Update async-nats

[helio-frota]

trustification dependabot vulnerability alerts
https://gist.github.com/helio-frota/da4c1c984d12cc458f5c58e8b9201fc6

[helio-frota]

@dejanb we still can see the warning I think that is because of cyclic dependency with trustification:

Crate:     ed25519-dalek
Version:   1.0.1
Title:     Double Public Key Signing Function Oracle Attack on `ed25519-dalek`
Date:      2022-06-11
ID:        RUSTSEC-2022-0093
URL:       https://rustsec.org/advisories/RUSTSEC-2022-0093
Solution:  Upgrade to >=2
Dependency tree:
ed25519-dalek 1.0.1
└── nkeys 0.2.0
    └── async-nats 0.29.0
        └── guac 0.1.0

├── exporter v0.1.0 (https://github.com/trustification/trustification.git?tag=v0.1.0-nightly.9382a428#9382a428)
│   ├── anyhow v1.0.86
│   ├── clap v4.5.4 (*)
│   ├── futures v0.3.30 (*)
│   ├── guac v0.1.0 (https://github.com/trustification/guac-rs.git?rev=5b8cad8342d42072a72ef4a149348d0d86a84176#5b8cad83)
│   │   ├── anyhow v1.0.86
│   │   ├── async-nats v0.29.0  <----------------------------------------------------
│   │   │   ├── async-nats-tokio-rustls-deps v0.24.0-ALPHA.1

either way we need to fix here first 👍

[dejanb]

Yeah, that makes sense. We need to update traustification as well. Maybe it's time to cut the first "release"?

[helio-frota]

as an upstream-dependency-for-trustification I would say yes 👍

[helio-frota]

Unless you want some other chore tasks before like:

• update the rust version -- same as trustify ( or 1.77.2 same as trustification )
• update other dependencies

[helio-frota]

we have breaking changes when updating reqwest ^

[dejanb]

I would update everything we can. Can you figure out how big is the breaking change for reqwest? Is there newer 0.11.x?

[helio-frota]

good approach +1

I'll take a closer look I remember a good amount of compilation errors etc.

[helio-frota]

@dejanb I suspect that is messing with the other dependency

https://crates.io/crates/graphql_client/0.14.0/dependencies

maybe better to wait for new graphql_client version , makes sense ?

[helio-frota]

this is the last outdated all the others got updated by the PR