From 4da567088268fe7a267f232c8eb6053728687644 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 09:34:04 +0000 Subject: [PATCH 1/2] deps: bump sha2 from 0.10.9 to 0.11.0 Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0. - [Commits](https://github.com/RustCrypto/hashes/compare/sha2-v0.10.9...sha2-v0.11.0) --- updated-dependencies: - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Cargo.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Cargo.lock b/Cargo.lock index f63f5adf..3e35f582 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -9576,7 +9576,7 @@ dependencies = [ "serde", "serde_json", "serde_yaml", - "sha2 0.10.9", + "sha2 0.11.0", "smallvec", "smol", "tokio", From e36717a19e7ad4553e882fa68af8e911df3aa572 Mon Sep 17 00:00:00 2001 From: thomas Date: Tue, 28 Jul 2026 10:37:32 +0800 Subject: [PATCH 2/2] deps: align Cargo.toml sha2 requirement with 0.11 lockfile bump Dependabot bumped sha2 to 0.11.0 in Cargo.lock but left the manifest requiring 0.10, so --locked builds failed on every platform. tty7's only sha2 usage (Sha512::digest in core::keychain) is unchanged in 0.11. Co-Authored-By: Claude Fable 5 --- Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Cargo.toml b/Cargo.toml index 9d076654..fb47e9f9 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -38,7 +38,7 @@ serde_json.workspace = true # platform store (macOS Keychain / Windows Credential Manager / Linux Secret # Service), so no per-platform feature guards are needed. uuid = { version = "1", features = ["v4", "serde"] } -sha2 = "0.10" +sha2 = "0.11" keyring = "4" # Theme files. tty7 themes are authored as YAML (`~/.config/tty7/themes/*.yaml`,