deps: bump sha2 from 0.10.8 to 0.10.9

[dependabot]

Bumps sha2 from 0.10.8 to 0.10.9.

Commits

• 82c36a4 sha2: add soft-compact backend (backport of #686) (#687)
• c1e85ae ci: remove pre-1.56 jobs and other fixes (#688)
• a667dd9 skein: fix implementation for output sizes not multiple of 8 (#682)
• 62b6ff1 Fix blake2 and ascon-hash CI (#521)
• f3b657c Expose belt_compress to public (#520)
• 9f66cb8 md4: Optimize compress to improve hash performance (#519)
• 70a2b62 Add simpler code snippet to the documentation (#515)
• e3ab257 Update Cargo.lock
• c640781 ascon-hash: Add Zeroize feature (#480)
• cfda39f Update Cargo.lock
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-03-16 12:26 UTC · Rule: default
• 🚫 Left the queue — 2026-03-16 15:08 UTC · at ff4d2a913daa8fd007708e9936f1d67c2fffcb09

This pull request spent 2 hours 42 minutes 13 seconds in the queue, with no time running CI.

Reason

Pull request #6313 has been dequeued

The pull request rule doesn't match anymore

Hint

You should look at the reason for the failure and decide if the pull request needs to be fixed or if you want to requeue it.
If you do update this pull request, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio queue comment.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-03-23 10:20 UTC · Rule: default
• 🚫 Left the queue — 2026-03-23 11:09 UTC · at 902695864c4d3f456bc7b111f1d59264f5a90549

This pull request spent 48 minutes 56 seconds in the queue, with no time running CI.

Reason

The pull request can't be updated

merge conflict between base and head

Hint

You should update or rebase your pull request manually. If you do, this pull request will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue, you can requeue the pull request, without updating it, by posting a @mergifyio queue comment.

[dependabot]

Superseded by #6362.