Skip to content

Add crypto group to dependabot config#7304

Merged
youknowone merged 1 commit into
RustPython:mainfrom
fanninpm:crypto-deps-group
Mar 2, 2026
Merged

Add crypto group to dependabot config#7304
youknowone merged 1 commit into
RustPython:mainfrom
fanninpm:crypto-deps-group

Conversation

@fanninpm

@fanninpm fanninpm commented Mar 1, 2026

Copy link
Copy Markdown
Contributor

See #7287

Summary by CodeRabbit

  • Chores
    • Updated dependency management configuration to track additional cryptographic library updates.

@coderabbitai

coderabbitai Bot commented Mar 1, 2026

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between d0b5a5a and 7f9b815.

📒 Files selected for processing (1)
  • .github/dependabot.yml

📝 Walkthrough

Walkthrough

The pull request adds a new crypto dependency group to the Dependabot configuration for Cargo packages. This group consolidates cryptographic-related crates (digest, md-5, sha-1, sha2, sha3, blake2, hmac, and pbkdf2) under a single named update pattern.

Changes

Cohort / File(s) Summary
Dependabot Configuration
.github/dependabot.yml
Added a new crypto group for Cargo updates with patterns for cryptographic-related dependencies (digest, md-5, sha-1, sha2, sha3, blake2, hmac, pbkdf2).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Suggested labels

skip:ci

Suggested reviewers

  • youknowone

Poem

🐰 A cryptic quest through dependencies so keen,
Grouped crypto crates in a pattern pristine,
SHA, HMAC, and Blake2 unite,
Dependabot's updates now organized right! ✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately summarizes the main change: adding a crypto group to the dependabot configuration file.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@fanninpm fanninpm marked this pull request as ready for review March 1, 2026 17:12
@youknowone youknowone merged commit f443226 into RustPython:main Mar 2, 2026
13 checks passed
@fanninpm fanninpm deleted the crypto-deps-group branch March 2, 2026 04:01
youknowone pushed a commit to youknowone/RustPython that referenced this pull request Mar 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants