Skip to content
This repository was archived by the owner on Feb 16, 2026. It is now read-only.

BOT: Dart Dependency Updater #151

Open
jpeiffer wants to merge 1 commit into
base: main
Choose a base branch
from
Open

BOT: Dart Dependency Updater #151

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,8 @@
## [3.3.1+3] - December 16, 2025

* Automated dependency updates

Comment on lines +1 to +4
Copy link

@coderabbitai coderabbitai bot Dec 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

Dependency resolution will fail—cannot merge as-is.

The PR description indicates a critical dependency resolution error: encrypt ^5.0.3 requires pointycastle ^3.6.2, but this PR attempts to update to pointycastle ^4.0.0. This conflict will cause version solving to fail. The changelog documents updates that cannot be applied until the underlying dependency conflict is resolved.

🤖 Prompt for AI Agents 
In CHANGELOG.md around lines 1 to 4, the changelog entry documents dependency
updates that cannot be applied because encrypt ^5.0.3 requires pointycastle
^3.6.2 while this PR bumps pointycastle to ^4.0.0; either resolve the dependency
conflict first or do not claim the update in the changelog. Fix by reverting or
removing the automated dependency-update note (or change it to state the update
was deferred due to a dependency conflict), and instead add a short note that
the pointycastle update is blocked by encrypt ^5.0.3 (or pin
encrypt/pointycastle to compatible versions and update package manifests before
updating the changelog).


## [3.3.1+2] - December 10, 2024

* Automated dependency updates
Expand Down
126 changes: 63 additions & 63 deletions pubspec.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,75 +1,75 @@
name: 'template_expressions'
description: 'A Dart library to process string based templates using expressions.'
homepage: 'https://github.com/peiffer-innovations/template_expressions'
version: '3.3.1+2'
name: "template_expressions"
description: "A Dart library to process string based templates using expressions."
homepage: "https://github.com/peiffer-innovations/template_expressions"
version: "3.3.1+3"

environment:
sdk: '>=3.0.0 <4.0.0'
sdk: ">=3.0.0 <4.0.0"

dependencies:
convert: '^3.1.2'
crypto: '^3.0.1'
encrypt: '^5.0.3'
fake_async: '^1.3.0'
intl: '>=0.18.0<1.0.0'
json_class: '^3.0.1'
json_path: '>=0.6.3 <1.0.0'
logging: '^1.3.0'
meta: '^1.12.0'
petitparser: '^6.0.1'
pointycastle: '^3.9.1'
quiver: '^3.2.2'
rxdart: '^0.28.0'
yaon: '^1.1.4+10'
convert: "^3.1.2"
crypto: "^3.0.1"
encrypt: "^5.0.3"
Copy link

@coderabbitai coderabbitai bot Dec 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

encrypt package pub.dev latest version dependencies pointycastle

💡 Result:

  • Latest encrypt package version on pub.dev: 5.0.3 (published ~2 years ago). [1]
  • Dependencies include pointycastle (alongside args, asn1lib, clock, collection, crypto). [1]

Sources:
[1] pub.dev package page for encrypt (versions & dependencies).

🌐 Web query:

encrypt 5.0.3 pointycastle dependency pub.dev

💡 Result:

encrypt 5.0.3 has pointycastle listed as a dependency (see Dependencies on the package page). [1][2]

Sources:

  • pub.dev package page (encrypt 5.0.3) — Dependencies includes pointycastle. [1]
  • encrypt GitHub repository (pubspec.yaml in 5.x branch). [2]

🌐 Web query:

encrypt 6.0.0 pointycastle dependency flutter pub

💡 Result:

There is no encrypt 6.0.0 release on pub.dev — the latest stable encrypt version is 5.0.3. [1][2]

If you’re adding encrypt and get PointyCastle-related conflicts (web build or incompatible pointycastle version), pin or override pointycastle in your pubspec.yaml. Example (use the pointycastle release that fixes the issue, e.g. 3.9.x or 4.0.0):

  • dependencies:
    encrypt: ^5.0.3

  • dependency_overrides:
    pointycastle: ^4.0.0

Using dependency_overrides is a common fix for encrypt → pointycastle compatibility / web errors. [3][4]

Sources:

  1. encrypt package versions (pub.dev). [1]
  2. encrypt package page (pub.dev). [2]
  3. pointycastle changelog (pub.dev). [4]
  4. StackOverflow — workaround: dependency_overrides for pointycastle web issues. [3]

🏁 Script executed:

# Find pubspec.yaml in the repo
find . -name "pubspec.yaml" -type f | head -5

Repository: peiffer-innovations/template_expressions

Length of output: 98

🌐 Web query:

encrypt 5.0.3 pubspec.yaml pointycastle ^3 constraint pub.dev

💡 Result:

Use a dependency override to force pointycastle ^3 while keeping encrypt 5.0.3. Example pubspec.yaml snippet:

dependencies:
encrypt: ^5.0.3

other deps...

dependency_overrides:
pointycastle: ^3.0.0

encrypt 5.x had fixes around parsing PointyCastle ~3.x versions; forcing the PointyCastle 3 series via dependency_overrides resolves version mismatches. [1][2]

Sources:
[1] encrypt changelog (v5.0.3).
[2] pointycastle changelog / package versions.

🏁 Script executed:

cat -n ./pubspec.yaml | sed -n '1,30p'

Repository: peiffer-innovations/template_expressions

Length of output: 955

Blocker: pointycastle ^4.0.0 is incompatible with encrypt ^5.0.3.

encrypt ^5.0.3 (the latest version) requires pointycastle ~3.x. Having both dependencies in pubspec.yaml will cause dependency resolution to fail.

Resolution options:

  1. Downgrade pointycastle to ^3.9.1 (as suggested in the PR description)
  2. Use dependency_overrides to force pointycastle 3.x while keeping encrypt 5.0.3: 
    dependency_overrides:
  pointycastle: ^3.9.1
  3. Remove or replace the encrypt dependency if it's blocking the update

Note: No newer encrypt version supporting pointycastle 4.x is available on pub.dev.

🤖 Prompt for AI Agents 
In pubspec.yaml at line 12, encrypt: "^5.0.3" is incompatible with pointycastle
^4.0.0 and breaks dependency resolution; fix by either (A) downgrading
pointycastle to a 3.x version (e.g., change pointycastle entry to ^3.9.1), or
(B) add a dependency_overrides section forcing pointycastle: ^3.9.1 so encrypt
can resolve, or (C) remove/replace the encrypt dependency with an alternative
that supports pointycastle 4.x; apply one of these changes to pubspec.yaml and
run pub get to verify resolution.

fake_async: "^1.3.0"
intl: ">=0.18.0<1.0.0"
json_class: "^3.0.1"
json_path: ">=0.6.3 <1.0.0"
logging: "^1.3.0"
meta: "^1.12.0"
petitparser: "^6.0.1"
pointycastle: "^4.0.0"
quiver: "^3.2.2"
rxdart: "^0.28.0"
yaon: "^1.1.4+10"

dev_dependencies:
flutter_lints: '^5.0.0'
test: '^1.25.12'
flutter_lints: "^6.0.0"
test: "^1.28.0"

permittedLicenses:
- 'Apache-2.0'
- 'BSD-2-Clause'
- 'BSD-3-Clause'
- 'MIT'
- 'MIT-Modern-Variant'
- 'MPL-2.0'
- 'Zlib'
- "Apache-2.0"
- "BSD-2-Clause"
- "BSD-3-Clause"
- "MIT"
- "MIT-Modern-Variant"
- "MPL-2.0"
- "Zlib"

packageLicenseOverride:
flutter: 'BSD-3-Clause'
flutter_driver: 'BSD-3-Clause'
flutter_goldens: 'BSD-3-Clause'
flutter_localizations: 'BSD-3-Clause'
flutter_web_plugins: 'BSD-3-Clause'
flutter_test: 'BSD-3-Clause'
fuchsia_remote_debug_protocol: 'BSD-3-Clause'
integration_test: 'BSD-3-Clause'
rxdart: 'Apache-2.0'
flutter: "BSD-3-Clause"
flutter_driver: "BSD-3-Clause"
flutter_goldens: "BSD-3-Clause"
flutter_localizations: "BSD-3-Clause"
flutter_web_plugins: "BSD-3-Clause"
flutter_test: "BSD-3-Clause"
fuchsia_remote_debug_protocol: "BSD-3-Clause"
integration_test: "BSD-3-Clause"
rxdart: "Apache-2.0"

ignore_updates:
- 'archive'
- 'async'
- 'boolean_selector'
- 'characters'
- 'charcode'
- 'collection'
- 'clock'
- 'crypto'
- 'fake_async'
- 'file'
- 'json_path'
- 'matcher'
- 'material_color_utilities'
- 'meta'
- 'path'
- 'petitparser'
- 'source_span'
- 'stack_trace'
- 'stream_channel'
- 'string_scanner'
- 'sync_http'
- 'term_glyph'
- 'test_api'
- 'typed_data'
- 'vector_math'
- 'webdriver'
- "archive"
- "async"
- "boolean_selector"
- "characters"
- "charcode"
- "collection"
- "clock"
- "crypto"
- "fake_async"
- "file"
- "json_path"
- "matcher"
- "material_color_utilities"
- "meta"
- "path"
- "petitparser"
- "source_span"
- "stack_trace"
- "stream_channel"
- "string_scanner"
- "sync_http"
- "term_glyph"
- "test_api"
- "typed_data"
- "vector_math"
- "webdriver"
Loading