Bump dependencies to fix security alerts

.github/workflows/ci.yaml

@@ -39,27 +39,27 @@ jobs:
     - doc
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
         with:
           submodules: 'recursive'
 
   license-check:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
         with:
           submodules: 'recursive'
       - name: Check License Header
-        uses: apache/skywalking-eyes/header/@d299844e334855087f18ae1fe3c81ae8d22bc282
+        uses: apache/skywalking-eyes/header/@a196742f472feaffafea537ce5a2a4c3c53a8de4 # v0.9.0
         with:
           config: .github/licenserc.yaml
       - name: Check Dependencies License
-        uses: apache/skywalking-eyes/dependency/@d299844e334855087f18ae1fe3c81ae8d22bc282
+        uses: apache/skywalking-eyes/dependency/@a196742f472feaffafea537ce5a2a4c3c53a8de4 # v0.9.0
         with:
           config: .github/licenserc.yaml
       - name: Check Dependencies Licenses Summary
         run: |
-          go install github.com/apache/skywalking-eyes/cmd/license-eye@d299844e334855087f18ae1fe3c81ae8d22bc282
+          go install github.com/apache/skywalking-eyes/cmd/license-eye@a196742f472feaffafea537ce5a2a4c3c53a8de4 # v0.9.0
           license-eye dependency resolve --summary ./dist-material/LICENSE.tpl -c .github/licenserc.yaml || exit 1
           if [ ! -z "$(git diff -U0 ./dist-material/LICENSE)" ]; then
             echo "LICENSE file is not updated correctly"
@@ -71,7 +71,7 @@ jobs:
   fmt:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
         with:
           submodules: 'recursive'
       - name: Install Rust toolchain
@@ -91,7 +91,7 @@ jobs:
           - "--all-features"
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
         with:
           submodules: 'recursive'
       - name: Install protoc
@@ -109,7 +109,7 @@ jobs:
   doc:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
         with:
           submodules: 'recursive'
       - name: Install protoc

.github/workflows/codecov.yaml

@@ -26,8 +26,11 @@ on:
 jobs:
   test:
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      id-token: write
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
         with:
           submodules: true
       - name: Install protoc
@@ -39,4 +42,6 @@ jobs:
         run: |
           cargo install cargo-tarpaulin
           cargo tarpaulin --out Xml
-      - uses: codecov/codecov-action@v2.1.0
+      - uses: codecov/codecov-action@v7.1.1
+        with:
+          use_oidc: true

.github/workflows/e2e.yml

@@ -29,7 +29,7 @@ jobs:
   e2e-rust:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
       - name: Prepare service container

dist-material/LICENSE

@@ -298,7 +298,6 @@ The text of each license is also included in licenses/LICENSE-[project].txt.
     https://crates.io/crates/hashbrown/0.15.2 0.15.2 Apache-2.0 OR MIT
     https://crates.io/crates/heck/0.3.3 0.3.3 Apache-2.0 OR MIT
     https://crates.io/crates/heck/0.5.0 0.5.0 Apache-2.0 OR MIT
-    https://crates.io/crates/hermit-abi/0.1.19 0.1.19 Apache-2.0 OR MIT
     https://crates.io/crates/http/1.3.1 1.3.1 Apache-2.0 OR MIT
     https://crates.io/crates/httparse/1.10.1 1.10.1 Apache-2.0 OR MIT
     https://crates.io/crates/httpdate/1.0.3 1.0.3 Apache-2.0 OR MIT
@@ -337,7 +336,7 @@ The text of each license is also included in licenses/LICENSE-[project].txt.
     https://crates.io/crates/proc-macro-error-attr/1.0.4 1.0.4 Apache-2.0 OR MIT
     https://crates.io/crates/proc-macro2/1.0.94 1.0.94 Apache-2.0 OR MIT
     https://crates.io/crates/quote/1.0.40 1.0.40 Apache-2.0 OR MIT
-    https://crates.io/crates/rand/0.8.5 0.8.5 Apache-2.0 OR MIT
+    https://crates.io/crates/rand/0.8.6 0.8.6 Apache-2.0 OR MIT
     https://crates.io/crates/rand_chacha/0.3.1 0.3.1 Apache-2.0 OR MIT
     https://crates.io/crates/rand_core/0.6.4 0.6.4 Apache-2.0 OR MIT
     https://crates.io/crates/regex/1.11.1 1.11.1 Apache-2.0 OR MIT
@@ -368,7 +367,6 @@ The text of each license is also included in licenses/LICENSE-[project].txt.
     https://crates.io/crates/unicode-width/0.1.14 0.1.14 Apache-2.0 OR MIT
     https://crates.io/crates/uuid/1.16.0 1.16.0 Apache-2.0 OR MIT
     https://crates.io/crates/vcpkg/0.2.15 0.2.15 Apache-2.0 OR MIT
-    https://crates.io/crates/vec_map/0.8.2 0.8.2 Apache-2.0 OR MIT
     https://crates.io/crates/version_check/0.9.5 0.9.5 Apache-2.0 OR MIT
     https://crates.io/crates/winapi/0.3.9 0.3.9 Apache-2.0 OR MIT
     https://crates.io/crates/winapi-i686-pc-windows-gnu/0.4.0 0.4.0 Apache-2.0 OR MIT
@@ -401,13 +399,11 @@ MIT licenses
 The following components are provided under the MIT License. See project link for details.
 The text of each license is also included in licenses/LICENSE-[project].txt.
 
-    https://crates.io/crates/ansi_term/0.12.1 0.12.1 MIT
     https://crates.io/crates/async-stream/0.3.6 0.3.6 MIT
     https://crates.io/crates/async-stream-impl/0.3.6 0.3.6 MIT
-    https://crates.io/crates/atty/0.2.14 0.2.14 MIT
     https://crates.io/crates/axum/0.7.9 0.7.9 MIT
     https://crates.io/crates/axum-core/0.4.5 0.4.5 MIT
-    https://crates.io/crates/bytes/1.10.1 1.10.1 MIT
+    https://crates.io/crates/bytes/1.11.1 1.11.1 MIT
     https://crates.io/crates/clap/2.34.0 2.34.0 MIT
     https://crates.io/crates/h2/0.4.8 0.4.8 MIT
     https://crates.io/crates/hostname/0.4.0 0.4.0 MIT
@@ -421,7 +417,6 @@ The text of each license is also included in licenses/LICENSE-[project].txt.
     https://crates.io/crates/rdkafka-sys/4.9.0+2.10.0 4.9.0+2.10.0 MIT
     https://crates.io/crates/redox_syscall/0.5.10 0.5.10 MIT
     https://crates.io/crates/slab/0.4.9 0.4.9 MIT
-    https://crates.io/crates/strsim/0.8.0 0.8.0 MIT
     https://crates.io/crates/textwrap/0.11.0 0.11.0 MIT
     https://crates.io/crates/tokio/1.46.1 1.46.1 MIT
     https://crates.io/crates/tokio-macros/2.5.0 2.5.0 MIT

e2e/Cargo.toml

@@ -35,5 +35,5 @@ hyper-util = "0.1.10"
 prost = "0.13.5"
 rdkafka = { workspace = true }
 skywalking = { path = "..", features = ["kafka-reporter"] }
-structopt = "0.3"
+structopt = { version = "0.3", default-features = false }
 tokio = { version = "1", features = ["full"] }