Skip to content

chore(deps): bump bcrypt from 4.3.0 to 5.0.0#18753

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/bcrypt-5.0.0
Open

chore(deps): bump bcrypt from 4.3.0 to 5.0.0#18753
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/bcrypt-5.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Sep 26, 2025

Bumps bcrypt from 4.3.0 to 5.0.0.

Changelog

Sourced from bcrypt's changelog.

5.0.0

  • Bumped MSRV to 1.74.
  • Added support for Python 3.14 and free-threaded Python 3.14.
  • Added support for Windows on ARM.
  • Passing hashpw a password longer than 72 bytes now raises a ValueError. Previously the password was silently truncated, following the behavior of the original OpenBSD bcrypt implementation.
Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 26, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 26, 2025 09:24
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 26, 2025
@dependabot dependabot bot force-pushed the dependabot/pip/bcrypt-5.0.0 branch 4 times, most recently from 39a8d1b to 10eff61 Compare October 2, 2025 09:06
@dependabot dependabot bot force-pushed the dependabot/pip/bcrypt-5.0.0 branch 6 times, most recently from 5d02500 to f4762a4 Compare October 13, 2025 09:07
@dependabot dependabot bot force-pushed the dependabot/pip/bcrypt-5.0.0 branch 4 times, most recently from 2b59174 to 95b6529 Compare October 20, 2025 09:05
@dependabot dependabot bot force-pushed the dependabot/pip/bcrypt-5.0.0 branch 2 times, most recently from 19a66ec to 159253d Compare October 23, 2025 09:06
@miketheman
Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [bcrypt](https://github.com/pyca/bcrypt) from 4.3.0 to 5.0.0.
- [Changelog](https://github.com/pyca/bcrypt/blob/main/release.py)
- [Commits](pyca/bcrypt@4.3.0...5.0.0)

---
updated-dependencies:
- dependency-name: bcrypt
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/bcrypt-5.0.0 branch from 159253d to df54bd2 Compare March 31, 2026 13:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant