search

chaos-genius / chaos_genius

ML powered analytics engine for outlier detection and root cause analysis.
https://www.chaosgenius.io
MIT License
737 stars 83 forks source link

chore(deps): bump cryptography from 36.0.2 to 38.0.4 #1170

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps cryptography from 36.0.2 to 38.0.4.

Changelog

Sourced from cryptography's changelog.

38.0.4 - 2022-11-27


* Fixed compilation when using LibreSSL 3.6.0.
* Fixed error when using ``py2app`` to build an application with a
  ``cryptography`` dependency.

.. _v38-0-3:


38.0.3 - 2022-11-01

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.7, which resolves CVE-2022-3602 and CVE-2022-3786.

.. _v38-0-2:

38.0.2 - 2022-10-11 (YANKED)


.. attention::

This release was subsequently yanked from PyPI due to a regression in OpenSSL.



    

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.6.
    • 



.. _v38-0-1:


38.0.1 - 2022-09-07



* Fixed parsing TLVs in ASN.1 with length greater than 65535 bytes (typically
  seen in large CRLs).

.. _v38-0-0:

38.0.0 - 2022-09-06



    

  • Final deprecation of OpenSSL 1.1.0. The next release of cryptography
will drop support.
    • 

  • We no longer ship manylinux2010 wheels. Users should upgrade to the
latest pip to ensure this doesn't cause issues downloading wheels on
their platform. We now ship manylinux_2_28 wheels for users on new
enough platforms.
    • 

  • Updated the minimum supported Rust version (MSRV) to 1.48.0, from 1.41.0.
Users with the latest pip will typically get a wheel and not need Rust
installed, but check :doc:/installation for documentation on installing a
newer rustc if required.
</tr></table>

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
netlify[bot] commented 1 year ago

Deploy Preview for frontend-sb failed.

Name Link
Latest commit 0e57afc583306aa6bcac564fb864805b8b354ae9
Latest deploy log https://app.netlify.com/sites/frontend-sb/deploys/63862e8f3671e500084ccf99
gitpod-io[bot] commented 1 year ago

dependabot[bot] commented 1 year ago

Superseded by #1175.