RUSTSEC-2021-0127: serde_cbor is unmaintained

[github-actions[bot]]

serde_cbor is unmaintained

Details
Status	unmaintained
Package	serde_cbor
Version	0.11.2
URL	https://github.com/pyfisch/cbor
Date	2021-08-15

The serde_cbor crate is unmaintained. The author has archived the github repository.

Alternatives proposed by the author:

• ciborium
• minicbor

See advisory page for additional details.

[jhpratt]

In and of itself not a vulnerability, but I'll leave this open until bheisler/criterion.rs#534 is closed. It's a dev dependency only used benchmarks, so it's not the end of the world if this never changes.

[jhpratt]

criterion 0.4 has been released and time has been updated to use that. Closing as serde_cbor is no longer in the dependency tree.