Switch from cryptonite to crypton, dropping support for GHC 8.6

.github/workflows/haskell.yml

@@ -5,15 +5,16 @@ on: [push, pull_request]
 jobs:
   build:
     strategy:
+      fail-fast: false
       matrix:
-        ghc: ['8.6.5', '8.8.4', '9.8.1', '9.10.1', '9.12.1']
+        ghc: ['8.8', '8.10', '9.0', '9.2', '9.4', '9.6', '9.8', '9.10', '9.12']
         os: ['ubuntu-latest', 'macos-latest']
     runs-on: ${{ matrix.os }}
 
     name: GHC ${{ matrix.ghc }} on ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v2
-    - uses: haskell/actions/setup@v2
+    - uses: actions/checkout@v4
+    - uses: haskell-actions/setup@v2
       with:
         ghc-version: ${{ matrix.ghc }}
     - name: Cache

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Revision history for haveibeenpwned
 
+## Unreleased
+
+* Switch from cryptonite to crypton
+* Drop support for GHC 8.6
+
 ## 0.2.0.3
 
 * Support for GHC 9.12

haveibeenpwned.cabal

@@ -14,14 +14,14 @@ copyright:          2019 Obsidian Systems LLC
 category:           Web
 extra-source-files: CHANGELOG.md
                     README.md
-tested-with:        GHC ==8.6.5 || ==8.8.4  || ==9.8.1 || ==9.10.1 || ==9.12.1
+tested-with:        GHC ==8.8.4 || ==8.10.7 || ==9.0.2 || ==9.2.8 || ==9.4.8 || ==9.6.6 || ==9.8.4 || ==9.10.1 || ==9.12.1
 
 library
   exposed-modules:  HaveIBeenPwned
   build-depends:
     , base             >=4.11.0   && <4.22
     , bytestring       >=0.10     && <0.13
-    , cryptonite       >=0.24     && <0.31
+    , crypton          >=0.32     && <1.1
     , data-default     >=0.7.1    && <0.9
     , http-client      >=0.5.13.1 && <0.8
     , http-types       ^>=0.12.1

release.nix

@@ -1,8 +1,8 @@
 { pkgs ? import (builtins.fetchTarball {
-      name = "nixos-20.03_2020-11-18";
-      url = "https://github.com/nixos/nixpkgs/archive/f05c380a51daee53ac2edb0bac2fd5f1774e977a.tar.gz";
-      sha256 = "1xkgv4kvh2nii1kbxi0brjnb15scpzk8rkp7mzycgqh1lzfg23im";
+      name = "nixos-23.11_2024-07-09";
+      url = "https://github.com/nixos/nixpkgs/archive/205fd4226592cc83fd4c0885a3e4c9c400efabb5.tar.gz";
+      sha256 = "sha256:1f5d2g1p6nfwycpmrnnmc2xmcszp804adp16knjvdkj8nz36y1fg";
     }) {}
 }:
-let compilers = [ "ghc865" "ghc884" ];
-in map (c: pkgs.haskell.packages."${c}".callCabal2nix "haveibeenpwned" ./. {}) compilers
+let compilers = [ "ghc884" "ghc8107"];
+in pkgs.lib.genAttrs compilers (c: pkgs.haskell.packages."${c}".callCabal2nix "haveibeenpwned" ./. {})

src/HaveIBeenPwned.hs

@@ -13,7 +13,7 @@
 --   get some means for rejecting very weak or just leaked passwords.
 module HaveIBeenPwned where
 
-import "cryptonite" Crypto.Hash
+import Crypto.Hash
 import Control.Exception
 import Control.Monad.Logger
 import Control.Monad.Reader