Skip to content

build(deps): update cryptography requirement from >=42.0.0 to >=42.0.8 - #57

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cryptography-gte-42.0.8
Open

build(deps): update cryptography requirement from >=42.0.0 to >=42.0.8#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cryptography-gte-42.0.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on cryptography to permit the latest version.

Changelog

Sourced from cryptography's changelog.

42.0.8 - 2024-06-04


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.2.

.. _v42-0-7:


42.0.7 - 2024-05-06

  • Restored Windows 7 compatibility for our pre-built wheels. Note that we do not test on Windows 7 and wheels for our next release will not support it. Microsoft no longer provides support for Windows 7 and users are encouraged to upgrade.

.. _v42-0-6:

42.0.6 - 2024-05-04


* Fixed compilation when using LibreSSL 3.9.1.

.. _v42-0-5:


42.0.5 - 2024-02-23

  • Limit the number of name constraint checks that will be performed in :mod:X.509 path validation <cryptography.x509.verification> to protect against denial of service attacks.
  • Upgrade pyo3 version, which fixes building on PowerPC.

.. _v42-0-4:

42.0.4 - 2024-02-20


* Fixed a null-pointer-dereference and segfault that could occur when creating
  a PKCS#12 bundle. Credit to **Alexander-Programming** for reporting the
  issue. **CVE-2024-26130**
* Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields ``SMIMECapabilities``
  and ``SignatureAlgorithmIdentifier`` should now be correctly encoded according to the
  definitions in :rfc:`2633` :rfc:`3370`.

.. _v42-0-3:


42.0.3 - 2024-02-15

  • Fixed an initialization issue that caused key loading failures for some

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from imran-siddique as a code owner July 27, 2026 04:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
@dependabot
build(deps): update cryptography requirement from >=42.0.0 to >=42.0.8
50cf98e 
Updates the requirements on [cryptography](https://github.com/pyca/cryptography) to permit the latest version.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@42.0.0...42.0.8)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 42.0.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/cryptography-gte-42.0.8 branch from b06f1c0 to 50cf98e Compare July 28, 2026 04:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@imran-siddique imran-siddique Awaiting requested review from imran-siddique imran-siddique is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants