romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 07:03:31 +03:00
Code Issues Projects Releases Packages Wiki Activity

GHA: bump pip cryptography, relax impacket version requirement

Browse source 
Bump `cryptography` to a newer version that fixes two known OpenSSL
vulnerabilities reported by Dependabot.

To make it work, also allow `impacket` 0.11.0, because it allows any
pyOpenSSL version, while 0.12.0 pinned it to a single version that
happens to be incompatible with the bugfixed `cryptography` version.

Also: drop spaces from `requirements.txt` files. Bots don't add them,
though they seem to be preferred in the official documentation:
https://pip.pypa.io/en/stable/reference/requirements-file-format/

https://github.com/fortra/impacket/blob/impacket_0_11_0/requirements.txt
https://github.com/fortra/impacket/blob/impacket_0_12_0/requirements.txt

Follow-up to 7d5f8be532 #18708

Closes #18731
This commit is contained in:
Viktor Szakats 2025-09-25 13:14:36 +02:00
parent 442943fb8e
commit e08211b1ca
No known key found for this signature in database
GPG key ID: B5ABD165E2AEF201
3 changed files with 12 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

12
tests/http/requirements.txt
View file

@ -2,9 +2,9 @@
#
# SPDX-License-Identifier: curl
cryptography == 42.0.8
filelock == 3.19.1
psutil == 7.1.0
pytest == 8.4.2
pytest-xdist == 3.8.0
websockets == 15.0.1
cryptography==44.0.1
filelock==3.19.1
psutil==7.1.0
pytest==8.4.2
pytest-xdist==3.8.0
websockets==15.0.1