Update dependencies to latest

- bunch of minor bumps (regex, serde, a few direct and indirect dev
  dependencies)
- pyo3 bumped to 0.23 which deprecates the `*_bound` APIs, impact
  that, also PyO3/pyo3#4550

Author: masklinn