Skip to content

chore(deps): ignore der until cms 0.3.0 ships - #463

Merged
LKSNDRTMLKV merged 1 commit into
mainfrom
chore/dependabot-ignore-der
Oct 14, 2026
Merged

LKSNDRTMLKV merged 1 commit into
mainfrom
chore/dependabot-ignore-der

Conversation

@LKSNDRTMLKV

Copy link
Copy Markdown
Member

Dependabot opened a bump of der on its own (0.7 to 0.8). It cannot build: cms 0.2 and dpp-seal would sit on different ders, so the seal path stops compiling. x509-cert and const-oid were already ignored for the same reason; der belongs with them.

The comment above the ignore list is also brought up to date. The only cms on the RustCrypto train is a release candidate (0.3.0-rc.0), and it rides stable der, x509-cert, spki and const-oid. The note that the newest cms rides release candidates of those was out of date. The rule itself is unchanged: no release candidate under the seal path, and the whole stack moves in one PR once cms 0.3.0 is published.

Comments and one added ignore entry; no code, workflow or lockfile change.

@LKSNDRTMLKV
LKSNDRTMLKV merged commit 2fa7ca7 into main Oct 14, 2026
17 checks passed
@LKSNDRTMLKV
LKSNDRTMLKV deleted the chore/dependabot-ignore-der branch October 14, 2026 13:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant