From 3300719e2a0b882c37adcb97d504fbd4c6851d9d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Mar 2026 15:45:49 +0000 Subject: [PATCH] deps: bump the rust-dependencies group across 1 directory with 6 updates Updates the requirements on [lz4_flex](https://github.com/pseitz/lz4_flex), [hkdf](https://github.com/RustCrypto/KDFs), [sha2](https://github.com/RustCrypto/hashes), [hmac](https://github.com/RustCrypto/MACs), [generic-array](https://github.com/fizyk20/generic-array) and [getrandom](https://github.com/rust-random/getrandom) to permit the latest version. Updates `lz4_flex` to 0.13.0 - [Release notes](https://github.com/pseitz/lz4_flex/releases) - [Changelog](https://github.com/PSeitz/lz4_flex/blob/main/CHANGELOG.md) - [Commits](https://github.com/pseitz/lz4_flex/compare/0.12.0...0.13.0) Updates `hkdf` to 0.13.0 - [Commits](https://github.com/RustCrypto/KDFs/compare/hkdf-v0.12.0...hkdf-v0.13.0) Updates `sha2` to 0.11.0 - [Commits](https://github.com/RustCrypto/hashes/compare/groestl-v0.10.0...sha2-v0.11.0) Updates `hmac` to 0.13.0 - [Commits](https://github.com/RustCrypto/MACs/compare/hmac-v0.12.0...hmac-v0.13.0) Updates `generic-array` to 1.3.5 - [Release notes](https://github.com/fizyk20/generic-array/releases) - [Changelog](https://github.com/fizyk20/generic-array/blob/master/CHANGELOG.md) - [Commits](https://github.com/fizyk20/generic-array/commits) Updates `getrandom` to 0.4.2 - [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-random/getrandom/compare/v0.2.0...v0.4.2) --- updated-dependencies: - dependency-name: lz4_flex dependency-version: 0.13.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: hkdf dependency-version: 0.13.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: hmac dependency-version: 0.13.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: generic-array dependency-version: 1.3.5 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: getrandom dependency-version: 0.4.2 dependency-type: direct:production dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] --- Cargo.toml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/Cargo.toml b/Cargo.toml index a6fb791..341c451 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -30,7 +30,7 @@ serde_bytes = "0.11" rmp-serde = { version = "1.3", optional = true } # High-performance LZ4 compression (optional) -lz4_flex = { version = "0.12", features = ["frame", "std"], optional = true } +lz4_flex = { version = "0.13", features = ["frame", "std"], optional = true } # Fast non-cryptographic hashing for data integrity (optional) # xxHash3-64: ~36 GB/s, sufficient for corruption detection (security via AES-GCM auth tag) @@ -40,13 +40,13 @@ xxhash-rust = { version = "0.8", features = ["xxh3"], optional = true } # Uses HKDF-SHA256 for key derivation (NOT Blake2b - that's only for Python cache keys) # ring is native-only (see [target.'cfg(not(target_arch = "wasm32"))'.dependencies]) zeroize = { version = "1.8", features = ["derive"], optional = true } -hkdf = { version = "0.12", optional = true } -sha2 = { version = "0.10", optional = true } -hmac = { version = "0.12", optional = true } -generic-array = { version = "0.14", optional = true } +hkdf = { version = "0.13", optional = true } +sha2 = { version = "0.11", optional = true } +hmac = { version = "0.13", optional = true } +generic-array = { version = "1.3", optional = true } # wasm32 RNG: getrandom with JS feature for wasm32-unknown-unknown targets -getrandom = { version = "0.2", features = ["js"], optional = true } +getrandom = { version = "0.4", features = ["js"], optional = true } # RustCrypto: pure-Rust AES-256-GCM for wasm32 targets (ring requires clang + C asm) aes-gcm = { version = "0.10", features = ["zeroize"], optional = true }