Skip to content

Conversation

blag
Copy link
Contributor

@blag blag commented Nov 28, 2020

Update cryptography to > 3.2 to avoid CVE-2020-25659 and to fix the Travis-CI and CircleCI builds.

Closes #5065, #5066, and #5067.

@pull-request-size pull-request-size bot added the size/XS PR that changes 0-9 lines. Quick fix/merge. label Nov 28, 2020
@pull-request-size pull-request-size bot added size/M PR that changes 30-99 lines. Good size to review. and removed size/XS PR that changes 0-9 lines. Quick fix/merge. labels Nov 28, 2020
@blag blag added this to the 3.4.0 milestone Nov 28, 2020
Copy link
Member

@arm4b arm4b left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Thanks for the maintenance work.

@blag
Copy link
Contributor Author

blag commented Dec 2, 2020

Waiting on StackStorm/st2cd#446 and StackStorm/st2tests#198.

Co-authored-by: Eugen Cusmaunsa <[email protected]>
@nmaludy
Copy link
Member

nmaludy commented Dec 7, 2020

+1 this is needed to fix all of the exchange builds.

@arm4b
Copy link
Member

arm4b commented Dec 7, 2020

As discussed before, merging to fix the Exchange CI.

@arm4b arm4b merged commit 0004711 into master Dec 7, 2020
@arm4b arm4b deleted the update-cryptography-3.2 branch December 7, 2020 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

external dependency maintenance size/M PR that changes 30-99 lines. Good size to review.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants