fix: update versioning of dependencies to fix builds

I misunderstood the purpose of the caret until I read
again the cargo book. Oh my.

Signed-off-by: Soc Virnyl Estela <[email protected]>

Cargo.toml

@@ -22,18 +22,18 @@ edition = "2021"
 license = "MPL-2.0"
 
 [workspace.dependencies]
-rustsec = "^0.28.2"
-clap = "~4.4.0"
-glob = "~0.3.1"
-tracing = { version = "^0.1.37", features = [
+rustsec = "0.29"
+clap = "4.4"
+glob = "0.3"
+tracing = { version = "0.1", features = [
     "max_level_trace",
     "release_max_level_debug",
 ] }
-tracing-subscriber = { version = "^0.3.17", features = ["env-filter"] }
-quick-xml = "~0.30"
+tracing-subscriber = { version = "0.3", features = ["env-filter"] }
+quick-xml = "0.30"
 # Pin to the most recent version before or after 1.0.172
 # https://github.com/serde-rs/serde/issues/2538 is a security risk.
-serde = "~1.0.184"
+serde = "1.0"
 
 [workspace.metadata.services]
 assets = [ "./cargo_vendor.service", "./cargo_audit.service" ]

cargo/Cargo.toml

@@ -8,23 +8,22 @@ license.workspace = true
 
 [dependencies]
 rustsec = { workspace = true }
-
 clap = { workspace = true, features = ["derive"] }
 quick-xml = { workspace = true, features = ["serialize"] }
 serde = { workspace = true, features = ["derive"] }
 glob.workspace = true
 tracing-subscriber.workspace = true
 tracing.workspace = true
 
-flate2 = { version = "1.0.27" }
-infer = "^0.15.0"
-tar = "~0.4.40"
-tempfile = "~3.8.0"
-terminfo = "~0.8.0"
-toml = "~0.7.6"
-xz2 = "^0.1.7"
-zstd = { version = "~0.12.4", features = ["pkg-config", "zstdmt"] }
-bzip2 = { version = "~0.4" }
+flate2 = { version = "1.0" }
+infer = "0.15"
+tar = "0.4"
+tempfile = "3.8"
+terminfo = "0.8"
+toml = "0.7"
+xz2 = "0.1"
+zstd = { version = "0.12", features = ["pkg-config", "zstdmt"] }
+bzip2 = { version = "0.4" }
 
 [lints]
 workspace = true