chore(deps): bump sha2 from 0.10.9 to 0.11.0

[dependabot]

Bumps sha2 from 0.10.9 to 0.11.0.

Commits

• ffe0939 Release sha2 0.11.0 (#806)
• 8991b65 Use the standard order of the [package] section fields (#807)
• 3d2bc57 sha2: refactor backends (#802)
• faa55fb sha3: bump keccak to v0.2 (#803)
• d3e6489 sha3 v0.11.0-rc.9 (#801)
• bbf6f51 sha2: tweak backend docs (#800)
• 155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
• ed514f2 Use published version of keccak v0.2 (#799)
• 702bcd8 Migrate to closure-based keccak (#796)
• 827c043 sha3 v0.11.0-rc.8 (#794)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
spotuify	Ready	Preview, Comment	Jul 11, 2026 3:12am

[cubic-dev-ai]

No issues found across 2 files

_{Re-trigger cubic}

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[bhekanik]

Holding this one. sha2 0.11 moves to digest 1.0/hybrid-array, whose hash output is Array rather than GenericArray and no longer implements LowerHex — so format!("{:x}", hasher.finalize()) in crates/spotuify-daemon/src/lastfm_import.rs fails to compile (confirmed by the failing Check/Clippy here). The one call site is a trivial fix (byte-iter hex, matching analytics.rs), but bumping sha2 alone splits the tree onto two digest major versions (sha1/hmac/etc. stay on 0.10). This should land as one deliberate digest-1.0 migration across all hashers (pair with #4), not a partial bump. Deferring until then.