Skip to content

[boring] Update BoringSSL to 8f77af2e - #2719

Closed
dart-ecosystem-bot[bot] wants to merge 1 commit into
mainfrom
boring-update-boringssl-8f77af2e
Closed

dart-ecosystem-bot[bot] wants to merge 1 commit into
mainfrom
boring-update-boringssl-8f77af2e

Conversation

@dart-ecosystem-bot

Copy link
Copy Markdown
Contributor

Automated update to the latest BoringSSL revision 8f77af2e983b73df4f018e2a141450d005f5587b, generated by pkgs/boring/tool/bump-boringssl-revision.sh.

@dart-ecosystem-bot
dart-ecosystem-bot Bot requested a review from a team as a code owner October 25, 2026 00:06
@github-actions

Copy link
Copy Markdown

PR Health

Coverage ✔️
File Coverage

This check for test coverage is informational (issues shown here will not fail the PR).

This check can be disabled by tagging the PR with skip-coverage-check.

License Headers ✔️
// Copyright (c) 2026, the Dart project authors. Please see the AUTHORS file
// for details. All rights reserved. Use of this source code is governed by a
// BSD-style license that can be found in the LICENSE file.

Files
no missing headers

All source files should start with a license header.

Unrelated files missing license headers
Files
pkgs/html/test/differential_test.dart
pkgs/html/test/dom_parsing_test.dart
pkgs/html/test/mxss_test.dart
pkgs/html/test/noah_ark_clause_limit_test.dart

This check can be disabled by tagging the PR with skip-license-check.

Breaking changes ✔️
Package Change Current Version New Version Needed Version Looking good?
boring None 0.4.2 0.4.2-wip 0.4.2-wip ✔️

This check can be disabled by tagging the PR with skip-breaking-check.

Unused Dependencies ✔️
Package Status
boring ✔️ All dependencies utilized correctly.

For details on how to fix these, see dependency_validator.

This check can be disabled by tagging the PR with skip-unused-dependencies-check.

API leaks ✔️

The following packages contain symbols visible in the public API, but not exported by the library. Export these symbols or remove them from your publicly visible API.

Package Leaked API symbol Leaking sources

This check can be disabled by tagging the PR with skip-leaking-check.

Changelog Entry ✔️
Package Changed Files

Changes to files need to be accounted for in their respective changelogs.

This check can be disabled by tagging the PR with skip-changelog-check (for example, for non-user-visible changes when the package version is already at -wip).

Comment thread pkgs/boring/CHANGELOG.md
@@ -1,3 +1,7 @@
## 0.4.2-wip

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kevmoo - the version bump looks like it happened incorrectly here - do you know where we need to follow up?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You mean the script? Let me dig...

@kevmoo

kevmoo commented Oct 27, 2026

Copy link
Copy Markdown
Member

@natebosch The version bump (0.4.2 -> 0.4.2-wip) was triggered by the report changelog script from dart-lang/ecosystem's repo_manage package, which is called during the automated boring.yaml workflow.

Currently, when the report changelog script transitions a stable release version to a WIP state, it naively appends -wip to the current release version (resulting in 0.4.2-wip) instead of incrementing the patch version first. Because pub versioning considers pre-release suffixes strictly older than their stable counterparts, 0.4.2-wip is actually a downgrade from 0.4.2.

We need to follow up by patching pkgs/repo_manage/lib/changelog_updater.dart in dart-lang/ecosystem so that it increments the patch version (e.g., 0.4.2 -> 0.4.3-wip) when appending the -wip suffix. I just opened a PR for this fix here: dart-lang/ecosystem#474

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants