Security: `failure` reports a critical level vulnerability warning

[waynexia]

Describe this problem https://github.com/CeresDB/ceresdb/security/dependabot/2

Steps to reproduce N/A

Expected behavior Fix this warning

Additional Information

An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when private_get_type_id is overridden.

Dependabot doesn't find a patch version fixes this.