build(deps): bump sha2 from 0.10.9 to 0.11.0#478
Conversation
dependabot
Bot
added
dependencies
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d386f436be
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| argon2 = { version = "0.5", default-features = false, features = ["std"] } | ||
| hmac = "0.12" | ||
| sha2 = "0.10" | ||
| sha2 = "0.11" |
There was a problem hiding this comment.
Bumping sha2 to 0.11 introduces a digest major-version split with hmac = 0.12: hmac 0.12.1 in the lockfile still depends on digest 0.10, while sha2 0.11.0 depends on digest 0.11. In searchlite-core’s write-key path, Hmac::<Sha256> (see searchlite-core/src/util/write_key.rs) requires Sha256 to implement the same digest traits as hmac, so builds with --all-features (or write-key enabled) will fail with trait-bound mismatches.
Useful? React with 👍 / 👎.
dependabot
Bot
force-pushed
the
dependabot/cargo/sha2-0.11.0
branch
10 times, most recently
from
cbd619c to
30eb4d6
Compare
dependabot
Bot
force-pushed
the
dependabot/cargo/sha2-0.11.0
branch
3 times, most recently
from
1fb3fe0 to
f33476e
Compare
dependabot
Bot
force-pushed
the
dependabot/cargo/sha2-0.11.0
branch
from
f33476e to
5d7572a
Compare
Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0. - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) --- updated-dependencies: - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/cargo/sha2-0.11.0
branch
from
5d7572a to
665cb3a
Compare
Bumps sha2 from 0.10.9 to 0.11.0.
Commits
ffe0939Release sha2 0.11.0 (#806)8991b65Use the standard order of the[package]section fields (#807)3d2bc57sha2: refactor backends (#802)faa55fbsha3: bumpkeccakto v0.2 (#803)d3e6489sha3 v0.11.0-rc.9 (#801)bbf6f51sha2: tweak backend docs (#800)155dbbfsha3: add default value for theDSgeneric parameter onTurboShake128/256...ed514f2Use published version ofkeccakv0.2 (#799)702bcd8Migrate to closure-basedkeccak(#796)827c043sha3 v0.11.0-rc.8 (#794)