From 03b53dd426a1659dc0703aee175c10d75a1095d2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 23 Aug 2026 10:30:06 +0000
Subject: [PATCH] deps: bump sha3 from 0.10.9 to 0.12.0

Bumps [sha3](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.12.0.
- [Commits](https://github.com/RustCrypto/hashes/compare/sha3-v0.10.9...sha3-v0.12.0)

---
updated-dependencies:
- dependency-name: sha3
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                       | 35 ++++++++++++++++++++++++++++----
 Cargo.toml                       |  2 +-
 crates/tinywallet-bus/Cargo.toml |  2 +-
 3 files changed, 33 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 029ab49..6a13dc6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -282,7 +282,7 @@ dependencies = [
  "ripemd 0.1.3",
  "serde",
  "sha2 0.10.9",
- "sha3",
+ "sha3 0.10.9",
  "thiserror 1.0.69",
 ]
 
@@ -806,6 +806,16 @@ dependencies = [
  "cpufeatures 0.2.17",
 ]
 
+[[package]]
+name = "keccak"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8f198d1db720e4940b5a493201d199d9f24f568f8f746bd13706243a2f71598"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+]
+
 [[package]]
 name = "libc"
 version = "0.2.189"
@@ -1225,7 +1235,18 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "77fd7028345d415a4034cf8777cd4f8ab1851274233b45f84e3d955502d93874"
 dependencies = [
  "digest 0.10.7",
- "keccak",
+ "keccak 0.1.6",
+]
+
+[[package]]
+name = "sha3"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
+dependencies = [
+ "digest 0.11.3",
+ "keccak 0.2.2",
+ "sponge-cursor",
 ]
 
 [[package]]
@@ -1266,6 +1287,12 @@ dependencies = [
  "der",
 ]
 
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
 [[package]]
 name = "subtle"
 version = "2.6.1"
@@ -1434,7 +1461,7 @@ dependencies = [
  "serde",
  "serde_json",
  "sha2 0.11.0",
- "sha3",
+ "sha3 0.12.0",
  "thiserror 2.0.20",
  "tinywallet-bus",
  "tokio",
@@ -1453,7 +1480,7 @@ dependencies = [
  "serde",
  "serde_json",
  "sha2 0.11.0",
- "sha3",
+ "sha3 0.12.0",
  "thiserror 2.0.20",
  "tokio",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 26a81ad..a8fa3aa 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -84,7 +84,7 @@ coins-bip32 = { version = "0.13", optional = true }
 # tinyhumansai/openhuman: +3 packages for no functional change.
 #
 # Revisit when `coins-bip32` moves, and only then.
-sha3 = { version = "0.10", optional = true }
+sha3 = { version = "0.12", optional = true }
 # Async trait methods for the `client` queries, which take `&dyn Transport`.
 async-trait = { version = "0.1", optional = true }
 # BIP-39 mnemonic -> seed. Pinned to the same 0.8 line OpenHuman used before
diff --git a/crates/tinywallet-bus/Cargo.toml b/crates/tinywallet-bus/Cargo.toml
index 0779216..20e3b4e 100644
--- a/crates/tinywallet-bus/Cargo.toml
+++ b/crates/tinywallet-bus/Cargo.toml
@@ -41,7 +41,7 @@ sha2 = { version = "0.11", optional = true }
 # crate's `coins-bip32` line depends on `sha3` 0.10 and is not going to move, so
 # 0.10 is already in the graph of any consumer that also takes the root crate
 # with `key`. Asking for 0.12 here does not replace it, it ADDS a second copy.
-sha3 = { version = "0.10", optional = true }
+sha3 = { version = "0.12", optional = true }
 # Async trait methods for the `Transport` seam in `src/rpc/`. Rust cannot yet
 # express an object-safe async trait natively, and `Transport` must be
 # `dyn`-compatible because chain code takes `&dyn Transport`.