Dependabot alert for spin v0.9.6 dependency

[antbern]

Issue description
I keep getting Dependabot alerts for GHSA-2qv5-7mw5-j3cg in my project based on esp32-hal v0.16.0. The issue seems to exist in the spin crate for versions below v0.9.8 and using cargo tree I tracked it to this crate which seems to depend on the affected version v0.9.6:

├── esp32-hal v0.16.0
│   ├── embassy-time v0.1.5 (*)
│   └── esp-hal-common v0.13.1
           [..]
│       ├── esp32 v0.27.0
│       │   ├── critical-section v1.1.2
│       │   ├── vcell v0.1.3
│       │   └── xtensa-lx v0.8.0 <---
│       │       ├── bare-metal v1.0.0
│       │       ├── mutex-trait v0.2.0
│       │       └── spin v0.9.6 <---
│       │           └── lock_api v0.4.10
│       │               └── scopeguard v1.1.0
│       │               [build-dependencies]
│       │               └── autocfg v1.1.0

Potential Solution
Bump the dependency of spin to a version that is not vulnerable 🚀