Bump the crypto group across 1 directory with 5 updates by dependabot[bot] · Pull Request #7642 · RustPython/RustPython · GitHub
Skip to content

Bump the crypto group across 1 directory with 5 updates#7642

Open
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/cargo/crypto-32dd7dbe16
Open

Bump the crypto group across 1 directory with 5 updates#7642
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/cargo/crypto-32dd7dbe16

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026 •
edited
Loading

Bumps the crypto group with 5 updates in the / directory:

Package From To
digest 0.10.7 0.11.2
md-5 0.10.6 0.11.0
sha2 0.10.9 0.11.0
sha3 0.10.8 0.11.0
hmac 0.12.1 0.13.0

Updates digest from 0.10.7 to 0.11.2

Commits

Updates md-5 from 0.10.6 to 0.11.0

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates sha3 from 0.10.8 to 0.11.0

Commits

Updates hmac from 0.12.1 to 0.13.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 20, 2026
@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 20, 2026

See also #7592, #7564.

@dependabot dependabot Bot changed the title Bump the crypto group with 5 updates Bump the crypto group across 1 directory with 5 updates Apr 21, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/crypto-32dd7dbe16 branch 3 times, most recently from 7d3db74 to e390e50 Compare April 23, 2026 18:16
@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 23, 2026

@youknowone the CI failure seems simple enough for copilot to fix

@youknowone
Copy link
Copy Markdown
Member

youknowone commented Apr 23, 2026

@copilot fix ci failures

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 23, 2026

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving new_from_slice from the Mac trait to the KeyInit trait. Updated hashlib.rs to import KeyInit and use it for HMAC construction in both make_hmac! and do_hmac! macros.

Copilot AI requested a review from youknowone April 23, 2026 23:14
@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 23, 2026

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving new_from_slice from the Mac trait to the KeyInit trait. Updated hashlib.rs to import KeyInit and use it for HMAC construction in both make_hmac! and do_hmac! macros.

@copilot are you sure?

@youknowone
Copy link
Copy Markdown
Member

youknowone commented Apr 24, 2026

@copilot check ci failures again

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 24, 2026 •
edited
Loading

@copilot check ci failures again

Fixed in a8d9249. The previous fix addressed hmac 0.13.0 (new_from_slice moved from Mac to KeyInit), but there was a second breaking change: digest 0.11.0 renamed the core_api module to block_api. Updated the BlockSizeUser import from digest::core_api::BlockSizeUser to digest::block_api::BlockSizeUser.

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving `new_fr...

You were right to question it — there was a second breaking change I missed. digest 0.11.0 also renamed the core_api module to block_api, so digest::core_api::BlockSizeUser needed updating too. Fixed in a8d9249.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • docs.rs
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 24, 2026 •
edited
Loading

TODO(me): add sha1 to the crypto group

NOTE: when dependabot closes this PR and opens another one with the edited group, I will need to cherry-pick df04e5c and a8d9249 onto the new PR.

@fanninpm fanninpm mentioned this pull request Apr 24, 2026
Merged
@ShaharNaveh
Copy link
Copy Markdown
Contributor

ShaharNaveh commented Apr 25, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 25, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 25, 2026

@ShaharNaveh

NOTE: when dependabot closes this PR and opens another one with the edited group, I will need to cherry-pick df04e5c and a8d9249 onto the new PR.

@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 25, 2026

@dependabot recreate

@dependabot
Bump the crypto group across 1 directory with 5 updates
e7cd1f0 
Bumps the crypto group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [digest](https://github.com/RustCrypto/traits) | `0.10.7` | `0.11.2` |
| [md-5](https://github.com/RustCrypto/hashes) | `0.10.6` | `0.11.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [sha3](https://github.com/RustCrypto/hashes) | `0.10.8` | `0.11.0` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |



Updates `digest` from 0.10.7 to 0.11.2
- [Commits](RustCrypto/traits@digest-v0.10.7...digest-v0.11.2)

Updates `md-5` from 0.10.6 to 0.11.0
- [Commits](RustCrypto/hashes@md-5-v0.10.6...md2-v0.11.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `sha3` from 0.10.8 to 0.11.0
- [Commits](RustCrypto/hashes@sha3/v0.10.8...sha3-v0.11.0)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

---
updated-dependencies:
- dependency-name: digest
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: md-5
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: sha3
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/crypto-32dd7dbe16 branch from a8d9249 to e7cd1f0 Compare April 25, 2026 16:10
@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 25, 2026

@dependabot show sha1 ignore conditions

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 25, 2026

No ignore conditions found for the dependency sha1

Copilot AI and others added 2 commits April 25, 2026 12:30
@youknowone @fanninpm
Fix hmac 0.13.0 API: use KeyInit::new_from_slice instead of Mac::new_…
c1708f9 
…from_slice

Agent-Logs-Url: https://github.com/RustPython/RustPython/sessions/12c1af8b-0e94-412e-a981-fbdc9dc107f5

Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com>
Signed-off-by: Padraic Fanning <27117322+fanninpm@users.noreply.github.com>
@youknowone @fanninpm
Fix digest 0.11.0 API: rename core_api to block_api for BlockSizeUser
bf86ec4 
Agent-Logs-Url: https://github.com/RustPython/RustPython/sessions/a0af31f3-4fd5-4430-804b-ae473c3de896

Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com>
Signed-off-by: Padraic Fanning <27117322+fanninpm@users.noreply.github.com>
@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 25, 2026 •
edited
Loading

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@youknowone youknowone Awaiting requested review from youknowone

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@fanninpm @youknowone @ShaharNaveh