Docs/dependency review standards

[emmyoat]

Summary

This pull request reviews and updates project dependencies to ensure security patches, framework compatibility, and performance improvements across the smart contract workspace.

---

🔍 Dependency Change Matrix

Dependency Name	Previous Version	Updated Version	Type	Breaking Changes?	Risk Level
soroban-sdk	24.x	25.0	Production	Yes (SDK API changes)	🟡 Medium
proptest	1.5.0	1.6.0	Dev-dependency	No	🟢 Low

---

🔒 Security & Vulnerability Audit

• Automated Audit Executed: Ran cargo audit / dependency vulnerability scanner.
• Known Vulnerabilities (CVEs): 0 known vulnerabilities detected.
• License Audit: All updated dependencies maintain compatible licenses (MIT / Apache-2.0).

Important

No high or critical severity advisories were found in the updated transitive dependency tree (Cargo.lock).

---

⚡ Contract & Binary Impact

• WASM Binary Size: Compiled binary size audited (cargo build --release). No unexpected size growth.
• Gas & Execution Costs: No adverse changes to Soroban CPU/Memory instruction overhead.
• Public API Compatibility: Checked docs/PUBLIC_API_CHECKLIST.md; public contract interface and data types remain stable.

---

🧪 Testing & Verification Checklist

• cargo check — Compiles cleanly without warnings.
• cargo test — All unit, integration, and proptest suites pass.
• cargo fmt --all -- --check — Code formatting verified.
• Contract build succeeds (cargo build --target wasm32-unknown-unknown --release).

---

🔗 Related Issues & Resources

• Refers to security / dependency update issue: #
• Upstream release notes / changelog link: