RUSTSEC-2021-0127: serde_cbor is unmaintained

[github-actions[bot]]

serde_cbor is unmaintained

Details
Status	unmaintained
Package	serde_cbor
Version	0.11.2
URL	https://github.com/pyfisch/cbor
Date	2021-08-15

The serde_cbor crate is unmaintained. The author has archived the github repository.

Alternatives proposed by the author:

*ciborium *minicbor

See advisory page for additional details.

[VictorKoenders]

Seems to be a dependency pulled in by criterion

Tracking issue: https://github.com/bheisler/criterion.rs/issues/534

[Xuanwo]

The latest version of criterion.rs has removed this dep. We can do a version bump to fix this. I'm willing to open a PR for this if it looks good to you.