Bump CSV crate

[fitzthum]

With the new version of this crate I think we might not need to use the --locked flag when we built. Should we remove it?

[Xynnn007]

With the new version of this crate I think we might not need to use the --locked flag when we built. Should we remove it?

I am ok with either. If any new error we met during CI, we can go back to fix it.

[fitzthum]

Well the tests are fine without --locked. I've seen some mixed advice about whether --locked should be used. I lean towards removing it. We are still tracking the Cargo files so people can use --locked if they need.

@larrydewey I seem to recall that we talked about this at some point. Do you have an opinion here?

@mkulke any thoughts?

[mkulke]

Well the tests are fine without --locked. I've seen some mixed advice about whether --locked should be used. I lean towards removing it. We are still tracking the Cargo files so people can use --locked if they need.

@larrydewey I seem to recall that we talked about this at some point. Do you have an opinion here?

@mkulke any thoughts?

afaiu --locked makes sense for release builds. otherwise there might be a different dependency resolution during the release build on the CI, that you could not reproduce easily.

[fitzthum]

@mkulke ok well I'll drop that commit for now and we can add it back later if needed.