Update cargo dependencies to fix RUSTSEC-2026-0204 (#1870)