Bump sha-1 to 0.9.

[jakubadamw]

No description provided.

[Dushistov]

It would be nice if this would be merged, because of without this PR,
I need two sha1 for my project, one sha-1 v0.9.1 and sha-1 v0.8.2 .

[Razican]

It seems that the only failing check is a small coverage regression, unrelated to the actual change.

[CAD97]

Unfortunately @dragostis hasn't been around for a good while, so the project is pretty much stuck on hiatus until they return.

In the mean time, you can use a [patch] to use a patched version of the library if this is a significant pain point for you.

I forget if I got bors permission at any point, but I'll try:

bors: r+

[CAD97]

Oh wait I can do it manually as well

Still, I can't publish anything without @dragostis.

(@dragostis, if you're reading this, I'm willing to take over publishing maintenance and shepherd community support if you can't right now.)