Bump dependencies (#1665)

* Bump dependencies

* Pin old `tokio-stream` version

We are stuck on an old version of `deno` and that version wants an old
version of `tokio` (v1.36.0). The latest release of `tokio-stream` is
incompatible with this version since it makes use of features added since
then:

* `mpsc::Receiver::{is_closed,is_empty,len}`
  * added in `tokio` v1.37.0
* `mpsc::Receiver::{capacity,max_capacity}`
  * added in `tokio` v1.38.0

This change pins `tokio-stream` to the last compatible version, similar
to what was done in commit `f7f6b3a73d36a1b85dc903fe047448568730a36f`
(f7f6b3a).

---------

Co-authored-by: Charles Coggins <[email protected]>

Author: phylum-bot