Tracking issue: dependencies updates and unpins for the next MSRV update

[boquan-fang]

Security issue notifications

Problem:

This issue will track every pins that we do before the next MSRV update. Please reference this ticket whenever we pin some dependencies after 1.82.0 updates: #2654.

For now, hex_literal can be unpinned after our MSRV is bump to beyond 1.85.0.

Need By Date:

Fix along with the next MSRV update.

Solution:

Unpin updates and bump MSRV as needed.

Requirements / Acceptance Criteria:

Same as solution.

Out of scope: