From fe19428aed653f4a1fab8fb876e21aeb46207b84 Mon Sep 17 00:00:00 2001
From: "cachekit-renovate-bot[bot]"
 <287198435+cachekit-renovate-bot[bot]@users.noreply.github.com>
Date: Sat, 26 Sep 2026 17:10:50 +0000
Subject: [PATCH] chore(deps): update all non-major dependencies

---
 Cargo.toml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/Cargo.toml b/Cargo.toml
index 1362ba8..7386846 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -30,7 +30,7 @@ serde_bytes = "0.11"
 rmp-serde = { version = "1.3", optional = true }
 
 # High-performance LZ4 compression (optional)
-lz4_flex = { version = "0.12", features = ["frame", "std"], optional = true }
+lz4_flex = { version = "0.14", features = ["frame", "std"], optional = true }
 
 # Fast non-cryptographic hashing for data integrity (optional)
 # xxHash3-64: ~36 GB/s, sufficient for corruption detection (security via AES-GCM auth tag)
@@ -40,17 +40,17 @@ xxhash-rust = { version = "0.8", features = ["xxh3"], optional = true }
 # Uses HKDF-SHA256 for key derivation (NOT Blake2b - that's only for Python cache keys)
 # ring is native-only (see [target.'cfg(not(target_arch = "wasm32"))'.dependencies])
 zeroize = { version = "1.8", features = ["derive"], optional = true }
-hkdf = { version = "0.12", optional = true }
-sha2 = { version = "0.10", optional = true }
-hmac = { version = "0.12", optional = true }
+hkdf = { version = "0.13", optional = true }
+sha2 = { version = "0.11", optional = true }
+hmac = { version = "0.13", optional = true }
 generic-array = { version = "0.14", optional = true }
 
 # wasm32 RNG: getrandom with JS feature for wasm32-unknown-unknown targets
-getrandom = { version = "0.2", features = ["js"], optional = true }
+getrandom = { version = "0.4", features = ["js"], optional = true }
 
 # RustCrypto: pure-Rust AES-256-GCM for wasm32 targets (ring requires clang + C asm)
-aes-gcm = { version = "0.10", features = ["zeroize"], optional = true }
-aes = { version = "0.8", features = ["zeroize"], optional = true }
+aes-gcm = { version = "0.11", features = ["zeroize"], optional = true }
+aes = { version = "0.9", features = ["zeroize"], optional = true }
 
 # Byte utilities
 bytes = "1.5"