From 77eb607ccbd7ee67b50a7968d5d698452f133147 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 16 Jul 2026 16:51:05 -0400 Subject: [PATCH] chore(deps): update hmac requirement from 0.12 to 0.13 (#988) * chore(deps): update hmac requirement from 0.12 to 0.13 Updates the requirements on [hmac](https://github.com/RustCrypto/MACs) to permit the latest version. - [Commits](https://github.com/RustCrypto/MACs/compare/hmac-v0.12.0...hmac-v0.13.0) --- updated-dependencies: - dependency-name: hmac dependency-version: 0.13.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] * fix: align hmac and sha2 digest versions --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Dale Seo <5466341+DaleSeo@users.noreply.github.com> --- crates/rmcp/Cargo.toml | 4 ++-- crates/rmcp/src/model/request_state.rs | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/crates/rmcp/Cargo.toml b/crates/rmcp/Cargo.toml index a963c15..e0c44c2 100644 --- a/crates/rmcp/Cargo.toml +++ b/crates/rmcp/Cargo.toml @@ -66,8 +66,8 @@ schemars = { version = "1.0", optional = true, features = ["chrono04"] } base64 = { version = "0.22", optional = true } # for SEP-2322 requestState integrity sealing (opt-in via the `request-state` feature) -hmac = { version = "0.12", optional = true } -sha2 = { version = "0.10", optional = true } +hmac = { version = "0.13", optional = true } +sha2 = { version = "0.11", optional = true } # for HTTP client reqwest = { version = "0.13.2", default-features = false, features = [ diff --git a/crates/rmcp/src/model/request_state.rs b/crates/rmcp/src/model/request_state.rs index 76d9226..5ed0f7d 100644 --- a/crates/rmcp/src/model/request_state.rs +++ b/crates/rmcp/src/model/request_state.rs @@ -63,7 +63,7 @@ use std::time::Duration; use base64::{Engine, engine::general_purpose::URL_SAFE_NO_PAD}; -use hmac::{Hmac, Mac}; +use hmac::{Hmac, KeyInit, Mac}; use serde::{Serialize, de::DeserializeOwned}; use sha2::Sha256; use thiserror::Error;