Disable default features of `tempfile` crate to minimize dependencies

[cschwan]

Since version 3.15 the tempfile crate has the feature getrandom, which is enabled by default. Unfortunately, it pulls in 30+ dependencies, and I would like to avoid that; what I'm proposing is:

diff --git a/Cargo.toml b/Cargo.toml
index b6da1dd..83668b2 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -147,7 +147,7 @@ color = ["dep:anstream", "predicates/color"]
 color-auto = ["color"]
 
 [dependencies]
-tempfile = "3.27"
+tempfile = { default-features = false, version = "3.27" }
 globwalk = "0.9"
 predicates = { version = "3.1.4", default-features = false, features = ["diff"] }
 predicates-core = "1.0.10"

and the corresponding change to Cargo.lock.

[epage]

The question for a change like this why was getrandom is now available as a nightly feature. It can be a big help top maintainers to provide that kind of context.

After some digging, it looks like this comes from Stebalien/tempfile@ea45f47#diff-2e9d962a08321605940b5a657135052fbcef87b5e360662bb527c96d9a615542. The dependency is new to protect against a DoS. I'm assuming that isn't the most important thing for a testing library and callers can always add it back in, so this should be a fine to move forward with.