update Cargo.lock