From 86d57b52e8f0c35f010b7d4b3cc1c9f7fcf11ecc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 1 Apr 2026 17:20:06 +0000
Subject: [PATCH] build(deps): bump sha1 from 0.10.6 to 0.11.0

Bumps [sha1](https://github.com/RustCrypto/hashes) from 0.10.6 to 0.11.0.
- [Commits](https://github.com/RustCrypto/hashes/compare/sha1-v0.10.6...sha1-v0.11.0)

---
updated-dependencies:
- dependency-name: sha1
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

We now need a dedicated crate (base16ct) for the conversion to
hexadecimal (Base16), since the trait `LowerHex` isn't implemented
anymore for `hybrid_array`.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Michael Weiss <michael.weiss@bull.com>
---
 Cargo.lock            | 65 ++++++++++++++++++++++++++++++++++++++-----
 Cargo.toml            |  3 +-
 src/package/source.rs |  5 +++-
 3 files changed, 64 insertions(+), 9 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 42018109..c7b7052a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -143,6 +143,12 @@ dependencies = [
  "windows-link 0.2.1",
 ]
 
+[[package]]
+name = "base16ct"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd307490d624467aa6f74b0eabb77633d1f758a7b25f12bceb0b22e08d9726f6"
+
 [[package]]
 name = "base64"
 version = "0.13.1"
@@ -179,6 +185,15 @@ dependencies = [
  "generic-array",
 ]
 
+[[package]]
+name = "block-buffer"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdd35008169921d80bc60d3d0ab416eecb028c4cd653352907921d95084790be"
+dependencies = [
+ "hybrid-array",
+]
+
 [[package]]
 name = "bstr"
 version = "1.12.1"
@@ -203,6 +218,7 @@ dependencies = [
  "anyhow",
  "aquamarine",
  "ascii_table",
+ "base16ct",
  "bytesize",
  "chrono",
  "clap",
@@ -437,6 +453,12 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
 [[package]]
 name = "core-foundation"
 version = "0.9.4"
@@ -525,6 +547,15 @@ dependencies = [
  "typenum",
 ]
 
+[[package]]
+name = "crypto-common"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77727bb15fa921304124b128af125e7e3b968275d1b108b379190264f4423710"
+dependencies = [
+ "hybrid-array",
+]
+
 [[package]]
 name = "csv"
 version = "1.4.0"
@@ -725,8 +756,19 @@ version = "0.10.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
 dependencies = [
- "block-buffer",
- "crypto-common",
+ "block-buffer 0.10.4",
+ "crypto-common 0.1.7",
+]
+
+[[package]]
+name = "digest"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4850db49bf08e663084f7fb5c87d202ef91a3907271aff24a94eb97ff039153c"
+dependencies = [
+ "block-buffer 0.12.0",
+ "const-oid",
+ "crypto-common 0.2.1",
 ]
 
 [[package]]
@@ -1221,6 +1263,15 @@ version = "2.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "135b12329e5e3ce057a9f972339ea52bc954fe1e9358ef27f95e89716fbc5424"
 
+[[package]]
+name = "hybrid-array"
+version = "0.4.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3944cf8cf766b40e2a1a333ee5e9b563f854d5fa49d6a8ca2764e97c6eddb214"
+dependencies = [
+ "typenum",
+]
+
 [[package]]
 name = "hyper"
 version = "0.14.32"
@@ -2627,13 +2678,13 @@ dependencies = [
 
 [[package]]
 name = "sha1"
-version = "0.10.6"
+version = "0.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+checksum = "aacc4cc499359472b4abe1bf11d0b12e688af9a805fa5e3016f9a386dc2d0214"
 dependencies = [
  "cfg-if",
- "cpufeatures 0.2.17",
- "digest",
+ "cpufeatures 0.3.0",
+ "digest 0.11.2",
 ]
 
 [[package]]
@@ -2644,7 +2695,7 @@ checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
 dependencies = [
  "cfg-if",
  "cpufeatures 0.2.17",
- "digest",
+ "digest 0.10.7",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index ff772f75..ff25be58 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -27,6 +27,7 @@ maintenance = { status = "passively-maintained" }
 anyhow = "1"
 aquamarine = "0.6"
 ascii_table = { version = "5", features = ["auto_table_width", "color_codes", "wide_characters"] }
+base16ct = "1"
 bytesize = "2"
 chrono = "0.4"
 clap = { version = "4", features = ["cargo"] }
@@ -63,7 +64,7 @@ rustversion = "1"
 semver = "1"
 serde = "1"
 serde_json = "1"
-sha1 = "0.10"
+sha1 = "0.11"
 sha2 = "0.10"
 shiplift = "0.7"
 syntect = "5"
diff --git a/src/package/source.rs b/src/package/source.rs
index 3cff5617..e62185b7 100644
--- a/src/package/source.rs
+++ b/src/package/source.rs
@@ -129,7 +129,10 @@ impl HashType {
 
                     m.update(&buffer[..count]);
                 }
-                Ok(HashValue(format!("{:x}", m.finalize())))
+                Ok(HashValue(format!(
+                    "{:x}",
+                    base16ct::HexDisplay(&m.finalize())
+                )))
             }
             HashType::Sha256 => {
                 use sha2::Digest;