From ead0098e1e4bcbe37d7d0cfe6657a86fa693d923 Mon Sep 17 00:00:00 2001
From: Ray Walker <ray@27b.io>
Date: Fri, 30 Oct 2026 10:06:10 +1100
Subject: [PATCH] test(store): build the frozen reader's nonce with TryFrom

aes-gcm 0.11 deprecates Nonce::from_slice in favour of TryFrom, and CI
denies warnings, so clippy failed on the test-only AES-GCM reader.
---
 src/store.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/store.rs b/src/store.rs
index c4cecbc..1f4c2ed 100644
--- a/src/store.rs
+++ b/src/store.rs
@@ -309,7 +309,7 @@ mod tests {
     /// to their writer cannot carry this reader along with it.
     mod frozen {
         use aes_gcm::aead::{Aead, KeyInit, Payload};
-        use aes_gcm::{Aes256Gcm, Nonce};
+        use aes_gcm::Aes256Gcm;
         use hkdf::Hkdf;
         use sha2::Sha256;
 
@@ -360,7 +360,7 @@ mod tests {
             Aes256Gcm::new_from_slice(&key(master_key, tenant))
                 .unwrap()
                 .decrypt(
-                    Nonce::from_slice(nonce),
+                    nonce.try_into().ok()?,
                     Payload {
                         msg: sealed,
                         aad: &aad,