← Back to issue list

build(deps): bump cryptography

View original Github issue

Metadata

Project
snapcraft
Number
#6307
Type
pull request
State
merged
Author
mr-cal
Labels
—
Created
Updated
Closed

Current evaluation

Merged as commit 1cba705c5: bumped the cryptography dependency to patch a CVE. Approved with lint/fast/minimum-dep tests and security scans passing; spread/publish job failures were unrelated to the bump.

Resolution: closed resolved

Reason: PR #6307 was approved and merged to main as commit 1cba705c5 ("build(deps): bump cryptography"), changing2 files (+50/-51) to update the pinned cryptography version for a CVE. The later bump in #6378 is a separate, subsequent security bump rather than a re-do of this one.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Bumps cryptography for a CVE. --- - [x] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md). - [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged as commit 1cba705c5: bumped the cryptography dependency to patch a CVE. Approved with lint/fast/minimum-dep tests and security scans passing; spread/publish job failures were unrelated to the bump.
stealth/space-bunny-alpha — closed resolved Merged #6307 as commit 1cba705c5, bumping cryptography to address a CVE. Approved with core CI passing despite integration and publish job failures.
qwen/qwen3.6-35b-a3b — — Merged after approval. Bumps the cryptography dependency to address a CVE. Core CI checks passed despite some integration and publish job failures.

Update history

No update history recorded yet.

Related work

  • Related To: canonical/snapcraft#6378 (confidence 70%)

    Commit 513438bb0 (PR #6378) is a later 'build(deps): bump cryptography' merged after this one; same recurring dependabot/security bump pattern.

Related issues

Issue Project State Summary Similarity
#1061 build(deps): bump cryptography craft-application merged Merged PR #1061 in commit 4b0e00ae, bumping cryptography to remediate an OSV; two approvals and all reported CI checks passed.
88%
#1055 build(deps): bump cryptography craft-application merged Merged PR #1055 (commit df46c84a) bumped the cryptography dependency to fix an OSV advisory, with 2 approvals and all CI checks passing; a later near-identical bump landed as #1061 (4b0e00ae).
88%
#356 build(deps): bump cryptography craft-store merged Merged PR #356 as commit fcbad5c, bumping cryptography to remediate OSV GHSA-p423-j2cm-9vmq.
85%
#6135 build(deps): bump cryptography from 46.0.5 to 46.0.6 snapcraft merged Merged #6135 as commit 1acb182bf, bumping cryptography 46.0.5 to 46.0.6 to fix CVE-2026-34073.
84%
#1003 build(auto): bump cryptography craft-providers merged Merged PR #1003 bumps the cryptography dependency to remediate an OSV; both reviews approved and all CI, security, test, lint, and policy checks passed.
84%
#122 build(deps): bump cryptography from 46.0.6 to 46.0.7 debcraft merged Dependabot PR merged as commit 0498780, bumping cryptography 46.0.6 -> 46.0.7 in debcraft's lockfile to fix CVE-2026-39892 and pick up OpenSSL 3.5.6 wheels. All CI checks passed.
82%
#1151 build(auto): bump cryptography craft-application merged Merged PR #1151 as commit 4ff7e624, updating the cryptography dependency to resolve an OSV security vulnerability.
82%
#6029 build(deps): bump cryptography from 46.0.3 to 46.0.5 snapcraft merged Merged as edb2a7453, updating cryptography from 46.0.3 to 46.0.5 to address CVE-2026-26007 and related security fixes.
82%
#1098 build(deps): bump cryptography craft-application merged Merged in #1098 via commit 239b3af7, updating cryptography 48.0.0 to 49.0.0 to resolve OSV GHSA-537c-gmf6-5ccf.
81%
#1395 build(deps): bump cryptography from 41.0.4 to 41.0.6 charmcraft closed Closed unmerged as redundant after commit d8a889db had already updated cryptography to v41.0.6; Dependabot confirmed the dependency was current.
81%