Commit a064242
authored
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
Bump the dependabot group with 2 updates (#520)
Bumps the dependabot group with 2 updates:
[cryptography](https://github.com/pyca/cryptography) and
[build](https://github.com/pypa/build).
Updates `cryptography` from 47.0.0 to 48.0.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's
changelog</a>.</em></p>
<blockquote>
<p>48.0.0 - 2026-05-04</p>
<pre><code>
* **BACKWARDS INCOMPATIBLE:** Support for Python 3.8 has been removed.
``cryptography`` now requires Python 3.9 or later.
* **BACKWARDS INCOMPATIBLE:** Loading an X.509 CRL whose inner
``TBSCertList.signature`` algorithm does not match the outer
``signatureAlgorithm`` now raises ``ValueError``. Previously, such CRLs
were parsed successfully and only rejected during signature validation.
* Added support for :doc:`/hazmat/primitives/asymmetric/mlkem` and
:doc:`/hazmat/primitives/asymmetric/mldsa` when using OpenSSL 3.5.0 or
later, in addition to the existing AWS-LC and BoringSSL support. This
means
post-quantum algorithms are now available to users of our wheels.
<ul>
<li><strong>Note:</strong> Going forward, we do not guarantee that all
functionality<br />
in <code>cryptography</code> will be available when building against<br
/>
OpenSSL. See :doc:<code>/statements/state-of-openssl</code> for more
information.</li>
</ul>
<p>.. _v47-0-0:<br />
</code></pre></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pyca/cryptography/commit/8e03e30e3aae01632a697e903e3593c924f0139d"><code>8e03e30</code></a>
bump for 48.0.0 release (<a
href="https://redirect.github.com/pyca/cryptography/issues/14796">#14796</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/295e0d254ef31ab864730aa41312ec355416ee71"><code>295e0d2</code></a>
Add AGENTS.md with CLAUDE.md symlink (<a
href="https://redirect.github.com/pyca/cryptography/issues/14794">#14794</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/104a2de19e268a433e6da92be9cb872dcf0003c8"><code>104a2de</code></a>
Bump BoringSSL, OpenSSL, AWS-LC in CI (<a
href="https://redirect.github.com/pyca/cryptography/issues/14793">#14793</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/67ec1e51988195e17993d2edef5258b27509b926"><code>67ec1e5</code></a>
call check_length early on AesSiv::encrypt (<a
href="https://redirect.github.com/pyca/cryptography/issues/14792">#14792</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/b2da57a0d9e4bfd2b95364299091a18f74127b26"><code>b2da57a</code></a>
changelog for mldsa/mlkem for openssl (<a
href="https://redirect.github.com/pyca/cryptography/issues/14791">#14791</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/3cf44adee25c368d4a136e072fa9f80465d91eb0"><code>3cf44ad</code></a>
ML-KEM OpenSSL support (<a
href="https://redirect.github.com/pyca/cryptography/issues/14781">#14781</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/2e31639666766f846fbab2c605879db0fa64fe83"><code>2e31639</code></a>
ML-DSA OpenSSL support (<a
href="https://redirect.github.com/pyca/cryptography/issues/14773">#14773</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/5affe5a286a986fdf512c4a5cb280d28a96c10e3"><code>5affe5a</code></a>
fix rust nightly clippy (<a
href="https://redirect.github.com/pyca/cryptography/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/2e73ca448eaf64b6f0d4ffbb794cf96170cef5ec"><code>2e73ca4</code></a>
bump rust-openssl dep and update EcPoint::mul_generator to
mul_generator2 (<a
href="https://redirect.github.com/pyca/cryptography/issues/1">#1</a>...</li>
<li><a
href="https://github.com/pyca/cryptography/commit/82ebd3b9f49d49ad5fd8b4b1f1dd02487b6e1466"><code>82ebd3b</code></a>
Bump BoringSSL, OpenSSL, AWS-LC in CI (<a
href="https://redirect.github.com/pyca/cryptography/issues/14785">#14785</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pyca/cryptography/compare/47.0.0...48.0.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `build` from 1.4.0 to 1.5.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/build/releases">build's
releases</a>.</em></p>
<blockquote>
<h2>1.5.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>ci: try to improve release docs by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1051">pypa/build#1051</a></li>
<li>feat: drop 3.9, require 3.10+ by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1036">pypa/build#1036</a></li>
<li>chore: tox toml by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1033">pypa/build#1033</a></li>
<li>fix: api should not ignore installed, only CLI by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1056">pypa/build#1056</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/build/compare/1.4.4...1.5.0">https://github.com/pypa/build/compare/1.4.4...1.5.0</a></p>
<h2>1.4.4</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(release): generate consistent CHANGELOG heading levels by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/build/pull/1032">pypa/build#1032</a></li>
<li>docs: move source links by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1034">pypa/build#1034</a></li>
<li>revert: drop PEP 660 change by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1039">pypa/build#1039</a></li>
<li>fix: ignore installed when running pip by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1040">pypa/build#1040</a></li>
<li>fix: revert part of <a
href="https://redirect.github.com/pypa/build/issues/973">#973</a> by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1044">pypa/build#1044</a></li>
<li>chore: report coverage failure lines by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1046">pypa/build#1046</a></li>
<li>tests: fix issue with uv run by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1048">pypa/build#1048</a></li>
<li>docs: reorganize testing docs for copy/paste by <a
href="https://github.com/abitrolly"><code>@abitrolly</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1043">pypa/build#1043</a></li>
<li>tests: keep environment from leaking in Python 3.15 by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1049">pypa/build#1049</a></li>
<li>docs: fix issue with changelog generation by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1050">pypa/build#1050</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/build/compare/1.4.3...1.4.4">https://github.com/pypa/build/compare/1.4.3...1.4.4</a></p>
<h2>1.4.3</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(api): resolve thread-safety races in build API by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/build/pull/1015">pypa/build#1015</a></li>
<li>🐛 fix(builder): validate backend-path entries exist on disk by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/build/pull/1016">pypa/build#1016</a></li>
<li>test: cover config settings build paths by <a
href="https://github.com/terminalchai"><code>@terminalchai</code></a>
in <a
href="https://redirect.github.com/pypa/build/pull/992">pypa/build#992</a></li>
<li>Add kind=(step, ) for root messages with * by <a
href="https://github.com/abitrolly"><code>@abitrolly</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/973">pypa/build#973</a></li>
<li>fix: correct changelog category ordering by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/build/pull/1017">pypa/build#1017</a></li>
<li>🐛 fix(cli): show full dependency chain in missing deps error by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/build/pull/1019">pypa/build#1019</a></li>
<li>tests: fully annotate by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1020">pypa/build#1020</a></li>
<li>chore: lazy imports by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1021">pypa/build#1021</a></li>
<li>chore: adding more ruff codes by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1022">pypa/build#1022</a></li>
<li>tests: improve annotations by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1023">pypa/build#1023</a></li>
<li>🧪 test(coverage): achieve 100% test coverage by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/build/pull/1018">pypa/build#1018</a></li>
<li>chore: add ruff PT by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1025">pypa/build#1025</a></li>
<li>chore: add ruff PYI by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1026">pypa/build#1026</a></li>
<li>chore: add ruff SIM/RET by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1028">pypa/build#1028</a></li>
<li>🐛 fix(env): strip PYTHONPATH from isolated builds by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/build/pull/1024">pypa/build#1024</a></li>
<li>chore: use ruff ALL by <a
href="https://github.com/henryiii"><code>@henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1029">pypa/build#1029</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/build/blob/main/CHANGELOG.rst">build's
changelog</a>.</em></p>
<blockquote>
<p>####################
1.5.0 (2026-04-30)
####################</p>
<hr />
<p>Features</p>
<hr />
<ul>
<li>Drop Python 3.9 support - by :user:<code>henryiii</code>
(:issue:<code>1036</code>)</li>
</ul>
<hr />
<p>Bugfixes</p>
<hr />
<ul>
<li>Make <code>--ignore-installed</code> opt-in from the API via
<code>fresh=True</code> - by :user:<code>henryiii</code>
(:issue:<code>1056</code>)</li>
</ul>
<hr />
<p>Miscellaneous</p>
<hr />
<ul>
<li>:issue:<code>1033</code></li>
</ul>
<p>####################
1.4.4 (2026-04-22)
####################</p>
<hr />
<p>Bugfixes</p>
<hr />
<ul>
<li>Fix release pipeline generating <code>CHANGELOG.rst</code> entries
with inconsistent heading levels, which broke <code>sphinx -W</code>
and pinned Read the Docs <code>stable</code> at 1.4.0 - by
:user:<code>gaborbernat</code>. (:issue:<code>1031</code>)</li>
<li>Revert :pr:<code>1039</code> from build 1.4.3, no longer check
direct_url (for now) - by :user:<code>henryiii</code>
(:issue:<code>1039</code>)</li>
<li>Add <code>--ignore-installed</code> to pip install command to
prevent issues with packages already present in the isolated
build environment - by :user:<code>henryiii</code>
(:issue:<code>1037</code>) (:issue:<code>1040</code>)</li>
<li>Partial revert of :pr:<code>973</code>, keeping log messages in one
entry, multiple lines. (:issue:<code>1044</code>)</li>
</ul>
<hr />
<p>Miscellaneous</p>
<hr />
<ul>
<li>:issue:<code>1048</code>, :issue:<code>1049</code></li>
</ul>
<p>####################
1.4.3 (2026-04-10)
####################</p>
<hr />
<p>Features</p>
<hr />
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/build/commit/615d04cfc52ac3c1592a463f0afe484fee1cc368"><code>615d04c</code></a>
chore: prepare for 1.5.0</li>
<li><a
href="https://github.com/pypa/build/commit/776f702f84787525df62a5473dd13d4e2f45b977"><code>776f702</code></a>
fix: api should not ignore installed, only CLI (<a
href="https://redirect.github.com/pypa/build/issues/1056">#1056</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/42da4c4b483563819fabdb8ecf2f6df53ed82123"><code>42da4c4</code></a>
pre-commit: bump repositories (<a
href="https://redirect.github.com/pypa/build/issues/1055">#1055</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/b445cd2e736db5f80cde7d952d620a73cc26bf9d"><code>b445cd2</code></a>
chore: tox toml (<a
href="https://redirect.github.com/pypa/build/issues/1033">#1033</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/c44c143876042ac6e1212a31684a3adca19beda4"><code>c44c143</code></a>
feat: drop 3.9, require 3.10+ (<a
href="https://redirect.github.com/pypa/build/issues/1036">#1036</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/a9bb4560d213069b11c8068159f1de060abec5b7"><code>a9bb456</code></a>
build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 in the actions
group...</li>
<li><a
href="https://github.com/pypa/build/commit/cb3351155ce99902580022acb81dc0adb8124d53"><code>cb33511</code></a>
ci: try to improve release docs (<a
href="https://redirect.github.com/pypa/build/issues/1051">#1051</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/70666a296c2e5bb7451f5a04eef259f6f943d0de"><code>70666a2</code></a>
chore: prepare for 1.4.4</li>
<li><a
href="https://github.com/pypa/build/commit/653d86586dea8b4e020086a276a15a27ac7bd25d"><code>653d865</code></a>
docs: fix issue with changelog generation (<a
href="https://redirect.github.com/pypa/build/issues/1050">#1050</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/373b9ee171e2f16353365b1a9a02bc408b96ca73"><code>373b9ee</code></a>
tests: keep environment from leaking in Python 3.15 (<a
href="https://redirect.github.com/pypa/build/issues/1049">#1049</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/build/compare/1.4.0...1.5.0">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent 609326f commit a064242
2 files changed
Lines changed: 51 additions & 51 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
275 | 275 | | |
276 | 276 | | |
277 | 277 | | |
278 | | - | |
279 | | - | |
280 | | - | |
281 | | - | |
282 | | - | |
283 | | - | |
284 | | - | |
285 | | - | |
286 | | - | |
287 | | - | |
288 | | - | |
289 | | - | |
290 | | - | |
291 | | - | |
292 | | - | |
293 | | - | |
294 | | - | |
295 | | - | |
296 | | - | |
297 | | - | |
298 | | - | |
299 | | - | |
300 | | - | |
301 | | - | |
302 | | - | |
303 | | - | |
304 | | - | |
305 | | - | |
306 | | - | |
307 | | - | |
308 | | - | |
309 | | - | |
310 | | - | |
311 | | - | |
312 | | - | |
313 | | - | |
314 | | - | |
315 | | - | |
316 | | - | |
317 | | - | |
318 | | - | |
319 | | - | |
320 | | - | |
321 | | - | |
322 | | - | |
323 | | - | |
324 | | - | |
325 | | - | |
326 | | - | |
327 | | - | |
| 278 | + | |
| 279 | + | |
| 280 | + | |
| 281 | + | |
| 282 | + | |
| 283 | + | |
| 284 | + | |
| 285 | + | |
| 286 | + | |
| 287 | + | |
| 288 | + | |
| 289 | + | |
| 290 | + | |
| 291 | + | |
| 292 | + | |
| 293 | + | |
| 294 | + | |
| 295 | + | |
| 296 | + | |
| 297 | + | |
| 298 | + | |
| 299 | + | |
| 300 | + | |
| 301 | + | |
| 302 | + | |
| 303 | + | |
| 304 | + | |
| 305 | + | |
| 306 | + | |
| 307 | + | |
| 308 | + | |
| 309 | + | |
| 310 | + | |
| 311 | + | |
| 312 | + | |
| 313 | + | |
| 314 | + | |
| 315 | + | |
| 316 | + | |
| 317 | + | |
| 318 | + | |
| 319 | + | |
| 320 | + | |
| 321 | + | |
| 322 | + | |
| 323 | + | |
| 324 | + | |
| 325 | + | |
| 326 | + | |
| 327 | + | |
328 | 328 | | |
329 | 329 | | |
330 | 330 | | |
| |||
0 commit comments