From a3e6090dbe26c2bd0b4122975c68ac87e25dc3f2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 7 Sep 2026 14:15:29 +0000
Subject: [PATCH 1/2] deps(backend)(deps): bump the rust-dependencies group
 across 1 directory with 3 updates

Bumps the rust-dependencies group with 3 updates in the /src/backend directory: [tower-http](https://github.com/tower-rs/tower-http), [uuid](https://github.com/uuid-rs/uuid) and [blake2](https://github.com/RustCrypto/hashes).


Updates `tower-http` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](https://github.com/tower-rs/tower-http/compare/tower-http-0.7.0...tower-http-0.7.1)

Updates `uuid` from 1.24.1 to 1.26.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.24.1...v1.26.0)

Updates `blake2` from 0.10.6 to 0.11.0
- [Commits](https://github.com/RustCrypto/hashes/compare/blake2-v0.10.6...blake2-v0.11.0)

---
updated-dependencies:
- dependency-name: blake2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: uuid
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 src/backend/Cargo.lock | 32 ++++++++++++++++++++++++--------
 src/backend/Cargo.toml |  2 +-
 2 files changed, 25 insertions(+), 9 deletions(-)

diff --git a/src/backend/Cargo.lock b/src/backend/Cargo.lock
index 070db95..7909ac5 100644
--- a/src/backend/Cargo.lock
+++ b/src/backend/Cargo.lock
@@ -232,11 +232,11 @@ dependencies = [
 
 [[package]]
 name = "blake2"
-version = "0.10.6"
+version = "0.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "46502ad458c9a52b69d4d4d32775c788b7a1b85e8bc9d482d92250fc0e3f8efe"
+checksum = "5b5d4d889834ee8ecfc0f8426ad30faf7cdcb10f741a8e6d7224d95325479f6f"
 dependencies = [
- "digest 0.10.7",
+ "digest 0.11.2",
 ]
 
 [[package]]
@@ -359,6 +359,12 @@ dependencies = [
  "cc",
 ]
 
+[[package]]
+name = "cmov"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c9ea0ac24bc397ab3c98583a3c9ba74fa56b09a4449bbe172b9b1ddb016027a"
+
 [[package]]
 name = "combine"
 version = "4.6.7"
@@ -504,6 +510,15 @@ dependencies = [
  "hybrid-array",
 ]
 
+[[package]]
+name = "ctutils"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e"
+dependencies = [
+ "cmov",
+]
+
 [[package]]
 name = "curve25519-dalek"
 version = "4.1.3"
@@ -613,6 +628,7 @@ dependencies = [
  "block-buffer 0.12.0",
  "const-oid 0.10.2",
  "crypto-common 0.2.1",
+ "ctutils",
 ]
 
 [[package]]
@@ -3315,9 +3331,9 @@ dependencies = [
 
 [[package]]
 name = "tower-http"
-version = "0.7.0"
+version = "0.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b11f75e912b0c2be01b63d8cf8057b8c3f97cf34abb3d431a3a4c8675498e233"
+checksum = "08a05a66a4fdd61cbbe0a1d755ffe0ca6aba159dd4820936a0ff8a8278245b9c"
 dependencies = [
  "bitflags",
  "bytes",
@@ -3527,9 +3543,9 @@ dependencies = [
 
 [[package]]
 name = "uuid"
-version = "1.24.1"
+version = "1.26.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2cefc03fd367c0c6d4305de1b312cf00248c4114f4a0418ce6a6af769e3b0bd9"
+checksum = "b5772d71c9be8a8a6ac2117d949c5b224c1b72241bb611d9a3012edcf8af7812"
 dependencies = [
  "getrandom 0.4.1",
  "js-sys",
@@ -3579,7 +3595,7 @@ dependencies = [
  "sqlx",
  "subtle",
  "tokio",
- "tower-http 0.7.0",
+ "tower-http 0.7.1",
  "tower_governor",
  "urlencoding",
  "utoipa",
diff --git a/src/backend/Cargo.toml b/src/backend/Cargo.toml
index 850578a..986ad69 100644
--- a/src/backend/Cargo.toml
+++ b/src/backend/Cargo.toml
@@ -29,7 +29,7 @@ urlencoding = "2.1.3"
 uuid = { version = "1.23.2", features = ["v4", "serde"] }
 axum-extra = { version = "0.12.6", features = ["typed-header"] }
 bcs = "0.2.1"
-blake2 = "0.10.6"
+blake2 = "0.11.0"
 ed25519-dalek = "3.0.0"
 k256 = "0.13.4"
 p256 = "0.13.2"

From b90dbaeb6b28dfda88bf63165686a499a21d4dbc Mon Sep 17 00:00:00 2001
From: Scetrov <git@scetrov.live>
Date: Mon, 7 Sep 2026 15:19:22 +0100
Subject: [PATCH 2/2] fix(backend): remove unused sha2 import

Co-authored-by: gpt-5.6-terra
Co-authored-by: Pi Coding Agent
---
 src/backend/src/sui_verify.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/backend/src/sui_verify.rs b/src/backend/src/sui_verify.rs
index 32b927b..a8a279e 100644
--- a/src/backend/src/sui_verify.rs
+++ b/src/backend/src/sui_verify.rs
@@ -1,7 +1,7 @@
 use base64::{engine::general_purpose::STANDARD, Engine as _};
 use blake2::{digest::consts::U32, Blake2b, Digest};
 use serde::Serialize;
-use sha2::{Digest as Sha2Digest, Sha256};
+use sha2::Sha256;
 use signature2::hazmat::PrehashVerifier;
 
 /// Errors returned by the local Sui personal-message verifier.