chore(buck2): use cargo nightly in cargobump

Signed-off-by: Massimiliano Giovagnoli <[email protected]>

buck2.yaml

@@ -20,6 +20,7 @@ environment:
       - busybox
       - ca-certificates-bundle
       - cargo-auditable
+      - cargobump
       - openssf-compiler-options
       - rustup
       - wolfi-base
@@ -44,8 +45,6 @@ pipeline:
     with:
       patches: GHSA-hc92-9h3m-c39j.patch
 
-  - uses: rust/cargobump
-
   - name: Configure and build
     runs: |
       # This build requires a specific version of rust nightly.
@@ -54,6 +53,11 @@ pipeline:
 
       # This is a bit of a hack, but it's the easiest way to get the right version of rustc and cargo in the path.
       export PATH="$HOME/.rustup/toolchains/${{vars.rust-version}}-${{host.triplet.rust}}/bin:$PATH"
+
+      # Bump.
+      cargo generate-lockfile
+      cargobump --bump-file cargobump-deps.yaml
+
       mkdir -p ${{targets.destdir}}/usr/bin/
       cd app/buck2