GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Bump the crypto group across 1 directory with 5 updates by dependabot[bot] · Pull Request #7642 · RustPython/RustPython

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

Bumps the crypto group with 5 updates in the / directory:

Package From To
digest 0.10.7 0.11.2
md-5 0.10.6 0.11.0
sha2 0.10.9 0.11.0
sha3 0.10.8 0.11.0
hmac 0.12.1 0.13.0

Updates digest from 0.10.7 to 0.11.2

Commits
  • 2465f98 digest: bump version to v0.11.2 (#2343)
  • a87b567 Release digest v0.11.2 (#2342)
  • 84476d3 digest: remove Clone from MacTraits (#2341)
  • 6954eab elliptic-curve v0.14.0-rc.29 (#2340)
  • a250cbd elliptic-curve: bump sec1 to v0.8 (#2339)
  • 01b44a6 password-hash v0.6.0 (#2338)
  • 866ef69 password-hash: add Error::RngFailure (#2337)
  • 4c2365e build(deps): bump the all-deps group with 4 updates (#2335)
  • ae7d4be password-hash: rustdoc fixups (#2336)
  • 35e0e9a password-hash: remove McfHasher trait (#2334)
  • Additional commits viewable in compare view

Updates md-5 from 0.10.6 to 0.11.0

Commits
  • b5051e5 Cut new releases (#812)
  • 451c446 md5: replace force-soft crate feature with md5_backend configuration flag...
  • 2f00175 Release sha1 v0.11.0 (#810)
  • 07d370c sha1: refactor backends selection (#808)
  • 7c7cb76 Fix md5 project link in README (#809)
  • ffe0939 Release sha2 0.11.0 (#806)
  • 8991b65 Use the standard order of the [package] section fields (#807)
  • 3d2bc57 sha2: refactor backends (#802)
  • faa55fb sha3: bump keccak to v0.2 (#803)
  • d3e6489 sha3 v0.11.0-rc.9 (#801)
  • Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits
  • ffe0939 Release sha2 0.11.0 (#806)
  • 8991b65 Use the standard order of the [package] section fields (#807)
  • 3d2bc57 sha2: refactor backends (#802)
  • faa55fb sha3: bump keccak to v0.2 (#803)
  • d3e6489 sha3 v0.11.0-rc.9 (#801)
  • bbf6f51 sha2: tweak backend docs (#800)
  • 155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
  • ed514f2 Use published version of keccak v0.2 (#799)
  • 702bcd8 Migrate to closure-based keccak (#796)
  • 827c043 sha3 v0.11.0-rc.8 (#794)
  • Additional commits viewable in compare view

Updates sha3 from 0.10.8 to 0.11.0

Commits
  • 6c69ea9 Release sha3 v0.11.0 (#816)
  • c46466f sha3: move cSHAKE and TurboSHAKE into separate crates (#815)
  • b5051e5 Cut new releases (#812)
  • 451c446 md5: replace force-soft crate feature with md5_backend configuration flag...
  • 2f00175 Release sha1 v0.11.0 (#810)
  • 07d370c sha1: refactor backends selection (#808)
  • 7c7cb76 Fix md5 project link in README (#809)
  • ffe0939 Release sha2 0.11.0 (#806)
  • 8991b65 Use the standard order of the [package] section fields (#807)
  • 3d2bc57 sha2: refactor backends (#802)
  • Additional commits viewable in compare view

Updates hmac from 0.12.1 to 0.13.0

Commits
  • 0236c8e hmac v0.13.0 (#263)
  • b895e50 Migrate tests to the new blobby format (#264)
  • 3d1440b Workspace-level lint configuration (#261)
  • 11d4f36 hmac: use release versions of dev-dependencies (#260)
  • c40b82b hmac: bump sha2 dev-dependency to v0.11 (#259)
  • 1fa0781 Cut rc.5 prereleases (#258)
  • a008265 hmac v0.13.0-rc.6 (#256)
  • da485cd Use (Reset)MacTraits (#254)
  • 2c51e3b hmac: derive Clone instead of relying on (Reset)MacTraits (#253)
  • 669d805 Relax Clone bounds (#250)
  • Additional commits viewable in compare view

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 20, 2026
@fanninpm

fanninpm commented Apr 20, 2026

Copy link
Copy Markdown
Contributor

See also #7592, #7564.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@dependabot dependabot Bot changed the title Bump the crypto group with 5 updates Bump the crypto group across 1 directory with 5 updates Apr 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/crypto-32dd7dbe16 branch 3 times, most recently from 7d3db74 to e390e50 Compare April 23, 2026 18:16
@fanninpm

fanninpm commented Apr 23, 2026

Copy link
Copy Markdown
Contributor

@youknowone the CI failure seems simple enough for copilot to fix
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@youknowone

youknowone commented Apr 23, 2026

Copy link
Copy Markdown
Member

@copilot fix ci failures
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
Copilot started work on behalf of youknowone April 23, 2026 23:11
View session

Copilot AI commented Apr 23, 2026

Copy link
Copy Markdown
Contributor

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving new_from_slice from the Mac trait to the KeyInit trait. Updated hashlib.rs to import KeyInit and use it for HMAC construction in both make_hmac! and do_hmac! macros.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
Copilot finished work on behalf of youknowone April 23, 2026 23:14
Copilot AI requested a review from youknowone April 23, 2026 23:14
@fanninpm

fanninpm commented Apr 23, 2026

Copy link
Copy Markdown
Contributor

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving new_from_slice from the Mac trait to the KeyInit trait. Updated hashlib.rs to import KeyInit and use it for HMAC construction in both make_hmac! and do_hmac! macros.

@copilot are you sure?
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@youknowone

youknowone commented Apr 24, 2026

Copy link
Copy Markdown
Member

@copilot check ci failures again
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
Copilot started work on behalf of youknowone April 24, 2026 05:07
View session

Copilot AI commented Apr 24, 2026 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

@copilot check ci failures again

Fixed in a8d9249. The previous fix addressed hmac 0.13.0 (new_from_slice moved from Mac to KeyInit), but there was a second breaking change: digest 0.11.0 renamed the core_api module to block_api. Updated the BlockSizeUser import from digest::core_api::BlockSizeUser to digest::block_api::BlockSizeUser.

@copilot fix ci failures

Fixed in df04e5c. The CI failure was due to hmac 0.13.0 moving `new_fr...

You were right to question it — there was a second breaking change I missed. digest 0.11.0 also renamed the core_api module to block_api, so digest::core_api::BlockSizeUser needed updating too. Fixed in a8d9249.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • docs.rs
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

  • Configure Actions setup steps to set up my environment, which run before the firewall is enabled
  • Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
Copilot finished work on behalf of youknowone April 24, 2026 05:13
@fanninpm

fanninpm commented Apr 24, 2026 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

TODO(me): add sha1 to the crypto group

NOTE: when dependabot closes this PR and opens another one with the edited group, I will need to cherry-pick df04e5c and a8d9249 onto the new PR.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@fanninpm fanninpm mentioned this pull request Apr 24, 2026
Add sha1 to crypto dependency group #7679
Merged
@ShaharNaveh

ShaharNaveh commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase
dependabot[bot] reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@dependabot @github

dependabot Bot commented on behalf of github Apr 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@fanninpm

fanninpm commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

@ShaharNaveh

NOTE: when dependabot closes this PR and opens another one with the edited group, I will need to cherry-pick df04e5c and a8d9249 onto the new PR.
ShaharNaveh reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@fanninpm

fanninpm commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate
dependabot[bot] reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@dependabot
Bump the crypto group across 1 directory with 5 updates
e7cd1f0 
Bumps the crypto group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [digest](https://github.com/RustCrypto/traits) | `0.10.7` | `0.11.2` |
| [md-5](https://github.com/RustCrypto/hashes) | `0.10.6` | `0.11.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [sha3](https://github.com/RustCrypto/hashes) | `0.10.8` | `0.11.0` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |



Updates `digest` from 0.10.7 to 0.11.2
- [Commits](RustCrypto/traits@digest-v0.10.7...digest-v0.11.2)

Updates `md-5` from 0.10.6 to 0.11.0
- [Commits](RustCrypto/hashes@md-5-v0.10.6...md2-v0.11.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `sha3` from 0.10.8 to 0.11.0
- [Commits](RustCrypto/hashes@sha3/v0.10.8...sha3-v0.11.0)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

---
updated-dependencies:
- dependency-name: digest
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: md-5
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
- dependency-name: sha3
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/crypto-32dd7dbe16 branch from a8d9249 to e7cd1f0 Compare April 25, 2026 16:10
@fanninpm

fanninpm commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot show sha1 ignore conditions
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@dependabot @github

dependabot Bot commented on behalf of github Apr 25, 2026

Copy link
Copy Markdown
Contributor Author

No ignore conditions found for the dependency sha1
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
Copilot AI and others added 2 commits April 25, 2026 12:30
@youknowone @fanninpm
Fix hmac 0.13.0 API: use KeyInit::new_from_slice instead of Mac::new_…
c1708f9 
…from_slice

Agent-Logs-Url: https://github.com/RustPython/RustPython/sessions/12c1af8b-0e94-412e-a981-fbdc9dc107f5

Co-authored-by: youknowone <[email protected]>
Signed-off-by: Padraic Fanning <[email protected]>
@youknowone @fanninpm
Fix digest 0.11.0 API: rename core_api to block_api for BlockSizeUser
bf86ec4 
Agent-Logs-Url: https://github.com/RustPython/RustPython/sessions/a0af31f3-4fd5-4430-804b-ae473c3de896

Co-authored-by: youknowone <[email protected]>
Signed-off-by: Padraic Fanning <[email protected]>
@fanninpm

fanninpm commented Apr 25, 2026 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

For future reference:

curl https://github.com/RustPython/RustPython/commit/df04e5c8bb5e13f75fa09d6204dd9e0e93e5f09b.patch | git am --keep-cr
curl https://github.com/RustPython/RustPython/commit/a8d92490d42d7ba933b36eecadcf6a2a14583bf6.patch | git am --keep-cr
ShaharNaveh reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@fanninpm

fanninpm commented Apr 28, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate
dependabot[bot] reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@dependabot @github

dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@fanninpm fanninpm closed this Apr 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@fanninpm
fanninpm deleted the dependabot/cargo/crypto-32dd7dbe16 branch April 28, 2026 02:11
This was referenced Apr 28, 2026
Bump the crypto group across 1 directory with 5 updates #7709
Closed
Bump the crypto group across 1 directory with 6 updates #7715
Closed
@coderabbitai coderabbitai Bot mentioned this pull request Aug 19, 2026
Raise where the fuzzer found aborts and stack overflows, and collect with the count in the object header #8551
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@youknowone youknowone Awaiting requested review from youknowone

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

4 participants

@fanninpm @youknowone @ShaharNaveh
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.