← Back to issue list

build(auto): bump cryptography

View original Github issue

Metadata

Project
craft-application
Number
#1151
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #1151 as commit 4ff7e624, updating the cryptography dependency to resolve an OSV security vulnerability.

Resolution: closed resolved

Reason: The repository records the merged PR as commit 4ff7e624; its stated purpose was to bump cryptography and resolve an OSV security vulnerability.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? - [ ] Have you added an entry to the changelog (`docs/reference/changelog.rst`)? --- Resolves an OSV.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #1151 as commit 4ff7e624, updating the cryptography dependency to resolve an OSV security vulnerability.
stealth/space-bunny-alpha — closed resolved Merged PR #1151 as commit 4ff7e624, bumping cryptography to resolve an OSV security vulnerability.
qwen/qwen3.6-35b-a3b — — Merged a PR by bepri that bumps the cryptography dependency to resolve an OSV. Approved by two reviewers and passing CI, the update addresses a security vulnerability.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 10
Confidence: 90
needs review Bumps cryptography dependency to resolve an OSV vulnerability. PR is approved but has failing CI checks for snap-tests and lint/files. Awaiting author fixes.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 15
Confidence: 90
needs review Automatically bumps the cryptography dependency to resolve an OSV security advisory. PR has one reviewer approval, passes most CI checks, but fails a lint check. Awaiting final maintainer review and merge.

Update history

Date Change
updated
updated
created

Related issues

Issue Project State Summary Similarity
#1003 build(auto): bump cryptography craft-providers merged Merged PR #1003 bumps the cryptography dependency to remediate an OSV; both reviews approved and all CI, security, test, lint, and policy checks passed.
93%
#356 build(deps): bump cryptography craft-store merged Merged PR #356 as commit fcbad5c, bumping cryptography to remediate OSV GHSA-p423-j2cm-9vmq.
89%
#1061 build(deps): bump cryptography craft-application merged Merged PR #1061 in commit 4b0e00ae, bumping cryptography to remediate an OSV; two approvals and all reported CI checks passed.
88%
#1055 build(deps): bump cryptography craft-application merged Merged PR #1055 (commit df46c84a) bumped the cryptography dependency to fix an OSV advisory, with 2 approvals and all CI checks passing; a later near-identical bump landed as #1061 (4b0e00ae).
87%
#418 build: bump cryptography for OSV craft-store merged PR #418 (maintainer bepri) bumped the cryptography dependency in2 files (+56/-56) to clear an OSV vulnerability. Approved and merged as commit e8fef67, with the OSV-scanner security check passing.
86%
#1098 build(deps): bump cryptography craft-application merged Merged in #1098 via commit 239b3af7, updating cryptography 48.0.0 to 49.0.0 to resolve OSV GHSA-537c-gmf6-5ccf.
84%
#6307 build(deps): bump cryptography snapcraft merged Merged as commit 1cba705c5: bumped the cryptography dependency to patch a CVE. Approved with lint/fast/minimum-dep tests and security scans passing; spread/publish job failures were unrelated to the bump.
82%
#318 build: bump cryptography to 46.0.7 imagecraft merged Merged PR #318 (commit 8a390e6) by smethnani bumped cryptography to 46.0.7 in uv.lock to clear an OSV vulnerability; later superseded by #357 (49.0.0) and #421 (50.0.2).
82%
#6135 build(deps): bump cryptography from 46.0.5 to 46.0.6 snapcraft merged Merged #6135 as commit 1acb182bf, bumping cryptography 46.0.5 to 46.0.6 to fix CVE-2026-34073.
81%
#2162 build(deps-dev): bump cryptography from 44.0.0 to 44.0.1 charmcraft merged Merged the cryptography development dependency from 44.0.0 to 44.0.1 in commit e055bf84.
79%