gateway: relax versions to minimal acceptable versions

[woshilapin]

A recent commit did relax all versions in gateway (see 748e2d4).

However, it's probably too relaxed. For example, actix_auth now depends on openidconnect:3 with the feature jwk-alg, but this feature is only available starting openidconnect:3.4. So I believe relaxing is more than OK, but only if the lower bound is good enough for compiling which is not the case anymore.

You can try this to see the effect (see documentation of this nightly feature).

cargo +nightly update -Zdirect-minimal-versions
cargo check

Once you fix one, then another constraint comes up and another minimal bound need to be fixed. This PR should provide all the minimal versions in which gateway can be compiled, hopefully.

For comparison, here the original commit, and here is the comparison the current PR would have made. It still relax a bunch of the constraints, but not as much.

Happy to hear opinions on that.

[multun]

@woshilapin Thanks, nice change :) For some reason the Cargo.lock you're submitting downgrades multiple packages, can you look into it? It should only upgrade stuff afaik

[woshilapin]

@woshilapin Thanks, nice change :) For some reason the Cargo.lock you're submitting downgrades multiple packages, can you look into it? It should only upgrade stuff afaik

Aouch, nice that you catch that. I submitted the Cargo.lock that I produced after running the cargo +nightly update -Zdirect-minimal-versions... so yes, it was basically all the minimal versions. Thanks, I fixed it (with a cargo update so it might also update some of them).