Switch from dotenv to dotenvy

[monaka]

• Use dotenvy instead of dotenv ( see also: https://rustsec.org/advisories/RUSTSEC-2021-0141.html ).
• Apply cargo update to reduce security risks.

Signed-off-by: Masaki Muranaka monaka@monami-ya.com

[zoedberg]

is dotenv actually necessary? it doesn't seem used

[dr-orlovsky]

I was orignally using it to parse information from environment variables when the nodes start (when environment is used to replace command-line parameters).

[monaka]

I can remove dotenv|dotenvy from Cargo.toml and re-push it here. It seems cargo audit alerts by content in Cargo.lock. I just want to suppress alerts.

[dr-orlovsky]

I am quite sure the node won't compile without this dependency

[zoedberg]

I am quite sure the node won't compile without this dependency

It's not used so it should compile. To be sure I checked and I can confirm it builds without it.

While checking I've found other dependencies that are unused so I've opened https://github.com/RGB-WG/rgb-node/pull/241. I think this PR can be closed

[dr-orlovsky]

Ok, closing in favor of merged #241