An emergency update of dependencies doesn't qualify as
a semver update, apparently, but that additional SignedBitCount
method probably should.  "cargo semver-check" has issues
with yanked crates, so it's difficult to check.

core2 hadn't been updated in years, so this is probably overdue.

Will do a new minor release just in case.