Update borsh requirement from 0.9 to 0.10

[dependabot]

Updates the requirements on borsh to permit the latest version.

Changelog

Sourced from borsh's changelog.

[0.10.3] - 2023-03-22

• Add optional bytes/bytesmut support

[0.10.2] - 2023-02-14

• Prevent unbound allocation for vectors on deserialization

[0.10.1] - 2023-02-08

• Implemented (de)ser for core::ops::range
• Introduce de::EnumExt trait with deserialize_variant method

[0.10.0] - 2023-01-19

• Fix no-std feature (some of the imports incorrectly used std:: instead of crate::maybestd::)
• Fix borsh-schema derives with for bounds
• Implemented BorshSchema for HashSet
• Add support for isize, usize types
• Delete schema for char
• Implement ser/de and schema for (T,)
• Add clone impls to borsh schema types
• Remove unnecessary trait bounds requirements for array
• BREAKING CHANGE: BorshDeserialize now works by receiving an &mut std::io::Read instead of a &mut &[u8]. This is a breaking change for code that provides custom implementations of BorshDeserialize; there is no impact on code that uses only the derive macro.
• Added BorshDeserialize::try_from_reader and BorshDeserialize::deserialize_reader.
• Upgrade hashbrown version to be >=0.11,<0.14 to allow wider range of versions.

[0.9.3] - 2022-02-03

• Fix no_std compatibility.
• Reduce code bloat in derived BorshSerialize impl for enums.

[0.9.2] - 2022-01-25

• Upgrade hashbrown from 0.9 to 0.11. This can breakage in the rare case that you use borsh schema together with no-std support and rely on a specific version hashbrown of SchemaContainer. This is considered to be obscure enough to not warrant a semver bump.

[0.9.1] - 2021-07-14

• Eliminated unsafe code from both ser and de of u8 (#26)
• Implemented ser/de for reference count types (#27)
• Added serialization helpers to improve api ergonomics (#34)
• Implemented schema for arrays and fix box bounds (#36)
• Implemented (de)ser for PhantomData (#37)
• Implemented const-generics under feature (#38)

... (truncated)

Commits

• 79097e3 release: Prepare for 0.10.3 release
• ad25b07 ci: Removed release-plz as it does not play well with the workspaces setup we...
• c93d434 ci: Add release-plz CI action which will create a PR with a suggestion to cut...
• e91f405 feat: Add optional bytes/bytesmut support (#132)
• 9e68316 release: Prepare for 0.10.2 release (#130)
• d431291 feat(deserialize): prevent unbound allocation (#129)
• d915ab5 chore: Updated Minimum Supported Rust Version to 1.55 (manually confirmed wit...
• 83f91d6 release: Prepare for 0.10.1 release (#126)
• 68c11a6 feat: Implement serialize/deserialize for core::ops::Range (#124)
• 6e360a9 refactor: Silenced clippy::uninlined_format_args lints to fix CI without bu...
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[mzabaluev]

Do we still need borsh support?

[plafer]

Yes, and we need it to keep it on 0.9 (#104)

[plafer]

Update: we now can and should upgrade borsh to v0.10

[plafer]

Closing in favor of #132

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.