Apply dependabot security fixes

[urschrei]

See:

https://github.com/georust/rstar/security/dependabot/3

https://github.com/georust/rstar/security/dependabot/4

https://github.com/georust/rstar/security/dependabot/5

https://github.com/georust/rstar/security/dependabot/6

• I agree to follow the project's code of conduct.
• I added an entry to rstar/CHANGELOG.md if knowledge of this change could be valuable to users.

---

[urschrei]

I don't understand these CI failures. Note that they also occur in #212 (the automated version of this PR).

[michaelkirk]

I'm not really sure either, but it sounds like a new manifestation of what is ultimately an MSRV problem.

[adamreichold]

I think the salient point is

this version of Cargo is older than the `2024` edition, and only supports `2015`, `2018`, and `2021` editions.

so yes, this is a MSRV problem, i.e. we need to lock down certain dependencies, in this nalgebra to older versions or bump our MSRV.

[adamreichold]

But I think completing the CI overhaul would be time better spent, because as discussed there, I do not see why our MSRV policy should extend to demo/example code at all. Fixing what the CI actually tests first would be preferable IMHO.

[urschrei]

I believe that PR just needs a rebase, if people are happy with it.

[urschrei]

(#204)

[urschrei]

Our nalgebra dev dependency indirectly (via quote) has an MSRV of 1.68 (March 2023). I've bumped our MSRV to that, and it's passing.

However, the --workspace switch for our Clippy invocation forces rstar-demo to build against the current rstar codebase, and kiss3d's parry3d dependency is using the pre f718353 API, which accepted borrowed Point values. Some options:

• Cut a new (breaking, because of the API change?) rstar release and wait for kiss3d and parry3d to update
• Exclude rstar-demo from the Clippy run for now: cargo clippy --workspace --exclude rstar-demo --tests

[adamreichold]

Exclude rstar-demo from the Clippy run for now: cargo clippy --workspace --exclude rstar-demo --tests

I would prefer the exclusion.

[urschrei]

We're now passing, with the following changes:

• MSRV 1.68 (2021 edition) for all three crates
• rstar-demo is temporarily excluded from tests