Bump argon2-cffi from 21.1.0 to 21.2.0

[dependabot]

Bumps argon2-cffi from 21.1.0 to 21.2.0.

Release notes

Sourced from argon2-cffi's releases.

21.2.0

Highlights

• Pre-compiled wheels for most relevant platforms (yes, including ARM!)
• Full type hints.
• Adjust defaults to RFC 9106 and add support to pre-configured profiles.

Full Changelog

Removed

• Python 3.5 is not supported anymore.

• The CFFI bindings have been extracted into a separate project: argon2-cffi-bindings This makes argon2-cffi a Python-only project und should make it easier to contribute to and have more frequent releases with high-level features.

  This change is breaking for users who want to use a system-wide installation of Argon2 instead of our vendored code, because the argument to the --no-binary argument changed. Please refer to the installation guide.

Added

• Thanks to lots of work within argon2-cffi-bindings, there're pre-compiled wheels for many new platforms. Including:

  • Apple Silicon via universal2
  • Linux on amd64 and arm64
  • musl libc (Alpine Linux!) on i686, amd64, and arm64
  • PyPy 3.8

  We hope to provide wheels for Windows on arm64 soon, but are waiting for GitHub Actions to support that.

• argon2.Parameters.from_parameters() together with the argon2.profiles module that offers easy access to the RFC-recommended configuration parameters and then some. #101 #110

• The CLI interface now has a --profile option that takes any name from argon2.profiles.

• Types! argon2-cffi is now fully typed. #112

Changed

• argon2.PasswordHasher now uses the RFC 9106 low-memory profile by default. The old defaults are available as argon2.profiles.PRE_21_2.

Changelog

Sourced from argon2-cffi's changelog.

21.2.0 - 2021-12-08

Removed

• Python 3.5 is not supported anymore.

• The CFFI bindings have been extracted into a separate project: [argon2-cffi-bindings] This makes argon2-cffi a Python-only project und should make it easier to contribute to and have more frequent releases with high-level features.

  This change is breaking for users who want to use a system-wide installation of Argon2 instead of our vendored code, because the argument to the --no-binary argument changed. Please refer to the installation guide.

Added

• Thanks to lots of work within [argon2-cffi-bindings], there're pre-compiled wheels for many new platforms. Including:

  • Apple Silicon via universal2
  • Linux on amd64 and arm64
  • musl libc (Alpine Linux!) on i686, amd64, and arm64
  • PyPy 3.8

  We hope to provide wheels for Windows on arm64 soon, but are waiting for GitHub Actions to support that.

• argon2.Parameters.from_parameters() together with the argon2.profiles module that offers easy access to the RFC-recommended configuration parameters and then some. #101 #110

• The CLI interface now has a --profile option that takes any name from argon2.profiles.

• Types! argon2-cffi is now fully typed. #112

Changed

• argon2.PasswordHasher now uses the RFC 9106 low-memory profile by default. The old defaults are available as argon2.profiles.PRE_21_2.

Commits

• c522053 Prepare 21.2.0
• 02ba010 Fix anchor
• 844ab7e No need to yell
• e9f84e4 Add Types (#112)
• 41e0dd4 Better explanation of versioning
• b1d8c50 Implement argon2.profiles & adapt to RFC 9106 (#110)
• dd3e061 [pre-commit.ci] pre-commit autoupdate (#111)
• 54d3d96 Clarify --no-binary
• 3fe1a9c Make parameters a dataclass
• ca53e42 Update main.yml
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)