Skip to content

Bump chia-bls from 0.38.2 to 0.46.0 - #523

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/chia-bls-0.45.1
Closed

Bump chia-bls from 0.38.2 to 0.46.0#523
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/chia-bls-0.45.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Contributor

Bumps chia-bls from 0.38.2 to 0.46.0.

Release notes

Sourced from chia-bls's releases.

0.46.0

What's Changed

Full Changelog: Chia-Network/chia_rs@0.45.0...0.46.0

0.45.1

What's Changed

Full Changelog: Chia-Network/chia_rs@0.45.0...0.45.1

0.45.0

What's Changed

Full Changelog: Chia-Network/chia_rs@0.44.0...0.45.0

0.44.0

What's Changed

Full Changelog: Chia-Network/chia_rs@0.43.0...0.44.0

0.43.0

What's Changed

... (truncated)

Commits
  • 7d48790 Merge pull request #1487 from Chia-Network/bump-0.46.0
  • 7fcb1dd bump version to 0.46.0
  • 1ad07eb Merge pull request #1479 from Chia-Network/compute_plot_group_id_v2
  • 181b487 Merge pull request #1486 from Chia-Network/p256-k256-stable
  • 2fd5715 Merge pull request #1484 from Chia-Network/v2-plot-filter-constants
  • 495cc15 bump k256 and p256 to stable releases
  • c2b167c Merge pull request #1485 from Chia-Network/update-crossbeam
  • f87ecc3 bump crossbeam-epoch from 0.9.18 -> 0.9.20
  • 176b28d replace v2 plot filter constants for the new filter algorithm
  • ea43272 Merge pull request #1471 from Chia-Network/bump-clvmr-0.18.0
  • Additional commits viewable in compare view


Note

Medium Risk
Upgrades the BLS/crypto dependency across several minor releases with no code changes in-repo; behavior depends on upstream chia_rs compatibility and the split lockfile with clvmr on 0.38.2.

Overview
Dependency-only bump of the direct chia-bls crate from 0.38.2 to 0.46.0 in Cargo.toml, with Cargo.lock refreshed so chialisp pulls in the new chia-bls stack (chia-sha2, chia-traits, chia_streamable_macro at 0.46.0 and thiserror 2.x).

The lockfile now resolves two chia-bls versions: 0.46.0 for this crate and 0.38.2 still required by clvmr. No application or Rust source changes in the diff.

Reviewed by Cursor Bugbot for commit 536105e. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 14, 2026
@socket-security

socket-security Bot commented Jul 14, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedcargo/​chia-bls@​0.46.010010093100100

View full report

@dependabot dependabot Bot changed the title Bump chia-bls from 0.45.0 to 0.45.1 Bump chia-bls from 0.42.0 to 0.46.0 Jul 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/chia-bls-0.45.1 branch from 17b2543 to 4ba5fa9 Compare July 20, 2026 18:37
@prozacchiwawa

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/cargo/chia-bls-0.45.1 branch from 4ba5fa9 to 6d4bf37 Compare July 25, 2026 00:47

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 6d4bf37. Configure here.

Comment thread Cargo.toml
Bumps [chia-bls](https://github.com/Chia-Network/chia_rs) from 0.38.2 to 0.46.0.
- [Release notes](https://github.com/Chia-Network/chia_rs/releases)
- [Commits](Chia-Network/chia_rs@0.38.2...0.46.0)

---
updated-dependencies:
- dependency-name: chia-bls
  dependency-version: 0.45.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump chia-bls from 0.42.0 to 0.46.0 Bump chia-bls from 0.38.2 to 0.46.0 Jul 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/chia-bls-0.45.1 branch from 6d4bf37 to 536105e Compare July 28, 2026 02:08
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #539.

@dependabot dependabot Bot closed this Jul 28, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/chia-bls-0.45.1 branch July 28, 2026 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant