From a44a8d15b27d229e2a36eed4e145337eca88e510 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Jul 2026 17:42:06 +0000
Subject: [PATCH] build(deps): bump the cargo-deps group across 1 directory
 with 4 updates

Updates the requirements on [num-bigint](https://github.com/rust-num/num-bigint), [sha2](https://github.com/RustCrypto/hashes), [criterion](https://github.com/criterion-rs/criterion.rs) and [pyo3](https://github.com/pyo3/pyo3) to permit the latest version.

Updates `num-bigint` to 0.5.1
- [Changelog](https://github.com/rust-num/num-bigint/blob/main/RELEASES.md)
- [Commits](https://github.com/rust-num/num-bigint/compare/num-bigint-0.4.0...num-bigint-0.5.1)

Updates `sha2` to 0.11.0
- [Commits](https://github.com/RustCrypto/hashes/compare/streebog-v0.11.0-pre.0...sha2-v0.11.0)

Updates `criterion` to 0.8.2
- [Release notes](https://github.com/criterion-rs/criterion.rs/releases)
- [Changelog](https://github.com/criterion-rs/criterion.rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/criterion-rs/criterion.rs/compare/0.5.0...criterion-v0.8.2)

Updates `pyo3` to 0.29.0
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pyo3/pyo3/compare/v0.22.0...v0.29.0)

---
updated-dependencies:
- dependency-name: criterion
  dependency-version: 0.8.2
  dependency-type: direct:production
  dependency-group: cargo-deps
- dependency-name: num-bigint
  dependency-version: 0.5.1
  dependency-type: direct:production
  dependency-group: cargo-deps
- dependency-name: pyo3
  dependency-version: 0.29.0
  dependency-type: direct:production
  dependency-group: cargo-deps
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  dependency-group: cargo-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.toml                 | 10 +++++-----
 bindings/python/Cargo.toml |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Cargo.toml b/Cargo.toml
index c0e73ba..3e51b77 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -46,19 +46,19 @@ unexpected_cfgs = { level = "warn", check-cfg = ["cfg(kani)", "cfg(kani_slow)"]
 
 [dependencies]
 serde = { version = "1", optional = true, default-features = false, features = ["derive"] }
-num-bigint = { version = "0.4", optional = true }
+num-bigint = { version = "0.5", optional = true }
 num-traits = { version = "0.2", optional = true }
-sha2 = { version = "0.10", optional = true }
+sha2 = { version = "0.11", optional = true }
 
 [dev-dependencies]
 # fork/timeout (default features) pull in wait-timeout, which doesn't build
 # on wasm32 — and the fork runner isn't used here anyway.
 proptest = { version = "1", default-features = false, features = ["std", "bit-set"] }
-num-bigint = "0.4"
+num-bigint = "0.5"
 num-traits = "0.2"
 serde_json = "1"
-criterion = { version = "0.5", default-features = false }
-sha2 = "0.10.9"
+criterion = { version = "0.8", default-features = false }
+sha2 = "0.11.0"
 xsum = "0.1"
 
 [[example]]
diff --git a/bindings/python/Cargo.toml b/bindings/python/Cargo.toml
index 099f7a8..86aa8f2 100644
--- a/bindings/python/Cargo.toml
+++ b/bindings/python/Cargo.toml
@@ -16,4 +16,4 @@ crate-type = ["cdylib"]
 [dependencies]
 bitrep_core = { package = "bitrep", path = "../..", features = ["stats", "receipts"] }
 # abi3-py38: one forward-compatible wheel per platform (Python 3.8+), no per-version build.
-pyo3 = { version = "0.22", features = ["extension-module", "abi3-py38"] }
+pyo3 = { version = "0.29", features = ["extension-module", "abi3-py38"] }