Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 4, 2022

Bumps pycryptodome from 3.11.0 to 3.14.1.

Changelog

Sourced from pycryptodome's changelog.

3.14.1 (5 February 2022) ++++++++++++++++++++++++++

Resolved issues

  • GH#595: Fixed memory leak for GMP integers. Thanks to Witalij Siebert and Pablo Quílez.

3.14.0 (30 January 2022) ++++++++++++++++++++++++++

New features

  • Add support for curve NIST P-192.

3.13.0 (23 January 2022) ++++++++++++++++++++++++++

New features

  • Add support for curve NIST P-224.

Resolved issues

  • GH#590: Fixed typing info for Crypto.PublicKey.ECC.

Other changes

  • Relaxed ECDSA requirements for FIPS 186 signatures and accept any SHA-2 or SHA-3 hash. sign() and verify() will be performed even if the hash is stronger than the ECC key.

3.12.0 (4 December 2021) ++++++++++++++++++++++++++

New features

  • ECC keys in the SEC1 format can be exported and imported.
  • Add support for KMAC128, KMAC256, TupleHash128, and TupleHash256 (NIST SP-800 185).
  • Add support for KangarooTwelve.

Resolved issues

  • GH#563: An asymmetric key could not be imported as a memoryview.
  • GH#566: cSHAKE128/256 generated a wrong output for customization strings longer than 255 bytes.
  • GH#582: CBC decryption generated the wrong plaintext when the input and the output were the same buffer. Thanks to Michael K. Ashburn.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 4, 2022
@dependabot dependabot bot force-pushed the dependabot/pip/Backend/pycryptodome-3.14.1 branch from f6e233c to 2e9fd52 Compare February 4, 2022 20:20
@sonarqubecloud
Copy link

sonarqubecloud bot commented Feb 4, 2022

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

Bumps [pycryptodome](https://github.com/Legrandin/pycryptodome) from 3.11.0 to 3.14.1.
- [Release notes](https://github.com/Legrandin/pycryptodome/releases)
- [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst)
- [Commits](Legrandin/pycryptodome@v3.11.0...v3.14.1)

---
updated-dependencies:
- dependency-name: pycryptodome
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/Backend/pycryptodome-3.14.1 branch from 2e9fd52 to b0e415a Compare May 5, 2022 17:14
@sonarqubecloud
Copy link

sonarqubecloud bot commented May 5, 2022

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 23, 2022

Superseded by #56.

@dependabot dependabot bot closed this Jun 23, 2022
@dependabot dependabot bot deleted the dependabot/pip/Backend/pycryptodome-3.14.1 branch June 23, 2022 02:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant