14 Commits
Author SHA1 Message Date
Joshua Megnauth 3d53342b61 Update random and cryptography crates (#8010)
Redo of #7800.

Bumping the random and crypto crates is not trivial. Both sets of crates
have had API changes which require manual updates.

AI use:
I wrote all of the code myself but used AI to figure out the new APIs.
AI explained SHAKE's block size and why the block_size() function
doesn't exist in the new crate. I confirmed the block size, which is
actually represented in the new types for SHAKE. `Shake128` is actually
`Shake<168>` - 168 is the block size. I cited Wikipedia as it lists the
SHAKE block size in bits.

I also used AI to figure out HMAC for SHA3.

Assisted-by: Codex:gpt-5.4
2026-06-03 18:38:28 +09:00
fanninpm c4968e3717 Replace ahash with rapidhash (#7954)
* Add `rapidhash` to list of dependencies

* Use `rapidhash::quality::RandomState` in `codegen` crate

* Use `rapidhash::quality::RandomState` in `stdlib` crate

* Use `rapidhash::quality::RandomState` in `vm` crate

* Remove `ahash` from lists of dependencies
2026-05-25 13:53:54 +09:00
fanninpm 454a4a35aa Add crates/* directories to Dependabot config (#7687) 2026-04-27 10:15:14 +09:00
fanninpm 3fc9742416 Add sha1 to crypto dependency group (#7679) 2026-04-25 21:54:01 +09:00
fanninpm 847969d0c5 Change dependency groups (#7665)
* Add `ahash` to `random` group

* Add `unix` group with `nix`, `mac_address`, and `rustyline`
2026-04-24 13:29:07 +09:00
Shahar Naveh b1eda639f0 Unify lint CI job (#7505)
* use `prek` for unified linting

* Fix actionlint error

* Generate metadata when specific files change

* `check_redundant_patches.py` to accept glob path

* Test

* revert defective changes

* use `rustfmt` over `cargo fmt` for individual files

* debug reviewdog

* rustfmt

* Move comment to correct location

* defevtive fmt test

* Fail with reviewdog

* fix reviewdog perms

* Try to use present token

* without checks oerms

* put normal perms

* fmt
2026-03-26 21:43:34 +09:00
Shahar Naveh 0d0171070b Set dependabot cooldown (#7490)
* Set dependabot cooldown

* Increase default to 7 days
2026-03-24 12:45:30 +09:00
fanninpm d7333328fd Add crypto group to dependabot config (#7304) 2026-03-02 10:18:01 +09:00
Shahar Naveh afc86d4525 Add npm to dependabot (#7291) 2026-03-01 21:55:34 +09:00
fanninpm 2b1ba58967 Edit dependency groups (#7257)
* Add random dependency group

See #7064 for why.

* Fold cranelift group into wasmtime group
2026-02-28 22:07:29 +09:00
Padraic Fanning 7860f866f8 Add dependency groups to dependabot.yml 2026-02-06 14:20:31 +09:00
Shahar Naveh c979059eeb Configure dependabot to ignore ruff updates (#6185)
* Make dependabot ignore ruff updates

* Regenrate Cargo.lock

* Fix clippy

* Fix typo
2025-10-12 12:55:23 +09:00
Shahar Naveh 11e1330758 Reconfigure dependabot (#6158)
* Add `cargo` to dependabot

* Remove noisy comments

* Don't group updates
2025-09-20 22:46:02 +09:00
Christian Clauss 24fd19b35d Keep GitHub Actions up to date with GitHub's Dependabot
Fixes software supply chain safety warnings like at the bottom right of

https://github.com/RustPython/RustPython/actions/runs/11870777239
* [Keeping your actions up to date with Dependabot](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot)
* [Configuration options for the dependabot.yml file - package-ecosystem](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem)
2024-11-26 16:38:54 +01:00