Skip to content

Bump cmov from 0.5.3 to 0.5.4 - #812

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cmov-0.5.4
Open

Bump cmov from 0.5.3 to 0.5.4#812
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cmov-0.5.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps cmov from 0.5.3 to 0.5.4.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Low Risk
Patch-level transitive dependency bump with lockfile-only changes and no direct code modifications.

Overview
Updates the cmov crate in Cargo.lock from 0.5.3 to 0.5.4 (RustCrypto utils). The lockfile checksum is updated accordingly; there are no application source changes.

cmov is pulled in transitively (e.g. via ctutils) for constant-time / crypto-related utilities used by the dependency tree.

Reviewed by Cursor Bugbot for commit 9f9389a. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [cmov](https://github.com/RustCrypto/utils) from 0.5.3 to 0.5.4.
- [Commits](RustCrypto/utils@cmov-v0.5.3...cmov-v0.5.4)

---
updated-dependencies:
- dependency-name: cmov
  dependency-version: 0.5.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 6, 2026
@coveralls-official

Copy link
Copy Markdown

Coverage Report for CI Build 28809079152

Coverage remained the same at 88.119%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 9393
Covered Lines: 8277
Line Coverage: 88.12%
Coverage Strength: 21793193.54 hits per line

💛 - Coveralls

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants