Merge pull request #9 from pmaxhogan/dependabot/cargo/md-5-0.11.0

build(deps): Bump md-5 from 0.10.6 to 0.11.0

Author: pmaxhogan

Cargo.lock

@@ -37,7 +37,7 @@ hex.workspace = true
 # `with_md5_mismatch_after` fault injector tampers with), and for the M4
 # Google store's md5-verify-on-upload (SPEC s8).
 parking_lot = "0.12"
-md-5 = "0.10"
+md-5 = "0.11"
 
 [dev-dependencies]
 # The retry-backoff unit tests use `#[tokio::test(start_paused = true)]` to
@@ -51,7 +51,7 @@ bytes.workspace = true
 # The md5_mismatch contract test recomputes the real md5 of its payload
 # to verify the fault injector returns a different value (and that
 # re-uploading clears the latch).
-md-5 = "0.10"
+md-5 = "0.11"
 # M4 token_store unit tests bind keyring to an in-memory mock store so they
 # do not touch a real OS keychain in CI (the implementer wires the mock via
 # keyring 4.x's test store API).