Fixes dependabot alerts (#1512)

Specifically, deals with CVE-2025-4574, GHSA-4fcv-w3qc-ppgg, and GHSA-255r-3prx-mf99 by updating the lockfile and one set of dependencies for testing serialization.

Author: akern40

Cargo.lock

@@ -18,7 +18,8 @@ ron = { version = "0.8.1" }
 
 [dev-dependencies]
 serde_json = { version = "1.0.40" }
+# >=0.8.11 to avoid rmp-serde security vulnerability
+# <0.8.14 to allows MSRV 1.64.0
+rmp = { version = ">=0.8.11,<0.8.14" }
 # Old version to work with Rust 1.64+
-rmp = { version = "=0.8.10" }
-# Old version to work with Rust 1.64+
-rmp-serde = { version = "0.14" }
+rmp-serde = { version = ">=1.1.1" }