From cc11239f3c0a7f469bfdca73e9292743a6c3ae76 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 03:24:16 +0000
Subject: [PATCH] chore(deps): Bump hkdf from 0.12.4 to 0.13.0

Bumps [hkdf](https://github.com/RustCrypto/KDFs) from 0.12.4 to 0.13.0.
- [Commits](https://github.com/RustCrypto/KDFs/compare/hkdf-v0.12.4...hkdf-v0.13.0)

---
updated-dependencies:
- dependency-name: hkdf
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                      | 33 +++++++++++++++++++++++++++++----
 crates/rustle-server/Cargo.toml |  2 +-
 2 files changed, 30 insertions(+), 5 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 91e1d29..7b26bed 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -283,6 +283,12 @@ dependencies = [
  "inout",
 ]
 
+[[package]]
+name = "cmov"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c9ea0ac24bc397ab3c98583a3c9ba74fa56b09a4449bbe172b9b1ddb016027a"
+
 [[package]]
 name = "codee"
 version = "0.3.5"
@@ -436,6 +442,15 @@ dependencies = [
  "cipher",
 ]
 
+[[package]]
+name = "ctutils"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "261af4dc7a06ea8a527a8717d8cbba3417530d6ea14e1edb3de6b67806be474f"
+dependencies = [
+ "cmov",
+]
+
 [[package]]
 name = "derive-where"
 version = "1.7.0"
@@ -467,6 +482,7 @@ dependencies = [
  "block-buffer 0.12.1",
  "const-oid",
  "crypto-common 0.2.2",
+ "ctutils",
 ]
 
 [[package]]
@@ -799,11 +815,11 @@ checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
 
 [[package]]
 name = "hkdf"
-version = "0.12.4"
+version = "0.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
+checksum = "4aaa26c720c68b866f2c96ef5c1264b3e6f473fe5d4ce61cd44bbe913e553018"
 dependencies = [
- "hmac",
+ "hmac 0.13.0",
 ]
 
 [[package]]
@@ -815,6 +831,15 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "hmac"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6303bc9732ae41b04cb554b844a762b4115a61bfaa81e3e83050991eeb56863f"
+dependencies = [
+ "digest 0.11.3",
+]
+
 [[package]]
 name = "html-escape"
 version = "0.2.15"
@@ -1782,7 +1807,7 @@ dependencies = [
  "bytes",
  "hex",
  "hkdf",
- "hmac",
+ "hmac 0.12.1",
  "http-body-util",
  "hyper",
  "hyper-util",
diff --git a/crates/rustle-server/Cargo.toml b/crates/rustle-server/Cargo.toml
index 2c10350..8976044 100644
--- a/crates/rustle-server/Cargo.toml
+++ b/crates/rustle-server/Cargo.toml
@@ -38,7 +38,7 @@ rusqlite = { version = "0.37", features = ["bundled"] }
 argon2 = "0.5"
 sha2 = "0.10"
 hmac = "0.12"
-hkdf = "0.12"
+hkdf = "0.13"
 aes-gcm = "0.10"
 rand = "0.9"
 base64 = "0.22"