Merge #2307

2307: Bump hkdf from 0.9.0 to 0.10.0 r=tomtau a=dependabot-preview[bot]

Bumps [hkdf](https://github.com/RustCrypto/KDFs) from 0.9.0 to 0.10.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/RustCrypto/KDFs/commit/e413e0a41087f78db73901c6553e502b71885d6b"><code>e413e0a</code></a> hkdf v0.10.0 (<a href="https://github-redirect.dependabot.com/RustCrypto/KDFs/issues/44">#44</a>)</li>
<li><a href="https://github.com/RustCrypto/KDFs/commit/21f5b0cc9c1f34d049e40e4fe5776d61e731f877"><code>21f5b0c</code></a> hkdf v0.10.0-alpha.0 (<a href="https://github-redirect.dependabot.com/RustCrypto/KDFs/issues/41">#41</a>)</li>
<li><a href="https://github.com/RustCrypto/KDFs/commit/14f5067391baeab471c7de3d712c16ec507cda68"><code>14f5067</code></a> README.md(s): update badges (<a href="https://github-redirect.dependabot.com/RustCrypto/KDFs/issues/43">#43</a>)</li>
<li><a href="https://github.com/RustCrypto/KDFs/commit/3b20ca045665de9a5ecfbb8e6a4216b45f8ee21f"><code>3b20ca0</code></a> Migrate to GitHub Actions (<a href="https://github-redirect.dependabot.com/RustCrypto/KDFs/issues/42">#42</a>)</li>
<li><a href="https://github.com/RustCrypto/KDFs/commit/8729e573d5cb5783c509eab6e8f1302c6c8bd70a"><code>8729e57</code></a> Bump <code>hmac</code> dependency to v0.10 (<a href="https://github-redirect.dependabot.com/RustCrypto/KDFs/issues/40">#40</a>)</li>
<li><a href="https://github.com/RustCrypto/KDFs/commit/f9297c5b719ace9ff630b3f995f1de0544683f2a"><code>f9297c5</code></a> (cargo-release) start next development iteration 0.9.1-alpha.0</li>
<li>See full diff in <a href="https://github.com/RustCrypto/KDFs/compare/hkdf-v0.9.0...hkdf-v0.10.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=hkdf&package-manager=cargo&previous-version=0.9.0&new-version=0.10.0)](https://dependabot.com/compatibility-score/?dependency-name=hkdf&package-manager=cargo&previous-version=0.9.0&new-version=0.10.0)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)



</details>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

chain-tx-enclave-next/mls/Cargo.toml

@@ -14,7 +14,7 @@ x509-parser = "0.8.2"
 nom = "5.1"
 secrecy = "0.7.0"
 sha2 = "0.9"
-hkdf = { version = "0.9", features = ["std"] }
+hkdf = { version = "0.10", features = ["std"] }
 hpke = { version = "0.3.1", default-features = false, features = ["p256", "std"] }
 aead = { version = "0.3", features = ["std"] }
 rand = "0.7"