run cargo update

updates the lock file which pins dependencies of dependencies.

Specifically `idna` crate (used by `url` and `git2` crates). This should resolve the security alert about using `idna` older than v1.0.0

Author: 2bndy5