From c27e6acd796edc502bd9345b0346f395440dbeaf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 19 Aug 2026 11:28:38 +0000
Subject: [PATCH] chore(deps): bump sha2 from 0.10.9 to 0.11.0

Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0.
- [Commits](https://github.com/RustCrypto/hashes/compare/sha2-v0.10.9...sha2-v0.11.0)

---
updated-dependencies:
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                             | 17 ++++++++++++-----
 Cargo.toml                             |  2 +-
 crates/offline-protocol-mls/Cargo.toml |  2 +-
 crates/offline-protocol/Cargo.toml     |  2 +-
 4 files changed, 15 insertions(+), 8 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 73110ea3..d40a97c4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -433,6 +433,12 @@ version = "0.9.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
 
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
 [[package]]
 name = "core-foundation-sys"
 version = "0.8.7"
@@ -665,7 +671,7 @@ version = "0.7.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
 dependencies = [
- "const-oid",
+ "const-oid 0.9.6",
  "pem-rfc7468",
  "zeroize",
 ]
@@ -694,7 +700,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
 dependencies = [
  "block-buffer 0.10.4",
- "const-oid",
+ "const-oid 0.9.6",
  "crypto-common 0.1.7",
  "subtle",
 ]
@@ -706,6 +712,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
 dependencies = [
  "block-buffer 0.12.1",
+ "const-oid 0.10.2",
  "crypto-common 0.2.2",
 ]
 
@@ -1966,7 +1973,7 @@ dependencies = [
  "rand_core 0.6.4",
  "serde",
  "serde_json",
- "sha2 0.10.9",
+ "sha2 0.11.0",
  "thiserror 2.0.17",
  "tracing",
  "uuid",
@@ -2028,7 +2035,7 @@ dependencies = [
  "openmls_traits",
  "serde",
  "serde_json",
- "sha2 0.10.9",
+ "sha2 0.11.0",
  "thiserror 2.0.17",
  "tokio",
  "tracing",
@@ -2083,7 +2090,7 @@ dependencies = [
  "rand_core 0.6.4",
  "serde",
  "serde_json",
- "sha2 0.10.9",
+ "sha2 0.11.0",
  "subtle",
  "thiserror 2.0.17",
  "tracing",
diff --git a/Cargo.toml b/Cargo.toml
index c7a55d4e..3e091eee 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -100,7 +100,7 @@ unicode-normalization = "0.1"
 # `ecdh` backs the NIP-44 v2 conversation key (secp256k1 ECDH, x-coordinate
 # only, deliberately unhashed) used to seal Nostr gift wraps.
 k256 = { version = "0.13", features = ["schnorr", "ecdh"] }
-sha2 = "0.10"
+sha2 = "0.11"
 hkdf = "0.12"
 # NIP-44 v2 is encrypt-then-MAC over a raw ChaCha20 stream — not an AEAD — so
 # it needs the bare stream cipher and HMAC rather than `chacha20poly1305`.
diff --git a/crates/offline-protocol-mls/Cargo.toml b/crates/offline-protocol-mls/Cargo.toml
index 58d68b50..9b22eeab 100644
--- a/crates/offline-protocol-mls/Cargo.toml
+++ b/crates/offline-protocol-mls/Cargo.toml
@@ -47,7 +47,7 @@ base64 = { workspace = true }
 hex = "0.4"
 
 # Hashing
-sha2 = "0.10"
+sha2 = "0.11"
 
 # Ed25519 for signature verification
 ed25519-dalek = { version = "3.0", features = ["digest"] }
diff --git a/crates/offline-protocol/Cargo.toml b/crates/offline-protocol/Cargo.toml
index 5d9d8848..e9370ab7 100644
--- a/crates/offline-protocol/Cargo.toml
+++ b/crates/offline-protocol/Cargo.toml
@@ -49,7 +49,7 @@ base64 = { workspace = true }
 # The Nostr author key is hex on the wire and hex in the discovery record, so
 # the comparison that binds the two never crosses an encoding.
 hex = { workspace = true }
-sha2 = "0.10"
+sha2 = "0.11"
 chacha20poly1305 = { workspace = true }
 rand_core = { workspace = true }
 zeroize = { workspace = true }