[PR #79] [MERGED] Bump pycryptodomex from 3.10.4 to 3.11.0 #134

New issue

Closed

opened 2026-02-27 08:12:03 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 08:12:03 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/kokarare1212/librespot-python/pull/79
Author: @dependabot[bot]
Created: 10/8/2021
Status: ✅ Merged
Merged: 10/8/2021
Merged by: @kokarare1212

Base: rewrite ← Head: dependabot/pip/pycryptodomex-3.11.0

📝 Commits (1)

256906f Bump pycryptodomex from 3.10.4 to 3.11.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 requirements.txt (+1 -1)

📄 Description

Bumps pycryptodomex from 3.10.4 to 3.11.0.

Changelog

Sourced from pycryptodomex's changelog.

3.11.0 (8 October 2021) ++++++++++++++++++++++++++

Resolved issues

GH#512: Especially for very small bit sizes, Crypto.Util.number.getPrime() was occasionally generating primes larger than given the bit size. Thanks to Koki Takahashi.

GH#552: Correct typing annotations for PKCS115_Cipher.decrypt().

GH#555: decrypt() method of a PKCS#1v1.5 cipher returned a bytearray instead of bytes.

GH#557: External DSA domain parameters were accepted even when the modulus (p) was not prime. This affected Crypto.PublicKey.DSA.generate() and Crypto.PublicKey.DSA.construct(). Thanks to Koki Takahashi.

New features

Added cSHAKE128 and cSHAKE256 (of SHA-3 family). Thanks to Michael Schaffner.

GH#558: The flag RTLD_DEEPBIND passed to dlopen() is not well supported by address sanitizers <https://github.com/google/sanitizers/issues/611>_. It is now possible to set the environment variable PYCRYPTDOME_DISABLE_DEEPBIND to drop that flag and allow security testing.

Commits

b92494b Bump version
016252b Fix #558: add environment variable PYCRYPTODOME_DISABLE_DEEPBIND to help addr...
61e1e6b Clarify in the docs that VS2015 redistributable is required for Python 2 on W...
36d9bd2 Fixed the issue Crypto.Util.number.getPrime may occasionally generate prime l...
4273aff Bump version
89e9364 Update Changelog for GH#557
6c0944a Fix parameter check in DSA construction
0b17e20 Merge branch 'cshake'
d92998e Some tweaks to the original cSHAKE contribution
fdc6846 Update changelog, readme and docs
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/kokarare1212/librespot-python/pull/79 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/8/2021 **Status:** ✅ Merged **Merged:** 10/8/2021 **Merged by:** [@kokarare1212](https://github.com/kokarare1212) **Base:** `rewrite` ← **Head:** `dependabot/pip/pycryptodomex-3.11.0` --- ### 📝 Commits (1) - [`256906f`](https://github.com/kokarare1212/librespot-python/commit/256906faa3bb2abfa94950adfc9a923e933d151a) Bump pycryptodomex from 3.10.4 to 3.11.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [pycryptodomex](https://github.com/Legrandin/pycryptodome) from 3.10.4 to 3.11.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst">pycryptodomex's changelog</a>.</em></p> <blockquote> <p>3.11.0 (8 October 2021) ++++++++++++++++++++++++++</p> <h2>Resolved issues</h2> <ul> <li>GH#512: Especially for very small bit sizes, <code>Crypto.Util.number.getPrime()</code> was occasionally generating primes larger than given the bit size. Thanks to Koki Takahashi.</li> <li>GH#552: Correct typing annotations for <code>PKCS115_Cipher.decrypt()</code>.</li> <li>GH#555: <code>decrypt()</code> method of a PKCS#1v1.5 cipher returned a <code>bytearray</code> instead of <code>bytes</code>.</li> <li>GH#557: External DSA domain parameters were accepted even when the modulus (<code>p</code>) was not prime. This affected <code>Crypto.PublicKey.DSA.generate()</code> and <code>Crypto.PublicKey.DSA.construct()</code>. Thanks to Koki Takahashi.</li> </ul> <h2>New features</h2> <ul> <li>Added cSHAKE128 and cSHAKE256 (of SHA-3 family). Thanks to Michael Schaffner.</li> <li>GH#558: The flag RTLD_DEEPBIND passed to <code>dlopen()</code> is not well supported by <code>address sanitizers <https://github.com/google/sanitizers/issues/611></code>_. It is now possible to set the environment variable <code>PYCRYPTDOME_DISABLE_DEEPBIND</code> to drop that flag and allow security testing.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Legrandin/pycryptodome/commit/b92494b64aaa7af54a8c3e14aed7a3f3a67e58b3"><code>b92494b</code></a> Bump version</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/016252bde04456614b68d4e4e8798bc124d91e7a"><code>016252b</code></a> Fix <a href="https://github-redirect.dependabot.com/Legrandin/pycryptodome/issues/558">#558</a>: add environment variable PYCRYPTODOME_DISABLE_DEEPBIND to help addr...</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/61e1e6b19895132e6ed81314a83df6c5e5d576ec"><code>61e1e6b</code></a> Clarify in the docs that VS2015 redistributable is required for Python 2 on W...</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/36d9bd214572ef9ea014fe44f5e74f01f723e3a6"><code>36d9bd2</code></a> Fixed the issue Crypto.Util.number.getPrime may occasionally generate prime l...</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/4273affcc60fff2c35cc58892c97f23a848d5211"><code>4273aff</code></a> Bump version</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/89e9364c93e0602af067184c2351090d806a37a0"><code>89e9364</code></a> Update Changelog for GH#557</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/6c0944afcc31fb7b65c2139096408da04ac79c69"><code>6c0944a</code></a> Fix parameter check in DSA construction</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/0b17e20a354edc0e85fe1b95adceb7e39d38f865"><code>0b17e20</code></a> Merge branch 'cshake'</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/d92998e0613b1e27452ea1e8f2653d807bed7ea4"><code>d92998e</code></a> Some tweaks to the original cSHAKE contribution</li> <li><a href="https://github.com/Legrandin/pycryptodome/commit/fdc6846a2c60189f09a5652632cb6a905d13ff92"><code>fdc6846</code></a> Update changelog, readme and docs</li> <li>Additional commits viewable in <a href="https://github.com/Legrandin/pycryptodome/compare/v3.10.4...v3.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pycryptodomex&package-manager=pip&previous-version=3.10.4&new-version=3.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>