Skip to content

Upgrade setuptools and cryptography dependencies#180

Merged
erayaydin merged 2 commits intomainfrom
chore/upgrade-deps-inter-1897
Mar 19, 2026
Merged

Upgrade setuptools and cryptography dependencies#180
erayaydin merged 2 commits intomainfrom
chore/upgrade-deps-inter-1897

Conversation

@erayaydin
Copy link
Member

Summary

  • Bump setuptools minimum from 65.5.1 to 82.0.1 (full changelog)
  • Bump cryptography minimum from 41.0.0 to 46.0.5 (full changelog)
  • Remove deprecated default_backend() usage from sealed.py

Patched Vulnerabilities (cryptography)

CVE Affected Versions Minimum Fix
CVE-2024-6119 37.0.0 - 43.0.0 43.0.1
GHSA-79v4-65xg-pq4g 42.0.0 - 44.0.0 44.0.1
CVE-2026-26007 <= 46.0.4 46.0.5

Bump `setuptools` minimum constraint from `65.5.1` to `82.0.1` in
`requirements.txt` and `pyproject.toml` to address known security
vulnerabilities.

Related-Task: INTER-1897
@erayaydin erayaydin self-assigned this Mar 18, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Mar 18, 2026

☂️ Python Coverage

current status: ✅

Overall Coverage

Lines Covered Coverage Threshold Status
2824 1971 70% 0% 🟢

New Files

No new covered files...

Modified Files

File Coverage Status
fingerprint_server_sdk/sealed.py 98% 🟢
TOTAL 98% 🟢

updated for commit: 91288d5 by action🐍

Bump cryptography minimum constraint from `41.0.0` to `46.0.5`.

Related-Task: INTER-1897
@erayaydin erayaydin force-pushed the chore/upgrade-deps-inter-1897 branch from d4cba76 to 91288d5 Compare March 18, 2026 16:44
@github-actions
Copy link
Contributor

🚀 Following releases will be created using changesets from this PR:

@fingerprint/python-sdk@9.0.1

Patch Changes

  • Bump minimum required cryptography version from 41.0.0 to 46.0.5. (91288d5)

@erayaydin erayaydin merged commit fb1cd19 into main Mar 19, 2026
22 checks passed
@erayaydin erayaydin deleted the chore/upgrade-deps-inter-1897 branch March 19, 2026 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants