Skip to content
This repository was archived by the owner on Feb 16, 2026. It is now read-only.

BOT: Dart Dependency Updater #157

Open
jpeiffer wants to merge 1 commit into
base: main
Choose a base branch
from
Open

BOT: Dart Dependency Updater #157

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,8 @@
## [3.3.1+3] - January 27, 2026

* Automated dependency updates
Comment on lines +1 to +3
Copy link

@coderabbitai coderabbitai bot Jan 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Changelog entry documents changes that will fail to build.

This changelog entry is premature since the dependency updates it documents (specifically pointycastle ^4.0.0) cause dependency resolution failures. Once the pubspec.yaml conflict is resolved, this entry may need to be updated to reflect which dependencies were actually updated.

🤖 Prompt for AI Agents 
In `@CHANGELOG.md` around lines 1 - 3, The changelog entry "## [3.3.1+3] - January
27, 2026" prematurely lists dependency updates that currently break dependency
resolution (e.g., pointycastle ^4.0.0); revert or mark this entry as provisional
and add a note referencing the unresolved pubspec.yaml conflict (or remove the
specific dependency mention) so the changelog only records confirmed, buildable
changes—once pubspec.yaml is fixed, update the "3.3.1+3" entry to reflect the
final, resolved dependency updates.



## [3.3.1+2] - December 10, 2024

* Automated dependency updates
Expand Down
126 changes: 63 additions & 63 deletions pubspec.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,75 +1,75 @@
name: 'template_expressions'
description: 'A Dart library to process string based templates using expressions.'
homepage: 'https://github.com/peiffer-innovations/template_expressions'
version: '3.3.1+2'
name: "template_expressions"
description: "A Dart library to process string based templates using expressions."
homepage: "https://github.com/peiffer-innovations/template_expressions"
version: "3.3.1+3"

environment:
sdk: '>=3.0.0 <4.0.0'
sdk: ">=3.0.0 <4.0.0"

dependencies:
convert: '^3.1.2'
crypto: '^3.0.1'
encrypt: '^5.0.3'
fake_async: '^1.3.0'
intl: '>=0.18.0<1.0.0'
json_class: '^3.0.1'
json_path: '>=0.6.3 <1.0.0'
logging: '^1.3.0'
meta: '^1.12.0'
petitparser: '^6.0.1'
pointycastle: '^3.9.1'
quiver: '^3.2.2'
rxdart: '^0.28.0'
yaon: '^1.1.4+10'
convert: "^3.1.2"
crypto: "^3.0.1"
encrypt: "^5.0.3"
fake_async: "^1.3.0"
intl: ">=0.18.0<1.0.0"
json_class: "^3.0.1"
json_path: ">=0.6.3 <1.0.0"
logging: "^1.3.0"
meta: "^1.12.0"
petitparser: "^6.0.1"
pointycastle: "^4.0.0"
Copy link

@coderabbitai coderabbitai bot Jan 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

latest version of encrypt dart package pointycastle 4.0 compatibility

💡 Result:

  • Latest encrypt package version: encrypt 5.0.3 (latest on pub.dev; published ~2 years ago). [1]
  • Latest pointycastle version: pointycastle 4.0.0 (published 2025-02-12; min Dart SDK 3.2). [2], [3]

Compatibility note: encrypt hasn’t released any version that explicitly targets pointycastle 4.x, so Dart’s dependency solver may block upgrading to pointycastle: ^4.0.0 in projects that use encrypt (unless you force overrides, which may break at runtime). [1], [2]

Practical option if you need pointycastle 4.x: use the maintained fork encrypt_next 5.0.5 (requires Dart 3.3+, and is positioned as a maintained fork of encrypt). [4], [5]

Sources:
[1] https://pub.dev/packages/encrypt/versions
[2] https://pub.dev/packages/pointycastle/versions
[3] https://pub.dev/packages/pointycastle/changelog
[4] https://pub.dev/packages/encrypt_next/versions
[5] https://pub.dev/packages/encrypt_next/versions/5.0.5

Dependency conflict: pointycastle ^4.0.0 is incompatible with encrypt ^5.0.3.

The pipeline confirms dependency resolution failed because encrypt ^5.0.3 (line 12) transitively depends on pointycastle ^3.6.2, which conflicts with this ^4.0.0 constraint. The latest encrypt version (5.0.3, from ~2 years ago) does not support pointycastle 4.x.

Options to resolve:

  1. Revert to pointycastle: "^3.9.1" as suggested by the resolver
  2. Replace encrypt with encrypt_next (5.0.5+), a maintained fork that supports pointycastle 4.x
🐛 Proposed fix (revert pointycastle) 
-  pointycastle: "^4.0.0"
+  pointycastle: "^3.9.1"
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
pointycastle: "^4.0.0"
pointycastle: "^3.9.1"
🤖 Prompt for AI Agents 
In `@pubspec.yaml` at line 20, pubspec.yaml currently pins pointycastle to ^4.0.0
which conflicts with encrypt ^5.0.3 (which requires pointycastle ^3.6.2); fix by
either downgrading pointycastle to a compatible version (e.g., pointycastle:
"^3.9.1") or replacing the encrypt dependency with encrypt_next (version
5.0.5+), update the dependency entry for either pointycastle or
encrypt/encrypt_next in pubspec.yaml, run pub get to verify resolution, and
ensure any code referencing encrypt APIs remains compatible if you switch to
encrypt_next.

quiver: "^3.2.2"
rxdart: "^0.28.0"
yaon: "^1.1.4+10"

dev_dependencies:
flutter_lints: '^5.0.0'
test: '^1.25.12'
flutter_lints: "^6.0.0"
test: "^1.29.0"

permittedLicenses:
- 'Apache-2.0'
- 'BSD-2-Clause'
- 'BSD-3-Clause'
- 'MIT'
- 'MIT-Modern-Variant'
- 'MPL-2.0'
- 'Zlib'
- "Apache-2.0"
- "BSD-2-Clause"
- "BSD-3-Clause"
- "MIT"
- "MIT-Modern-Variant"
- "MPL-2.0"
- "Zlib"

packageLicenseOverride:
flutter: 'BSD-3-Clause'
flutter_driver: 'BSD-3-Clause'
flutter_goldens: 'BSD-3-Clause'
flutter_localizations: 'BSD-3-Clause'
flutter_web_plugins: 'BSD-3-Clause'
flutter_test: 'BSD-3-Clause'
fuchsia_remote_debug_protocol: 'BSD-3-Clause'
integration_test: 'BSD-3-Clause'
rxdart: 'Apache-2.0'
flutter: "BSD-3-Clause"
flutter_driver: "BSD-3-Clause"
flutter_goldens: "BSD-3-Clause"
flutter_localizations: "BSD-3-Clause"
flutter_web_plugins: "BSD-3-Clause"
flutter_test: "BSD-3-Clause"
fuchsia_remote_debug_protocol: "BSD-3-Clause"
integration_test: "BSD-3-Clause"
rxdart: "Apache-2.0"

ignore_updates:
- 'archive'
- 'async'
- 'boolean_selector'
- 'characters'
- 'charcode'
- 'collection'
- 'clock'
- 'crypto'
- 'fake_async'
- 'file'
- 'json_path'
- 'matcher'
- 'material_color_utilities'
- 'meta'
- 'path'
- 'petitparser'
- 'source_span'
- 'stack_trace'
- 'stream_channel'
- 'string_scanner'
- 'sync_http'
- 'term_glyph'
- 'test_api'
- 'typed_data'
- 'vector_math'
- 'webdriver'
- "archive"
- "async"
- "boolean_selector"
- "characters"
- "charcode"
- "collection"
- "clock"
- "crypto"
- "fake_async"
- "file"
- "json_path"
- "matcher"
- "material_color_utilities"
- "meta"
- "path"
- "petitparser"
- "source_span"
- "stack_trace"
- "stream_channel"
- "string_scanner"
- "sync_http"
- "term_glyph"
- "test_api"
- "typed_data"
- "vector_math"
- "webdriver"
Loading