[dependabot]

Bumps aes from 0.8.4 to 0.9.2.

Commits

• 18108ae Release aes v0.9.2 (#577)
• 2751b90 aes: add hardware_accelerated function (#579)
• e50a0c1 aes: refactor backends (#575)
• 8539fad refactor(aes): machine-word generic fixslice (#560)
• 948663f ci: bump actions/cache from 5 to 6 (#573)
• 32cad20 build(deps): bump actions/checkout from 6 to 7 (#571)
• 4bbb17a aes: use intel-sde-install's default SDE version (#570)
• 4214e0a aes: use intel-sde-install action for AVX-512 CI (#569)
• 77dd035 Release camellia v0.2.1 (#568)
• 8bc3fed camellia: drop unused byteorder dependency (#566)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nuntius-review]

Nuntius

Reviewed commits

Commit	Summary
bb69532	deps: bump aes from 0.8.4 to 0.9.2

An analysis of the provided changes in Cargo.lock shows a dependency upgrade for the aes crate.

Analysis

1. Dependency Upgrade (aes 0.8 -> 0.9.2):

   • Correctness & Modernization: The aes crate version 0.9 introduces a transition from generic-array to hybrid-array. hybrid-array leverages Rust's native const generics, which improves type safety, simplifies API usage, and can lead to better compiler optimizations and faster compile times.
   • Coexistence: The lockfile correctly maintains aes 0.8.4 for other dependencies (such as the package at line 4231, likely scrypt or another cryptographic crate) that have not yet upgraded, while allowing harper-core to use aes 0.9.2. This prevents dependency conflicts.

2. Truncated Diff:

   • The diff provided at the very end of Cargo.lock appears to be truncated:

     @@ -4231,7 +4285,7 @@ version = "3.1.0"
      source = "registry+https://github.com/rust-lang/crates.io-index"
      checksum = "b5204d39df37f06d1944935232fd2dfe05008def7ca599bf28c0800366c8a8f9"
      dependencies = [
     - "aes",
     + "aes 0.8.4

     If this truncation exists in the actual commit (missing the closing quote, comma, or bracket), it will cause Cargo parsing errors. However, if this is just an artifact of how the diff was copied into this prompt, it can be safely ignored as running cargo build will automatically regenerate/fix the Cargo.lock file correctly.

Recommendations

No code changes are required. Ensure that cargo check and your test suite run successfully to verify that the API changes introduced by aes 0.9.2 (and its transition to hybrid-array) do not break any existing cryptographic implementations in harper-core.