Skip to content

Update the cryptography package dependency due to CVE-2026-26007#35

Merged
gstein merged 1 commit intomainfrom
sbp/update-cryptography
Feb 12, 2026
Merged

Update the cryptography package dependency due to CVE-2026-26007#35
gstein merged 1 commit intomainfrom
sbp/update-cryptography

Conversation

@sbp
Copy link
Contributor

@sbp sbp commented Feb 11, 2026

Resolves Security #2, and removes a blocker for https://github.com/apache/tooling-trusted-releases/security/dependabot/12.

I ran tests on this branch, and they passed:

~/infrastructure-asfpy # poetry build
Creating virtualenv asfpy-68ndzt2b-py3.12 in /root/.cache/pypoetry/virtualenvs
Building asfpy (0.57)
Building sdist
  - Building sdist
  - Built asfpy-0.57.tar.gz
Building wheel
  - Building wheel
  - Built asfpy-0.57-py3-none-any.whl
~/infrastructure-asfpy # PYTHONPATH=. poetry run pytest
================================================================= test session starts =================================================================
platform linux -- Python 3.12.12, pytest-8.4.2, pluggy-1.6.0
rootdir: /root/infrastructure-asfpy
configfile: pyproject.toml
testpaths: test
collected 6 items

test/test_crypto.py ..                                                                                                                          [ 33%]
test/test_messaging.py .                                                                                                                        [ 50%]
test/test_stopwatch.py ...                                                                                                                      [100%]

================================================================== 6 passed in 2.16s ==================================================================

@gstein gstein merged commit 7081c40 into main Feb 12, 2026
0 of 7 checks passed
@gstein gstein deleted the sbp/update-cryptography branch February 12, 2026 04:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants