upgrade cargo version
made dependency-tree usage more robust (using versionless artifact matching due to unexpected version mismatches)