From cc7ad29613d23d664f396f733a29d822a20711f9 Mon Sep 17 00:00:00 2001
From: Hiromasa Ihara <iharahiromasa@gmail.com>
Date: Thu, 13 Mar 2025 10:16:35 +0900
Subject: [PATCH] feat: bump pyopenssl 24.3.x
This PR upgrade pyopenssl dependency. Current constraints is
`<24.3.0`(up to 24.2.x). New constratints is `<24.4.0`(up to 24.3.x).
This PR is for addressing security alert `GHSA-79v4-65xg-pq4g`.
https://github.com/advisories/GHSA-79v4-65xg-pq4g
// I guess this constratints is for pyopenssl->cryptography migration.
https://github.com/IdentityPython/pysaml2/pull/977
https://github.com/IdentityPython/pysaml2/commit/735bfa5327f42080ef60e9fd31d8d31029d98e21
---
pyproject.toml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pyproject.toml b/pyproject.toml
index 985692043..20b85a198 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -42,7 +42,7 @@ defusedxml = "*"
importlib-metadata = {version = ">=1.7.0", python = "<3.8"}
importlib-resources = {python = "<3.9", version = "*"}
paste = {optional = true, version = "*"}
-pyopenssl = "<24.3.0"
+pyopenssl = "<24.4.0"
python-dateutil = "*"
pytz = "*"
"repoze.who" = {optional = true, version = "*"}