Cargo.lock seems to be going out of sync every week.

Usually comes after dependabot PRs are merged, something to do with
dependabot?