxarbitrage]

I need someone else to review this PR. Changes done to the original dependabot upgrade:

• tower and primitive-types can't be updated as we have other dependencies that depends on old versions.
• Updated supply chain for cargo vet.

The cargo vet part was pretty annoying as we had so many dependencies to certify, we might want to start trusting publishers for some packages and maybe run cargo vet as part of the release process but i will leave all that for another time, just certified everything so we can move on.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.