Update borsh requirement from 0.9.3 to 0.10.2

[dependabot]

Updates the requirements on borsh to permit the latest version.

Release notes

Sourced from borsh's releases.

v0.10.2

• Prevent unbound allocation for vectors on deserialization

Crate Links

• borsh: https://crates.io/crates/borsh/0.10.2
• borsh-derive: https://crates.io/crates/borsh-derive/0.10.2
• borsh-derive-internal: https://crates.io/crates/borsh-derive-internal/0.10.2
• borsh-schema-derive-internal: https://crates.io/crates/borsh-schema-derive-internal/0.10.2

Changelog

Sourced from borsh's changelog.

[0.10.2] - 2022-02-14

• Prevent unbound allocation for vectors on deserialization

[0.10.1] - 2022-02-08

• Implemented (de)ser for core::ops::range
• Introduce de::EnumExt trait with deserialize_variant method

[0.10.0] - 2023-01-19

• Fix no-std feature (some of the imports incorrectly used std:: instead of crate::maybestd::)
• Fix borsh-schema derives with for bounds
• Implemented BorshSchema for HashSet
• Add support for isize, usize types
• Delete schema for char
• Implement ser/de and schema for (T,)
• Add clone impls to borsh schema types
• Remove unnecessary trait bounds requirements for array
• BREAKING CHANGE: BorshDeserialize now works by receiving an &mut std::io::Read instead of a &mut &[u8]. This is a breaking change for code that provides custom implementations of BorshDeserialize; there is no impact on code that uses only the derive macro.
• Added BorshDeserialize::try_from_reader and BorshDeserialize::deserialize_reader.
• Upgrade hashbrown version to be >=0.11,<0.14 to allow wider range of versions.

[0.9.3] - 2022-02-03

• Fix no_std compatibility.
• Reduce code bloat in derived BorshSerialize impl for enums.

[0.9.2] - 2022-01-25

• Upgrade hashbrown from 0.9 to 0.11. This can breakage in the rare case that you use borsh schema together with no-std support and rely on a specific version hashbrown of SchemaContainer. This is considered to be obscure enough to not warrant a semver bump.

[0.9.1] - 2021-07-14

• Eliminated unsafe code from both ser and de of u8 (#26)
• Implemented ser/de for reference count types (#27)
• Added serialization helpers to improve api ergonomics (#34)
• Implemented schema for arrays and fix box bounds (#36)
• Implemented (de)ser for PhantomData (#37)
• Implemented const-generics under feature (#38)
• Added an example of direct BorshSerialize::serialize usage with vector and slice buffers (#29)

[0.9.0] - 2021-03-18

... (truncated)

Commits

• 9e68316 release: Prepare for 0.10.2 release (#130)
• d431291 feat(deserialize): prevent unbound allocation (#129)
• d915ab5 chore: Updated Minimum Supported Rust Version to 1.55 (manually confirmed wit...
• 83f91d6 release: Prepare for 0.10.1 release (#126)
• 68c11a6 feat: Implement serialize/deserialize for core::ops::Range (#124)
• 6e360a9 refactor: Silenced clippy::uninlined_format_args lints to fix CI without bu...
• fdce5dc feat(de): add EnumExt trait with deserialize_variant method (#123)
• 28bb5fd release: Prepare for 0.10.0 release (#121)
• 5455d35 chore: bump hashbrown to 0.13 (#120)
• 10deb79 docs: Update changelog (#119)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #87.