Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade cryptography dependency to v44.0.1 #1651

Merged
merged 3 commits into from
Feb 12, 2025

Conversation

kevinjqliu
Copy link
Contributor

This PR resolves "Vulnerable OpenSSL included in cryptography wheels" https://github.com/apache/iceberg-python/security/dependabot/40

In order to upgrade to the latest version of cryptography, we had to exclude both python versions 3.9.0 and 3.9.1

poetry add [email protected]

@kevinjqliu kevinjqliu marked this pull request as ready for review February 11, 2025 22:58
@kevinjqliu kevinjqliu requested a review from Fokko February 11, 2025 22:58
@@ -49,7 +49,7 @@ include = [
]

[tool.poetry.dependencies]
python = "^3.9, !=3.9.7"
python = "^3.9.2, !=3.9.7"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

previously: all python version 3.9 or above, excluding 3.9.7
now: all python versions 3.9.2 or above, excluding 3.9.7

@kevinjqliu kevinjqliu force-pushed the kevinjqliu/cryptography-44.0.1 branch from 5cce9e8 to 5bd7e6f Compare February 12, 2025 00:29
Copy link
Contributor

@HonahX HonahX left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @kevinjqliu !

@kevinjqliu kevinjqliu merged commit addeb2f into apache:main Feb 12, 2025
7 checks passed
@kevinjqliu kevinjqliu deleted the kevinjqliu/cryptography-44.0.1 branch February 12, 2025 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants