From bca867dc76d2e13d9a9c0a64fbba4a369996f2b3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Feb 2023 00:45:24 +0000 Subject: [PATCH 1/4] Bump cryptography from 3.3.2 to 39.0.1 in /appconfigservice Bumps [cryptography](https://github.com/pyca/cryptography) from 3.3.2 to 39.0.1. - [Release notes](https://github.com/pyca/cryptography/releases) - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/3.3.2...39.0.1) --- updated-dependencies: - dependency-name: cryptography dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- appconfigservice/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/appconfigservice/requirements.txt b/appconfigservice/requirements.txt index e016d14c..31338e19 100644 --- a/appconfigservice/requirements.txt +++ b/appconfigservice/requirements.txt @@ -5,7 +5,7 @@ pymongo[tls,srv]==3.7.2 pytest==5.0.1 requests==2.22.0 pyjwt==2.4.0 -cryptography==3.3.2 +cryptography==39.0.1 gunicorn==20.0.4 python-dotenv==0.10.3 gevent==20.9.0 From 930d046f820224f6dda66175d75af52865e94c29 Mon Sep 17 00:00:00 2001 From: Minu Mathew Date: Wed, 8 Mar 2023 15:22:48 -0600 Subject: [PATCH 2/4] update gevent --- appconfigservice/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/appconfigservice/requirements.txt b/appconfigservice/requirements.txt index 31338e19..406eb0c6 100644 --- a/appconfigservice/requirements.txt +++ b/appconfigservice/requirements.txt @@ -8,7 +8,7 @@ pyjwt==2.4.0 cryptography==39.0.1 gunicorn==20.0.4 python-dotenv==0.10.3 -gevent==20.9.0 +gevent==21.12.0 diskcache==4.0.0 connexion[swagger-ui]==2.9.0 From b6bb74de67286f70f577425eb4e175042497f61c Mon Sep 17 00:00:00 2001 From: Minu Mathew Date: Wed, 8 Mar 2023 15:22:57 -0600 Subject: [PATCH 3/4] update cryptography --- lib/auth-middleware/setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/auth-middleware/setup.py b/lib/auth-middleware/setup.py index 5793aab0..80bafd03 100644 --- a/lib/auth-middleware/setup.py +++ b/lib/auth-middleware/setup.py @@ -29,7 +29,7 @@ install_requires=[ 'PyJWT>=2.4.0,<3', 'requests>=2.22.0,<3', - 'cryptography>=3,<4', + 'cryptography>=39', # I would require flask here, but I want to use the version that the # "calling" app uses, and I don't see a way to guarantee that pip # installs the dependency in the correct order (eg. "calling app" first From caff5615f512945040519e9b949c4294a43bae4b Mon Sep 17 00:00:00 2001 From: Minu Mathew Date: Thu, 9 Mar 2023 11:38:26 -0600 Subject: [PATCH 4/4] updated changelog --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 64514f41..020544b3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -21,6 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Rearranged divs in contribute page. [#1079](https://github.com/rokwire/rokwire-building-blocks-api/issues/1079) - Element stylings in contribute page. [#1087](https://github.com/rokwire/rokwire-building-blocks-api/issues/1087) - Cryptography version bump for contributions. [#1089](https://github.com/rokwire/rokwire-building-blocks-api/issues/1089) +- Cryptography version bump for appconfigservice. [#1089](https://github.com/rokwire/rokwire-building-blocks-api/issues/1100) ### Fixed - Detect secrets GitHub action build error and updated baseline. [#1077](https://github.com/rokwire/rokwire-building-blocks-api/issues/1077)