From 24ce0522e5b851d12bf9b6c96ff28986ceb3d5cd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Mar 2026 23:17:34 +0000
Subject: [PATCH] build(deps): Bump hmac from 0.13.0-rc.5 to 0.13.0-rc.6

Bumps [hmac](https://github.com/RustCrypto/MACs) from 0.13.0-rc.5 to 0.13.0-rc.6.
- [Commits](https://github.com/RustCrypto/MACs/compare/hmac-v0.13.0-rc.5...hmac-v0.13.0-rc.6)

---
updated-dependencies:
- dependency-name: hmac
  dependency-version: 0.13.0-rc.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 28 ++++++++++++++--------------
 Cargo.toml |  2 +-
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index b966843..1ba5f30 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -102,9 +102,9 @@ dependencies = [
 
 [[package]]
 name = "block-buffer"
-version = "0.11.0"
+version = "0.12.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "96eb4cdd6cf1b31d671e9efe75c5d1ec614776856cefbe109ca373554a6d514f"
+checksum = "cdd35008169921d80bc60d3d0ab416eecb028c4cd653352907921d95084790be"
 dependencies = [
  "hybrid-array",
 ]
@@ -286,11 +286,11 @@ dependencies = [
 
 [[package]]
 name = "digest"
-version = "0.11.0"
+version = "0.11.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8bf3682cdec91817be507e4aa104314898b95b84d74f3d43882210101a545b6"
+checksum = "4850db49bf08e663084f7fb5c87d202ef91a3907271aff24a94eb97ff039153c"
 dependencies = [
- "block-buffer 0.11.0",
+ "block-buffer 0.12.0",
  "const-oid 0.10.2",
  "crypto-common 0.2.0",
  "ctutils",
@@ -407,11 +407,11 @@ dependencies = [
 
 [[package]]
 name = "hmac"
-version = "0.13.0-rc.5"
+version = "0.13.0-rc.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ef451d73f36d8a3f93ad32c332ea01146c9650e1ec821a9b0e46c01277d544f8"
+checksum = "60017b071c523c9e5a55dd1253582bff6150c5e96a7e8511e419de1ab5ee97f9"
 dependencies = [
- "digest 0.11.0",
+ "digest 0.11.2",
 ]
 
 [[package]]
@@ -733,7 +733,7 @@ checksum = "7c5f3b1e2dc8aad28310d8410bd4d7e180eca65fca176c52ab00d364475d0024"
 dependencies = [
  "cfg-if",
  "cpufeatures",
- "digest 0.11.0",
+ "digest 0.11.2",
 ]
 
 [[package]]
@@ -742,7 +742,7 @@ version = "0.11.0-rc.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c5bfe7820113e633d8886e839aae78c1184b8d7011000db6bc7eb61e34f28350"
 dependencies = [
- "digest 0.11.0",
+ "digest 0.11.2",
  "keccak",
 ]
 
@@ -761,7 +761,7 @@ version = "3.0.0-rc.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f1880df446116126965eeec169136b2e0251dba37c6223bcc819569550edea3"
 dependencies = [
- "digest 0.11.0",
+ "digest 0.11.2",
  "rand_core 0.10.0",
 ]
 
@@ -772,8 +772,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "85f6f9b5317f06189671584c283b3f26339b89c97f21b5c50ae24aec397304a7"
 dependencies = [
  "const-oid 0.10.2",
- "digest 0.11.0",
- "hmac 0.13.0-rc.5",
+ "digest 0.11.2",
+ "hmac 0.13.0-rc.6",
  "hybrid-array",
  "pkcs8 0.11.0-rc.11",
  "rand_core 0.10.0",
@@ -899,7 +899,7 @@ dependencies = [
  "ed25519-dalek",
  "hex",
  "hkdf",
- "hmac 0.12.1",
+ "hmac 0.13.0-rc.6",
  "ml-dsa",
  "ml-kem",
  "rand_core 0.10.0",
diff --git a/Cargo.toml b/Cargo.toml
index acb2bc5..687f13e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -40,7 +40,7 @@ sha3    = "0.11.0-rc.7"  # SHA-3 hash family (same version tree as PQC crates)
 
 # Crypto utilities for PQC hybrid composition
 hkdf    = "0.12"                                    # HKDF key derivation for hybrid KEM
-hmac    = "0.12"                                    # HMAC (required by HKDF)
+hmac    = "0.13"                                    # HMAC (required by HKDF)
 subtle  = "2"                                       # Constant-time comparisons
 zeroize = { version = "1", features = ["derive"] }  # Zeroing sensitive memory