deps(deps): bump the crypto-stack group across 1 directory with 8 updates

[dependabot]

Bumps the crypto-stack group with 8 updates in the / directory:

Package	From	To
blake3	1.8.3	1.8.7
zeroize	1.8.2	1.9.0
aes	0.8.4	0.9.3
cipher	0.4.4	0.5.2
xts-mode	0.5.1	0.6.0
poly1305	0.8.0	0.9.1
hmac	0.12.1	0.13.0
sha2	0.10.9	0.11.0

Updates blake3 from 1.8.3 to 1.8.7

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

• Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

1.8.6

version 1.8.6

Changes since 1.8.5:

• update_mmap and update_mmap_rayon (and by extension b3sum) now use seek rather than metadata to get the length of a file/mapping, and they tolerate mmap failures. That means b3sum will now memory map e.g. Linux block devices, which support mapping despite reporting length 0 in metadata. Hashing NUL files on Windows also works now, where previously it was an error unless you used --no-mmap or <. This change was originally proposed by @​nabijaczleweli.

1.8.5

version 1.8.5

Changes since 1.8.4:

• Forcibly disable LTO when compiling C intrinsics from the Rust build. This fixes a build break on Arch Linux ARM: BLAKE3-team/BLAKE3#550

1.8.4

version 1.8.4

Changes since 1.8.3:

• Updated the digest dependency from v0.10 to v0.11. THIS IS A POTENTIALLY BREAKING CHANGE for callers using the traits-preview Cargo feature. But this is not considered a breaking change for the blake3 crate itself; see the docs for traits-preview.
• Performance for WASM SIMD targets is improved by ~20% when the wasm32_simd feature is enabled. Contributed by @​lamb356.

Commits

• f3149ec version 1.8.7
• b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
• 483a220 fix warnings related to not using MAX constants
• ba02549 Codex: remove arrayref
• 77b257e version 1.8.6
• 83b1746 use seek instead of metadata to establish mmap length (#570)
• 9eac279 use vswhere to find Visual Studio in CI
• fc3d0e9 Fix path to Visual Studio toolchain in CI
• 8aa5145 a few more colons
• 6bb9773 use cargo:: build script syntax
• Additional commits viewable in compare view

Updates zeroize from 1.8.2 to 1.9.0

Commits

• 0b71573 zeroize v1.9.0 (#1494)
• 3e3f18c zeroize: always enable AVX-512 support (#1493)
• 1ea42bb zeroize_derive v1.5.0 (#1492)
• 8d785d1 zeroize: rustdoc improvements (#1491)
• d844f36 zeroize: incorporate README.md into rustdoc (#1490)
• c65c09d ctutils: use reason instead of comment in forbid attribute (#1489)
• cbd0963 Release block-buffer v0.12.1 (#1488)
• 9aa541d block-buffer: fix exception safety (#1487)
• 5c7e4f9 cmov v0.5.4 (#1485)
• 87cadbc cmov: fix clippy (#1484)
• Additional commits viewable in compare view

Updates aes from 0.8.4 to 0.9.3

Commits

• c153436 Release aes v0.9.3 (#587)
• 6226693 aes: disable aarch64_aes backend on Miri (#586)
• 1013f13 kuznyechik: remove unnecessary mut in f.call() (#584)
• 9201609 Fix build badges (#583)
• e207dc6 ci: bump hybrid-array from 0.4.13 to 0.4.14 in the all-deps group across 1 di...
• 9b8b0c9 aes: enable VAES backends by default, bump MSRV to 1.89 (#580)
• 18108ae Release aes v0.9.2 (#577)
• 2751b90 aes: add hardware_accelerated function (#579)
• e50a0c1 aes: refactor backends (#575)
• 8539fad refactor(aes): machine-word generic fixslice (#560)
• Additional commits viewable in compare view

Updates cipher from 0.4.4 to 0.5.2

Commits

• f836f71 Release cipher v0.5.2 (#2423)
• c9d00e2 cipher: re-export SetIvState trait (#2422)
• 93dee26 Release crypto-common v0.2.2 (#2421)
• f73c4bc crypto-common: add SetIvState trait (#2420)
• 94f108f ci: bump crate-ci/typos from 1.46.1 to 1.46.2 (#2419)
• e4d7d34 elliptic-curve: remove bits feature (#2417)
• d2cf1f9 Update Cargo.lock (#2415)
• 40f6b7b ci: bump crate-ci/typos from 1.46.0 to 1.46.1 (#2409)
• 5debc66 elliptic-curve: fix minimal-versions check (#2414)
• 4e999e3 digest: remove unused file (#2411)
• Additional commits viewable in compare view

Updates xts-mode from 0.5.1 to 0.6.0

Changelog

Sourced from xts-mode's changelog.

[0.6.0] - 2026-05-05

Changed

• Breaking: Update cipher to 0.5.1 and aes examples / tests to 0.9.0.
• Breaking: The cipher block size is now enforced at the type level.
  • This also removes the possibility of methods panicking due to an incorrect block size.
• Breaking: Tweak inputs and examples now use hybrid_array::Array instead of the array primitive, following upstream.
• Increase MSRV to 1.85 and update to edition 2024.
• Improve and simplify core logic

Removed

• Breaking: Remove unused std feature.
• Remove byteorder dependency.
• Remove trait bounds from the Xts128 struct, applying them only to implementations.

Commits

• ce5a8ef Bump version and update CHANGELOG.md
• 338c6f6 Update top-level docs and README.md
• f628265 Simplify panic message
• 15c3673 Simplify galois_field_128_mul_le
• 6b2259d Simplify stealing logic
• 405a564 Remove trait bounds from Xts128 struct
• 7a68d8e Use hybrid-array instead of primitive array
• 1e4b5c4 Update to cipher 0.5 and aes to 0.9
• 880f316 Remove byteorder dependency
• 3d7838c Remove unused std feature
• Additional commits viewable in compare view

Updates poly1305 from 0.8.0 to 0.9.1

Commits

• 4f56919 Release poly1305 v0.9.1 (#345)
• 08b9ae1 Tweak zeroization (#343)
• 71e27b5 ci: bump actions/cache from 5 to 6 (#340)
• 7232d5e build(deps): bump actions/checkout from 6 to 7 (#338)
• 52dd6af build(deps): bump the all-deps group with 9 updates (#337)
• cbe6622 build(deps): bump hybrid-array from 0.4.11 to 0.4.12 in the all-deps group (#...
• ec9e338 poly1305 v0.9.0 (#333)
• e25c443 build(deps): bump cpubits from 0.1.0 to 0.1.1 in the all-deps group (#332)
• 2e34488 Update Cargo.lock (#331)
• 8b7e6c6 build(deps): bump the all-deps group with 8 updates (#329)
• Additional commits viewable in compare view

Updates hmac from 0.12.1 to 0.13.0

Commits

• 0236c8e hmac v0.13.0 (#263)
• b895e50 Migrate tests to the new blobby format (#264)
• 3d1440b Workspace-level lint configuration (#261)
• 11d4f36 hmac: use release versions of dev-dependencies (#260)
• c40b82b hmac: bump sha2 dev-dependency to v0.11 (#259)
• 1fa0781 Cut rc.5 prereleases (#258)
• a008265 hmac v0.13.0-rc.6 (#256)
• da485cd Use (Reset)MacTraits (#254)
• 2c51e3b hmac: derive Clone instead of relying on (Reset)MacTraits (#253)
• 669d805 Relax Clone bounds (#250)
• Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

• ffe0939 Release sha2 0.11.0 (#806)
• 8991b65 Use the standard order of the [package] section fields (#807)
• 3d2bc57 sha2: refactor backends (#802)
• faa55fb sha3: bump keccak to v0.2 (#803)
• d3e6489 sha3 v0.11.0-rc.9 (#801)
• bbf6f51 sha2: tweak backend docs (#800)
• 155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
• ed514f2 Use published version of keccak v0.2 (#799)
• 702bcd8 Migrate to closure-based keccak (#796)
• 827c043 sha3 v0.11.0-rc.8 (#794)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.