fix(deps): update rust dependencies (non-major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
hmac	dev-dependencies	minor	0.12 → 0.13
hmac	dependencies	minor	0.12 → 0.13
insta (source)	dev-dependencies	minor	1.46.3 → 1.47.2
proptest (source)	dev-dependencies	minor	1.10.0 → 1.11.0
rand (source)	dependencies	minor	0.9 → 0.10
sha1	dependencies	minor	0.10 → 0.11
sha2	dev-dependencies	minor	0.10 → 0.11
sha2	dependencies	minor	0.10 → 0.11
tokio (source)	dev-dependencies	minor	1.50.0 → 1.51.0
tokio (source)	dependencies	minor	1.50.0 → 1.51.0

---

Release Notes

RustCrypto/MACs (hmac)

v0.13.0

Compare Source

mitsuhiko/insta (insta)

v1.47.2

Compare Source

• Restore Send + Sync on Settings, Redactions, and Redaction by
  reverting the Arc to Rc change from 1.47.0, which was semver-breaking.
  #​873 #​874
• Add Send + Sync bounds to Comparator trait for consistency with
  Arc-based storage. #​872
• Add compile-time assertion to prevent future auto-trait regressions.

v1.47.1

Compare Source

• Revert sorting of sequences in sort_maps. The change in 1.47.0 sorted all
  Seq values (including Vec), not just non-deterministic collections like
  HashSet, which was a breaking change. #​876

v1.47.0

Compare Source

• Add Comparator trait for customizing how snapshot values are compared. #​872 (@​dstu)
• Sort sequences in sort_maps to fix non-deterministic HashSet snapshots. #​876
• Improve TOML serialization error message for unsupported types, suggesting assert_json_snapshot! or assert_yaml_snapshot! as alternatives. #​880
• Remove unnecessary Send + Sync bounds from Redaction, allowing non-Send closures in dynamic redactions. #​874
• Don't use Arc in Settings unnecessarily. #​873 (@​dstu)
• Upgrade console to 0.16 and MSRV to 1.66. #​885
• Upgrade toml-edit to 0.25. #​882 (@​alexanderkjall)

proptest-rs/proptest (proptest)

v1.11.0

Compare Source

rust-random/rand (rand)

v0.10.0

Compare Source

Changes

• The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#​1642).
• Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#​1632)
• Use Edition 2024 and MSRV 1.85 (#​1653)
• Let Fill be implemented for element types, not sliceable types (#​1652)
• Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#​1665)
• Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#​1669)
• Remove fns SeedableRng::from_os_rng, try_from_os_rng (#​1674)
• Remove Clone support for StdRng, ReseedingRng (#​1677)
• Use postcard instead of bincode to test the serde feature (#​1693)
• Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#​1695)
• Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#​1697)
• Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#​1717)

Additions

• Add fns IndexedRandom::choose_iter, choose_weighted_iter (#​1632)
• Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#​1649)
• Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#​1659)
• Fn rand::make_rng() -> R where R: SeedableRng (#​1734)

Removals

• Removed ReseedingRng (#​1722)
• Removed unused feature "nightly" (#​1732)
• Removed feature small_rng (#​1732)

RustCrypto/hashes (sha1)

v0.11.0

Compare Source

tokio-rs/tokio (tokio)

v1.51.0: Tokio v1.51.0

Compare Source

1.51.0 (April 3rd, 2026)

Added

• net: implement get_peer_cred on Hurd (#​7989)
• runtime: add tokio::runtime::worker_index() (#​7921)
• runtime: add runtime name (#​7924)
• runtime: stabilize LocalRuntime (#​7557)
• wasm: add wasm32-wasip2 networking support (#​7933)

Changed

• runtime: steal tasks from the LIFO slot (#​7431)

Fixed

• docs: do not show "Available on non-loom only." doc label (#​7977)
• macros: improve overall macro hygiene (#​7997)
• sync: fix notify_waiters priority in Notify (#​7996)
• sync: fix panic in Chan::recv_many when called with non-empty vector on closed channel (#​7991)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[recuu-pfeg]

sha1/sha2 0.11 has breaking API changes in HMAC (Mac trait). Needs code updates in src/verify.rs. Will address after v0.6.0 release.