Major-version update cargo dependencies (#4447)

Updates as suggested by `cargo outdated --workspace`, and now including
`toml` (which was held back in #4240): upgrading `toml` from 0.8 to 0.9
required changes to our use of `from_str`.

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 and MIT licenses.

Author: tautschnig