Bug 15163370 - Part 1: Dedupe sha2 and related dependencies r=froydnj

This also removes the lalrpop files from the .git/hgignore as that
breaks the build since lalrpop now includes lrgrammar in the published
crate and that file needs to be vendored

--HG--
extra : histedit_source : e31c07645a87a11b19a0b7e44f2a48d791b5f396

.gitignore

@@ -155,5 +155,3 @@ lextab.py
 !.vscode/extensions.json
 !.vscode/tasks.json
 
-# Ignore file generated by lalrpop at build time.
-third_party/rust/lalrpop/src/parser/lrgrammar.rs

.hgignore

@@ -186,8 +186,5 @@ tps_result\.json
 ^testing/raptor/raptor/tests/.*.json
 ^testing/raptor/webext/raptor/auto_gen_test_config.js
 
-# Ignore file generated by lalrpop at build time.
-^third_party/rust/lalrpop/src/parser/lrgrammar.rs
-
 # Ignore the build directories of WebRender standalone builds.
 gfx/wr/target/

security/manager/ssl/cert_storage/Cargo.toml

@@ -11,7 +11,7 @@ moz_task = { path = "../../../../xpcom/rust/moz_task" }
 nserror = { path = "../../../../xpcom/rust/nserror" }
 nsstring = { path = "../../../../xpcom/rust/nsstring" }
 rkv = "^0.9"
-sha2 = "^0.7"
+sha2 = "^0.8"
 style = { path = "../../../../servo/components/style" }
 thin-vec = { version = "0.1.0", features = ["gecko-ffi"] }
 time = "0.1"