Bump the minor-changes group across 1 directory with 5 updates (#266)

Bumps the minor-changes group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.86` | `1.0.89` |
| [serde](https://github.com/serde-rs/serde) | `1.0.208` | `1.0.210` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.125` | `1.0.128` |
| [secp256k1](https://github.com/rust-bitcoin/rust-secp256k1) | `0.29.0` | `0.29.1` |
| [embedded-alloc](https://github.com/rust-embedded/embedded-alloc) | `0.5.1` | `0.6.0` |

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alex Ostrovski <[email protected]>

.github/workflows/build-reusable.yml

@@ -33,7 +33,7 @@ jobs:
         uses: baptiste0928/cargo-install@v3
         with:
           crate: cargo-deny
-          version: "^0.14"
+          version: "^0.16"
 
       - name: Cache cargo build
         uses: actions/cache@v4

Cargo.toml

@@ -28,7 +28,7 @@ rustdoc-args = ["--cfg", "docsrs"]
 
 [dependencies]
 # Public dependencies (present in the public API).
-anyhow = { version = "1.0.86", default-features = false }
+anyhow = { version = "1.0.89", default-features = false }
 base64ct = { version = "1.5.2", features = ["alloc"] }
 ciborium = { version = "0.2.2", default-features = false, optional = true }
 chrono = { version = "0.4.38", default-features = false }

deny.toml

@@ -1,26 +1,23 @@
 # `cargo-deny` configuration.
 
+[output]
 feature-depth = 1
+
+[graph]
 # Check all features except for `exonum-crypto`, which is morally outdated.
 # Since the crate isn't actually built for the check, we don't care about conflicting features.
 features = ["ed25519-dalek", "ed25519-compact", "rsa", "p256", "k256", "es256k"]
 
 [advisories]
 db-urls = ["https://github.com/rustsec/advisory-db"]
-vulnerability = "deny"
-unmaintained = "deny"
-unsound = "deny"
 yanked = "deny"
-notice = "warn"
-severity-threshold = "Medium"
 ignore = [
   # "Marvin" attack for the `rsa` crate; no fix is available ATM.
   # A warning is added to crate readme and crate docs as a stopgap measure.
   "RUSTSEC-2023-0071",
 ]
 
 [licenses]
-unlicensed = "deny"
 allow = [
   # Permissive open-source licenses
   "MIT",
@@ -30,9 +27,6 @@ allow = [
   # Creative Commons licenses (FSF-approved, not OSI-approved); used by `secp256k1-sys`
   "CC0-1.0",
 ]
-copyleft = "deny"
-allow-osi-fsf-free = "neither"
-default = "deny"
 confidence-threshold = 0.8
 
 [bans]

e2e-tests/no-std/Cargo.toml

@@ -9,7 +9,7 @@ repository = "https://github.com/slowli/jwt-compact"
 publish = false
 
 [dependencies]
-anyhow = { version = "1.0.86", default-features = false }
+anyhow = { version = "1.0.89", default-features = false }
 chrono = { version = "0.4.38", default-features = false }
 const-decoder = "0.3.0"
 serde = { version = "1.0", default-features = false, features = ["alloc", "derive"] }
@@ -18,7 +18,7 @@ serde = { version = "1.0", default-features = false, features = ["alloc", "deriv
 cortex-m = { version = "0.7", features = ["critical-section-single-core"] }
 cortex-m-rt = "0.7"
 cortex-m-semihosting = "0.5"
-embedded-alloc = "0.5.1"
+embedded-alloc = "0.6.0"
 panic-halt = "0.2.0"
 
 # RSA-specific dependencies. Everything besides `rsa` is needed to set up an RNG.

e2e-tests/no-std/src/main.rs

@@ -9,7 +9,7 @@ use anyhow::anyhow;
 use chrono::{DateTime, Duration, TimeZone, Utc};
 use cortex_m_rt::entry;
 use cortex_m_semihosting::{debug, hprintln, syscall};
-use embedded_alloc::Heap;
+use embedded_alloc::LlffHeap as Heap;
 use panic_halt as _;
 use serde::{Deserialize, Serialize};