Skip to content

Bump pynacl from 1.5.0 to 1.6.2 in /python#712

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/python/pynacl-1.6.2
Closed

Bump pynacl from 1.5.0 to 1.6.2 in /python#712
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/python/pynacl-1.6.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2026

Bumps pynacl from 1.5.0 to 1.6.2.

Changelog

Sourced from pynacl's changelog.

1.6.2 (2026-01-01)

  • Updated libsodium to 1.0.20-stable (2025-12-31 build) to resolve CVE-2025-69277.

1.6.1 (2025-11-10)

  • The MAKE environment variable can now be used to specify the make binary that should be used in the build process.

1.6.0 (2025-09-11)

  • BACKWARDS INCOMPATIBLE: Removed support for Python 3.6 and 3.7.
  • Added support for the low level AEAD AES bindings.
  • Added support for crypto_core_ed25519_from_uniform.
  • Update libsodium to 1.0.20-stable (2025-08-27 build).
  • Added support for free-threaded Python 3.14.
  • Added support for Windows on ARM wheels.
Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 6, 2026
@github-actions
Copy link

github-actions bot commented Jan 6, 2026

Test Results (reference)

      165 files   -      3        165 suites   - 3   1h 4m 46s ⏱️ + 1m 11s
      444 tests ±     0        444 ✅ ±     0    0 💤 ±0  0 ❌ ±0 
1 149 720 runs   - 25 272  1 149 048 ✅  - 25 272  672 💤 ±0  0 ❌ ±0 

Results for commit 16e298a. ± Comparison against base commit 27d65e1.

@EnricoMi
Copy link
Owner

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/pip/python/pynacl-1.6.2 branch from 16e298a to b7e69c7 Compare February 22, 2026 12:08
@EnricoMi
Copy link
Owner

@dependabot recreate

Bumps [pynacl](https://github.com/pyca/pynacl) from 1.5.0 to 1.6.2.
- [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pynacl@1.5.0...1.6.2)

---
updated-dependencies:
- dependency-name: pynacl
  dependency-version: 1.6.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/python/pynacl-1.6.2 branch from b7e69c7 to 04ac8d1 Compare February 22, 2026 18:22
@EnricoMi EnricoMi closed this Feb 22, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 22, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/pip/python/pynacl-1.6.2 branch February 22, 2026 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant