fix(deps): update rust crate sha2 to 0.11.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
sha2	dependencies	minor	0.10.9 → 0.11.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

RustCrypto/hashes (sha2)

v0.11.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[patrickleet]

Maintainership note (2026-09-12)

CI: quality / quality fails (expected — pin-only bump).

Usage impact: sha2::{Digest, Sha256} is used for content hashing in:

• src/commands/provider/install.rs
• src/commands/config/install.rs
• src/commands/local/workbench/cluster_gitops.rs

Breakage: sha2 0.11 / digest 0.11 returns hybrid_array::Array, which no longer implements LowerHex, so format!("{:x}", hasher.finalize()) does not compile.

Adoption needed: replace with an explicit lower-hex encoder, e.g.

fn hex_encode_lower(bytes: impl AsRef<[u8]>) -> String {
    const HEX: &[u8; 16] = b"0123456789abcdef";
    let bytes = bytes.as_ref();
    let mut out = String::with_capacity(bytes.len() * 2);
    for &b in bytes {
        out.push(HEX[(b >> 4) as usize] as char);
        out.push(HEX[(b & 0xf) as usize] as char);
    }
    out
}
// then: let hex = hex_encode_lower(hasher.finalize());

CloudAgent unavailable on current plan; follow-up adoption PR not opened yet (branch fix/adopt-sha2-0.11 prepared from this Renovate branch). Do not merge until adoption lands.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: f4bf3322-ba28-44d5-8295-6ff92fd4a138

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}