bump dependency versions to get minimal versions to build

These dependency versions are the minimum that can actually build. This
allows a tool like `cargo minimal-versions` to verify that the code
compiles even when using the oldest possible dependency versions, but is
also a useful step toward verifying that the crates can be built on
older toolchains.

Cargo.toml

@@ -11,7 +11,7 @@ resolver = "2"
 
 [workspace.dependencies]
 aes = "0.8"
-async-trait = "0.1"
+async-trait = "0.1.10"
 byteorder = "1.4"
 bytes = "1.7"
 digest = "0.10"
@@ -21,18 +21,18 @@ hmac = "0.12"
 log = "0.4"
 rand = "0.8"
 rsa = "0.9"
-sha1 = { version = "0.10", features = ["oid"] }
-sha2 = { version = "0.10", features = ["oid"] }
+sha1 = { version = "0.10.5", features = ["oid"] }
+sha2 = { version = "0.10.6", features = ["oid"] }
 signature = "2.2"
 ssh-encoding = { version = "0.2", features = ["bytes"] }
-ssh-key = { version = "0.6", features = [
+ssh-key = { version = "0.6.3", features = [
     "ed25519",
     "rsa",
     "p256",
     "p384",
     "p521",
     "encryption",
 ] }
-thiserror = "1.0"
+thiserror = "1.0.30"
 tokio = { version = "1.17.0" }
-tokio-stream = { version = "0.1", features = ["net", "sync"] }
+tokio-stream = { version = "0.1.3", features = ["net", "sync"] }