FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump the crypto group across 1 directory with 5 updates by dependabot[bot] · Pull Request #7642 · RustPython/RustPython · GitHub

/ RustPython Public

Bump the crypto group across 1 directory with 5 updates - #7642

Closed
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/cargo/crypto-32dd7dbe16
ConversationCommits (3)ChecksFiles changed
Closed

Bump the crypto group across 1 directory with 5 updates#7642
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/cargo/crypto-32dd7dbe16

Conversation

dependabot Bot commented on behalf of github Apr 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the crypto group with 5 updates in the / directory:

Package From To
digest 0.10.7 0.11.2
md-5 0.10.6 0.11.0
sha2 0.10.9 0.11.0
sha3 0.10.8 0.11.0
hmac 0.12.1 0.13.0

Updates digest from 0.10.7 to 0.11.2

Commits

Updates md-5 from 0.10.6 to 0.11.0

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates sha3 from 0.10.8 to 0.11.0

Commits

Updates hmac from 0.12.1 to 0.13.0

Commits

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 20, 2026

fanninpm commented Apr 20, 2026

Copy link
Copy Markdown
Contributor

See also #7592, #7564.

dependabot Bot changed the title Bump the crypto group with 5 updates Bump the crypto group across 1 directory with 5 updates Apr 21, 2026
dependabot Bot force-pushed the dependabot/cargo/crypto-32dd7dbe16 branch 3 times, most recently from 7d3db74 to e390e50 Compare April 23, 2026 18:16

fanninpm commented Apr 23, 2026

Copy link
Copy Markdown
Contributor

@youknowone the CI failure seems simple enough for copilot to fix

youknowone commented Apr 23, 2026

Copy link
Copy Markdown
Member

@copilot fix ci failures

Copilot AI commented Apr 23, 2026

Copy link
Copy Markdown
Contributor

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving new_from_slice from the Mac trait to the KeyInit trait. Updated hashlib.rs to import KeyInit and use it for HMAC construction in both make_hmac! and do_hmac! macros.

Copilot AI requested a review from youknowone April 23, 2026 23:14

fanninpm commented Apr 23, 2026

Copy link
Copy Markdown
Contributor

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving new_from_slice from the Mac trait to the KeyInit trait. Updated hashlib.rs to import KeyInit and use it for HMAC construction in both make_hmac! and do_hmac! macros.

@copilot are you sure?

youknowone commented Apr 24, 2026

Copy link
Copy Markdown
Member

@copilot check ci failures again

Copilot AI commented Apr 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

@copilot check ci failures again

Fixed in a8d9249. The previous fix addressed hmac 0.13.0 (new_from_slice moved from Mac to KeyInit), but there was a second breaking change: digest 0.11.0 renamed the core_api module to block_api. Updated the BlockSizeUser import from digest::core_api::BlockSizeUser to digest::block_api::BlockSizeUser.

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving `new_fr...

You were right to question it — there was a second breaking change I missed. digest 0.11.0 also renamed the core_api module to block_api, so digest::core_api::BlockSizeUser needed updating too. Fixed in a8d9249.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • docs.rs
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

fanninpm commented Apr 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

TODO(me): add sha1 to the crypto group

NOTE: when dependabot closes this PR and opens another one with the edited group, I will need to cherry-pick df04e5c and a8d9249 onto the new PR.

fanninpm mentioned this pull request Apr 24, 2026
Merged

ShaharNaveh commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

dependabot Bot commented on behalf of github Apr 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

fanninpm commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

@ShaharNaveh

NOTE: when dependabot closes this PR and opens another one with the edited group, I will need to cherry-pick df04e5c and a8d9249 onto the new PR.

fanninpm commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bump the crypto group across 1 directory with 5 updates
e7cd1f0 
Bumps the crypto group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [digest](https://github.com/RustCrypto/traits) | `0.10.7` | `0.11.2` |
| [md-5](https://github.com/RustCrypto/hashes) | `0.10.6` | `0.11.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [sha3](https://github.com/RustCrypto/hashes) | `0.10.8` | `0.11.0` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |



Updates `digest` from 0.10.7 to 0.11.2
- [Commits](RustCrypto/traits@digest-v0.10.7...digest-v0.11.2)

Updates `md-5` from 0.10.6 to 0.11.0
- [Commits](RustCrypto/hashes@md-5-v0.10.6...md2-v0.11.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `sha3` from 0.10.8 to 0.11.0
- [Commits](RustCrypto/hashes@sha3/v0.10.8...sha3-v0.11.0)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

---
updated-dependencies:
- dependency-name: digest
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: md-5
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: sha3
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot force-pushed the dependabot/cargo/crypto-32dd7dbe16 branch from a8d9249 to e7cd1f0 Compare April 25, 2026 16:10

fanninpm commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot show sha1 ignore conditions

dependabot Bot commented on behalf of github Apr 25, 2026

Copy link
Copy Markdown
Contributor Author

No ignore conditions found for the dependency sha1

Copilot AI and others added 2 commits April 25, 2026 12:30
Fix hmac 0.13.0 API: use KeyInit::new_from_slice instead of Mac::new_…
c1708f9 
…from_slice

Agent-Logs-Url: https://github.com/RustPython/RustPython/sessions/12c1af8b-0e94-412e-a981-fbdc9dc107f5

Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com>
Signed-off-by: Padraic Fanning <27117322+fanninpm@users.noreply.github.com>
Fix digest 0.11.0 API: rename core_api to block_api for BlockSizeUser
bf86ec4 
Agent-Logs-Url: https://github.com/RustPython/RustPython/sessions/a0af31f3-4fd5-4430-804b-ae473c3de896

Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com>
Signed-off-by: Padraic Fanning <27117322+fanninpm@users.noreply.github.com>

fanninpm commented Apr 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

For future reference:

curl https://github.com/RustPython/RustPython/commit/df04e5c8bb5e13f75fa09d6204dd9e0e93e5f09b.patch | git am --keep-cr
curl https://github.com/RustPython/RustPython/commit/a8d92490d42d7ba933b36eecadcf6a2a14583bf6.patch | git am --keep-cr

fanninpm commented Apr 28, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

fanninpm closed this Apr 28, 2026

dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

fanninpm deleted the dependabot/cargo/crypto-32dd7dbe16 branch April 28, 2026 02:11
This was referenced Apr 28, 2026
Closed
Closed
coderabbitai Bot mentioned this pull request Aug 19, 2026
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

youknowone Awaiting requested review from youknowone

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

Back | FazBrowse Home | New Git URL