dep: bump a bunch of dependencies and set some as workspace-wide

Author: V0ldek

.clusterfuzzlite/Dockerfile

@@ -1,4 +1,4 @@
-FROM gcr.io/oss-fuzz-base/base-builder-rust:v1@sha256:ac9054c9c1b969aeb40d26b9bd2a792c2d1dc23f54954d271ddb62c4cc1c8e29
+FROM gcr.io/oss-fuzz-base/base-builder-rust:v1@sha256:e155522ceab10af0de09331bb56acf6e0534b95d290de5a8b97539260c3908a9
 RUN apt-get update && apt-get install -y make autoconf automake libtool
 COPY . $SRC/rsonpath
 WORKDIR $SRC/rsonpath

.clusterfuzzlite/build.sh

@@ -1,6 +1,6 @@
 #!/bin/bash -eu
 
-cargo +nightly fuzz build -O --debug-assertions
+cargo fuzz build -O --debug-assertions
 
 FUZZ_TARGET_OUTPUT_DIR=fuzz/target/x86_64-unknown-linux-gnu/release
 

.github/workflows/dependency-review.yml

@@ -24,6 +24,8 @@ jobs:
           allowed-endpoints: >
             github.com:443
             api.github.com:443
+            api.securityscorecards.dev:443
+            api.deps.dev:443
 
       - name: "Checkout Repository"
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2