Bump the pip group across 1 directory with 3 updates #5038

dependabot · 2025-11-18T14:15:06Z

Bumps the pip group with 3 updates in the / directory: cryptography, future and protobuf.

Updates cryptography from 37.0.4 to 44.0.1

Changelog

Sourced from cryptography's changelog.

44.0.1 - 2025-02-11
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.4.1.
* We now build ``armv7l`` ``manylinux`` wheels and publish them to PyPI.
* We now build ``manylinux_2_34`` wheels and publish them to PyPI.
.. _v44-0-0:
44.0.0 - 2024-11-27
BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL < 3.9.

Deprecated Python 3.7 support. Python 3.7 is no longer supported by the Python core team. Support for Python 3.7 will be removed in a future cryptography release.

Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.4.0.

macOS wheels are now built against the macOS 10.13 SDK. Users on older versions of macOS should upgrade, or they will need to build cryptography themselves.

Enforce the :rfc:5280 requirement that extended key usage extensions must not be empty.

Added support for timestamp extraction to the :class:~cryptography.fernet.MultiFernet class.

Relax the Authority Key Identifier requirements on root CA certificates during X.509 verification to allow fields permitted by :rfc:5280 but forbidden by the CA/Browser BRs.

Added support for :class:~cryptography.hazmat.primitives.kdf.argon2.Argon2id when using OpenSSL 3.2.0+.

Added support for the :class:~cryptography.x509.Admissions certificate extension.

Added basic support for PKCS7 decryption (including S/MIME 3.2) via :func:~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der, :func:~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_pem, and :func:~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_smime.

.. _v43-0-3:

43.0.3 - 2024-10-18
* Fixed release metadata for ``cryptography-vectors``
.. _v43-0-2:
43.0.2 - 2024-10-18
Fixed compilation when using LibreSSL 4.0.0.

.. _v43-0-1:

... (truncated)

Commits

adaaaed Bump for 44.0.1 release (#12441)
ccc61da [backport] test and build on armv7l (#12420) (#12431)
f299a48 remove deprecated call (#12052)
439eb05 Bump version for 44.0.0 (#12051)
2c5ad4d chore(deps): bump maturin from 1.7.4 to 1.7.5 in /.github/requirements (#12050)
d23968a chore(deps): bump libc from 0.2.165 to 0.2.166 (#12049)
133c0e0 Bump x509-limbo and/or wycheproof in CI (#12047)
f2259d7 Bump BoringSSL and/or OpenSSL in CI (#12046)
e201c87 fixed metadata in changelog (#12044)
c6104cc Prohibit Python 3.9.0, 3.9.1 -- they have a bug that causes errors (#12045)
Additional commits viewable in compare view

Updates future from 0.17.1 to 1.0.0

Release notes

Sourced from future's releases.

v1.0.0

The new version number of 1.0.0 indicates that the python-future project, like Python 2, is now done.

The most important change in this release is adding support for Python 3.12 (ba1cc50 and a6222d2 and bcced95).

This release also includes these fixes:

Small updates to the docs

Add SECURITY.md describing security policy (0598d1b)

Fix pasteurize: NameError: name 'unicode' is not defined (de68c10)

Move CI to GitHub Actions (8cd11e8)

Add setuptools to requirements for building docs (0c347ff)

Fix typos in docs (350e87a)

Make the fix_unpacking fixer more robust (de68c10)

Small improvements to shell scripts according to shellcheck (6153844)

v0.18.3

This is a minor bug-fix release containing a number of fixes:

Backport fix for bpo-38804 (c91d70b)

Fix bug in fix_print.py fixer (dffc579)

Fix bug in fix_raise.py fixer (3401099)

Fix newint bool in py3 (fe645ba)

Fix bug in super() with metaclasses (6e27aac)

docs: fix simple typo, reqest -> request (974eb1f)

Correct eq (c780bf5)

Pass if lint fails (2abe00d)

Update docker image and parcel out to constant variable. Add comment to update version constant (45cf382)

fix order (f96a219)

Add flake8 to image (046ff18)

Make lint.sh executable (58cc984)

Add docker push to optimize CI (01e8440)

Build System (42b3025)

Add docs build status badge to README.md (3f40bd7)

Use same docs requirements in tox (18ecc5a)

Add docs/requirements.txt (5f9893f)

Add PY37_PLUS, PY38_PLUS, and PY39_PLUS (bee0247)

fix 2.6 test, better comment (ddedcb9)

fix 2.6 test (3f1ff7e)

remove nan test (4dbded1)

include list test values (e3f1a12)

fix other python2 test issues (c051026)

fix missing subTest (f006cad)

import from old imp library on older python versions (fc84fa8)

replace fstrings with format for python 3.4,3.5 (4a687ea)

minor style/spelling fixes (8302d8c)

improve cmp function, add unittest (0d95a40)

Pin typing==3.7.4.1 for Python 3.3 compatiblity (1a48f1b)

... (truncated)

Changelog

Sourced from future's changelog.

.. _whats-old:

Changes in previous versions

Changes in the most recent major version are here: :ref:whats-new.

Changes in version 0.18.3 (2023-01-13)

This is a minor bug-fix release containing a number of fixes:

Backport fix for bpo-38804 (c91d70b)

Fix bug in fix_print.py fixer (dffc579)

Fix bug in fix_raise.py fixer (3401099)

Fix newint bool in py3 (fe645ba)

Fix bug in super() with metaclasses (6e27aac)

docs: fix simple typo, reqest -> request (974eb1f)

Correct eq (c780bf5)

Pass if lint fails (2abe00d)

Update docker image and parcel out to constant variable. Add comment to update version constant (45cf382)

fix order (f96a219)

Add flake8 to image (046ff18)

Make lint.sh executable (58cc984)

Add docker push to optimize CI (01e8440)

Build System (42b3025)

Add docs build status badge to README.md (3f40bd7)

Use same docs requirements in tox (18ecc5a)

Add docs/requirements.txt (5f9893f)

Add PY37_PLUS, PY38_PLUS, and PY39_PLUS (bee0247)

fix 2.6 test, better comment (ddedcb9)

fix 2.6 test (3f1ff7e)

remove nan test (4dbded1)

include list test values (e3f1a12)

fix other python2 test issues (c051026)

fix missing subTest (f006cad)

import from old imp library on older python versions (fc84fa8)

replace fstrings with format for python 3.4,3.5 (4a687ea)

minor style/spelling fixes (8302d8c)

improve cmp function, add unittest (0d95a40)

Pin typing==3.7.4.1 for Python 3.3 compatiblity (1a48f1b)

Fix various py26 unit test failures (9ca5a14)

Add initial contributing guide with docs build instruction (e55f915)

Add docs building to tox.ini (3ee9e7f)

Support NumPy's specialized int types in builtins.round (b4b54f0)

Added r""" to the docstring to avoid warnings in python3 (5f94572)

Add subclasscheck for past.types.basestring (c9bc0ff)

Correct example in README (681e78c)

Add simple documentation (6c6e3ae)

Add pre-commit hooks (a9c6a37)

Handling of next and next by future.utils.get_next was reversed (52b0ff9)

... (truncated)

Commits

2bdbfa5 Tidy up README
a7097f8 Update docs
e32250e Update docs pointing to changelog
dde60ad Move old "What's New" entries to the change log
b2ea420 Remove hacky logo from docs
a10a78b Update "What's New"
9f87630 Update the FAQ entries on compatibility and contributing
f4a1f04 Docs: replace http links with https
30c525e Merge branch 'master' of https://github.com/PythonCharmers/python-future
70b36a8 Disable Python 2.6 CI tests for now
Additional commits viewable in compare view

Updates protobuf from 4.23.4 to 4.25.8

Commits

a4cbdd3 Updating version.json and repo version numbers to: 25.8
29445be Merge pull request #21880 from shaod2/py-25
cc13b69 Remove debugging code and add EOLs
d31100c Manually backport recursion limit enforcement to 25.x
88a3b90 Change pre-22 poison pill to only log once per affected message type. (#21754)
320eafa Weaken vulnerable gencode poison pills to warning by default.
f584fe3 Merge branch 'protocolbuffers:25.x' into 25.x
c710036 Update test_upb.yml to use ubuntu-22
9721758 Fix missing trailing newline.
cca7b28 Update test_upb.yml to use ubuntu-22
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the pip group with 3 updates in the / directory: [cryptography](https://github.com/pyca/cryptography), [future](https://github.com/PythonCharmers/python-future) and [protobuf](https://github.com/protocolbuffers/protobuf). Updates `cryptography` from 37.0.4 to 44.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@37.0.4...44.0.1) Updates `future` from 0.17.1 to 1.0.0 - [Release notes](https://github.com/PythonCharmers/python-future/releases) - [Changelog](https://github.com/PythonCharmers/python-future/blob/master/docs/changelog.rst) - [Commits](PythonCharmers/python-future@v0.17.1...v1.0.0) Updates `protobuf` from 4.23.4 to 4.25.8 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](protocolbuffers/protobuf@v4.23.4...v4.25.8) --- updated-dependencies: - dependency-name: cryptography dependency-version: 44.0.1 dependency-type: direct:production dependency-group: pip - dependency-name: future dependency-version: 1.0.0 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 4.25.8 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 18, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the pip group across 1 directory with 3 updates #5038

Bump the pip group across 1 directory with 3 updates #5038

Uh oh!

dependabot bot commented on behalf of github Nov 18, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the pip group across 1 directory with 3 updates #5038

Are you sure you want to change the base?

Bump the pip group across 1 directory with 3 updates #5038

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 18, 2025

v1.0.0

v0.18.3

Changes in version 0.18.3 (2023-01-13)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants