Alan-Jowett / sonde / 24790692412

82%

push

github

deps: bump pbkdf2 from 0.12.2 to 0.13.0 (#783)

* deps: bump pbkdf2 from 0.12.2 to 0.13.0

Bumps [pbkdf2](https://github.com/RustCrypto/password-hashes) from 0.12.2 to 0.13.0.
- [Commits](https://github.com/RustCrypto/password-hashes/compare/pbkdf2-v0.12.2...pbkdf2-v0.13.0)

---
updated-dependencies:
- dependency-name: pbkdf2
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(gateway): adapt to \pbkdf2\ 0.13 digest trait changes

\pbkdf2\ 0.13 depends on \digest\ 0.11 / \hmac\ 0.13, but
\sha2\ 0.10 implements \digest\ 0.10 traits. Use the \sha2\
re-export from \pbkdf2\ (behind the \sha2\ feature) so the
\Sha256\ type satisfies the new trait bounds. Other files keep
using \sha2\ 0.10 for standalone hashing — no conflict since
those types don't cross the pbkdf2 boundary.

Also removes the unused direct \hmac\ dependency.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alan Jowett <alan.jowett@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 of 1 new or added line in 1 file covered. (100.0%)

24706 of 30560 relevant lines covered (80.84%)

201.68 hits per line