Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump cryptography from 2.4.2 to 2.8 #784

Closed
wants to merge 1 commit into from

Conversation

dependabot-preview[bot]
Copy link
Contributor

@dependabot-preview dependabot-preview bot commented Jan 8, 2020

Bumps cryptography from 2.4.2 to 2.8.

Changelog

Sourced from cryptography's changelog.

2.8 - 2019-10-16

  • Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1d.
  • Added support for Python 3.8.
  • Added class methods Poly1305.generate_tag <cryptography.hazmat.primitives.poly1305.Poly1305.generate_tag> and Poly1305.verify_tag <cryptography.hazmat.primitives.poly1305.Poly1305.verify_tag> for Poly1305 sign and verify operations.
  • Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  • We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  • Added support for ed25519 and ed448 keys in the ~cryptography.x509.CertificateBuilder, ~cryptography.x509.CertificateSigningRequestBuilder, ~cryptography.x509.CertificateRevocationListBuilder and ~cryptography.x509.ocsp.OCSPResponseBuilder.
  • cryptography no longer depends on asn1crypto.
  • ~cryptography.x509.FreshestCRL is now allowed as a ~cryptography.x509.CertificateRevocationList extension.

2.7 - 2019-05-30

  • BACKWARDS INCOMPATIBLE: We no longer distribute 32-bit manylinux1 wheels. Continuing to produce them was a maintenance burden.
  • BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface. The CMAC and HMAC APIs have not changed, but they are no longer registered as MACContext instances.
  • Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1c.
  • Removed support for running our tests with setup.py test. Users interested in running our tests can continue to follow the directions in our development documentation</development/getting-started>.
  • Add support for ~cryptography.hazmat.primitives.poly1305.Poly1305 when using OpenSSL 1.1.1 or newer.
  • Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH in Ed25519PublicKey.public_bytes <cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes> .
  • Correctly allow passing a SubjectKeyIdentifier to ~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier and deprecate passing an Extension object. The documentation always required SubjectKeyIdentifier but the implementation previously required an Extension.

2.6.1 - 2019-02-27

  • Resolved an error in our build infrastructure that broke our Python3 wheels for macOS and Linux.

2.6 - 2019-02-27

  • BACKWARDS INCOMPATIBLE: Removed cryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature and cryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature, which had been deprecated for nearly 4 years. Use ~cryptography.hazmat.primitives.asymmetric.utils.encode_dss_signature and ~cryptography.hazmat.primitives.asymmetric.utils.decode_dss_signature instead.
  • BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which had been deprecated for nearly 3 years. Use ~cryptography.x509.Certificate.serial_number instead.
  • Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1b.
  • Added support for /hazmat/primitives/asymmetric/ed448 when using OpenSSL 1.1.1b or newer.
  • Added support for /hazmat/primitives/asymmetric/ed25519 when using OpenSSL 1.1.1b or newer.
  • ~cryptography.hazmat.primitives.serialization.load_ssh_public_key can now load ed25519 public keys.
  • Add support for easily mapping an object identifier to its elliptic curve class via ~cryptography.hazmat.primitives.asymmetric.ec.get_curve_for_oid.
  • Add support for OpenSSL when compiled with the no-engine (OPENSSL_NO_ENGINE) flag.

2.5 - 2019-01-22

  • BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1, but this version removes the default idna dependency as well. If you still need this deprecated path please install cryptography with the idna extra: pip install cryptography[idna].
  • BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  • Numerous classes and functions have been updated to allow bytes-like types for keying material and passwords, including symmetric algorithms, AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  • Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
... (truncated)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Jan 8, 2020
@coveralls
Copy link

coveralls commented Jan 8, 2020

Coverage Status

Coverage decreased (-0.06%) to 78.278% when pulling 5be6af1 on dependabot/pip/cryptography-2.8 into c32d980 on v0.23.

@dependabot-preview dependabot-preview bot changed the base branch from v0.19 to v0.20 January 22, 2020 22:55
@dependabot-preview dependabot-preview bot changed the base branch from v0.20 to v0.21 February 3, 2020 16:04
@dependabot-preview dependabot-preview bot changed the base branch from v0.21 to v0.22 February 5, 2020 14:45
Bumps [cryptography](https://github.com/pyca/cryptography) from 2.4.2 to 2.8.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst)
- [Commits](pyca/cryptography@2.4.2...2.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot changed the base branch from v0.22 to v0.23 February 11, 2020 08:41
@dependabot-preview
Copy link
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot-preview dependabot-preview bot deleted the dependabot/pip/cryptography-2.8 branch February 11, 2020 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants