build(deps): bump the deps group with 3 updates

Bumps the deps group with 3 updates: [tokio](https://github.com/tokio-rs/tokio), [serde_json](https://github.com/serde-rs/json) and [flate2](https://github.com/rust-lang/flate2-rs).


Updates `tokio` from 1.39.2 to 1.39.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.39.2...tokio-1.39.3)

Updates `serde_json` from 1.0.125 to 1.0.127
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/1.0.125...1.0.127)

Updates `flate2` from 1.0.31 to 1.0.32
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Changelog](https://github.com/rust-lang/flate2-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/flate2-rs/compare/1.0.31...1.0.32)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: flate2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>

Cargo.lock

@@ -17,6 +17,12 @@ version = "1.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f26201604c87b1e01bd3d98f8d5d9a8fcbb815e8cedb41ffccbeb4bf593a35fe"
 
+[[package]]
+name = "adler2"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627"
+
 [[package]]
 name = "ahash"
 version = "0.8.11"
@@ -215,7 +221,7 @@ dependencies = [
  "cc",
  "cfg-if",
  "libc",
- "miniz_oxide",
+ "miniz_oxide 0.7.4",
  "object",
  "rustc-demangle",
 ]
@@ -1072,13 +1078,13 @@ dependencies = [
 
 [[package]]
 name = "flate2"
-version = "1.0.31"
+version = "1.0.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f211bbe8e69bbd0cfdea405084f128ae8b4aaa6b0b522fc8f2b009084797920"
+checksum = "9c0596c1eac1f9e04ed902702e9878208b336edc9d6fddc8a48387349bab3666"
 dependencies = [
  "crc32fast",
  "libz-ng-sys",
- "miniz_oxide",
+ "miniz_oxide 0.8.0",
 ]
 
 [[package]]
@@ -2672,6 +2678,15 @@ dependencies = [
  "adler",
 ]
 
+[[package]]
+name = "miniz_oxide"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2d80299ef12ff69b16a84bb182e3b9df68b5a91574d3d4fa6e41b65deec4df1"
+dependencies = [
+ "adler2",
+]
+
 [[package]]
 name = "mio"
 version = "1.0.2"
@@ -3441,9 +3456,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.125"
+version = "1.0.127"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83c8e735a073ccf5be70aa8066aa984eaf2fa000db6c8d0100ae605b366d31ed"
+checksum = "8043c06d9f82bd7271361ed64f415fe5e12a77fdb52e573e7f06a516dea329ad"
 dependencies = [
  "itoa",
  "memchr",
@@ -3807,9 +3822,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.39.2"
+version = "1.39.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "daa4fb1bc778bd6f04cbfc4bb2d06a7396a8f299dc33ea1900cedaa316f467b1"
+checksum = "9babc99b9923bfa4804bd74722ff02c0381021eafa4db9949217e3be8e84fff5"
 dependencies = [
  "backtrace",
  "bytes",

crates/bin/Cargo.toml

@@ -38,7 +38,7 @@ strum = "0.26.1"
 strum_macros = "0.26.1"
 supports-color = "3.0.0"
 tempfile = "3.5.0"
-tokio = { version = "1.35.0", features = ["rt-multi-thread", "signal"], default-features = false }
+tokio = { version = "1.39.3", features = ["rt-multi-thread", "signal"], default-features = false }
 tracing-core = "0.1.32"
 tracing = { version = "0.1.39", default-features = false }
 tracing-log = { version = "0.2.0", default-features = false }

crates/binstalk-downloader/Cargo.toml

@@ -31,7 +31,7 @@ binstalk-types = { version = "0.9.0", path = "../binstalk-types" }
 bytes = "1.4.0"
 bzip2 = "0.4.4"
 compact_str = "0.8.0"
-flate2 = { version = "1.0.28", default-features = false }
+flate2 = { version = "1.0.32", default-features = false }
 futures-util = "0.3.30"
 futures-io = "0.3.30"
 httpdate = "1.0.2"
@@ -44,7 +44,7 @@ reqwest = { version = "0.12.5", features = [
     "deflate",
 ], default-features = false }
 serde = { version = "1.0.163", features = ["derive"], optional = true }
-serde_json = { version = "1.0.107", optional = true }
+serde_json = { version = "1.0.127", optional = true }
 # Use a fork here since we need PAX support, but the upstream
 # does not hav the PR merged yet.
 #
@@ -52,7 +52,7 @@ serde_json = { version = "1.0.107", optional = true }
 tar = { package = "binstall-tar", version = "0.4.39" }
 tempfile = "3.5.0"
 thiserror = "1.0.61"
-tokio = { version = "1.35.0", features = [
+tokio = { version = "1.39.3", features = [
     "macros",
     "rt-multi-thread",
     "sync",

crates/binstalk-fetchers/Cargo.toml

@@ -26,7 +26,7 @@ minisign-verify = "0.2.1"
 once_cell = "1.18.0"
 strum = "0.26.1"
 thiserror = "1.0.61"
-tokio = { version = "1.35.0", features = [
+tokio = { version = "1.39.3", features = [
     "rt",
     "sync",
 ], default-features = false }

crates/binstalk-git-repo-api/Cargo.toml

@@ -17,9 +17,9 @@ compact_str = "0.8.0"
 percent-encoding = "2.2.0"
 serde = { version = "1.0.163", features = ["derive"] }
 serde-tuple-vec-map = "1.0.1"
-serde_json = { version = "1.0.107" }
+serde_json = { version = "1.0.127" }
 thiserror = "1.0.52"
-tokio = { version = "1.35.0", features = ["sync"], default-features = false }
+tokio = { version = "1.39.3", features = ["sync"], default-features = false }
 tracing = "0.1.39"
 url = "2.3.1"
 zeroize = "1.8.1"

crates/binstalk-manifests/Cargo.toml

@@ -19,7 +19,7 @@ miette = "7.0.0"
 semver = { version = "1.0.17", features = ["serde"] }
 serde = { version = "1.0.163", features = ["derive"] }
 serde-tuple-vec-map = "1.0.1"
-serde_json = "1.0.107"
+serde_json = "1.0.127"
 thiserror = "1.0.61"
 toml_edit = { version = "0.22.12", features = ["serde"] }
 url = { version = "2.3.1", features = ["serde"] }

crates/binstalk-registry/Cargo.toml

@@ -25,12 +25,12 @@ normalize-path = { version = "0.2.1", path = "../normalize-path" }
 once_cell = "1.18.0"
 semver = { version = "1.0.17", features = ["serde"] }
 serde = { version = "1.0.163", features = ["derive"] }
-serde_json = "1.0.107"
+serde_json = "1.0.127"
 sha2 = "0.10.7"
 simple-git = { version = "0.2.4", optional = true }
 tempfile = "3.5.0"
 thiserror = "1.0.61"
-tokio = { version = "1.35.0", features = [
+tokio = { version = "1.39.3", features = [
     "rt",
     "sync",
 ], default-features = false }

crates/binstalk/Cargo.toml

@@ -36,7 +36,7 @@ strum = "0.26.1"
 target-lexicon = { version = "0.12.11", features = ["std"] }
 tempfile = "3.5.0"
 thiserror = "1.0.61"
-tokio = { version = "1.35.0", features = [
+tokio = { version = "1.39.3", features = [
     "rt",
     "process",
     "sync",

crates/detect-targets/Cargo.toml

@@ -10,7 +10,7 @@ edition = "2021"
 license = "Apache-2.0 OR MIT"
 
 [dependencies]
-tokio = { version = "1.35.0", features = [
+tokio = { version = "1.39.3", features = [
     "rt",
     "process",
     "sync",
@@ -35,7 +35,7 @@ windows-sys = { version = "0.59.0", features = [
 ] }
 
 [dev-dependencies]
-tokio = { version = "1.35.0", features = ["macros"], default-features = false }
+tokio = { version = "1.39.3", features = ["macros"], default-features = false }
 
 [package.metadata.binstall]
 pkg-url = "{ repo }/releases/download/v{ version }/cargo-binstall-{ target }.full.{ archive-format }"