Fix rand_core dependency, cargo update

[strohel]

Should fix #242.

We depend on getrandom feature of rand_core, but we weren't specifying that.

It worked because curve25519-dalek 4.0.0-pre.2 was pulling the getrandom feature of rand_core, but after updating it to 4.0.0-pre.5 it stopped pulling rand_core altogether.

After the cargo-update, all our dependencies are on their newest version, sans clap 3.2, which could be updated to 4.0. It has quite some breaking API changes, so I'll leave that for a separate PR.

This should also fix https://github.com/tonarino/innernet/security/dependabot/1

[skywhale]

LGTM

Thank you for the quick fix.

I was wondering after posting my message, because Cargo.lock had 0.6.4 of rand_core, which is the lastest. I didn't know transitive dependencies could behave this way. Good catch @strohel :)

[strohel]

Yeah feature dependencies are somewhat less visible than version dependencies - they are not mentioned in Cargo.lock. And there's similar caveat when using workspaces: for each dependency a union of pulled features is made, hence it is easy to forget specifying all needed features when adding a workspace crate. It also means that cargo build -p audio-playground can produce slightly different result than cd crates/audio-playground && cargo build 🤷.

[bschwind]

LGTM!