Update outdated dependencies (#2425)

This updates some older dependencies to address a few cargo audit warnings.

The majority of warnings come from network dependencies which will be addressed in #2389. 

This PR contains some minor dep updates that are not network related.

Co-authored-by: Michael Sproul <michael@sigmaprime.io>

Dockerfile

@@ -1,4 +1,4 @@
-FROM rust:1.50.0 AS builder
+FROM rust:1.53.0 AS builder
 RUN apt-get update && apt-get -y upgrade && apt-get install -y cmake
 COPY . lighthouse
 ARG PORTABLE

beacon_node/eth2_libp2p/Cargo.toml

@@ -5,7 +5,7 @@ authors = ["Sigma Prime <contact@sigmaprime.io>"]
 edition = "2018"
 
 [dependencies]
-discv5 = { git = "https://github.com/sigp/discv5 ", rev = "02d2c896c66f8dc2b848c3996fedcd98e1dfec69", features = ["libp2p"] }
+discv5 = { version = "0.1.0-beta.5", features = ["libp2p"] }
 unsigned-varint = { version = "0.6.0", features = ["codec"] }
 types = { path =  "../../consensus/types" }
 hashset_delay = { path = "../../common/hashset_delay" }

beacon_node/http_api/Cargo.toml

@@ -34,5 +34,5 @@ futures = "0.3.8"
 store = { path = "../store" }
 environment = { path = "../../lighthouse/environment" }
 tree_hash = "0.1.1"
-discv5 = { git = "https://github.com/sigp/discv5 ", rev = "02d2c896c66f8dc2b848c3996fedcd98e1dfec69", features = ["libp2p"] }
+discv5 = { version = "0.1.0-beta.5", features = ["libp2p"] }
 sensitive_url = { path = "../../common/sensitive_url" }

common/fallback/Cargo.toml

@@ -7,4 +7,4 @@ edition = "2018"
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-itertools = "0.9.0"
+itertools = "0.9.0"

common/monitoring_api/Cargo.toml

@@ -21,4 +21,4 @@ slog = "2.5.2"
 store = { path = "../../beacon_node/store" }
 lazy_static = "1.4.0"
 regex = "1"
-sensitive_url = { path = "../sensitive_url" }
+sensitive_url = { path = "../sensitive_url" }

common/remote_signer_consumer/tests/post.rs

@@ -121,7 +121,7 @@ mod post {
         testcase(
             "unix:/run/foo.socket",
             &format!(
-                "[Reqwest - Builder] Url {{ scheme: \"unix\", username: \"\", password: None, host: None, port: None, path: \"/run/foo.socket/sign/{}\", query: None, fragment: None }}",
+                "[Reqwest - Builder] Url {{ scheme: \"unix\", cannot_be_a_base: false, username: \"\", password: None, host: None, port: None, path: \"/run/foo.socket/sign/{}\", query: None, fragment: None }}",
                 PUBLIC_KEY_1
             ),
         );
@@ -129,7 +129,7 @@ mod post {
         testcase(
             "http://127.0.0.1:0",
             &format!(
-                "[Reqwest - Request] Url {{ scheme: \"http\", username: \"\", password: None, host: Some(Ipv4(127.0.0.1)), port: Some(0), path: \"/sign/{}\", query: None, fragment: None }}",
+                "[Reqwest - Request] Url {{ scheme: \"http\", cannot_be_a_base: false, username: \"\", password: None, host: Some(Ipv4(127.0.0.1)), port: Some(0), path: \"/sign/{}\", query: None, fragment: None }}",
                 PUBLIC_KEY_1
             ),
         );

crypto/eth2_keystore/Cargo.toml

@@ -8,7 +8,6 @@ edition = "2018"
 
 [dependencies]
 rand = "0.7.3"
-aes-ctr = "0.6.0"
 hmac = "0.10.1"
 pbkdf2 = { version = "0.6.0", default-features = false }
 scrypt = { version = "0.5.0", default-features = false }
@@ -23,6 +22,7 @@ eth2_ssz = "0.1.2"
 serde_json = "1.0.58"
 eth2_key_derivation = { path = "../eth2_key_derivation" }
 unicode-normalization = "0.1.16"
+aes = { version = "0.7", features = ["ctr"] }
 
 [dev-dependencies]
 tempfile = "3.1.0"

crypto/eth2_keystore/src/keystore.rs

@@ -7,9 +7,9 @@ use crate::json_keystore::{
     Kdf, KdfModule, Scrypt, Sha256Checksum, Version,
 };
 use crate::Uuid;
-use aes_ctr::cipher::generic_array::GenericArray;
-use aes_ctr::cipher::{NewStreamCipher, SyncStreamCipher};
-use aes_ctr::Aes128Ctr as AesCtr;
+use aes::cipher::generic_array::GenericArray;
+use aes::cipher::{NewCipher, StreamCipher};
+use aes::Aes128Ctr as AesCtr;
 use bls::{Keypair, PublicKey, SecretKey, ZeroizeHash};
 use eth2_key_derivation::PlainText;
 use hmac::Hmac;

testing/remote_signer_test/Cargo.toml

@@ -8,7 +8,7 @@ edition = "2018"
 clap = "2.33.3"
 environment = { path = "../../lighthouse/environment" }
 hex = "0.4.2"
-httpmock = "0.5.1"
+httpmock = "0.5.8"
 remote_signer_client = { path = "../../remote_signer/client" }
 remote_signer_consumer = { path = "../../common/remote_signer_consumer" }
 reqwest = { version = "0.11.0", features = ["blocking", "json"] }