fix: replace tempdir with tempfile

tempdir is deprecated and has a dependency on the remove_dir_all crate
that has some known vulnerability in <0.8.0

Author: alexpdp7

Cargo.lock

@@ -15,7 +15,7 @@ directories = "6.0.0"
 include_dir = "0.7.4"
 regex = "1.11.1"
 starlark = "0.13.0"
-tempdir = "0.3.7"
+tempfile = "3.16.0"
 thiserror = "2.0.11"
 ureq = "3.0.5"
 vsort = "0.2.0"

Cargo.toml

@@ -83,7 +83,7 @@ pub fn base(builder: &mut GlobalsBuilder) {
 
     fn extract_from_url(url: &str, path: &str) -> anyhow::Result<FileContents> {
         let path = path.to_string();
-        let tmp_dir = tempdir::TempDir::new("ubpkg").unwrap();
+        let tmp_dir = tempfile::TempDir::new().unwrap();
         let mut extracted_path = tmp_dir.path().to_path_buf();
         extracted_path.push(path.clone());
         let mut asset_path = tmp_dir.path().to_path_buf();