Skip to content

Bump cryptography from 2.9.2 to 3.1 in /backend#213

Merged
Seluj78 merged 1 commit into
devfrom
dependabot/pip/backend/cryptography-3.1
Sep 10, 2020
Merged

Bump cryptography from 2.9.2 to 3.1 in /backend#213
Seluj78 merged 1 commit into
devfrom
dependabot/pip/backend/cryptography-3.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2020

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

If you make any changes to it yourself then they will take precedence over the rebase.


Bumps cryptography from 2.9.2 to 3.1.

Changelog

Sourced from cryptography's changelog.

3.1 - 2020-08-26


* **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
  :term:`U-label` parsing in various X.509 classes. This support was originally
  deprecated in version 2.1 and moved to an extra in 2.5.
* Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
  the OpenSSL project. The next version of ``cryptography`` will drop support
  for it.
* Deprecated support for Python 3.5. This version sees very little use and will
  be removed in the next release.
* ``backend`` arguments to functions are no longer required and the
  default backend will automatically be selected if no ``backend`` is provided.
* Added initial support for parsing certificates from PKCS7 files with
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
  and
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
  .
* Calling ``update`` or ``update_into`` on
  :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
  longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
  also resolves the same issue in :doc:`/fernet`.

.. _v3-0:

3.0 - 2020-07-20

  • BACKWARDS INCOMPATIBLE: Removed support for passing an :class:~cryptography.x509.Extension instance to :meth:~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier, as per our deprecation policy.

  • BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed (2.9.1+ is still supported).

  • BACKWARDS INCOMPATIBLE: Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.

  • BACKWARDS INCOMPATIBLE: RSA :meth:~cryptography.hazmat.primitives.asymmetric.rsa.generate_private_key no longer accepts public_exponent values except 65537 and 3 (the latter for legacy purposes).

  • BACKWARDS INCOMPATIBLE: X.509 certificate parsing now enforces that the version field contains a valid value, rather than deferring this check until :attr:~cryptography.x509.Certificate.version is accessed.

  • Deprecated support for Python 2. At the time there is no time table for actually dropping support, however we strongly encourage all users to upgrade their Python, as Python 2 no longer receives support from the Python core team.

    If you have trouble suppressing this warning in tests view the :ref:FAQ entry addressing this issue <faq-howto-handle-deprecation-warning>.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @Seluj78.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2020
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/cryptography-3.1 branch 2 times, most recently from 073ffac to 6065b21 Compare September 10, 2020 10:34
@Seluj78

Seluj78 commented Sep 10, 2020

Copy link
Copy Markdown
Owner

@dependabot merge

@dependabot dependabot Bot force-pushed the dependabot/pip/backend/cryptography-3.1 branch from 6065b21 to f9b3ca6 Compare September 10, 2020 10:42
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/cryptography-3.1 branch from f9b3ca6 to 4116f42 Compare September 10, 2020 10:43
@Seluj78 Seluj78 merged commit 1836fdf into dev Sep 10, 2020
@Seluj78 Seluj78 deleted the dependabot/pip/backend/cryptography-3.1 branch September 10, 2020 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant