Bump dependencies to get a single version of rand (#2733)

This removes a few crates in the dependencies, and a few exceptions (at
the price of a new one) in the cargo-deny configuration.

crates/runtime/src/instance/allocator/pooling.rs

@@ -263,7 +263,7 @@ impl PoolingAllocationStrategy {
 
         match self {
             Self::NextAvailable => free_count - 1,
-            Self::Random => rand::thread_rng().gen_range(0, free_count),
+            Self::Random => rand::thread_rng().gen_range(0..free_count),
         }
     }
 }