From 36ad22f593137e8bd4c11e3f106da5ab9369e2a2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Aug 2026 17:55:01 +0000
Subject: [PATCH] deps: bump hmac from 0.12.1 to 0.13.0

Bumps [hmac](https://github.com/RustCrypto/MACs) from 0.12.1 to 0.13.0.
- [Commits](https://github.com/RustCrypto/MACs/compare/hmac-v0.12.1...hmac-v0.13.0)

---
updated-dependencies:
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                    | 29 +++++++++++++++++++++++++++--
 crates/cbor-worker/Cargo.toml |  2 +-
 2 files changed, 28 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index ec14f8b..070542a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -516,7 +516,7 @@ dependencies = [
  "env_logger",
  "futures",
  "glob",
- "hmac",
+ "hmac 0.13.0",
  "http",
  "log",
  "object_store",
@@ -647,6 +647,12 @@ dependencies = [
  "cc",
 ]
 
+[[package]]
+name = "cmov"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c9ea0ac24bc397ab3c98583a3c9ba74fa56b09a4449bbe172b9b1ddb016027a"
+
 [[package]]
 name = "colorchoice"
 version = "1.0.5"
@@ -773,6 +779,15 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "ctutils"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e"
+dependencies = [
+ "cmov",
+]
+
 [[package]]
 name = "defmt"
 version = "1.1.1"
@@ -823,6 +838,7 @@ checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
 dependencies = [
  "block-buffer 0.12.1",
  "crypto-common 0.2.2",
+ "ctutils",
 ]
 
 [[package]]
@@ -1183,6 +1199,15 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "hmac"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6303bc9732ae41b04cb554b844a762b4115a61bfaa81e3e83050991eeb56863f"
+dependencies = [
+ "digest 0.11.3",
+]
+
 [[package]]
 name = "http"
 version = "1.5.0"
@@ -3053,7 +3078,7 @@ dependencies = [
  "chrono",
  "flatbuffers",
  "flate2",
- "hmac",
+ "hmac 0.12.1",
  "libc",
  "rand 0.8.7",
  "rust_decimal",
diff --git a/crates/cbor-worker/Cargo.toml b/crates/cbor-worker/Cargo.toml
index 9546ca9..dec1191 100644
--- a/crates/cbor-worker/Cargo.toml
+++ b/crates/cbor-worker/Cargo.toml
@@ -68,7 +68,7 @@ tokio = { version = "1", default-features = false, features = ["rt", "time"] }
 async-trait = "0.1"
 http = "1"
 sha2 = "0.10"
-hmac = "0.12"
+hmac = "0.13"
 
 [dev-dependencies]
 cbor-core = { workspace = true }