From 2ec162b33dc63e34f9e103a488bda0770373e3e9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 18 Jul 2026 12:21:25 +0000 Subject: [PATCH 1/3] chore(deps): bump sha2 from 0.10.9 to 0.11.0 Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0. - [Commits](https://github.com/RustCrypto/hashes/compare/sha2-v0.10.9...sha2-v0.11.0) --- updated-dependencies: - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Cargo.lock | 71 ++++++++++++++++++------------------- crates/rpath-cli/Cargo.toml | 2 +- 2 files changed, 36 insertions(+), 37 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 514f19b..4a55df4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -44,7 +44,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -55,7 +55,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -84,11 +84,11 @@ checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8" [[package]] name = "block-buffer" -version = "0.10.4" +version = "0.12.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" +checksum = "d2f6c7dbe95a6ed67ad9f18e57daf93a2f034c524b99fd2b76d18fdfeb6660aa" dependencies = [ - "generic-array", + "hybrid-array", ] [[package]] @@ -171,11 +171,17 @@ version = "1.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" +[[package]] +name = "const-oid" +version = "0.10.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c" + [[package]] name = "cpufeatures" -version = "0.2.17" +version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" +checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201" dependencies = [ "libc", ] @@ -191,21 +197,21 @@ dependencies = [ [[package]] name = "crypto-common" -version = "0.1.7" +version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" +checksum = "ce6e4c961d6cd6c9a86db418387425e8bdeaf05b3c8bc1411e6dca4c252f1453" dependencies = [ - "generic-array", - "typenum", + "hybrid-array", ] [[package]] name = "digest" -version = "0.10.7" +version = "0.11.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" +checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2" dependencies = [ "block-buffer", + "const-oid", "crypto-common", ] @@ -227,7 +233,7 @@ dependencies = [ "libc", "option-ext", "redox_users", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -254,7 +260,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -348,16 +354,6 @@ dependencies = [ "slab", ] -[[package]] -name = "generic-array" -version = "0.14.7" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" -dependencies = [ - "typenum", - "version_check", -] - [[package]] name = "getrandom" version = "0.2.17" @@ -447,6 +443,15 @@ version = "1.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87" +[[package]] +name = "hybrid-array" +version = "0.4.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "818356c5132c1fede50f837ca96afbe78ff42413047f4abb886217845e1b6c8c" +dependencies = [ + "typenum", +] + [[package]] name = "hyper" version = "1.10.1" @@ -1010,7 +1015,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -1123,9 +1128,9 @@ dependencies = [ [[package]] name = "sha2" -version = "0.10.9" +version = "0.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" +checksum = "446ba717509524cb3f22f17ecc096f10f4822d76ab5c0b9822c5f9c284e825f4" dependencies = [ "cfg-if", "cpufeatures", @@ -1163,7 +1168,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "52d1cfed4120b4d927bf7c0f86d2087a4a7d6027c906d9f9d525a80573b9be51" dependencies = [ "libc", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -1236,7 +1241,7 @@ dependencies = [ "getrandom 0.4.3", "once_cell", "rustix", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -1426,12 +1431,6 @@ version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" -[[package]] -name = "version_check" -version = "0.9.5" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" - [[package]] name = "want" version = "0.3.1" diff --git a/crates/rpath-cli/Cargo.toml b/crates/rpath-cli/Cargo.toml index d90e3ed..302f1b3 100644 --- a/crates/rpath-cli/Cargo.toml +++ b/crates/rpath-cli/Cargo.toml @@ -24,7 +24,7 @@ rpath-shell = { path = "../rpath-shell", version = "0.1.0" } semver = "1" serde.workspace = true serde_json.workspace = true -sha2 = "0.10" +sha2 = "0.11" tar = "0.4" zip = { version = "8", default-features = false, features = ["deflate"] } From 72ffe98f23576e25fb91934f49b586f8376476da Mon Sep 17 00:00:00 2001 From: Jonas Date: Sat, 18 Jul 2026 14:32:25 +0200 Subject: [PATCH 2/3] Fix: format SHA256 digest bytes as hex string in checksum verification The sha2 crate's Sha256::digest() returns a GenericArray which doesn't implement the LowerHex trait. Convert the digest bytes to a hex string by iterating and formatting each byte individually. Fixes E0277 compilation error. --- crates/rpath-cli/src/upgrade.rs | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/crates/rpath-cli/src/upgrade.rs b/crates/rpath-cli/src/upgrade.rs index e9323a1..6caba7d 100644 --- a/crates/rpath-cli/src/upgrade.rs +++ b/crates/rpath-cli/src/upgrade.rs @@ -219,7 +219,10 @@ fn parse_version(input: &str) -> Result { fn verify_checksum(bytes: &[u8], checksum_text: &str) -> Result<()> { let expected = parse_sha256(checksum_text)?; - let actual = format!("{:x}", Sha256::digest(bytes)); + let actual = Sha256::digest(bytes) + .iter() + .map(|b| format!("{:02x}", b)) + .collect::(); if actual != expected { bail!("checksum mismatch: expected {expected}, got {actual}"); } From 66be03d17087d524ab135f93187643c055e25563 Mon Sep 17 00:00:00 2001 From: Jonas Date: Sat, 18 Jul 2026 14:33:26 +0200 Subject: [PATCH 3/3] Fix: update formatting using cargo fmt --- crates/rpath-cli/src/upgrade.rs | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/crates/rpath-cli/src/upgrade.rs b/crates/rpath-cli/src/upgrade.rs index 6caba7d..d625f90 100644 --- a/crates/rpath-cli/src/upgrade.rs +++ b/crates/rpath-cli/src/upgrade.rs @@ -219,10 +219,7 @@ fn parse_version(input: &str) -> Result { fn verify_checksum(bytes: &[u8], checksum_text: &str) -> Result<()> { let expected = parse_sha256(checksum_text)?; - let actual = Sha256::digest(bytes) - .iter() - .map(|b| format!("{:02x}", b)) - .collect::(); + let actual = Sha256::digest(bytes).iter().map(|b| format!("{:02x}", b)).collect::(); if actual != expected { bail!("checksum mismatch: expected {expected}, got {actual}"); }