Bump keccak from 0.1.4 to 0.1.6 in /TicTacToe

[dependabot]

Bumps keccak from 0.1.4 to 0.1.6.

Commits

• a8936d9 keccak v0.1.6
• 40c50c1 keccak v0.1.5 (#69)
• 2dc13bf keccak: enable asm backend for p1600 (#68)
• a3a4e01 Revert "Update Cargo.lock" (#67)
• 3a9a29e Update Cargo.lock
• 9e4f6bc keccak: don't test simd feature in minimal-versions workflow (#66)
• 329d4cd Replace cross tests with MIRI (#63)
• 48cc4ac build(deps): bump actions/checkout from 3 to 4 (#61)
• 651a34e keccak: replace CI tests on MIPS with PPC32 (#62)
• 4730c6f benches: remove criterion deps workaround (#60)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
sway-applications	Error		Feb 20, 2026 11:05am

[cursor]

PR Summary

Low Risk
Lockfile-only dependency update; risk is limited to potential behavioral/performance changes in keccak affecting hashing outputs or compatibility, but no application code changes are included.

Overview
Updates TicTacToe/Cargo.lock to Cargo lockfile v4 and bumps the keccak crate from 0.1.4 to 0.1.6 (checksum updated accordingly), affecting transitive consumers like sha3.

^{Written by Cursor Bugbot for commit 4256b51. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

[cursor]

Unintended Cargo.lock format version bump to v4

Low Severity

The Cargo.lock format version was changed from 3 to 4 as an unintended side effect of this dependency bump. Cargo.lock v4 causes a hard parse failure on Rust versions older than 1.78 ("this version of Cargo does not understand this lock file"). While the project's CI uses Rust 1.78.0, which does support v4, this format change is outside the scope of a keccak version bump and may break builds for contributors or tooling on older Rust versions.