Bump dependencies to get a single version of rand (#2733)

This removes a few crates in the dependencies, and a few exceptions (at
the price of a new one) in the cargo-deny configuration.

crates/runtime/Cargo.toml

@@ -24,7 +24,7 @@ cfg-if = "1.0"
 backtrace = "0.3.55"
 lazy_static = "1.3.0"
 psm = "0.1.11"
-rand = "0.7.3"
+rand = "0.8.3"
 anyhow = "1.0.38"
 
 [target.'cfg(target_os = "windows")'.dependencies]

crates/runtime/src/instance/allocator/pooling.rs

@@ -263,7 +263,7 @@ impl PoolingAllocationStrategy {
 
         match self {
             Self::NextAvailable => free_count - 1,
-            Self::Random => rand::thread_rng().gen_range(0, free_count),
+            Self::Random => rand::thread_rng().gen_range(0..free_count),
         }
     }
 }