bump protobuf version

[tomtau]

as https://github.com/RustSec/advisory-db/blob/master/crates/protobuf/RUSTSEC-2019-0003.toml

@liamsi @marbar3778 I noticed that the current repo has Cargo.lock in .gitignore -- is that desired?

[liamsi]

Shouldn't we rather use the latest release (2.6.2) instead (and regenerate the rust code using that release)?

Regarding the lock file, https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html states that

If you’re building a non-end product, such as a rust library that other rust packages will depend on, put Cargo.lock in your .gitignore. If you’re building an end product, which are executable like command-line tool or an application, or a system library with crate-type of staticlib or cdylib, check Cargo.lock into git.

rust-abci is more of a library and not an end-product. At the same time, I think adding the cargo lock file would increase reproducibility. Which seems important for rust-abci IMHO. Let's discuss this in a separate issue.

[tomtau]

@liamsi regenerated and opened this issue: #70

[liamsi]

👍