[cargo-deny] fix security advisor errors

[akichidis]

Description

Running the following command from root folder:

cargo deny check --config deny.toml

gives some errors:

error[unmaintained]: `derivative` is unmaintained; consider using an alternative
    ┌─ /home/runner/work/sui/sui/Cargo.lock:298:1
    │
298 │ derivative 2.2.0 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2024-0388
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0388
    ├ The [`derivative`](https://crates.io/crates/derivative) crate is no longer maintained.

.......................

error[unmaintained]: `instant` is unmaintained
    ┌─ /home/runner/work/sui/sui/Cargo.lock:512:1
    │
512 │ instant 0.1.12 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2024-0384
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0384
    ├ This crate is no longer maintained, and the author recommends using the maintained [`web-time`] crate instead.
      
      [`web-time`]: https://crates.io/crates/web-time
    ├ Solution: No safe upgrade is available!
    ├ instant v0.1.12
      ├── backoff v0.4.0


..........................

error[unmaintained]: `opentelemetry_api` has been merged into the `opentelemetry` crate
    ┌─ /home/runner/work/sui/sui/Cargo.lock:734:1
    │
734 │ opentelemetry_api 0.20.0 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2024-0387
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0387
    ├ Last release was on 2023-07-30.
      `opentelemetry_api` has been moved into the [`opentelemetry` crate](https://crates.io/crates/opentelemetry).
      
      Please use the `opentelemetry` crate going forward.
    ├ Announcement: https://github.com/open-telemetry/opentelemetry-rust/pull/1226
    ├ Solution: No safe upgrade is available!
    ├ opentelemetry_api v0.20.0


.........................

warning[yanked]: detected yanked crate (try `cargo update -p futures-util`)
    ┌─ /home/runner/work/sui/sui/Cargo.lock:426:1
    │
426 │ futures-util 0.3.30 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ yanked version
    │
    ├ futures-util v0.3.30

Test plan

CI

---

Release notes

Check each box that your changes affect. If none of the boxes relate to your changes, release notes aren't required.

For each box you select, include information after the relevant heading that describes the impact of your changes that a user might notice and any actions they must take to implement updates.

• Protocol:
• Nodes (Validators and Full nodes):
• Indexer:
• JSON-RPC:
• GraphQL:
• CLI:
• Rust SDK:
• REST API:

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

3 Skipped Deployments

Name	Status	Preview	Comments	Updated (UTC)
multisig-toolkit	⬜️ Ignored (Inspect)			Nov 11, 2024 2:10pm
sui-kiosk	⬜️ Ignored (Inspect)			Nov 11, 2024 2:10pm
sui-typescript-docs	⬜️ Ignored (Inspect)			Nov 11, 2024 2:10pm

[akichidis]

Closing it as it has been taken care of from #20220