← Back to issue list

deps: update cryptography dependency

View original Github issue

Metadata

Project
snapcraft
Number
#4136
Type
pull request
State
merged
Author
lengau
Labels
—
Created
Updated
Closed

Current evaluation

Merged into main after approval and passing CI checks. Updates the cryptography dependency without changing code coverage.

Suggested action: —

No scores available.

Issue body

- [x] Have you followed the [guidelines for contributing](https://github.com/snapcore/snapcraft/blob/master/CONTRIBUTING.md)? - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [x] Have you successfully run `make lint`? - [x] Have you successfully run `pytest tests/unit`? ----- This depends on #4131 - I'll use comments to annotate what's actually part of this and what's not. CRAFT-1720

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged into main after approval and passing CI checks. Updates the cryptography dependency without changing code coverage.
qwen3.6-35b-a3b-mtp-q6 — — Merged to main, updating the cryptography dependency to address CRAFT-1720. The update depends on PR #4131 and maintains existing test coverage.
qwen3.6-35b-a3b-mtp-q6 — — Merged to update the cryptography dependency. Passed linting and unit tests with no coverage impact per Codecov. Resolves CRAFT-1720 and depends on PR #4131.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#6307 build(deps): bump cryptography snapcraft merged Merged after approval. Bumps the cryptography dependency to address a CVE. Core CI checks passed despite some integration and publish job failures.
83%
#1061 build(deps): bump cryptography craft-application merged Merged a dependency update to bump cryptography, resolving an OSV security vulnerability. Approved by two reviewers and passing all CI checks, the change modified one file with 51 additions and 51 deletions.
81%
#1055 build(deps): bump cryptography craft-application merged Merged after bumping the cryptography dependency to resolve an OSV security vulnerability. Approved by two reviewers and passed all CI checks, including security scans and multi-platform tests.
80%
#1870 build(deps): update dependency cryptography to v43.0.1 [security] (main) charmcraft merged Merged automated dependency update to cryptography v43.0.1 to address a security vulnerability in OpenSSL wheels. Approved by two reviewers, passed CI checks, and merged to main.
78%
#1151 build(auto): bump cryptography craft-application merged Merged a PR by bepri that bumps the cryptography dependency to resolve an OSV. Approved by two reviewers and passing CI, the update addresses a security vulnerability.
77%
#356 build(deps): bump cryptography craft-store merged Merged to bump the cryptography dependency and resolve OSV vulnerability GHSA-p423-j2cm-9vmq. Approved by two reviewers and passed CI checks, with one Windows test failure noted.
77%
#5010 build(deps): update dependency cryptography to v43.0.1 [security] (main) snapcraft merged Merged an automated dependency update upgrading cryptography from 43.0.0 to 43.0.1 to patch a security vulnerability in statically linked OpenSSL wheels. Approved by two reviewers, passed CI, and merged to main.
77%
#2162 build(deps-dev): bump cryptography from 44.0.0 to 44.0.1 charmcraft merged Merged a Dependabot update bumping the cryptography dependency from 44.0.0 to 44.0.1. The change was approved, passed CI checks, and successfully merged into the codebase.
77%
#6029 build(deps): bump cryptography from 46.0.3 to 46.0.5 snapcraft merged Merged a Dependabot update bumping cryptography from 46.0.3 to 46.0.5. The upgrade patches CVE-2026-26007, deprecates SECT* curves, and updates OpenSSL to 3.5.5. Approved by two reviewers and merged after passing CI checks.
76%
#4374 build(deps): bump cryptography from 41.0.3 to 41.0.4 snapcraft merged Dependabot automated update bumped cryptography from 41.0.3 to 41.0.4. Approved by two reviewers, passed CI, and merged. The release compiles wheels with OpenSSL 3.1.3 and caused no coverage changes.
76%