From 963fee2795c4f1a937906dbc679d6e5ec0574fba Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 13 Sep 2026 15:28:43 +0000
Subject: [PATCH] deps(rust/screening-engine): bump sha2 in
 /services/screening-engine

Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0.
- [Commits](https://github.com/RustCrypto/hashes/compare/sha2-v0.10.9...sha2-v0.11.0)

---
updated-dependencies:
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 services/screening-engine/Cargo.lock | 28 ++++------------------------
 services/screening-engine/Cargo.toml |  2 +-
 2 files changed, 5 insertions(+), 25 deletions(-)

diff --git a/services/screening-engine/Cargo.lock b/services/screening-engine/Cargo.lock
index bae68aeb..5718aafb 100644
--- a/services/screening-engine/Cargo.lock
+++ b/services/screening-engine/Cargo.lock
@@ -220,7 +220,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "65c35e4b699c7e15ccbe7ee35c005e4fc0a278d22238a2857e6ce2dadeda1b06"
 dependencies = [
  "cfg-if",
- "cpufeatures 0.3.1",
+ "cpufeatures",
  "rand_core",
 ]
 
@@ -279,15 +279,6 @@ version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
-[[package]]
-name = "cpufeatures"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
-dependencies = [
- "libc",
-]
-
 [[package]]
 name = "cpufeatures"
 version = "0.3.1"
@@ -1157,7 +1148,7 @@ dependencies = [
  "md-5",
  "memchr",
  "rand",
- "sha2 0.11.0",
+ "sha2",
  "stringprep",
 ]
 
@@ -1584,7 +1575,7 @@ dependencies = [
  "reqwest",
  "serde",
  "serde_json",
- "sha2 0.10.9",
+ "sha2",
  "thiserror 1.0.69",
  "tokio",
  "tokio-postgres",
@@ -1668,17 +1659,6 @@ version = "1.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bbfa15b3dddfee50a0fff136974b3e1bde555604ba463834a7eb7deb6417705d"
 
-[[package]]
-name = "sha2"
-version = "0.10.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
-dependencies = [
- "cfg-if",
- "cpufeatures 0.2.17",
- "digest 0.10.7",
-]
-
 [[package]]
 name = "sha2"
 version = "0.11.0"
@@ -1686,7 +1666,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "446ba717509524cb3f22f17ecc096f10f4822d76ab5c0b9822c5f9c284e825f4"
 dependencies = [
  "cfg-if",
- "cpufeatures 0.3.1",
+ "cpufeatures",
  "digest 0.11.3",
 ]
 
diff --git a/services/screening-engine/Cargo.toml b/services/screening-engine/Cargo.toml
index 1cc8e57c..9a2ace03 100644
--- a/services/screening-engine/Cargo.toml
+++ b/services/screening-engine/Cargo.toml
@@ -26,7 +26,7 @@ anyhow          = "1"
 prometheus      = { version = "0.14", features = ["process"] }
 base64          = "0.22"
 hmac            = "0.12"
-sha2            = "0.10"
+sha2            = "0.11"
 hex             = "0.4"
 
 # PostgreSQL async client — for persisting screening results