A GitHub repository uses GitHub Actions and stores access keys as encrypted secrets. You plan to update the secrets via the GitHub REST API. Which encryption library should you use to encrypt the secrets before including them in the API call?

GitHub's REST API for secrets encryption specifically requires the use of libsodium's sealedbox functionality. This ensures that the secrets are encrypted with the repository's public key, making them secure during transit and only decryptable by GitHub. CryptoNet is a .NET cryptography library, BouncyCastle is a general-purpose cryptographic library often used in Java and C, and hashlib is a Python module for hashing, not encryption. While these are valid cryptographic tools, they do not provide the specific encryption scheme (libsodium's sealedbox) mandated by GitHub for this API. Using any of these alternatives would result in an encryption format that GitHub's API would not recognize or be able to decrypt, leading to a failed API call.