Update crypto and PIR dependencies

[p0mvn]

Summary

• update voting-crypto-deps to 0.1.2 and voting circuits to 0.10.3
• update imt-tree to 0.4.0, pir-types to 0.5.0, and pir-client to 0.6.0
• route field, group, and cryptographic RNG traits through the selected upstream or Zakura backend
• prepare vote-commitment-tree 0.5.2 and vote-commitment-tree-client 0.7.2

Motivation / Why

The new dependency releases provide coherent selectable crypto families. Consumers must import traits and randomness through that selected family to avoid mixed ff, group, and rand_core versions.

Tests

• cargo check --workspace
• cargo test --workspace --locked
• supporting tree crates checked with the Zakura backend
• full zcash_voting Zakura build remains blocked by incompatible published zakura-pczt and zakura-client-backend releases

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	zcash_client_backend@​0.24.0-rc.7 ⏵ 0.24.0	-11
	thiserror@​2.0.19 ⏵ 2.0.20
	blake2b_simd@​1.0.4 ⏵ 1.0.5
	clap@​4.6.5 ⏵ 4.6.6
	http-body-util@​0.1.4 ⏵ 0.1.5
	imt-tree@​0.3.0 ⏵ 0.4.0
	pczt@​0.9.2 ⏵ 0.9.3
	pir-client@​0.5.0 ⏵ 0.6.0
	pir-types@​0.4.0 ⏵ 0.5.0
	uuid@​1.24.0 ⏵ 1.24.1
	voting-circuits@​0.10.2 ⏵ 0.10.3
	voting-crypto-deps@​0.1.1 ⏵ 0.1.2
	zakura-keys@​1.0.0-rc.1 ⏵ 1.0.0-rc.3
	zakura-orchard@​1.0.0-rc.1 ⏵ 1.0.0-rc.3
	zakura-primitives@​1.0.0-rc.1 ⏵ 1.0.0-rc.3
	zcash_client_sqlite@​0.22.0-rc.7 ⏵ 0.22.0
	zcash_primitives@​0.30.0 ⏵ 0.30.1
	zcash_protocol@​0.10.4 ⏵ 0.10.5

View full report