bump deps with cargo audit fix (#3320)

This addresses all the vulnerabilities flagged by `cargo audit` which are
fixable without API-breaking updates.  We'll need to upgrade to newer,
API-breaking versions to address the remaining vulnerabilities.

Signed-off-by: Joel Dice <[email protected]>

Author: dicej