Upgrade all (most) dependencies before releasing 0.3

[maan2003]

deps left:

• [x] bech32
• [x] bitcoin
• [x] bitcoincore-rpc
• [x] bitcoin_hashes
• [x] bls12_381
• [ ] cln-plugin
• [x] electrum-client
• [x] esplora-client
• [x] ff
• [ ] gloo-net
• [x] group
• [x] lightning
• [x] lightning-invoice
• [x] miniscript
• [ ] rcgen
• [x] secp256k1
• [x] secp256k1-zkp
• [ ] tokio-rustls

[maan2003]

https://github.com/fedimint/fedimint/pull/4557 upgrade most of deps

[justinmoon]

Is this done?

[maan2003]

nope, all deps listed are still not upgraded

[elsirion]

Unless there's a CVE being on the latest version isn't important for 0.3 imo. It's generally a good practice to avoid huge version jumps later on, but that can also happen on master later on. Only drawback is that any change to master will make backporting harder, but that's always the case no matter the change.

EDIT: the only thing that really needs bumping is rust-bitcoin imo and that should be a minor version bump: https://github.com/fedimint/fedimint/issues/4618