Commit graph

10479 commits

Author SHA1 Message Date
dependabot[bot]
1fd1bcef62
Bump dessant/lock-threads from 4.0.0 to 4.0.1 (#9067)
Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md)
- [Commits](c1b35aecc5...be8aa5be94)

---
updated-dependencies:
- dependency-name: dessant/lock-threads
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 13:14:44 +00:00
dependabot[bot]
22625af537
Bump self_cell from 1.0.0 to 1.0.1 in /src/rust (#9066)
Bumps [self_cell](https://github.com/Voultapher/self_cell) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/Voultapher/self_cell/releases)
- [Commits](https://github.com/Voultapher/self_cell/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: self_cell
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 13:10:35 +00:00
Alex Gaynor
0f5071e251
Test against Debian Trixie (#9062) 2023-06-13 01:11:20 +00:00
William Woodruff
a00f17efc0
x509/common: make SPKI algorithm public (#9061)
No functional changes; this will be needed for path validation.

Signed-off-by: William Woodruff <william@trailofbits.com>
2023-06-12 22:42:52 +00:00
dependabot[bot]
b9dc2aaa79
Bump argcomplete from 3.1.0 to 3.1.1 (#9059)
Bumps [argcomplete](https://github.com/kislyuk/argcomplete) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/kislyuk/argcomplete/releases)
- [Changelog](https://github.com/kislyuk/argcomplete/blob/develop/Changes.rst)
- [Commits](https://github.com/kislyuk/argcomplete/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: argcomplete
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-12 12:39:20 -07:00
Alex Gaynor
769d9ee7c2
Switch from ourborous to self_cell (#8800)
The motivation here is hopefully (?) to reduce compilation times.

The updated motivation is ouroboros is officially unmaintained now
2023-06-12 05:23:06 -05:00
Alex Gaynor
8e0815341f
Cleanup some code for old MSRV (#9058) 2023-06-11 02:00:54 -05:00
dependabot[bot]
3a637e1da6
Bump argcomplete from 3.0.8 to 3.1.0 (#9057)
Bumps [argcomplete](https://github.com/kislyuk/argcomplete) from 3.0.8 to 3.1.0.
- [Release notes](https://github.com/kislyuk/argcomplete/releases)
- [Changelog](https://github.com/kislyuk/argcomplete/blob/develop/Changes.rst)
- [Commits](https://github.com/kislyuk/argcomplete/compare/v3.0.8...v3.1.0)

---
updated-dependencies:
- dependency-name: argcomplete
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-10 22:55:08 +00:00
dependabot[bot]
f481060baa
Bump pytest from 7.3.1 to 7.3.2 (#9056)
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.3.1 to 7.3.2.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.3.1...7.3.2)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-10 22:50:28 +00:00
Alex Gaynor
2baf62196f
fixes #9048 -- document where to find known vulnerabilities (#9055) 2023-06-10 14:12:44 -06:00
Alex Gaynor
986f0b19b5
Added several tests and cleanups for serialization and EC (#9049) 2023-06-10 13:35:24 -06:00
Alex Gaynor
bab5cecd63
Simplify debian rust instructions now that bookworm is out (#9050) 2023-06-10 13:26:33 -06:00
dependabot[bot]
645069d21d
Bump platformdirs from 3.5.1 to 3.5.3 (#9054)
Bumps [platformdirs](https://github.com/platformdirs/platformdirs) from 3.5.1 to 3.5.3.
- [Release notes](https://github.com/platformdirs/platformdirs/releases)
- [Changelog](https://github.com/platformdirs/platformdirs/blob/main/CHANGES.rst)
- [Commits](https://github.com/platformdirs/platformdirs/compare/3.5.1...3.5.3)

---
updated-dependencies:
- dependency-name: platformdirs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-10 18:57:21 +00:00
dependabot[bot]
eb120966d0
Bump filelock from 3.12.0 to 3.12.1 (#9053)
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.12.0 to 3.12.1.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/py-filelock/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/py-filelock/compare/3.12.0...3.12.1)

---
updated-dependencies:
- dependency-name: filelock
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-10 18:57:11 +00:00
dependabot[bot]
9bba8a1011
Bump actions/checkout from 3.5.2 to 3.5.3 in /.github/actions/wycheproof (#9051)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.2...v3.5.3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-10 18:50:18 +00:00
dependabot[bot]
91315dea9f
Bump actions/checkout from 3.5.2 to 3.5.3 (#9052)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.2...v3.5.3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-10 18:50:09 +00:00
dependabot[bot]
b0b4b28df2
Bump ruff from 0.0.271 to 0.0.272 (#9046)
Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.271 to 0.0.272.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.271...v0.0.272)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-08 13:23:07 +00:00
dependabot[bot]
b69d22897e
Bump sphinx-rtd-theme from 1.2.1 to 1.2.2 (#9045)
Bumps [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) from 1.2.1 to 1.2.2.
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](https://github.com/readthedocs/sphinx_rtd_theme/compare/1.2.1...1.2.2)

---
updated-dependencies:
- dependency-name: sphinx-rtd-theme
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-08 13:13:47 +00:00
dependabot[bot]
a0f1320e2f
Bump proc-macro2 from 1.0.59 to 1.0.60 in /src/rust (#9044)
Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.59 to 1.0.60.
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.59...1.0.60)

---
updated-dependencies:
- dependency-name: proc-macro2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-08 13:09:44 +00:00
Alex Gaynor
6761d7614c
Add 1.64 (maturin) to potential future MSRV list (#9042) 2023-06-08 09:19:30 +08:00
dependabot[bot]
9544e9ce84
Bump urllib3 from 2.0.2 to 2.0.3 (#9041)
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.0.2...2.0.3)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-08 04:45:47 +08:00
dependabot[bot]
634807b17c
Bump ruff from 0.0.270 to 0.0.271 (#9040)
Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.270 to 0.0.271.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.270...v0.0.271)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-08 04:45:28 +08:00
dependabot[bot]
15eba7f014
Bump libc from 0.2.145 to 0.2.146 in /src/rust (#9039)
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.145 to 0.2.146.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.145...0.2.146)

---
updated-dependencies:
- dependency-name: libc
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-07 13:09:29 +00:00
Alex Gaynor
4e3d8a832b
Added CI job for pypy 3.10 nightly (#9038)
Refs #8933
2023-06-07 19:42:22 +08:00
dependabot[bot]
fbe22d8862
Bump lock_api from 0.4.9 to 0.4.10 in /src/rust (#9036)
Bumps [lock_api](https://github.com/Amanieu/parking_lot) from 0.4.9 to 0.4.10.
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Amanieu/parking_lot/compare/lock_api-0.4.9...lock_api-0.4.10)

---
updated-dependencies:
- dependency-name: lock_api
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-06 00:55:57 +00:00
dependabot[bot]
9bb3afb54f
Bump parking_lot_core from 0.9.7 to 0.9.8 in /src/rust (#9035)
Bumps [parking_lot_core](https://github.com/Amanieu/parking_lot) from 0.9.7 to 0.9.8.
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Amanieu/parking_lot/compare/core-0.9.7...core-0.9.8)

---
updated-dependencies:
- dependency-name: parking_lot_core
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-06 00:48:04 +00:00
pyca-boringbot[bot]
8ffe87b3ba
Bump BoringSSL and/or OpenSSL in CI (#9034)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-06-06 00:23:07 +00:00
Alex Gaynor
8b18199d4e
Remove now-unused DSA bindings (#9032) 2023-06-05 20:07:43 +08:00
Alex Gaynor
04c7050362
Added once_cell 1.18.0 to things that require Rust 1.60 (#9031) 2023-06-05 19:54:32 +08:00
dependabot[bot]
3594d9ef3e
Bump markupsafe from 2.1.2 to 2.1.3 (#9028)
Bumps [markupsafe](https://github.com/pallets/markupsafe) from 2.1.2 to 2.1.3.
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/markupsafe/compare/2.1.2...2.1.3)

---
updated-dependencies:
- dependency-name: markupsafe
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 08:33:56 +00:00
dependabot[bot]
c4fd4bb71c
Bump libc from 0.2.144 to 0.2.145 in /src/rust (#9026)
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.144 to 0.2.145.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.144...0.2.145)

---
updated-dependencies:
- dependency-name: libc
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 08:30:12 +00:00
pyca-boringbot[bot]
413e073463
Bump BoringSSL and/or OpenSSL in CI (#9025)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-06-05 00:18:52 +00:00
Alex Gaynor
180fa051b1
Fix linkcheck (#9022) 2023-06-05 05:09:39 +08:00
Alex Gaynor
c10618135d
Attempt to use sccache (#8896) 2023-06-04 19:20:47 +08:00
pyca-boringbot[bot]
5b4d0b7591
Bump BoringSSL and/or OpenSSL in CI (#9021)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-06-03 21:15:24 -04:00
David Benjamin
9db5126d07
Slightly simplify build_openssl.sh (#9020)
CMake 3.13 or later has a -B option which is much less tedious than
making the build directory ahead of time and cd-ing. (I don't know what
CMake versions your CI runs on, so it's possible this won't work.)
2023-06-03 16:07:53 +00:00
pyca-boringbot[bot]
88b0ed7242
Bump BoringSSL and/or OpenSSL in CI (#9018)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-06-03 00:17:00 +00:00
dependabot[bot]
3dfb647c39
Bump typing-extensions from 4.6.2 to 4.6.3 (#9015)
Bumps [typing-extensions](https://github.com/python/typing_extensions) from 4.6.2 to 4.6.3.
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.6.2...4.6.3)

---
updated-dependencies:
- dependency-name: typing-extensions
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-02 13:10:50 +00:00
Alex Gaynor
cb8c68fbe1
always run the backend error checks (#9014) 2023-06-02 10:36:12 +08:00
pyca-boringbot[bot]
81238c8d14
Bump BoringSSL and/or OpenSSL in CI (#9012)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-06-02 00:26:44 +00:00
Alex Gaynor
bfe457df74
Rebuild cffi module if version changes (#9011) 2023-06-02 06:59:47 +08:00
Paul Kehrer
2246aa9775
port 41.0.1 changelog (#9009) 2023-06-01 12:33:05 +00:00
Alex Gaynor
22f53ee1bf
Added tests for NUL bytes in PKCS8 passphrases (#9001) 2023-06-01 11:54:49 +00:00
dependabot[bot]
0cbf35ae8f
Bump rich from 13.4.0 to 13.4.1 (#9005)
Bumps [rich](https://github.com/Textualize/rich) from 13.4.0 to 13.4.1.
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v13.4.0...v13.4.1)

---
updated-dependencies:
- dependency-name: rich
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-01 11:42:26 +00:00
dependabot[bot]
58e9cc1874
Bump openssl from 0.10.53 to 0.10.54 in /src/rust (#9004)
Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.53 to 0.10.54.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.53...openssl-v0.10.54)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-01 11:40:50 +00:00
Paul Kehrer
1355c2e460
tolerate NULL params in ECDSA SHA2 AlgorithmIdentifier (#9002)
* tolerate NULL params in ECDSA SHA2 AlgorithmIdentifier

Java 11 does this incorrectly. It was fixed in Java16+ and they are
planning to do a backport, but we'll need to tolerate this invalid
encoding for a while.

* test both inner and outer
2023-05-31 23:21:28 -04:00
pyca-boringbot[bot]
8d07486ac7
Bump BoringSSL and/or OpenSSL in CI (#9003)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-06-01 09:05:42 +08:00
Alex Gaynor
b1cfa3adef
pyo3 0.19 (#8999)
* Bump pyo3 from 0.18.3 to 0.19.0 in /src/rust

Bumps [pyo3](https://github.com/pyo3/pyo3) from 0.18.3 to 0.19.0.
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pyo3/pyo3/compare/v0.18.3...v0.19.0)

---
updated-dependencies:
- dependency-name: pyo3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* pyo3 0.19

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-01 04:27:10 +08:00
dependabot[bot]
799fe35495
Bump rich from 13.3.5 to 13.4.0 (#8997)
Bumps [rich](https://github.com/Textualize/rich) from 13.3.5 to 13.4.0.
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v13.3.5...v13.4.0)

---
updated-dependencies:
- dependency-name: rich
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 12:17:17 -04:00
pyca-boringbot[bot]
dc7330e9f0
Bump BoringSSL and/or OpenSSL in CI (#8992)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-05-30 23:30:02 -04:00