Switch from cryptonite to crypton, dropping support for GHC 8.6

.github/workflows/haskell.yml

@@ -6,14 +6,14 @@ jobs:
   build:
     strategy:
       matrix:
-        ghc: ['8.6.5', '8.8.4', '9.8.1', '9.10.1', '9.12.1']
+        ghc: ['8.8', '8.10', '9.0', '9.2', '9.4', '9.6', '9.8', '9.10', '9.12']
         os: ['ubuntu-latest', 'macos-latest']
     runs-on: ${{ matrix.os }}
 
     name: GHC ${{ matrix.ghc }} on ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v2
-    - uses: haskell/actions/setup@v2
+    - uses: actions/checkout@v4
+    - uses: haskell-actions/setup@v2
       with:
         ghc-version: ${{ matrix.ghc }}
     - name: Cache

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Revision history for haveibeenpwned
 
+## Unreleased
+
+* Switch from cryptonite to crypton
+* Drop support for GHC 8.6
+
 ## 0.2.0.3
 
 * Support for GHC 9.12

haveibeenpwned.cabal

@@ -14,14 +14,14 @@ copyright:          2019 Obsidian Systems LLC
 category:           Web
 extra-source-files: CHANGELOG.md
                     README.md
-tested-with:        GHC ==8.6.5 || ==8.8.4  || ==9.8.1 || ==9.10.1 || ==9.12.1
+tested-with:        GHC ==8.8.4 || ==8.10.7 || ==9.0.2 || ==9.2.8 || ==9.4.8 || ==9.6.6 || ==9.8.4 || ==9.10.1 || ==9.12.1
 
 library
   exposed-modules:  HaveIBeenPwned
   build-depends:
     , base             >=4.11.0   && <4.22
     , bytestring       >=0.10     && <0.13
-    , cryptonite       >=0.24     && <0.31
+    , crypton          >=0.32     && <1.1
     , data-default     >=0.7.1    && <0.9
     , http-client      >=0.5.13.1 && <0.8
     , http-types       ^>=0.12.1

src/HaveIBeenPwned.hs

@@ -13,7 +13,7 @@
 --   get some means for rejecting very weak or just leaked passwords.
 module HaveIBeenPwned where
 
-import "cryptonite" Crypto.Hash
+import Crypto.Hash
 import Control.Exception
 import Control.Monad.Logger
 import Control.Monad.Reader