Skip to content

chore(deps): update rust crate cachekit-core to 0.5.0 - #106

Open
cachekit-renovate-bot[bot] wants to merge 1 commit into
mainfrom
renovate/first-party-cachekit
Open

chore(deps): update rust crate cachekit-core to 0.5.0#106
cachekit-renovate-bot[bot] wants to merge 1 commit into
mainfrom
renovate/first-party-cachekit

Conversation

@cachekit-renovate-bot

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
cachekit-core dependencies minor 0.4.00.5.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

cachekit-io/cachekit-core (cachekit-core)

v0.5.0

Compare Source

⚠ BREAKING CHANGES
  • public items EncryptionHeader, KeyRotationState, RotationAwareHeader, and ZeroKnowledgeEncryptor::rotate_key() are removed (EncryptionError::NotImplemented variant included). Use Keyring for master-key rotation.
Features
  • replace dead key-rotation machinery with keyring decrypt helper (LAB-683) (#​67) (327f993)

Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@cachekit-renovate-bot cachekit-renovate-bot Bot added the dependencies Pull requests that update a dependency file label Aug 8, 2026
@kodus-27b

kodus-27b Bot commented Aug 8, 2026

Copy link
Copy Markdown

Code Review Completed! 🔥

The code review was successfully completed based on your current configurations.

Kody Guide: Usage and Configuration
Interacting with Kody
  • Request a Review: Ask Kody to review your PR manually by adding a comment with the @kody start-review command at the root of your PR.

  • Validate Business Logic: Ask Kody to validate your code against business rules by adding a comment with the @kody -v business-logic command.

  • Provide Feedback: Help Kody learn and improve by reacting to its comments with a 👍 for helpful suggestions or a 👎 if improvements are needed.

Current Kody Configuration
Review Options

The following review options are enabled or disabled:

Options Enabled
Bug
Performance
Security
Business Logic

Access your configuration settings here.

[dependencies]
wasm-bindgen = "=0.2.121"
cachekit-core = { version = "0.4.0", features = ["encryption"] }
cachekit-core = { version = "0.5.0", features = ["encryption"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

kody code-review Kody Rules high

WHAT: This bumps the cachekit-core dependency from 0.4.0 to 0.5.0 without evidence of CVE/SCA scanning or a lockfile update. WHY: Rule 81 requires validating new/updated dependency versions for known vulnerabilities and supply-chain risk. HOW: Run an OSV/SCA scan against cachekit-core 0.5.0, include the audit/advisory evidence in the PR description, and ensure the corresponding Cargo.lock is updated and pinned.

Also found in:

  • packages/cachekit-core-ts/Cargo.toml:13-13

Kody rule violation: Validate new/updated dependencies for CVEs and supply-chain risk

Prompt for LLM

File packages/cachekit-core-wasm/Cargo.toml:

Line 21:

WHAT: This bumps the cachekit-core dependency from 0.4.0 to 0.5.0 without evidence of CVE/SCA scanning or a lockfile update. WHY: Rule 81 requires validating new/updated dependency versions for known vulnerabilities and supply-chain risk. HOW: Run an OSV/SCA scan against cachekit-core 0.5.0, include the audit/advisory evidence in the PR description, and ensure the corresponding Cargo.lock is updated and pinned.

Talk to Kody by mentioning @kody

Was this suggestion helpful? React with 👍 or 👎 to help Kody learn from this interaction.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant