chore(deps): update rust crate md4 to 0.11.0 - #13914
renovate[bot] wants to merge 1 commit into
Conversation
Sorry, something went wrong.
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: c8ba20bad1
ℹ️ About Codex in GitHubCodex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
Sorry, something went wrong.
| json-escape-simd = { version = "3.0.2", default-features = false } | ||
| lightningcss = { version = "1.0.0-alpha.71", default-features = false, features = ["serde"] } | ||
| md4 = { version = "0.10.2", default-features = false } | ||
| md4 = { version = "0.11.0", default-features = false } |
There was a problem hiding this comment.
Align digest major versions before bumping md4
Updating md4 to 0.11.0 pulls in digest 0.11, but sha2 remains on 0.10.9 (digest 0.10), so crates/rspack_hash/src/lib.rs now imports md4::Digest from a different major trait than sha2::Sha256 implements. In this state, the Sha256::new/update/finalize calls in RspackHash cannot resolve against the in-scope trait, breaking Rust builds that include rspack_hash.
Useful? React with 👍 / 👎.
Sorry, something went wrong.
|
Closing this for now because updating md4 alone introduces a second digest major version while sha2 and the SWC sha1 dependency chain still use digest 0.10. We should revisit this once the related dependencies can be upgraded together without duplicating indirect dependencies. |
Sorry, something went wrong.
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update (0.11.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config. If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
Sorry, something went wrong.
This PR contains the following updates:
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
RustCrypto/hashes (md4)v0.11.0
Compare Source
Configuration
📅 Schedule: (in timezone Asia/Shanghai)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.