chore(deps): bump md-5 to 0.11.0

[mendral-app]

Packages bumped

Package	Old	New	Type
md-5	0.10.6	0.11.0	minor (pre-1.0 = breaking boundary)

Changelog highlights & impact

md-5 0.10.6 → 0.11.0

• Part of the RustCrypto digest 0.11 ecosystem upgrade
• New digest trait hierarchy with SerializableState, CustomizedInit, EagerHash
• High-level Digest trait API (new(), update(), finalize()) remains compatible
• Impact: This project uses md5::{Digest, Md5} with Md5::new(), .update(&buffer), .finalize() in src/storage/storage_backend.rs. These methods are preserved in digest 0.11.

⚠️ Reviewer attention

This crosses the RustCrypto digest 0.10 → 0.11 boundary. While the high-level Digest trait API is preserved, the underlying trait hierarchy changed significantly. Key risks:

• Trait bounds: If any downstream code uses digest::Digest bounds directly (rather than through the md5 re-export), those bounds may need updating.
• Feature flags: The digest 0.11 crate reorganized features. The default re-export from md-5 should be sufficient.
• Transitive deps: Other crates depending on digest 0.10 could cause version conflicts.

Suggested manual check: verify cargo build --all-features compiles cleanly.

Files modified

• Cargo.toml

Skipped this ecosystem

See PR #1 for the full skip table.

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session