Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump cryptography from 43.0.1 to 44.0.0 #3475

Merged
merged 1 commit into from
Jan 1, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2025

Bumps cryptography from 43.0.1 to 44.0.0.

Changelog

Sourced from cryptography's changelog.

44.0.0 - 2024-11-27


* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.9.
* Deprecated Python 3.7 support. Python 3.7 is no longer supported by the
  Python core team. Support for Python 3.7 will be removed in a future
  ``cryptography`` release.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.4.0.
* macOS wheels are now built against the macOS 10.13 SDK. Users on older
  versions of macOS should upgrade, or they will need to build
  ``cryptography`` themselves.
* Enforce the :rfc:`5280` requirement that extended key usage extensions must
  not be empty.
* Added support for timestamp extraction to the
  :class:`~cryptography.fernet.MultiFernet` class.
* Relax the Authority Key Identifier requirements on root CA certificates
  during X.509 verification to allow fields permitted by :rfc:`5280` but
  forbidden by the CA/Browser BRs.
* Added support for :class:`~cryptography.hazmat.primitives.kdf.argon2.Argon2id`
  when using OpenSSL 3.2.0+.
* Added support for the :class:`~cryptography.x509.Admissions` certificate extension.
* Added basic support for PKCS7 decryption (including S/MIME 3.2) via
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`,
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_pem`, and
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_smime`.

.. _v43-0-3:

43.0.3 - 2024-10-18

  • Fixed release metadata for cryptography-vectors

.. _v43-0-2:

43.0.2 - 2024-10-18


* Fixed compilation when using LibreSSL 4.0.0.

.. _v43-0-1:

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cryptography](https://github.com/pyca/cryptography) from 43.0.1 to 44.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@43.0.1...44.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependency Issue in a dependency, waiting for a fix python Pull requests that update Python code labels Jan 1, 2025
@vabene1111 vabene1111 merged commit 6444680 into develop Jan 1, 2025
9 of 10 checks passed
@dependabot dependabot bot deleted the dependabot/pip/cryptography-44.0.0 branch January 1, 2025 07:16
smilerz added a commit to smilerz/recipes that referenced this pull request Jan 14, 2025
commit f25de4b
Author: vabene1111 <[email protected]>
Date:   Sun Jan 5 11:38:35 2025 +0100

    remove healthcheck

commit 6444680
Merge: fd42366 c604369
Author: vabene1111 <[email protected]>
Date:   Wed Jan 1 08:16:19 2025 +0100

    Merge pull request TandoorRecipes#3475 from TandoorRecipes/dependabot/pip/cryptography-44.0.0

    Bump cryptography from 43.0.1 to 44.0.0

commit c604369
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Wed Jan 1 00:33:49 2025 +0000

    Bump cryptography from 43.0.1 to 44.0.0

    Bumps [cryptography](https://github.com/pyca/cryptography) from 43.0.1 to 44.0.0.
    - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
    - [Commits](pyca/cryptography@43.0.1...44.0.0)

    ---
    updated-dependencies:
    - dependency-name: cryptography
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit fd42366
Author: vabene1111 <[email protected]>
Date:   Sun Dec 29 13:46:17 2024 +0100

    update gitignore like vue3 branch

commit 00148a2
Author: vabene1111 <[email protected]>
Date:   Sun Dec 29 13:44:43 2024 +0100

    made shopping list compatible with SLR entries without a recipe

commit 359fcb2
Author: vabene1111 <[email protected]>
Date:   Sun Dec 29 13:42:12 2024 +0100

    fixed social signup form

commit f5d7919
Merge: 86c4278 432dfa9
Author: vabene1111 <[email protected]>
Date:   Sat Dec 28 08:26:53 2024 +0100

    Merge pull request TandoorRecipes#3448 from igorsantos07/patch-1

    Update system.html: Django Recipes > Tandoor

commit 86c4278
Merge: f61a837 2a5c0bb
Author: vabene1111 <[email protected]>
Date:   Sat Dec 28 08:26:44 2024 +0100

    Merge pull request TandoorRecipes#3454 from TandoorRecipes/dependabot/pip/jinja2-3.1.5

    Bump jinja2 from 3.1.4 to 3.1.5

commit 2a5c0bb
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sat Dec 28 07:25:33 2024 +0000

    Bump jinja2 from 3.1.4 to 3.1.5

    Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.4 to 3.1.5.
    - [Release notes](https://github.com/pallets/jinja/releases)
    - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
    - [Commits](pallets/jinja@3.1.4...3.1.5)

    ---
    updated-dependencies:
    - dependency-name: jinja2
      dependency-type: direct:production
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit 432dfa9
Author: Igor Santos <[email protected]>
Date:   Tue Dec 24 02:28:21 2024 -0300

    Update system.html: Django Recipes > Tandoor

commit f61a837
Author: vabene1111 <[email protected]>
Date:   Sun Dec 22 12:12:37 2024 +0100

    Revert "added user filkes to recipe and added is_image flag to user file"

    This reverts commit 0bcdf5e.

commit 0bcdf5e
Author: vabene1111 <[email protected]>
Date:   Sun Dec 22 12:05:47 2024 +0100

    added user filkes to recipe and added is_image flag to user file

commit 169f799
Merge: 942d113 375174e
Author: vabene1111 <[email protected]>
Date:   Wed Dec 11 15:19:59 2024 +0100

    Merge pull request TandoorRecipes#3428 from hawthorc/develop

    Add note about Python 3.12 dependency to manual.md

commit 942d113
Merge: 64cc20a 103daf0
Author: vabene1111 <[email protected]>
Date:   Wed Dec 11 15:17:28 2024 +0100

    Merge pull request TandoorRecipes#3416 from zodac/develop

    Adding healthcheck to docker image

commit 64cc20a
Merge: 3a6731e f19beba
Author: vabene1111 <[email protected]>
Date:   Wed Dec 11 15:12:09 2024 +0100

    Merge pull request TandoorRecipes#3426 from TandoorRecipes/dependabot/pip/icalendar-6.1.0

    Bump icalendar from 5.0.11 to 6.1.0

commit 3a6731e
Merge: e6f11a1 865756e
Author: vabene1111 <[email protected]>
Date:   Wed Dec 11 15:11:32 2024 +0100

    Merge pull request TandoorRecipes#3425 from TandoorRecipes/dependabot/pip/pytest-factoryboy-2.7.0

    Bump pytest-factoryboy from 2.6.0 to 2.7.0

commit e6f11a1
Merge: cc1cd61 2c94753
Author: vabene1111 <[email protected]>
Date:   Wed Dec 11 15:11:17 2024 +0100

    Merge pull request TandoorRecipes#3423 from TandoorRecipes/dependabot/pip/pytest-django-4.9.0

    Bump pytest-django from 4.8.0 to 4.9.0

commit cc1cd61
Merge: 6a3b5ee 41f834d
Author: vabene1111 <[email protected]>
Date:   Wed Dec 11 15:10:19 2024 +0100

    Merge pull request TandoorRecipes#3424 from TandoorRecipes/dependabot/pip/crispy-bootstrap4-2024.10

    Bump crispy-bootstrap4 from 2024.1 to 2024.10

commit 6a3b5ee
Merge: 49b1195 7ccedb5
Author: vabene1111 <[email protected]>
Date:   Wed Dec 11 15:09:46 2024 +0100

    Merge pull request TandoorRecipes#3431 from TandoorRecipes/dependabot/pip/django-4.2.17

    Bump django from 4.2.16 to 4.2.17

commit 7ccedb5
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Dec 6 18:57:23 2024 +0000

    Bump django from 4.2.16 to 4.2.17

    Bumps [django](https://github.com/django/django) from 4.2.16 to 4.2.17.
    - [Commits](django/django@4.2.16...4.2.17)

    ---
    updated-dependencies:
    - dependency-name: django
      dependency-type: direct:production
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit 103daf0
Author: zodac <[email protected]>
Date:   Mon Dec 2 20:44:12 2024 +1300

    Using --spider for healthcheck, which performs a HEAD request instead of a GET request

commit 375174e
Author: Carter Hawthorne <[email protected]>
Date:   Sun Dec 1 18:38:38 2024 -0800

    Add note about Python 3.12 dependency to manual.md

commit f19beba
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sun Dec 1 00:39:31 2024 +0000

    Bump icalendar from 5.0.11 to 6.1.0

    Bumps [icalendar](https://github.com/collective/icalendar) from 5.0.11 to 6.1.0.
    - [Release notes](https://github.com/collective/icalendar/releases)
    - [Changelog](https://github.com/collective/icalendar/blob/main/CHANGES.rst)
    - [Commits](collective/icalendar@v5.0.11...v6.1.0)

    ---
    updated-dependencies:
    - dependency-name: icalendar
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit 865756e
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sun Dec 1 00:39:28 2024 +0000

    Bump pytest-factoryboy from 2.6.0 to 2.7.0

    Bumps [pytest-factoryboy](https://github.com/pytest-dev/pytest-factoryboy) from 2.6.0 to 2.7.0.
    - [Changelog](https://github.com/pytest-dev/pytest-factoryboy/blob/master/CHANGES.rst)
    - [Commits](pytest-dev/pytest-factoryboy@2.6.0...2.7.0)

    ---
    updated-dependencies:
    - dependency-name: pytest-factoryboy
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit 41f834d
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sun Dec 1 00:39:26 2024 +0000

    Bump crispy-bootstrap4 from 2024.1 to 2024.10

    Bumps [crispy-bootstrap4](https://github.com/django-crispy-forms/crispy-bootstrap4) from 2024.1 to 2024.10.
    - [Release notes](https://github.com/django-crispy-forms/crispy-bootstrap4/releases)
    - [Changelog](https://github.com/django-crispy-forms/crispy-bootstrap4/blob/main/CHANGELOG.md)
    - [Commits](django-crispy-forms/crispy-bootstrap4@2024.1...2024.10)

    ---
    updated-dependencies:
    - dependency-name: crispy-bootstrap4
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit 2c94753
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sun Dec 1 00:39:23 2024 +0000

    Bump pytest-django from 4.8.0 to 4.9.0

    Bumps [pytest-django](https://github.com/pytest-dev/pytest-django) from 4.8.0 to 4.9.0.
    - [Release notes](https://github.com/pytest-dev/pytest-django/releases)
    - [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
    - [Commits](pytest-dev/pytest-django@v4.8.0...v4.9.0)

    ---
    updated-dependencies:
    - dependency-name: pytest-django
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit 0e05c77
Author: zodac <[email protected]>
Date:   Fri Nov 29 14:15:24 2024 +1300

    Adding healthcheck to docker image
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependency Issue in a dependency, waiting for a fix python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant