Update tiny_http and drop cargo audit CI for now

[romanz]

Following #575.

[Kixunil]

Looks like you forgot to commit Cargo.lock

[romanz]

It still doesn't work, since latest tiny-http doesn't pass cargo audio 😞

$ git lg -1
* 9a2566c Richard Bradfield:  (HEAD -> master, tag: 0.9.0, origin/master, origin/HEAD) Prepare for 0.9.0 release (5 days ago)

$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 370 security advisories (from /home/roman/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (34 crate dependencies)
Crate:         chrono
Version:       0.4.19
Title:         Potential segfault in `localtime_r` invocations
Date:          2020-11-10
ID:            RUSTSEC-2020-0159
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0159
Solution:      No safe upgrade is available!
Dependency tree: 
chrono 0.4.19
└── tiny_http 0.9.0

error: 1 vulnerability found!

[Kixunil]

Maybe instead of dropping cargo audit we could --ignore RUSTSEC-2020-0159?

[romanz]

Not sure how to do that with https://github.com/actions-rs/audit-check :(
I tried adding args, but it didn't recognize them: https://github.com/romanz/electrs/runs/3942930966

[Kixunil]

This may help? actions-rs/audit-check#132 (comment)

[romanz]

Thanks!
Will take a look :)

[romanz]

Cool, it seems to work :)
https://github.com/romanz/electrs/runs/3949291782#step:3:16