Skip to content

chore(deps): bump pyasn1, cryptography, and msgpack for advisories - #944

Open
valvesss wants to merge 1 commit into
attendee-labs:mainfrom
cold-code-labs:chore/deps-security-high
Open

chore(deps): bump pyasn1, cryptography, and msgpack for advisories#944
valvesss wants to merge 1 commit into
attendee-labs:mainfrom
cold-code-labs:chore/deps-security-high

Conversation

@valvesss

@valvesss valvesss commented Aug 7, 2026

Copy link
Copy Markdown

Summary

Requirements-only.

Test plan

Local (Mimir):

  • Fresh venv pip install -r requirements.txt with cryptography==50.0.0, pyasn1==0.6.4, msgpack==1.2.1 — OK
  • pip check clean (incl. pyOpenSSL 26.4 pulled by aiortc)
  • Imports report expected versions; Django remains 5.1.14

Still for CI: full manage.py test matrix in Docker image (host lacks gi/GStreamer for manage.py check outside the image).


Contribution from Cold Code Labs · authored via Brokk · co-authors in commit trailers.

Address known security advisories by bumping pyasn1 0.6.2→0.6.4,
cryptography 48.0.1→50.0.0, and msgpack 1.1.0→1.2.1. Django left
unchanged (tracked in upstream PR attendee-labs#937).

Co-authored-by: Vitor Alves <vitoralvesinfo@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@valvesss
valvesss requested a review from a team as a code owner August 7, 2026 15:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants