marzano/0.0_git20240410-r1: fix GHSA-q6cp-qfwq-4gcv/GHSA-q445-7m23-qrmw/

GHSA-6g7w-8wpp-frhj/GHSA-22q8-ghmq-63vf/

marzano.yaml

@@ -3,7 +3,7 @@ package:
   # This project doesn't do releases and everything is commit based.
   # This corresponds to commit bf632bd68f1b7fdb201b2379c3b31bc82eee9fee
   version: 0.0_git20240410
-  epoch: 1
+  epoch: 2
   description: "a structural diff that understands syntax"
   copyright:
     - license: MIT
@@ -31,6 +31,8 @@ pipeline:
       git checkout ${{vars.commit}}
       git submodule update --init
 
+  - uses: rust/cargobump
+
   - runs: |
       cd gritql
       cargo auditable build --release

marzano/cargobump-deps.yaml

@@ -0,0 +1,9 @@
+packages:
+    - name: libgit2-sys
+      version: 0.16.2
+    - name: rustls
+      version: 0.22.4
+    - name: openssl
+      version: 0.10.66
+    - name: h2
+      version: 0.3.26