Skip to content

Commit 7d6a297

Browse files
committed
chore(deps): ignore pinned aes/ctr/rand in dependabot (rsa 0.9 / interactsh compat)
These deps are intentionally version-pinned per Cargo.toml comments for OOB blind-XSS crypto (AES-CTR + RSA-OAEP). Major bumps break the build until the interactsh crypto layer and/or rsa dep are updated in tandem. Added ignores after closing incompatible Dependabot PRs #1138, #1137, #1136 (after local cargo check compatibility verification).
1 parent 7fee3bf commit 7d6a297

1 file changed

Lines changed: 8 additions & 0 deletions

File tree

.github/dependabot.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,3 +15,11 @@ updates:
1515
schedule:
1616
interval: weekly
1717
target-branch: "main"
18+
ignore:
19+
# These are intentionally pinned (see Cargo.toml comments).
20+
# rsa 0.9 requires older rand_core 0.6; aes/ctr/rand 0.8 line is required
21+
# for OOB interactsh blind-XSS crypto (AES-256-CTR + RSA-OAEP).
22+
# Bumping requires coordinated updates to interactsh/crypto.rs + rsa features.
23+
- dependency-name: "aes"
24+
- dependency-name: "ctr"
25+
- dependency-name: "rand"

0 commit comments

Comments
 (0)