misc. dependency updates

[cpu]

Before diving into more meaningful work I wanted to update some dependencies (possibly a good time to consider adding a Dependabot config?). This branch updates all of the deps and dev deps (with the exception of jni (see #22), and semver compatible dependencies). Likely easiest to review commit-by-commit.

Additionally rolls in a small .gitignore tweak for CLion users and a tweak to the CI config to make it easier to run CI without opening a PR or making config changes.

[djc]

Increasing the requirements within a semver-compatible range is unnecessary, so I'd avoid most of these bumps.

[cpu]

Increasing the requirements within a semver-compatible range is unnecessary, so I'd avoid most of these bumps.

Good point 😅 I'll remove those.

[complexspaces]

I agree with @djc on some of these bumps, especially for tokio. The CI changes look fine though 👍.

While it shouldn't be the sole decision making process, its become increasingly hard at work to make some of these increases without mass dependency duplication. So, leaving the ranges wider makes it easier to match ones that have more compatible sub-dependencies. For example this seems to duplicate socket2 and windows-sys and would push those downstream as well.

[cpu]

Fixed up to remove the semver compatible bumps.

[complexspaces]

@cpu Do you mind also running cargo update -p rustls before merging to drop the duplicate rustls-webpki dependency from the lockfile? Otherwise CI will need to build it twice every time.

[cpu]

@complexspaces Ahhh! Yes, done ☑️

I was prev. confused why after re-arranging some of the commits I had to remove the deprecated add_server_trust_anchors fix I had landed in the first go, but it was related to this duplication and the lockfile rustls version.

All sorted now, thank you.

[complexspaces]

I sanity checked these changes against another codebase and confirmed nothing blew up. LGTM 😄