← Back to issue list

deps: update cryptography dependency

View original Github issue

Metadata

Project
snapcraft
Number
#4136
Type
pull request
State
merged
Author
lengau
Labels
—
Created
Updated
Closed

Current evaluation

PR #4136 updated the cryptography dependency for CRAFT-1720 and merged into main as commit 3fd3e4c52.

Resolution: closed resolved

Reason: The dependency update was approved and merged as commit 3fd3e4c52.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you followed the [guidelines for contributing](https://github.com/snapcore/snapcraft/blob/master/CONTRIBUTING.md)? - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [x] Have you successfully run `make lint`? - [x] Have you successfully run `pytest tests/unit`? ----- This depends on #4131 - I'll use comments to annotate what's actually part of this and what's not. CRAFT-1720

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved PR #4136 updated the cryptography dependency for CRAFT-1720 and merged into main as commit 3fd3e4c52.
stealth/space-bunny-alpha — closed resolved Merged PR #4136 as 3fd3e4c52, updating the cryptography dependency for CRAFT-1720.
stealth/space-bunny-alpha — closed resolved Merged as commit 3fd3e4c52, updating the cryptography dependency for CRAFT-1720.
qwen/qwen3.6-35b-a3b — — Merged into main after approval and passing CI checks. Updates the cryptography dependency without changing code coverage.
qwen3.6-35b-a3b-mtp-q6 — — Merged to main, updating the cryptography dependency to address CRAFT-1720. The update depends on PR #4131 and maintains existing test coverage.

Update history

No update history recorded yet.

Related work

  • Related To: snapcore/snapcraft#4131 (confidence 95%)

    The PR explicitly depended on #4131, which updated the tox configuration and was merged separately.

Related issues

Issue Project State Summary Similarity
#1024 deps: update cryptography to v39.0 charmcraft merged PR #1024 (commit 96f6a183) merged into charmcraft, upgrading cryptography to39.0 and adding needed Rust build deps to snap/snapcraft.yaml; it fixes issue #991 after the author validated builds on all architectures.
78%
#890 build(deps): update dependencies rockcraft merged Merged dependency lockfile refresh in #890 (commit 8a2975df), updating 205 resolved packages, including cryptography 45.0.3 and several craft-* libraries.
77%
#356 build(deps): bump cryptography craft-store merged Merged PR #356 as commit fcbad5c, bumping cryptography to remediate OSV GHSA-p423-j2cm-9vmq.
76%
#5010 build(deps): update dependency cryptography to v43.0.1 [security] (main) snapcraft merged Merged PR #5010 in commit 31bec5200, updating cryptography 43.0.0 to 43.0.1 to address OpenSSL vulnerability GHSA-h4gh-qq45-vh27.
76%
#1870 build(deps): update dependency cryptography to v43.0.1 [security] (main) charmcraft merged Merged #1870, bumping cryptography from 43.0.0 to 43.0.1 to address GHSA-h4gh-qq45-vh27; mainline merge commit: 438cafe0.
76%
#2163 build(deps): update dependency cryptography to v44.0.1 [security] (main) - autoclosed charmcraft closed Renovate PR #2163 was autoclosed unmerged; the cryptography 44.0.1 update was instead merged through #2189 at commit bba6a32e.
76%
#1061 build(deps): bump cryptography craft-application merged Merged PR #1061 in commit 4b0e00ae, bumping cryptography to remediate an OSV; two approvals and all reported CI checks passed.
75%
#122 build(deps): bump cryptography from 46.0.6 to 46.0.7 debcraft merged Dependabot PR merged as commit 0498780, bumping cryptography 46.0.6 -> 46.0.7 in debcraft's lockfile to fix CVE-2026-39892 and pick up OpenSSL 3.5.6 wheels. All CI checks passed.
75%
#1055 build(deps): bump cryptography craft-application merged Merged PR #1055 (commit df46c84a) bumped the cryptography dependency to fix an OSV advisory, with 2 approvals and all CI checks passing; a later near-identical bump landed as #1061 (4b0e00ae).
75%
#1151 build(auto): bump cryptography craft-application merged Merged PR #1151 as commit 4ff7e624, updating the cryptography dependency to resolve an OSV security vulnerability.
75%