url 1.6.0 no longer builds with Rust 1.40 and later due to a lifetime bug uncovered by NLL: https://github.com/Xion/cargo-download/pull/7 Signed-off-by: Anders Kaseorg <andersk@mit.edu>