From c334a6f34bdf665e4c3cad73f5a9086a4c48cb2b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 00:54:31 +0000
Subject: [PATCH] Bump password-hash from 0.5.0 to 0.6.1

Bumps [password-hash](https://github.com/RustCrypto/traits) from 0.5.0 to 0.6.1.
- [Commits](https://github.com/RustCrypto/traits/compare/password-hash-v0.5.0...password-hash-v0.6.1)

---
updated-dependencies:
- dependency-name: password-hash
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                       | 40 ++++++++++++++++++++++++++++++--
 backend/libs/lib_auth/Cargo.toml |  2 +-
 2 files changed, 39 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 68fc2fc..5d96a45 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -76,7 +76,7 @@ dependencies = [
  "base64ct",
  "blake2",
  "cpufeatures",
- "password-hash",
+ "password-hash 0.5.0",
 ]
 
 [[package]]
@@ -412,6 +412,12 @@ version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
 
+[[package]]
+name = "cmov"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c9ea0ac24bc397ab3c98583a3c9ba74fa56b09a4449bbe172b9b1ddb016027a"
+
 [[package]]
 name = "colorchoice"
 version = "1.0.5"
@@ -520,6 +526,15 @@ dependencies = [
  "memchr",
 ]
 
+[[package]]
+name = "ctutils"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e"
+dependencies = [
+ "cmov",
+]
+
 [[package]]
 name = "curve25519-dalek"
 version = "4.1.3"
@@ -1278,7 +1293,7 @@ version = "0.1.0"
 dependencies = [
  "argon2",
  "jsonwebtoken",
- "password-hash",
+ "password-hash 0.6.1",
  "secrecy",
  "serde",
  "thiserror",
@@ -1657,6 +1672,16 @@ dependencies = [
  "subtle",
 ]
 
+[[package]]
+name = "password-hash"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aab41826031698d6ffcd9cff78ef56ef998e39dc7e5067cdfebe373842d4723b"
+dependencies = [
+ "getrandom 0.4.3",
+ "phc",
+]
+
 [[package]]
 name = "pathdiff"
 version = "0.2.3"
@@ -1742,6 +1767,17 @@ dependencies = [
  "indexmap",
 ]
 
+[[package]]
+name = "phc"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44dc769b75f93afdddd8c7fa12d685292ddeff1e66f7f0f3a234cf1818afe892"
+dependencies = [
+ "base64ct",
+ "ctutils",
+ "getrandom 0.4.3",
+]
+
 [[package]]
 name = "pin-project"
 version = "1.1.13"
diff --git a/backend/libs/lib_auth/Cargo.toml b/backend/libs/lib_auth/Cargo.toml
index cfe2098..38ffe79 100644
--- a/backend/libs/lib_auth/Cargo.toml
+++ b/backend/libs/lib_auth/Cargo.toml
@@ -24,7 +24,7 @@ uuid = { workspace = true }
 ## --- Library Dependencies
 argon2 = { version = "0.5.3" }
 jsonwebtoken = { version = "10.4.0", features = ["rust_crypto"] }
-password-hash = { version = "0.5.0", features = ["getrandom"] }
+password-hash = { version = "0.6.1", features = ["getrandom"] }
 
 [build-dependencies]