HBASE-28021 Bump cryptography from 41.0.0 to 41.0.3 in /dev-support/git-jira-release-audit #5340

dependabot · 2023-08-02T02:04:27Z

Bumps cryptography from 41.0.0 to 41.0.3.

Changelog

Sourced from cryptography's changelog.

41.0.3 - 2023-08-01
* Fixed performance regression loading DH public keys.
* Fixed a memory leak when using
  :class:`~cryptography.hazmat.primitives.ciphers.aead.ChaCha20Poly1305`.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.2.
.. _v41-0-2:
41.0.2 - 2023-07-10
Fixed bugs in creating and parsing SSH certificates where critical options with values were handled incorrectly. Certificates are now created correctly and parsing accepts correct values as well as the previously generated invalid forms with a warning. In the next release, support for parsing these invalid forms will be removed.

.. _v41-0-1:

41.0.1 - 2023-06-01
* Temporarily allow invalid ECDSA signature algorithm parameters in X.509
  certificates, which are generated by older versions of Java.
* Allow null bytes in pass phrases when serializing private keys.
.. _v41-0-0:

Commits

b22271c bump for 41.0.3 (#9330)
774a4a1 Only check DH key validity when loading a private key. (#9071) (#9319)
bfa4d95 changelog for 41.0.3 (#9320)
0da7165 backport fix the memory leak in fixedpool (#9272) (#9309)
7431db7 bump for 41.0.2 (#9215)
e190ef1 Backport ssh cert fix (#9211)
bb204c8 Backport: Added PyPy 3.10 to CI (#8933) (#9210)
d02de9f changelog and version bump (#9008)
53dc686 Backport null fix (#9007)
b999005 Backport tolerate (#9006)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Apache-HBase · 2023-08-02T02:16:52Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 27s	Docker mode activated.
-0 ⚠️	yetus	0m 2s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ master Compile Tests _
+0 🆗	mvndep	0m 10s	Maven dependency ordering for branch
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 4s	Maven dependency ordering for patch
		_ Other Tests _
		1m 34s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/1/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR	#5340
Optional Tests
uname	Linux 9941dcdd9439 5.4.0-148-generic #165-Ubuntu SMP Tue Apr 18 08:53:12 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `f6c5dbe`
Max. process+thread count	38 (vs. ulimit of 30000)
modules	C: U:
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/1/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-08-02T02:17:14Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 31s	Docker mode activated.
-0 ⚠️	yetus	0m 3s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ master Compile Tests _
+0 🆗	mvndep	0m 13s	Maven dependency ordering for branch
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 4s	Maven dependency ordering for patch
		_ Other Tests _
		1m 48s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/1/artifact/yetus-jdk8-hadoop3-check/output/Dockerfile
GITHUB PR	#5340
Optional Tests
uname	Linux b69071ea410c 5.4.0-1101-aws #109~18.04.1-Ubuntu SMP Mon Apr 24 20:40:49 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `f6c5dbe`
Max. process+thread count	32 (vs. ulimit of 30000)
modules	C: U:
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/1/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-08-02T02:18:14Z

💔 -1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 34s	Docker mode activated.
		_ Prechecks _
+1 💚	dupname	0m 0s	No case conflicting files found.
+1 💚	@author	0m 0s	The patch does not contain any @author tags.
		_ master Compile Tests _
+0 🆗	mvndep	0m 11s	Maven dependency ordering for branch
-1 ❌	spotless	0m 40s	branch has 1 errors when running spotless:check, run spotless:apply to fix.
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 4s	Maven dependency ordering for patch
+1 💚	whitespace	0m 0s	The patch has no whitespace issues.
+1 💚	spotless	0m 37s	patch has no errors when running spotless:check.
		_ Other Tests _
+0 🆗	asflicense	0m 0s	ASF License check generated no output?
		2m 57s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/1/artifact/yetus-general-check/output/Dockerfile
GITHUB PR	#5340
Optional Tests	dupname asflicense spotless
uname	Linux 080f64d6e157 5.4.0-152-generic #169-Ubuntu SMP Tue Jun 6 22:23:09 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `f6c5dbe`
spotless	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/1/artifact/yetus-general-check/output/branch-spotless.txt
Max. process+thread count	44 (vs. ulimit of 30000)
modules	C: U:
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/1/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-08-14T02:59:13Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 26s	Docker mode activated.
-0 ⚠️	yetus	0m 3s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ master Compile Tests _
+0 🆗	mvndep	0m 12s	Maven dependency ordering for branch
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 5s	Maven dependency ordering for patch
		_ Other Tests _
		1m 38s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/2/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR	#5340
Optional Tests
uname	Linux ab8ca7564efe 5.4.0-156-generic #173-Ubuntu SMP Tue Jul 11 07:25:22 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `c0bea14`
Max. process+thread count	38 (vs. ulimit of 30000)
modules	C: U:
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/2/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-08-14T02:59:39Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 40s	Docker mode activated.
-0 ⚠️	yetus	0m 2s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ master Compile Tests _
+0 🆗	mvndep	0m 12s	Maven dependency ordering for branch
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 4s	Maven dependency ordering for patch
		_ Other Tests _
		1m 58s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/2/artifact/yetus-jdk8-hadoop3-check/output/Dockerfile
GITHUB PR	#5340
Optional Tests
uname	Linux ba71223428ad 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `c0bea14`
Max. process+thread count	28 (vs. ulimit of 30000)
modules	C: U:
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/2/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-08-14T03:00:41Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 35s	Docker mode activated.
		_ Prechecks _
+1 💚	dupname	0m 0s	No case conflicting files found.
+1 💚	@author	0m 0s	The patch does not contain any @author tags.
		_ master Compile Tests _
+0 🆗	mvndep	0m 6s	Maven dependency ordering for branch
+1 💚	spotless	0m 39s	branch has no errors when running spotless:check.
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 4s	Maven dependency ordering for patch
+1 💚	whitespace	0m 0s	The patch has no whitespace issues.
+1 💚	spotless	0m 37s	patch has no errors when running spotless:check.
		_ Other Tests _
+0 🆗	asflicense	0m 0s	ASF License check generated no output?
		3m 4s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/2/artifact/yetus-general-check/output/Dockerfile
GITHUB PR	#5340
Optional Tests	dupname asflicense spotless
uname	Linux 5c0b26e88e9c 5.4.0-152-generic #169-Ubuntu SMP Tue Jun 6 22:23:09 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `c0bea14`
Max. process+thread count	45 (vs. ulimit of 30000)
modules	C: U:
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/2/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.0 to 41.0.3. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@41.0.0...41.0.3) --- updated-dependencies: - dependency-name: cryptography dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Apache-HBase · 2023-08-14T03:16:46Z

💔 -1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 0s	Docker mode activated.
-1 ❌	patch	0m 4s	#5340 does not apply to master. Rebase required? Wrong Branch? See https://yetus.apache.org/documentation/in-progress/precommit-patchnames for help.

Subsystem	Report/Notes
GITHUB PR	#5340
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/3/console
versions	git=2.25.1
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-08-14T03:16:58Z

💔 -1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 0s	Docker mode activated.
-1 ❌	patch	0m 2s	#5340 does not apply to master. Rebase required? Wrong Branch? See https://yetus.apache.org/documentation/in-progress/precommit-patchnames for help.

Subsystem	Report/Notes
GITHUB PR	#5340
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/3/console
versions	git=2.17.1
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-08-14T03:17:06Z

💔 -1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 0s	Docker mode activated.
-1 ❌	patch	0m 2s	#5340 does not apply to master. Rebase required? Wrong Branch? See https://yetus.apache.org/documentation/in-progress/precommit-patchnames for help.

Subsystem	Report/Notes
GITHUB PR	#5340
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5340/3/console
versions	git=2.25.1
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 2, 2023

dependabot bot mentioned this pull request Aug 2, 2023

Bump cryptography from 41.0.0 to 41.0.2 in /dev-support/git-jira-release-audit #5324

Closed

dependabot bot force-pushed the dependabot/pip/dev-support/git-jira-release-audit/cryptography-41.0.3 branch 2 times, most recently from bbe4038 to 87238d6 Compare August 14, 2023 02:53

dependabot bot force-pushed the dependabot/pip/dev-support/git-jira-release-audit/cryptography-41.0.3 branch from 87238d6 to 8ff38e1 Compare August 14, 2023 03:14

dependabot bot force-pushed the dependabot/pip/dev-support/git-jira-release-audit/cryptography-41.0.3 branch from 8ff38e1 to 841db4e Compare August 14, 2023 03:14

Apache9 changed the title ~~Bump cryptography from 41.0.0 to 41.0.3 in /dev-support/git-jira-release-audit~~ HBASE-28021 Bump cryptography from 41.0.0 to 41.0.3 in /dev-support/git-jira-release-audit Aug 14, 2023

Apache9 merged commit 98febd9 into master Aug 14, 2023

dependabot bot deleted the dependabot/pip/dev-support/git-jira-release-audit/cryptography-41.0.3 branch August 14, 2023 03:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

HBASE-28021 Bump cryptography from 41.0.0 to 41.0.3 in /dev-support/git-jira-release-audit #5340

HBASE-28021 Bump cryptography from 41.0.0 to 41.0.3 in /dev-support/git-jira-release-audit #5340

dependabot bot commented on behalf of github Aug 2, 2023 •

edited

Loading

Apache-HBase commented Aug 2, 2023

Apache-HBase commented Aug 2, 2023

Apache-HBase commented Aug 2, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

HBASE-28021 Bump cryptography from 41.0.0 to 41.0.3 in /dev-support/git-jira-release-audit #5340

HBASE-28021 Bump cryptography from 41.0.0 to 41.0.3 in /dev-support/git-jira-release-audit #5340

Conversation

dependabot bot commented on behalf of github Aug 2, 2023 • edited Loading

Apache-HBase commented Aug 2, 2023

Apache-HBase commented Aug 2, 2023

Apache-HBase commented Aug 2, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

Apache-HBase commented Aug 14, 2023

dependabot bot commented on behalf of github Aug 2, 2023 •

edited

Loading