Skip to content
This repository was archived by the owner on Feb 16, 2026. It is now read-only.

BOT: Dart Dependency Updater #146

Open
jpeiffer wants to merge 1 commit into
base: main
Choose a base branch
from
Open

BOT: Dart Dependency Updater #146

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,8 @@
## [3.3.1+3] - November 11, 2025

* Automated dependency updates


## [3.3.1+2] - December 10, 2024

* Automated dependency updates
Expand Down
126 changes: 63 additions & 63 deletions pubspec.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,75 +1,75 @@
name: 'template_expressions'
description: 'A Dart library to process string based templates using expressions.'
homepage: 'https://github.com/peiffer-innovations/template_expressions'
version: '3.3.1+2'
name: "template_expressions"
description: "A Dart library to process string based templates using expressions."
homepage: "https://github.com/peiffer-innovations/template_expressions"
version: "3.3.1+3"

environment:
sdk: '>=3.0.0 <4.0.0'
sdk: ">=3.0.0 <4.0.0"

dependencies:
convert: '^3.1.2'
crypto: '^3.0.1'
encrypt: '^5.0.3'
fake_async: '^1.3.0'
intl: '>=0.18.0<1.0.0'
json_class: '^3.0.1'
json_path: '>=0.6.3 <1.0.0'
logging: '^1.3.0'
meta: '^1.12.0'
petitparser: '^6.0.1'
pointycastle: '^3.9.1'
quiver: '^3.2.2'
rxdart: '^0.28.0'
yaon: '^1.1.4+10'
convert: "^3.1.2"
crypto: "^3.0.1"
encrypt: "^5.0.3"
fake_async: "^1.3.0"
intl: ">=0.18.0<1.0.0"
json_class: "^3.0.1"
json_path: ">=0.6.3 <1.0.0"
logging: "^1.3.0"
meta: "^1.12.0"
petitparser: "^6.0.1"
pointycastle: "^4.0.0"
Copy link

@coderabbitai coderabbitai bot Nov 11, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

CRITICAL: Dependency conflict – pointycastle upgrade breaks encrypt compatibility.

Line 20 attempts to upgrade pointycastle to ^4.0.0, but the project depends on encrypt: ^5.0.3, which requires pointycastle: ^3.6.2. These version ranges don't overlap:

  • pointycastle: ^3.6.2 = >=3.6.2 <4.0.0
  • pointycastle: ^4.0.0 = >=4.0.0 <5.0.0

This breaks dependency resolution. As noted in the PR objectives, the solution is to keep pointycastle within the ^3.x range (e.g., ^3.9.1) until the encrypt package updates its pointycastle dependency.

Apply this diff to resolve the conflict:

-  pointycastle: "^4.0.0"
+  pointycastle: "^3.9.1"

Alternatively, verify whether encrypt ^5.0.3 has been updated to support pointycastle ^4.0.0 before proceeding.

🌐 Web query:

encrypt package pubspec pointycastle dependency version

💡 Result:

The encrypt package depends on pointycastle. Pub.dev lists pointycastle as a dependency but the package does not hard-pin a single version on the package page — see the dependencies list. For the exact version constraint used by a specific encrypt release, check that release's pubspec.yaml in the repo or the package version page on pub.dev. [1][2]

Sources:
[1] pub.dev — encrypt package (dependencies list).
[2] GitHub — leocavalcante/encrypt (repo with pubspec.yaml).

🌐 Web query:

pointycastle 4.0.0 encrypt package compatibility

💡 Result:

Short answer: encrypt (latest published 5.0.x) does not declare compatibility with pointycastle 4.0.0 and you will likely get a pub dependency conflict if you try to mix encrypt 4.x/5.x with pointycastle: ^4.0.0. Pub shows encrypt historically depended on pointycastle 3.x (encrypt changelog/versions) while pointycastle 4.0.0 is a 2025 release — so use dependency_overrides or a fork if you must run them together, or prefer packages updated for pointycastle 4.x. [1][2]

References:

  • encrypt package versions & changelog (shows history and that encrypt updates target older pointycastle series). [1]
  • pointycastle 4.0.0 changelog (release 2025-02-12). [2]

If you want, I can check your pubspec and produce a concrete dependency_overrides entry or test resolution for your specific versions.

CRITICAL: Dependency conflict – pointycastle upgrade breaks encrypt compatibility.

Line 20 attempts to upgrade pointycastle to ^4.0.0, but the project depends on encrypt: ^5.0.3, which requires pointycastle from the 3.x series. Encrypt (latest published 5.0.x) does not declare compatibility with pointycastle 4.0.0 and will result in a pub dependency conflict. These version ranges do not overlap:

  • pointycastle: ^3.x (encrypt's requirement)
  • pointycastle: ^4.0.0 (PR change)

Revert to keep pointycastle within the 3.x range:

-  pointycastle: "^4.0.0"
+  pointycastle: "^3.9.1"
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
pointycastle: "^4.0.0"
pointycastle: "^3.9.1"
🤖 Prompt for AI Agents 
In pubspec.yaml around line 20, the upgrade to pointycastle: ^4.0.0 conflicts
with the project's encrypt: ^5.0.3 dependency which requires pointycastle 3.x;
revert pointycastle to the 3.x range (e.g., pointycastle: ^3.x or a specific
3.y.z that satisfies encrypt) and then run pub get to update the lockfile so
dependencies resolve without conflict.

quiver: "^3.2.2"
rxdart: "^0.28.0"
yaon: "^1.1.4+10"

dev_dependencies:
flutter_lints: '^5.0.0'
test: '^1.25.12'
flutter_lints: "^6.0.0"
test: "^1.26.3"

permittedLicenses:
- 'Apache-2.0'
- 'BSD-2-Clause'
- 'BSD-3-Clause'
- 'MIT'
- 'MIT-Modern-Variant'
- 'MPL-2.0'
- 'Zlib'
- "Apache-2.0"
- "BSD-2-Clause"
- "BSD-3-Clause"
- "MIT"
- "MIT-Modern-Variant"
- "MPL-2.0"
- "Zlib"

packageLicenseOverride:
flutter: 'BSD-3-Clause'
flutter_driver: 'BSD-3-Clause'
flutter_goldens: 'BSD-3-Clause'
flutter_localizations: 'BSD-3-Clause'
flutter_web_plugins: 'BSD-3-Clause'
flutter_test: 'BSD-3-Clause'
fuchsia_remote_debug_protocol: 'BSD-3-Clause'
integration_test: 'BSD-3-Clause'
rxdart: 'Apache-2.0'
flutter: "BSD-3-Clause"
flutter_driver: "BSD-3-Clause"
flutter_goldens: "BSD-3-Clause"
flutter_localizations: "BSD-3-Clause"
flutter_web_plugins: "BSD-3-Clause"
flutter_test: "BSD-3-Clause"
fuchsia_remote_debug_protocol: "BSD-3-Clause"
integration_test: "BSD-3-Clause"
rxdart: "Apache-2.0"

ignore_updates:
- 'archive'
- 'async'
- 'boolean_selector'
- 'characters'
- 'charcode'
- 'collection'
- 'clock'
- 'crypto'
- 'fake_async'
- 'file'
- 'json_path'
- 'matcher'
- 'material_color_utilities'
- 'meta'
- 'path'
- 'petitparser'
- 'source_span'
- 'stack_trace'
- 'stream_channel'
- 'string_scanner'
- 'sync_http'
- 'term_glyph'
- 'test_api'
- 'typed_data'
- 'vector_math'
- 'webdriver'
- "archive"
- "async"
- "boolean_selector"
- "characters"
- "charcode"
- "collection"
- "clock"
- "crypto"
- "fake_async"
- "file"
- "json_path"
- "matcher"
- "material_color_utilities"
- "meta"
- "path"
- "petitparser"
- "source_span"
- "stack_trace"
- "stream_channel"
- "string_scanner"
- "sync_http"
- "term_glyph"
- "test_api"
- "typed_data"
- "vector_math"
- "webdriver"
Loading