Commit graph

10117 commits

Author SHA1 Message Date
Paul Kehrer
5e6476a4c6
drop support for openssl < 1.1.1d (#8449)
This removes the OS random engine, which contained the only CPython PSF
licensed code in the repository. Accordingly, that license has now been
removed.
2023-03-24 08:36:58 -04:00
Paul Kehrer
4c24dd05eb
get the proper workflow id for publishing (#8586)
does this fix #8585? maybe.
2023-03-24 08:33:48 -04:00
dependabot[bot]
fd70d79bf6
Bump actions/checkout from 3.4.0 to 3.5.0 (#8590)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.4.0...v3.5.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-24 08:38:53 +00:00
dependabot[bot]
fc7a8717ce
Bump actions/checkout from 3.4.0 to 3.5.0 in /.github/actions/wycheproof (#8588)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.4.0...v3.5.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-24 08:25:59 +00:00
Paul Kehrer
4157ead1e0
reopen main for 41 dev (#8584) 2023-03-24 05:01:01 +00:00
Paul Kehrer
45e3771809
version bump and changelog for 40.0.0 (#8583) 2023-03-24 00:22:14 -04:00
Alex Gaynor
c8328c03af
Migrate x25519 to use rust-openssl (#7933) 2023-03-24 11:48:40 +08:00
Alex Gaynor
370280bb73
fixes #8450 -- enable sparse registry everywhere (#8566) 2023-03-24 11:37:34 +08:00
dependabot[bot]
6a900fefc1
Bump ruff from 0.0.258 to 0.0.259 (#8580)
Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.258 to 0.0.259.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.258...v0.0.259)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-24 02:21:46 +00:00
dependabot[bot]
1a911a0e30
Bump openssl from 0.10.47 to 0.10.48 in /src/rust (#8581)
Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.47 to 0.10.48.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.47...openssl-v0.10.48)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-24 02:16:38 +00:00
dependabot[bot]
f147302e00
Bump filelock from 3.10.2 to 3.10.3 (#8579)
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.10.2 to 3.10.3.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/py-filelock/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/py-filelock/compare/3.10.2...3.10.3)

---
updated-dependencies:
- dependency-name: filelock
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-24 02:10:05 +00:00
pyca-boringbot[bot]
005bbe0559
Bump BoringSSL and/or OpenSSL in CI (#8578)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-24 00:20:55 +00:00
dependabot[bot]
41ebbe7de9
Bump filelock from 3.10.0 to 3.10.2 (#8575)
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.10.0 to 3.10.2.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/py-filelock/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/py-filelock/compare/3.10.0...3.10.2)

---
updated-dependencies:
- dependency-name: filelock
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-23 11:58:01 +00:00
Paul Kehrer
9b906f00d6
we don't need these in the constraints since we no longer depend on them (#8577) 2023-03-23 11:55:21 +00:00
dependabot[bot]
c45706e265
Bump ruff from 0.0.257 to 0.0.258 (#8574)
Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.257 to 0.0.258.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.257...v0.0.258)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-23 11:48:30 +00:00
pyca-boringbot[bot]
6cdec1bace
Bump BoringSSL and/or OpenSSL in CI (#8573)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-23 00:17:56 +00:00
Alex Gaynor
5e081e5495
Refs #8570 -- lower cxx version to match our MSRV (#8572) 2023-03-22 22:03:50 +00:00
Paul Kehrer
3e9d6b72aa
handle case where WIN32_LEAN_AND_MEAN may already be defined (#8571) 2023-03-22 21:58:25 +00:00
dependabot[bot]
ddb4c38a03
Bump actions/stale from 7.0.0 to 8.0.0 (#8569)
Bumps [actions/stale](https://github.com/actions/stale) from 7.0.0 to 8.0.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v7.0.0...v8.0.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-22 17:42:11 -04:00
Alex Gaynor
0ff4eb208d
also update mtimes on src/_cffi_src (#8567) 2023-03-22 20:27:36 +08:00
Alex Gaynor
e09fccc749
Remove unused error bindings (#8568) 2023-03-22 12:25:45 +00:00
dependabot[bot]
98dc45ea75
Bump proc-macro2 from 1.0.52 to 1.0.53 in /src/rust (#8565)
Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.52 to 1.0.53.
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.52...1.0.53)

---
updated-dependencies:
- dependency-name: proc-macro2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-22 12:04:52 +00:00
pyca-boringbot[bot]
6461a448ac
Bump BoringSSL and/or OpenSSL in CI (#8562)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-21 21:08:09 -04:00
dependabot[bot]
a1d04fe517
Bump iana-time-zone from 0.1.53 to 0.1.54 in /src/rust (#8561)
Bumps [iana-time-zone](https://github.com/strawlab/iana-time-zone) from 0.1.53 to 0.1.54.
- [Release notes](https://github.com/strawlab/iana-time-zone/releases)
- [Changelog](https://github.com/strawlab/iana-time-zone/blob/main/CHANGELOG.md)
- [Commits](https://github.com/strawlab/iana-time-zone/compare/v0.1.53...v0.1.54)

---
updated-dependencies:
- dependency-name: iana-time-zone
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-21 13:10:44 +00:00
Paul Kehrer
28c5b8f6f8
remove hypothesis from our test suite (#8560)
we weren't really getting any value from it and we haven't expanded our
use in numerous years
2023-03-21 11:54:09 +00:00
Paul Kehrer
2daf74aabf
update docs about testing, switch to 3.1.0 across more of our CI (#8558) 2023-03-21 07:29:52 -04:00
Paul Kehrer
760ef96e80
no more types-requests (#8559) 2023-03-21 07:16:45 -04:00
pyca-boringbot[bot]
cd96243bc5
Bump BoringSSL and/or OpenSSL in CI (#8557)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-21 00:26:01 +00:00
Alex Gaynor
f371af837a
Added support for handling python buffers in Rust code (#8556)
This is extra mega cursed, and strictly speaking unsound. It does, however, match the status quo ante, where someone mutating a buffer while its being used in cffi code will basically always be UB.
2023-03-21 08:16:53 +08:00
Alex Gaynor
328f04dd8a
libressl 3.7.1 (#8553) 2023-03-20 01:42:28 +00:00
Alex Gaynor
45a5100e4e
Simplify/unify Rust and Python OpenSSL error handling (#8552) 2023-03-20 09:41:48 +08:00
dependabot[bot]
7a5170629f
Bump openssl from 0.10.46 to 0.10.47 in /src/rust (#8550)
Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.46 to 0.10.47.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.46...openssl-v0.10.47)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 00:52:04 +00:00
pyca-boringbot[bot]
75f13bf9ce
Bump BoringSSL and/or OpenSSL in CI (#8549)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-19 20:40:42 -04:00
pyca-boringbot[bot]
0dc2b568aa
Bump BoringSSL and/or OpenSSL in CI (#8548)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-19 00:19:59 +00:00
dependabot[bot]
b7c57f6c74
Bump importlib-metadata from 6.0.0 to 6.1.0 (#8544)
Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/CHANGES.rst)
- [Commits](https://github.com/python/importlib_metadata/compare/v6.0.0...v6.1.0)

---
updated-dependencies:
- dependency-name: importlib-metadata
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-18 18:37:37 +00:00
dependabot[bot]
0e42aa8669
Bump ruff from 0.0.256 to 0.0.257 (#8543)
Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.256 to 0.0.257.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.256...v0.0.257)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-18 18:33:27 +00:00
Alex Gaynor
8b45a09f14
fix logic for this skip (#8542) 2023-03-18 10:09:00 +08:00
pyca-boringbot[bot]
f40265df23
Bump BoringSSL and/or OpenSSL in CI (#8541)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-18 01:11:07 +00:00
Alex Gaynor
80acb6a54f
skip memleak tests on pypy (#8540)
See: https://github.com/pyca/cryptography/pull/7933#issuecomment-1471865194 + https://foss.heptapod.net/pypy/pypy/-/issues/3905#note_290457 to understand why
2023-03-18 05:34:15 +08:00
dependabot[bot]
ed92532ae7
Bump coverage from 7.2.1 to 7.2.2 (#8539)
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.2.1 to 7.2.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.2.1...7.2.2)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-17 12:04:28 -04:00
Alex Gaynor
011b2d80f2
enable cargo sparse registries on windows (#8538) 2023-03-17 20:08:33 +08:00
pyca-boringbot[bot]
9216a82de8
Bump BoringSSL and/or OpenSSL in CI (#8537)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-17 00:20:38 +00:00
dependabot[bot]
c640735d7a
Bump filelock from 3.9.1 to 3.10.0 (#8535)
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.9.1 to 3.10.0.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/py-filelock/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/py-filelock/compare/3.9.1...3.10.0)

---
updated-dependencies:
- dependency-name: filelock
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-16 13:53:12 +00:00
dependabot[bot]
b7eec88d33
Bump actions/checkout from 3.3.0 to 3.4.0 in /.github/actions/wycheproof (#8536)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.3.0...v3.4.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-16 13:46:55 +00:00
dependabot[bot]
709514c99f
Bump hypothesis from 6.68.3 to 6.70.0 (#8534)
Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.68.3 to 6.70.0.
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/hypothesis-python-6.68.3...hypothesis-python-6.70.0)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-16 13:20:36 +00:00
dependabot[bot]
44f1b331e7
Bump actions/checkout from 3.3.0 to 3.4.0 (#8533)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.3.0...v3.4.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-16 13:15:59 +00:00
Alex Gaynor
22c29e1a1c
Enable cargo sparse registry on ubuntu (#8532) 2023-03-16 19:31:19 +08:00
Alex Gaynor
8882c3c88d
Support handling OpenSSL errors from Rust code (#8530) 2023-03-16 13:05:33 +08:00
pyca-boringbot[bot]
d6866c82b4
Bump BoringSSL and/or OpenSSL in CI (#8529)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2023-03-16 00:34:52 +00:00
Paul Kehrer
9938f981e0
modify the python path in build_openssl.py instead of build.rs (#8528)
* modify the python path in build_openssl.py instead of build.rs

* Remove unused import
2023-03-15 23:47:35 +00:00