Bump the vulnerable dependencies

All bump up includes minor updates.

Updated dependencies:

* http 0.1.17 -> 0.1.21
* hyper 0.12.19 -> 0.12.35
* smallvec 0.6.4 -> 0.6.13
* libflate 0.1.23 -> 0.1.27
* spin 0.5.0 -> 0.5.2
* yaml-rust: This commit updates clap instead. clap 2.33 does not
affected by the problem.

* https://rustsec.org/advisories/RUSTSEC-2019-0034
* https://rustsec.org/advisories/RUSTSEC-2019-0033
* https://rustsec.org/advisories/RUSTSEC-2020-0008
* https://rustsec.org/advisories/RUSTSEC-2019-0010
* https://rustsec.org/advisories/RUSTSEC-2019-0012
* https://rustsec.org/advisories/RUSTSEC-2019-0013
* https://rustsec.org/advisories/RUSTSEC-2018-0006

Author: majecty