Bump compatible dependencies for packer

Summary:
Hoovering up a bunch of dependabot notices again.
Can't bump indicatif because it's not been pulled internally.

Reviewed By: mweststrate

Differential Revision: D30667315

fbshipit-source-id: 1c089a5b6c1455bd9654a4f5899fb4b7ce67c098

packer/Cargo.lock

@@ -595,9 +595,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.64"
+version = "1.0.67"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "799e97dc9fdae36a5c8b8f2cae9ce2ee9fdce2058c57a93e6099d919fd982f79"
+checksum = "a7f9e390c27c3c0ce8bc5d725f6e4d30a29d26659494aa4b17535f7522c5c950"
 dependencies = [
  "itoa",
  "ryu",
@@ -657,9 +657,9 @@ dependencies = [
 
 [[package]]
 name = "tar"
-version = "0.4.35"
+version = "0.4.37"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7d779dc6aeff029314570f666ec83f19df7280bb36ef338442cfa8c604021b80"
+checksum = "d6f5515d3add52e0bbdcad7b83c388bb36ba7b754dda3b5f5bc2d38640cdba5c"
 dependencies = [
  "filetime",
  "libc",

packer/Cargo.toml

@@ -12,17 +12,17 @@ edition = "2018"
 [dependencies]
 clap = "2.33.3"
 shellexpand = "2.1.0"
-tar = "0.4.35"
+tar = "0.4.36"
 serde = { version = "1.0.127", features = ["derive"] }
 serde_yaml = "0.8.17"
 anyhow = "1.0.42"
 sha2 = "0.9.5"
 data-encoding = "2.3.2"
-serde_json = "1.0.64"
+serde_json = "1.0.66"
 rayon = "1.5.1"
 indicatif = "^0.15"
 xz2 = "0.1.6"
-ignore = "^0.4.18"
+ignore = "0.4.18"
 
 [dev-dependencies]
 tempdir = "0.3.7"