RUSTSEC-2021-0127: serde_cbor is unmaintained

[github-actions]

serde_cbor is unmaintained

Details
Status	unmaintained
Package	serde_cbor
Version	0.11.2
URL	https://github.com/pyfisch/cbor
Date	2021-08-15

The serde_cbor crate is unmaintained. The author has archived the github repository.

Alternatives proposed by the author:

*ciborium
*minicbor

See advisory page for additional details.

[clintfred]

From cargo audit

Dependency tree:
serde_cbor 0.11.2
└── criterion 0.3.5
    └── ironoxide 0.27.0

Note that criterion is only in dev-dependencies

[BobWall23]

Closing because we can't do anything about it for now - transitive dev dependency.