[dependabot]

Bumps sha2 from 0.11.0 to 0.11.1.

Commits

• 138dc5a Release sha2 v0.11.1 (#927)
• cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
• 7c59cad Update Cargo.lock (#921)
• f57b947 streebog: tweak internal implementation (#925)
• 336611f Fix cargo::manual_readme lint (#924)
• 1df8877 md2: fix clippy::needless_range_loop lint (#923)
• 6075989 sha2: fix loading of round constants on AArch64 backends (#922)
• eadfd90 Update Cargo.lock (#913)
• fa30840 blake2 v0.11.0 (#911)
• f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
• Additional commits viewable in compare view

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Files

• Cargo.lock

[zoeyrose]

Back to draft until the merge-readiness gate passes: Protocol validation fails and the branch is behind main

[zoeyrose]

Kept as a draft. Protocol validation fails in tools/crate_prepare.py check-version with package content changed without reviewed version bump. Main is green at a834a16, so the failure comes from this bump.

Cause: the version gate counts any Cargo.lock diff as a change to the published atrinik-protocol package. Here the only sha2 user is tools/rendezvous-conformance (publish = false, dev-dependency). The published atrinik-protocol-0.2.0.crate ships a pruned Cargo.lock that has no sha2 or hmac at all, so the packaged content does not change. The gate's path check is a false positive here, and rebasing alone will not fix it.

Needs an owner decision. Either:

1. Narrow the gate so that a Cargo.lock-only diff counts only when the published crate's locked dependency closure changes. Release-time preparation would still compare the real packaged content against the owning archive.
2. Or bump atrinik-protocol to 0.2.1. That automatically publishes a content-identical crate to crates.io, which can't be undone.

After either change lands on main, @dependabot rebase should be enough here.

[zoeyrose]

@dependabot rebase

[github-actions]

🎉 This PR is included in version 2.21.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀