search

codersforcauses / elucidate

Documentation: https://elucidate-project-documentation.readthedocs.io/en/latest/
https://elucidate-production.up.railway.app/
MIT License
9 stars 1 forks source link

Bump cryptography from 37.0.4 to 38.0.3 in /server #204

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps cryptography from 37.0.4 to 38.0.3.

Changelog

Sourced from cryptography's changelog.

38.0.3 - 2022-11-01


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.7,
  which resolves *CVE-2022-3602* and *CVE-2022-3786*.

.. _v38-0-2:


38.0.2 - 2022-10-11 (YANKED)

.. attention::

This release was subsequently yanked from PyPI due to a regression in OpenSSL.
  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.6.

.. _v38-0-1:

38.0.1 - 2022-09-07


* Fixed parsing TLVs in ASN.1 with length greater than 65535 bytes (typically
  seen in large CRLs).

.. _v38-0-0:


38.0.0 - 2022-09-06

  • Final deprecation of OpenSSL 1.1.0. The next release of cryptography will drop support.
  • We no longer ship manylinux2010 wheels. Users should upgrade to the latest pip to ensure this doesn't cause issues downloading wheels on their platform. We now ship manylinux_2_28 wheels for users on new enough platforms.
  • Updated the minimum supported Rust version (MSRV) to 1.48.0, from 1.41.0. Users with the latest pip will typically get a wheel and not need Rust installed, but check :doc:/installation for documentation on installing a newer rustc if required.
  • :meth:~cryptography.fernet.Fernet.decrypt and related methods now accept both str and bytes tokens.
  • Parsing CertificateSigningRequest restores the behavior of enforcing that the Extension critical field must be correctly encoded DER. See the issue <https://github.com/pyca/cryptography/issues/6368>_ for complete details.
  • Added two new OpenSSL functions to the bindings to support an upcoming pyOpenSSL release.
  • When parsing :class:~cryptography.x509.CertificateRevocationList and

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/codersforcauses/elucidate/network/alerts).
vercel[bot] commented 1 year ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated
elucidate-frontend ✅ Ready (Inspect) Visit Preview Dec 15, 2022 at 7:35AM (UTC)
codecov[bot] commented 1 year ago

Codecov Report

Base: 7.14% // Head: 83.31% // Increases project coverage by +76.17% :tada:

Coverage data is based on head (2dfea0b) compared to base (7f98e3e). Patch has no changes to coverable lines.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #204 +/- ## ========================================== + Coverage 7.14% 83.31% +76.17% ========================================== Files 36 47 +11 Lines 42 1139 +1097 Branches 14 0 -14 ========================================== + Hits 3 949 +946 - Misses 39 190 +151 ``` | Flag | Coverage Δ | | |---|---|---| | backend | `83.31% <ø> (?)` | | | frontend | `?` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#carryforward-flags-in-the-pull-request-comment) to find out more. | [Impacted Files](https://codecov.io/gh/codersforcauses/elucidate/pull/204?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses) | Coverage Δ | | |---|---|---| | [client/pages/MCQ.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L3BhZ2VzL01DUS52dWU=) | | | | [client/components/Quiz/AnswersBox.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvUXVpei9BbnN3ZXJzQm94LnZ1ZQ==) | | | | [client/components/Dashboard/UserAttributeCard.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvRGFzaGJvYXJkL1VzZXJBdHRyaWJ1dGVDYXJkLnZ1ZQ==) | | | | [client/components/haveAccBtn.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvaGF2ZUFjY0J0bi52dWU=) | | | | [client/components/Quiz/SelectBox.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvUXVpei9TZWxlY3RCb3gudnVl) | | | | [client/components/Section/NavBar.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvU2VjdGlvbi9OYXZCYXIudnVl) | | | | [client/components/Auth/AuthAlert.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvQXV0aC9BdXRoQWxlcnQudnVl) | | | | [client/components/Quiz/QuizList.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvUXVpei9RdWl6TGlzdC52dWU=) | | | | [client/components/Quiz/ContentBox.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvUXVpei9Db250ZW50Qm94LnZ1ZQ==) | | | | [client/components/Auth/AuthForm.vue](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses#diff-Y2xpZW50L2NvbXBvbmVudHMvQXV0aC9BdXRoRm9ybS52dWU=) | | | | ... and [73 more](https://codecov.io/gh/codersforcauses/elucidate/pull/204/diff?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses) | | Help us with your feedback. Take ten seconds to tell us [how you rate us](https://about.codecov.io/nps?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses). Have a feature suggestion? [Share it here.](https://app.codecov.io/gh/feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=codersforcauses)

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.

dependabot[bot] commented 1 year ago

Superseded by #209.