chore: Update dependencies a RustSec advisory affects

Updating a package makes cargo re-resolve the graph, which points three
Windows-only crates at the windows-sys copy already in the lockfile. Their
requirements accept either, and neither version appears in the dependency graph
for a Linux target.

Author: lfrancke