Bump semver from 1.0.25 to 1.0.28

[dependabot]

Bumps semver from 1.0.25 to 1.0.28.

Release notes

Sourced from semver's releases.

1.0.28

• Documentation improvements

1.0.27

• Switch serde dependency to serde_core (#333)

1.0.26

• Documentation improvements

Commits

• 7625c7a Release 1.0.28
• fd404d0 Merge pull request 351 from czy-29/master
• f75f26e The doc_auto_cfg and doc_cfg features have been merged
• 9e2bfa2 Enable serde on docs.rs and automatically add serde flag to the docs
• 8591f23 Unpin CI miri toolchain
• 66bdd2c Pin CI miri to nightly-2026-02-11
• 324ffce Switch from cargo bench to criterion
• 34133a5 Update actions/upload-artifact@v5 -> v6
• 7f935ff Update actions/upload-artifact@v4 -> v5
• c07fb91 Switch from test::black_box to std::hint::black_box
• Additional commits viewable in compare view

[ev-vaultkeeper]

Safe to merge. ✅

This is a patch-level bump of semver 1.0.25 → 1.0.28, touching only Cargo.lock (version + checksum). Cargo.toml already pins semver = "1.0.20" in both crates, which permits 1.0.28.

Usage in this repo (default features only — the optional serde feature is not enabled):

• crates/ev-cli/src/version.rs: Version::parse, Ord comparison (installed_semver < latest_semver), Display (to_string), and #[from] semver::Error.
• crates/ev-enclave/src/version/mod.rs: #[from] semver::Error only.
• Note: crates/ev-enclave/src/docker/command.rs uses version_compare::Version, a different crate — unaffected.

All of these are the crate's most stable core APIs.

Changelog 1.0.25 → 1.0.28:

• 1.0.26: documentation only
• 1.0.27: switch internal serde dependency to serde_core (only relevant when the serde feature is enabled — it is not here; semver's lockfile entry lists no dependencies)
• 1.0.28: documentation only

No API changes, no behavioral changes affecting our usage, and no security/performance concerns.

Verification: cargo build (full workspace incl. ev binary and ev-enclave) succeeds with only pre-existing unrelated warnings; version-related tests pass. No code changes were required.