Closed dependabot[bot] closed 3 months ago
So currently we have the same requirements in signer and repo (apart from securesystemslib options):
"securesystemslib[...] ~= 0.31.0",
"tuf ~= 3.0",
For repo it's offering this upgrade
"securesystemslib[...] ~= 1.0.0",
"tuf ~= 4.0",
For signer it's offering this one:
"securesystemslib[...] >= 0.31,< 1.1",
"tuf >= 3,< 5",
I'm not impressed by the consistency. I'm sure there is a reason to do completely different things in these two cases but since those reasons are never spelled out... :shrug:
I rewrote this one pretty extensively, I think it's fine now.
Looks like these dependencies are updatable in another way, so this is no longer needed.
wow thanks
Updates the requirements on securesystemslib[awskms,azurekms,gcpkms,pynacl,sigstore], tuf, mypy, ruff, boto3, botocore, cryptography, grpcio-status, protobuf, securesystemslib, sigstore-rekor-types and securesystemslib[awskms,azurekms,gcpkms,hsm,sigstore] to permit the latest version. Updates
securesystemslib[awskms,azurekms,gcpkms,pynacl,sigstore]
to 1.0.0Release notes
Sourced from securesystemslib[awskms,azurekms,gcpkms,pynacl,sigstore]'s releases.
Changelog
Sourced from securesystemslib[awskms,azurekms,gcpkms,pynacl,sigstore]'s changelog.
... (truncated)
Commits
1092ac6
Merge pull request #807 from lukpueh/release-1.0.0fe34bac
Update v1.0.0 entry in CHANGELOGc682259
Release 1.0.05789578
Merge pull request #800 from lukpueh/vault-signeracae70a
Add VaultSigner and tests66a56cb
Merge pull request #804 from secure-systems-lab/dependabot/pip/dependencies-9...c48a451
Merge pull request #803 from secure-systems-lab/dependabot/pip/test-and-lint-...557378e
Merge pull request #806 from lukpueh/rm-stray-globals6975b81
Remove 3 stray global key type constants402c898
Merge pull request #802 from lukpueh/rm-stability-disclaimersUpdates
tuf
from 3.1.1 to 4.0.0Release notes
Sourced from tuf's releases.
Changelog
Sourced from tuf's changelog.
Commits
2d6fc74
Merge pull request #2601 from jku/release-v4928702a
Release v4.0.0892c789
Merge pull request #2600 from lukpueh/set-max-sslib-versionbc3ebd8
Constrain securesystemslib dependency to <0.32.05947bd0
Merge pull request #2594 from theupdateframework/dependabot/pip/build-and-rel...afa4619
Merge pull request #2596 from theupdateframework/dependabot/github_actions/ac...7c5cae3
Merge pull request #2595 from theupdateframework/dependabot/pip/test-and-lint...ad2c98a
Merge pull request #2593 from theupdateframework/dependabot/pip/dependencies-...6cd2d22
build(deps): bump the dependencies group with 1 update9f4906b
build(deps): bump the test-and-lint-dependencies group with 1 updateUpdates
mypy
from 1.9.0 to 1.10.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
3faf0fc
Remove +dev for version for release 1.10a5998d2
Update CHANGELOG.md (#17159)62ea5b0
Various updates to changelog for 1.10 (#17158)2f0864c
Update CHANGELOG.md with draft for release 1.10 (#17150)e1443bb
fix: incorrect returned type of access descriptors on unions of types (#16604)5161ac2
Sync typeshed (#17124)e2fc1f2
Fix crash when expanding invalid Unpack in aCallable
alias (#17028)3ff6e47
Docs: docstrings in checker.py, ast_helpers.py (#16908)732d98e
Fix string formatting for string enums (#16555)8019010
Narrow individual items when matching a tuple to a sequence pattern (#16905)Updates
ruff
from 0.3.5 to 0.4.3Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
1e91a09
Bump version to v0.4.3 (#11274)d0f51c6
Remove remainingruff_shrinking
references (#11272)8dd3811
Use function range forreimplemented-operator
diagnostics (#11271)894cd13
[refurb
] Ignore methods inreimplemented-operator
(FURB118
) (#11270)f3284fd
Remove unnecessary check for RUF020 enabled (#11268)82dd5e6
[red-knot] resolve class members (#11256)6a1e555
Upgrade to Rust 1.78 (#11260)349a4cf
Remove trailing reference section (#11257)dfbeca5
ruff server
no longer hangs after shutdown (#11222)9e69cd6
Rephrase rationale forpytest-incorrect-pytest-import
(#11255)Updates
boto3
from 1.34.98 to 1.34.99Changelog
Sourced from boto3's changelog.
Commits
4897613
Merge branch 'release-1.34.99'1b78aed
Bumping version to 1.34.99c8a5b57
Add changelog entries from botocore9213bfe
Merge branch 'release-1.34.98' into developUpdates
botocore
from 1.34.98 to 1.34.99Changelog
Sourced from botocore's changelog.
Commits
6eec349
Merge branch 'release-1.34.99'ce24680
Bumping version to 1.34.99b2acef6
Update endpoints modelba81f3a
Update to latest modelsfa67bff
Merge branch 'release-1.34.98' into developUpdates
cryptography
from 42.0.6 to 42.0.7Changelog
Sourced from cryptography's changelog.
Commits
0cc7fc3
Prepare for 42.0.7 release (#10949)Updates
grpcio-status
from 1.62.2 to 1.63.0Updates
protobuf
from 4.25.3 to 5.26.1Commits
2434ef2
Updating version.json and repo version numbers to: 26.149253b1
Merge pull request #16308 from protocolbuffers/cp-26x-39bf69ec
Fix validateFeatures to be called after resolved features are actually set to...b752bc2
Merge pull request #16307 from protocolbuffers/cp-26x-2f7d2326
Merge pull request #16309 from protocolbuffers/cp-26x-42e51ff6
Cherry-pick required label handling in JRuby field descriptor from https://gi...a2f5303
Update cmake stalenes6a177d2
Merge branch '26.x' into cp-26x-42d3d8ba
Expand cpp_features_proto_srcs visibilitye1092ee
Merge pull request #16294 from protocolbuffers/cp-26xUpdates
securesystemslib
from 0.31.0 to 1.0.0Release notes
Sourced from securesystemslib's releases.
Changelog
Sourced from securesystemslib's changelog.
Commits
1092ac6
Merge pull request #807 from lukpueh/release-1.0.0fe34bac
Update v1.0.0 entry in CHANGELOGc682259
Release 1.0.05789578
Merge pull request #800 from lukpueh/vault-signeracae70a
Add VaultSigner and tests66a56cb
Merge pull request #804 from secure-systems-lab/dependabot/pip/dependencies-9...c48a451
Merge pull request #803 from secure-systems-lab/dependabot/pip/test-and-lint-...557378e
Merge pull request #806 from lukpueh/rm-stray-globals6975b81
Remove 3 stray global key type constants402c898
Merge pull request #802 from lukpueh/rm-stability-disclaimersUpdates
sigstore-rekor-types
from 0.0.11 to 0.0.13Release notes
Sourced from sigstore-rekor-types's releases.
Commits
cb51dc2
rekor_types: 0.0.130bbbec8
bump rekor to 1.3.6 (#26)7637117
build(deps): bump actions/deploy-pages from 4.0.4 to 4.0.5 (#37)86ca37e
build(deps-dev): update ruff requirement from <0.3.4 to <0.3.5 (#38)a1fa8f3
build(deps-dev): update ruff requirement from <0.3.3 to <0.3.4 (#36)734dd39
build(deps-dev): update ruff requirement from <0.3.1 to <0.3.3 (#34)dcd6305
build(deps): bump pypa/gh-action-pypi-publish from 1.8.12 to 1.8.14 (#35)b5391b1
build(deps-dev): update ruff requirement from <0.2.3 to <0.3.1 (#32)8d5a1c2
build(deps): bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.12 (#33)2ef01cc
build(deps-dev): update ruff requirement from <0.2.2 to <0.2.3 (#31)Updates
tuf
to 4.0.0Release notes
Sourced from tuf's releases.
Changelog
Sourced from tuf's changelog.
Commits
2d6fc74
Merge pull request #2601 from jku/release-v4928702a
Release v4.0.0892c789
Merge pull request #2600 from lukpueh/set-max-sslib-versionbc3ebd8
Constrain securesystemslib dependency to <0.32.05947bd0
Merge pull request #2594 from theupdateframework/dependabot/pip/build-and-rel...afa4619
Merge pull request #2596 from theupdateframework/dependabot/github_actions/ac...7c5cae3
Merge pull request #2595 from theupdateframework/dependabot/pip/test-and-lint...ad2c98a
Merge pull request #2593 from theupdateframework/dependabot/pip/dependencies-...6cd2d22
build(deps): bump the dependencies group with 1 update9f4906b
build(deps): bump the test-and-lint-dependencies group with 1 updateUpdates
mypy
from 1.9.0 to 1.10.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
3faf0fc
Remove +dev for version for release 1.10a5998d2
Update CHANGELOG.md (#17159)62ea5b0
Various updates to changelog for 1.10 (#17158)2f0864c
Update CHANGELOG.md with draft for release 1.10 (#17150)e1443bb
fix: incorrect returned type of access descriptors on unions of types (#16604)5161ac2
Sync typeshed (#17124)e2fc1f2
Fix crash when expanding invalid Unpack in aCallable
alias (#17028)3ff6e47
Docs: docstrings in checker.py, ast_helpers.py (#16908)732d98e
Fix string formatting for string enums (#16555)8019010
Narrow individual items when matching a tuple to a sequence pattern (#16905)Updates
ruff
from 0.3.5 to 0.4.3Release notes
Sourced from ruff's releases.