)]}' { "log": [ { "commit": "be6566b24230a8e925c86c5721cf3324f2f64809", "tree": "d2dd2de6c29569263dee714446f8e93ba5d6887a", "parents": [ "b16d0b0fd34b27333dd30a8296cb93104fd34220" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu May 14 11:23:46 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 14 11:23:46 2026" }, "message": "chore(deps): bump virtualenv from 21.3.2 to 21.3.3 (#14860)\n\nBumps [virtualenv](https://github.com/pypa/virtualenv) from 21.3.2 to 21.3.3.\n- [Release notes](https://github.com/pypa/virtualenv/releases)\n- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)\n- [Commits](https://github.com/pypa/virtualenv/compare/21.3.2...21.3.3)\n\n---\nupdated-dependencies:\n- dependency-name: virtualenv\n dependency-version: 21.3.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "b16d0b0fd34b27333dd30a8296cb93104fd34220", "tree": "48e518004dc46e04c6453846ba7197421b03fe8e", "parents": [ "9c4b91c7028269ff16a128f67e54686c5bc9b3dc" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Thu May 14 11:23:26 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 14 11:23:26 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14861)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "9c4b91c7028269ff16a128f67e54686c5bc9b3dc", "tree": "f2e81d4edf3f9a93b3b17221bbcc00d0bd41edb8", "parents": [ "5bc277101c0792dd8f2202ea0a5a8b8582fb0fce" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Thu May 14 11:23:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 14 11:23:04 2026" }, "message": "Bump downstream dependencies in CI (#14862)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "5bc277101c0792dd8f2202ea0a5a8b8582fb0fce", "tree": "92e1247c6c607e6b52382b1e7bff5586d70acd2f", "parents": [ "27ce75be4f583402bff9d1377f7ef470a0e09913" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 13 12:38:44 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 12:38:44 2026" }, "message": "chore(deps): bump uv from 0.11.13 to 0.11.14 in /.github/requirements (#14856)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.13 to 0.11.14.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.13...0.11.14)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "27ce75be4f583402bff9d1377f7ef470a0e09913", "tree": "733635044a694fcd74c366ef78d9e5ba9b95552c", "parents": [ "a6ce52b785018ebd64f94ff2e4b9d9ae277257fe" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 13 12:38:17 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 12:38:17 2026" }, "message": "chore(deps): bump idna from 3.14 to 3.15 (#14854)\n\nBumps [idna](https://github.com/kjd/idna) from 3.14 to 3.15.\n- [Release notes](https://github.com/kjd/idna/releases)\n- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)\n- [Commits](https://github.com/kjd/idna/compare/v3.14...v3.15)\n\n---\nupdated-dependencies:\n- dependency-name: idna\n dependency-version: \u00273.15\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a6ce52b785018ebd64f94ff2e4b9d9ae277257fe", "tree": "9b48b638e67fa89714d5a85a69ec53035aa64471", "parents": [ "0b48e083b4ce75f8588517e2d782aa26a6b4d37a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 13 12:37:58 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 12:37:58 2026" }, "message": "chore(deps): bump uv from 0.11.13 to 0.11.14 (#14853)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.13 to 0.11.14.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.13...0.11.14)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "0b48e083b4ce75f8588517e2d782aa26a6b4d37a", "tree": "aad30f308d862b4be81d82012f96d0a622193b08", "parents": [ "164a0819d607c569dafa1fd1ae9654ffc8468c2a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 13 12:37:38 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 12:37:38 2026" }, "message": "chore(deps): bump python-discovery from 1.3.0 to 1.3.1 (#14852)\n\nBumps [python-discovery](https://github.com/tox-dev/python-discovery) from 1.3.0 to 1.3.1.\n- [Release notes](https://github.com/tox-dev/python-discovery/releases)\n- [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst)\n- [Commits](https://github.com/tox-dev/python-discovery/compare/1.3.0...1.3.1)\n\n---\nupdated-dependencies:\n- dependency-name: python-discovery\n dependency-version: 1.3.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "164a0819d607c569dafa1fd1ae9654ffc8468c2a", "tree": "287ac67d2e4da02933520d67e9f8735d923ff177", "parents": [ "778bd69cb6a3288cbd66ec1a99ec76c4f9fa9332" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Wed May 13 12:36:13 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 12:36:13 2026" }, "message": "Bump x509-limbo and/or wycheproof in CI (#14858)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "778bd69cb6a3288cbd66ec1a99ec76c4f9fa9332", "tree": "c874453240bf09783e68220a3a75012c1d9adfae", "parents": [ "4c6f5356ea04c64905b577526c560fc15be91d62" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Wed May 13 12:35:49 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 12:35:49 2026" }, "message": "Bump downstream dependencies in CI (#14859)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "4c6f5356ea04c64905b577526c560fc15be91d62", "tree": "9617c9d49c08d963eabae0dfc2452066e53bbb80", "parents": [ "b13f337c269ed5d4265702929a0b0ff9bcae17de" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Wed May 13 12:35:22 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 12:35:22 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14857)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "b13f337c269ed5d4265702929a0b0ff9bcae17de", "tree": "e9307cf9500c9dbc671f29df969e1dc11dea53cd", "parents": [ "811ed68770ad33916aac835954499700747bf8c6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 13 01:53:15 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 01:53:15 2026" }, "message": "chore(deps): bump virtualenv from 21.3.1 to 21.3.2 (#14848)\n\nBumps [virtualenv](https://github.com/pypa/virtualenv) from 21.3.1 to 21.3.2.\n- [Release notes](https://github.com/pypa/virtualenv/releases)\n- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)\n- [Commits](https://github.com/pypa/virtualenv/compare/21.3.1...21.3.2)\n\n---\nupdated-dependencies:\n- dependency-name: virtualenv\n dependency-version: 21.3.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "811ed68770ad33916aac835954499700747bf8c6", "tree": "7c17e222eb69a52ac7505038d0e614a52d1034b9", "parents": [ "a093ecafec32fca3191a5f49deb2af5e9321f330" ], "author": { "name": "Craig Lorentzen", "email": "crlorentzen@gmail.com", "time": "Tue May 12 20:20:26 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 20:20:26 2026" }, "message": "fix(backend): Report Poly1305 as supported when AWS-LC is backing (#14849)\n\nAWS-LC supports Poly1305 in FIPS mode. The Rust backend already\nhandles this correctly — when compiled with CRYPTOGRAPHY_IS_AWSLC,\nthe Poly1305Boring path is used which has no FIPS gate. Align the\nPython-side poly1305_supported() method with the actual behavior.\n\nCo-authored-by: Craig Lorentzen \u003ccrlorent@amazon.com\u003e" }, { "commit": "a093ecafec32fca3191a5f49deb2af5e9321f330", "tree": "cfdd8e0089f3ffe06488da4783704f2ad94a5c5e", "parents": [ "6e45ef1fddfd9decaa3a9d409b15ac34363899d7" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Tue May 12 13:08:44 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 13:08:44 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14847)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "6e45ef1fddfd9decaa3a9d409b15ac34363899d7", "tree": "7b54aabfea052a1518c9ec9e94dc4575c28ea16c", "parents": [ "44662075cd8699012fe349fabbf4b6e6339edfe7" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Tue May 12 01:24:13 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 01:24:13 2026" }, "message": "Bump downstream dependencies in CI (#14846)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "44662075cd8699012fe349fabbf4b6e6339edfe7", "tree": "c532a5fab5db88338dc4bdca3b9ccede579398b1", "parents": [ "5e586d4b4bb2356bf4fdf8e544402960440015ad" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 01:10:42 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 01:10:42 2026" }, "message": "chore(deps): bump cc from 1.2.61 to 1.2.62 (#14838)\n\nBumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.61 to 1.2.62.\n- [Release notes](https://github.com/rust-lang/cc-rs/releases)\n- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/rust-lang/cc-rs/compare/cc-v1.2.61...cc-v1.2.62)\n\n---\nupdated-dependencies:\n- dependency-name: cc\n dependency-version: 1.2.62\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "5e586d4b4bb2356bf4fdf8e544402960440015ad", "tree": "83cafeffced58e13698bd74f6d926f9c010af4f4", "parents": [ "86cb13540856f1ac08eda2fbee62e71e146208a6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 01:10:29 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 01:10:29 2026" }, "message": "chore(deps): bump idna from 3.13 to 3.14 (#14840)\n\nBumps [idna](https://github.com/kjd/idna) from 3.13 to 3.14.\n- [Release notes](https://github.com/kjd/idna/releases)\n- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)\n- [Commits](https://github.com/kjd/idna/compare/v3.13...v3.14)\n\n---\nupdated-dependencies:\n- dependency-name: idna\n dependency-version: \u00273.14\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "86cb13540856f1ac08eda2fbee62e71e146208a6", "tree": "bb2d0c062ac7d2d17e904748c1f97fddf8fe4338", "parents": [ "60d527981269b2f0fc1f31a498ec6c934686ef7a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 01:10:13 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 01:10:13 2026" }, "message": "chore(deps): bump librt from 0.10.0 to 0.11.0 (#14839)\n\nBumps [librt](https://github.com/mypyc/librt) from 0.10.0 to 0.11.0.\n- [Commits](https://github.com/mypyc/librt/compare/v0.10.0...v0.11.0)\n\n---\nupdated-dependencies:\n- dependency-name: librt\n dependency-version: 0.11.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "60d527981269b2f0fc1f31a498ec6c934686ef7a", "tree": "14c3bfe75055abe195246e6f8dc386617eca845c", "parents": [ "dc9e174197742f6bf5d763d45d11d9c6a1228a47" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 11 17:09:10 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 11 17:09:10 2026" }, "message": "chore(deps): bump uv from 0.11.12 to 0.11.13 (#14841)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.12 to 0.11.13.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.12...0.11.13)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.13\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "dc9e174197742f6bf5d763d45d11d9c6a1228a47", "tree": "b3897de7c7bc97e10ab64baaaf63fa890b261e2c", "parents": [ "6beef1bc90974b4fa96bfb3caf6d3f42ad07f12d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 11 17:08:41 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 11 17:08:41 2026" }, "message": "chore(deps): bump uv from 0.11.11 to 0.11.13 in /.github/requirements (#14842)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.11 to 0.11.13.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.11...0.11.13)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.13\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6beef1bc90974b4fa96bfb3caf6d3f42ad07f12d", "tree": "4b62bcdb23f815c6d4c88f607424ea1214c7a0f2", "parents": [ "04632a45fd7b63687098c932d9119dc81a61864f" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Mon May 11 11:10:51 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 11 11:10:51 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14837)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "04632a45fd7b63687098c932d9119dc81a61864f", "tree": "6ee2937d0a40e4c0d7ef49690294bd65c9220c70", "parents": [ "c853862a48ebfc07acc6680f63d63ecc7a7a3a82" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sun May 10 23:30:49 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 10 23:30:49 2026" }, "message": "Bump downstream dependencies in CI (#14835)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "c853862a48ebfc07acc6680f63d63ecc7a7a3a82", "tree": "e3b9c6847e97f973477619dc340ad4b8b891429f", "parents": [ "2d462113db204b38833249fefdb4771a6139657f" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Sun May 10 23:22:15 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 10 23:22:15 2026" }, "message": "Update sigstore downstream tests (#14836)" }, { "commit": "2d462113db204b38833249fefdb4771a6139657f", "tree": "cab2117c55d9ba42a9a60c61e8f8464bdada95bc", "parents": [ "1b615b40fda67689745631951311f26485272742" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sun May 10 11:49:17 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 10 11:49:17 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14834)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "1b615b40fda67689745631951311f26485272742", "tree": "ebe87fb9c9fe64d99fd501899bb3f0f189802484", "parents": [ "2db95cc3520ccd1ee02607c137aef6e0a6fab962" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Sun May 10 02:28:10 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 10 02:28:10 2026" }, "message": "Bump dependencies that dependabot isn\u0027t (#14833)" }, { "commit": "2db95cc3520ccd1ee02607c137aef6e0a6fab962", "tree": "4c7fa2b2c758d4945834c8b52000256579bae995", "parents": [ "5feccf02f9e21691e1455691dd7854c8471ba6e3" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Sun May 10 01:19:55 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 10 01:19:55 2026" }, "message": "Added comment for potential future MSRV (#14832)\n\n* Added comment for potential future MSRV\n\nAlso remove workaround for long-fixed pyo3 issue\n\n* clippy fix" }, { "commit": "5feccf02f9e21691e1455691dd7854c8471ba6e3", "tree": "c518a06f3f9441e0f48d4b24773aa2cc9fa04c07", "parents": [ "b8c4affc2202f9c028bf5cca035b84d662d8b494" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Sat May 09 12:50:37 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 09 12:50:37 2026" }, "message": "Simplify ML-DSA and ML-KEM AWS-LC paths using AWS-LC 1.73.0 APIs (#14830)\n\n* Simplify ML-DSA and ML-KEM AWS-LC code paths for AWS-LC 1.73.0\n\nAWS-LC 1.73.0 added two APIs that let us drop AWS-LC-specific\nworkarounds:\n\n* `EVP_PKEY_CTX_set1_signature_context_string` for ML-DSA EVP\n sign/verify (aws/aws-lc#3135). Previously the EVP PQDSA path\n hardcoded the context to (NULL, 0), so AWS-LC had to call the\n raw `ml_dsa_{44,65,87}_sign`/`_verify` functions directly. Now\n AWS-LC can use the same `EVP_DigestSign`/`EVP_DigestVerify`\n path as BoringSSL and OpenSSL 3.5.\n\n* `EVP_PKEY_kem_get_type` (aws/aws-lc#3179), which returns the\n KEM key NID. Previously we discriminated ML-KEM-768 vs\n ML-KEM-1024 by public-key byte length because AWS-LC lacked\n this accessor.\n\nCI already pins AWS-LC to v1.73.0.\n\n* Use EVP_PKEY_get_private_seed on AWS-LC for ML-DSA/ML-KEM seed extraction\n\nAWS-LC 1.73.0 (aws/aws-lc#3200) added `EVP_PKEY_get_private_seed`\nfor KEM and PQDSA keys, with the same signature as BoringSSL\u0027s.\nDrop the AWS-LC PKCS#8 round-trip in `mldsa_seed_from_pkey` and\n`mlkem_seed_from_pkey` and call the helper directly.\n\n* Inline mldsa_seed_from_pkey and mlkem_seed_from_pkey\n\nNow that all backends extract the seed via `EVP_PKEY_get_private_seed`,\nthe wrappers in `cryptography_key_parsing::pkcs8` are thin shims. The\nfive backend callers only need the raw seed bytes, not the\n`MlDsaPrivateKey`/`MlKemPrivateKey` ASN.1 enum, so call\n`mldsa_seed_raw`/`mlkem_seed_raw` directly. The two remaining ASN.1\nserialization sites construct the enum inline.\n\n* Drop redundant cfg gate on mldsa_seed_raw / mlkem_seed_raw\n\nThe mldsa and mlkem modules are already gated by the same condition\nin cryptography-openssl/src/lib.rs.\n\n---------\n\nCo-authored-by: Claude \u003cnoreply@anthropic.com\u003e" }, { "commit": "b8c4affc2202f9c028bf5cca035b84d662d8b494", "tree": "d33a2119a840027b448cae96fcdf4d64a84c14c1", "parents": [ "8ed892e7b17eedbb8f079f3066a8438cfb060080" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Sat May 09 12:36:54 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 09 12:36:54 2026" }, "message": "Add OPENSSL_DIR to CLAUDE.md, also simplify (#14831)" }, { "commit": "8ed892e7b17eedbb8f079f3066a8438cfb060080", "tree": "1b43700ccbaad251eb947f767697287b1f5a6670", "parents": [ "40b75a78201e5f60642b396ff43d343a712869c8" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sat May 09 12:06:52 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 09 12:06:52 2026" }, "message": "Bump downstream dependencies in CI (#14829)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "40b75a78201e5f60642b396ff43d343a712869c8", "tree": "ab19387534be08942b3deaccec82742528483453", "parents": [ "fd8654b231b74ad4f878fda3d75d83ca814b0d3a" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sat May 09 12:05:48 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 09 12:05:48 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14828)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "fd8654b231b74ad4f878fda3d75d83ca814b0d3a", "tree": "43c33af6a8ca2ffcf46f49a67efcc284fad1cd50", "parents": [ "8f7d30d2765b5224c5f1afca4fe9d333bd11268a" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Fri May 08 11:07:54 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 08 11:07:54 2026" }, "message": "Bump downstream dependencies in CI (#14826)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "8f7d30d2765b5224c5f1afca4fe9d333bd11268a", "tree": "e166855ed69c6e53880f4b0cf86ce9acf5a23ddd", "parents": [ "6f1382650f2cb6c6eb57594c76c7774590a678f3" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Fri May 08 11:07:22 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 08 11:07:22 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14825)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "6f1382650f2cb6c6eb57594c76c7774590a678f3", "tree": "e87fc17c368131964f3164519a211bcfa9791fa9", "parents": [ "2c73e0d5074935adb61913fb258805ac034bc40d" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Thu May 07 10:54:54 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 07 10:54:54 2026" }, "message": "Bump downstream dependencies in CI (#14824)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "2c73e0d5074935adb61913fb258805ac034bc40d", "tree": "3ea683acd13bf128c02c8ebf6261f01cbd423e10", "parents": [ "d7008e8ac992cc56406f58331be748be2d3eae1d" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Thu May 07 10:51:31 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 07 10:51:31 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14823)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "d7008e8ac992cc56406f58331be748be2d3eae1d", "tree": "1a68144b04379d9b5ea5c559b2aa604954e0a2f4", "parents": [ "7a6d3fb95964dcb40d5e74730dea19ded073a79f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu May 07 10:50:17 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 07 10:50:17 2026" }, "message": "chore(deps): bump uv from 0.11.10 to 0.11.11 (#14820)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.10 to 0.11.11.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.10...0.11.11)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.11\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7a6d3fb95964dcb40d5e74730dea19ded073a79f", "tree": "02ccdd6cfcfdfe85ff0569260d70e05a2f7d158e", "parents": [ "24c165d95120306fb70a7be3269d37180e521a75" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu May 07 10:49:48 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 07 10:49:48 2026" }, "message": "chore(deps): bump uv from 0.11.10 to 0.11.11 in /.github/requirements (#14821)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.10 to 0.11.11.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.10...0.11.11)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.11\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "24c165d95120306fb70a7be3269d37180e521a75", "tree": "6fd558c061d0974df0b110d4e3aa7e9fd6e4f6c3", "parents": [ "1f9203eb86c97c651a9464955e5abefbbb9be7fb" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Wed May 06 15:56:50 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 15:56:50 2026" }, "message": "Skip PKCS#8 round-trip when extracting ML-DSA/ML-KEM seeds on BoringSSL (#14810)\n\n* remove PKCS#8 round-trip when extracting ML-DSA/ML-KEM seeds on BoringSSL\n\nBoringSSL exposes EVP_PKEY_get_private_seed, which returns the seed\ndirectly. Use it instead of round-tripping through PKCS#8. AWS-LC keeps\nthe round-trip since it lacks an equivalent API.\n\n* simplify cfg_if branches in seed extraction to bare else\n\n* import ForeignTypeRef for as_ptr() on BoringSSL ML-KEM seed extraction\n\n---------\n\nCo-authored-by: Claude \u003cnoreply@anthropic.com\u003e" }, { "commit": "1f9203eb86c97c651a9464955e5abefbbb9be7fb", "tree": "73a6ccff1e61697aaa6de57966df0cc74f65a9be", "parents": [ "f592252f1b9d4fe5a3fdc2883454424dc0231878" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Wed May 06 14:53:28 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 14:53:28 2026" }, "message": "Bump dependencies that dependabot isn\u0027t (#14817)" }, { "commit": "f592252f1b9d4fe5a3fdc2883454424dc0231878", "tree": "2d2a773c8dcb195932fac2790328c66ee204669b", "parents": [ "9b9aaf3c9d26f29d30d36e8501ad93d4bbeb1996" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Wed May 06 12:24:45 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 12:24:45 2026" }, "message": "drop libressl 4.1 (#14818)\n\nOpenBSD 7.7 is EOL" }, { "commit": "9b9aaf3c9d26f29d30d36e8501ad93d4bbeb1996", "tree": "64af06e35a34893727978d3e03adbc25f2a69f29", "parents": [ "4c350467a1fdb0eb20a8f372b406b18859538b83" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Wed May 06 11:05:48 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 11:05:48 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14816)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "4c350467a1fdb0eb20a8f372b406b18859538b83", "tree": "5d5e9f85ecb49c0c757bd6749bf7df83b487b89d", "parents": [ "b7fc967ceca55f3854c0072734bc112260ebc557" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 06 11:05:19 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 11:05:19 2026" }, "message": "chore(deps): bump uv from 0.11.9 to 0.11.10 in /.github/requirements (#14814)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.9 to 0.11.10.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.9...0.11.10)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "b7fc967ceca55f3854c0072734bc112260ebc557", "tree": "c401875bf5780f22a5f00488ff81c7dd5e7b4f60", "parents": [ "4314e0c8376fd3303297b25bd3191e20084800bf" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 06 11:05:05 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 11:05:05 2026" }, "message": "chore(deps): bump python-discovery from 1.2.2 to 1.3.0 (#14813)\n\nBumps [python-discovery](https://github.com/tox-dev/python-discovery) from 1.2.2 to 1.3.0.\n- [Release notes](https://github.com/tox-dev/python-discovery/releases)\n- [Commits](https://github.com/tox-dev/python-discovery/compare/1.2.2...1.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: python-discovery\n dependency-version: 1.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "4314e0c8376fd3303297b25bd3191e20084800bf", "tree": "0b3bb783977b868216cd6d12bef02aa7b14f7a1f", "parents": [ "8c685f90719af1cd91794c42b6ba515a2371c222" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 06 11:04:20 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 11:04:20 2026" }, "message": "chore(deps): bump uv from 0.11.9 to 0.11.10 (#14812)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.9 to 0.11.10.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.9...0.11.10)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8c685f90719af1cd91794c42b6ba515a2371c222", "tree": "a0fb84d1f3dd21b9ac520006fc5cb8e7b6c16602", "parents": [ "aa154e29a9eea5b6d1a9860b16b85dd2862688d4" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed May 06 11:04:01 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 11:04:01 2026" }, "message": "chore(deps): bump librt from 0.9.0 to 0.10.0 (#14811)\n\nBumps [librt](https://github.com/mypyc/librt) from 0.9.0 to 0.10.0.\n- [Commits](https://github.com/mypyc/librt/compare/v0.9.0...v0.10.0)\n\n---\nupdated-dependencies:\n- dependency-name: librt\n dependency-version: 0.10.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "aa154e29a9eea5b6d1a9860b16b85dd2862688d4", "tree": "7db09a36c7097a9d43fe694d98e31003fb583c14", "parents": [ "8cd317305f9e44260ef75ac17e8e6ecb6bfc3782" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Tue May 05 21:51:18 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 21:51:18 2026" }, "message": "remove the stream9/stream10 fips jobs (#14809)\n\nThey have no real value as they only test whatever vanilla openssl/fips\nprovider that centos is shipping, not the combination RHEL chooses to\nship. We already test openssl fips via building upstream ourselves so\ngoing forward we\u0027ll just validate against that" }, { "commit": "8cd317305f9e44260ef75ac17e8e6ecb6bfc3782", "tree": "a7833ff97d6a7afd67f751a3f2255b572d188427", "parents": [ "8c1fa083f30ad994fab358a4b7000dbfe3f863bf" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Tue May 05 11:13:52 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 11:13:52 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14806)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "8c1fa083f30ad994fab358a4b7000dbfe3f863bf", "tree": "5b454a3931dbe6992463595995c8f373ca90e716", "parents": [ "ccae7898765abc6c800ae914520864ab696b6550" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Tue May 05 11:09:18 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 11:09:18 2026" }, "message": "Bump x509-limbo and/or wycheproof in CI (#14807)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "ccae7898765abc6c800ae914520864ab696b6550", "tree": "5694dbee836f3201ef425cca4f42742a11e7e1cd", "parents": [ "2ee95e6891641cb4b66d9ad691c582b2dc5653b7" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Tue May 05 11:09:02 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 11:09:02 2026" }, "message": "Bump downstream dependencies in CI (#14808)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "2ee95e6891641cb4b66d9ad691c582b2dc5653b7", "tree": "85ba42c0e7eea28856a54e962d4cdaafc6a5fad5", "parents": [ "815e4e9fddf2d940675781bc09229c05c519c48e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 05 11:07:32 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 11:07:32 2026" }, "message": "chore(deps): bump uv from 0.11.8 to 0.11.9 in /.github/requirements (#14805)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.8 to 0.11.9.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.8...0.11.9)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "815e4e9fddf2d940675781bc09229c05c519c48e", "tree": "d9149e01d18bdb0fa18722293ab45dc5610a5f78", "parents": [ "ac62e32a22dfad1530ca74e5ed4a0741a2333e3b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 05 11:07:02 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 11:07:02 2026" }, "message": "chore(deps): bump virtualenv from 21.3.0 to 21.3.1 (#14803)\n\nBumps [virtualenv](https://github.com/pypa/virtualenv) from 21.3.0 to 21.3.1.\n- [Release notes](https://github.com/pypa/virtualenv/releases)\n- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)\n- [Commits](https://github.com/pypa/virtualenv/compare/21.3.0...21.3.1)\n\n---\nupdated-dependencies:\n- dependency-name: virtualenv\n dependency-version: 21.3.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ac62e32a22dfad1530ca74e5ed4a0741a2333e3b", "tree": "1b0d6b52462db0b8dbeb49c1751bab5401abd060", "parents": [ "539bb9e51553da8d430c2c1bdb1124847abeb957" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 05 11:06:33 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 11:06:33 2026" }, "message": "chore(deps): bump uv from 0.11.8 to 0.11.9 (#14802)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.8 to 0.11.9.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.8...0.11.9)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "539bb9e51553da8d430c2c1bdb1124847abeb957", "tree": "d2316fe36b53dbe8525f7a5f779589e34801734c", "parents": [ "f797345f7b2247d6fba6112ff67f4cb210063f5e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 05 11:06:17 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 11:06:17 2026" }, "message": "chore(deps): bump dawidd6/action-download-artifact from 20 to 21 (#14801)\n\nBumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 20 to 21.\n- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)\n- [Commits](https://github.com/dawidd6/action-download-artifact/compare/8305c0f1062bb0d184d09ef4493ecb9288447732...b6e2e70617bc3265edd6dab6c906732b2f1ae151)\n\n---\nupdated-dependencies:\n- dependency-name: dawidd6/action-download-artifact\n dependency-version: \u002721\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f797345f7b2247d6fba6112ff67f4cb210063f5e", "tree": "c1e7e6f174dc119ff55b413f7cd4f384e4f80fa8", "parents": [ "cf03b04a36038805249e11265fed838bded81cea" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Tue May 05 11:05:50 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 11:05:50 2026" }, "message": "distribute limbo tests (#14800)" }, { "commit": "cf03b04a36038805249e11265fed838bded81cea", "tree": "d412a631fc9b52e7cefeafd0fb436d055c71e123", "parents": [ "f482d284966b2fad46f34c2e3693070cb05a35fc" ], "author": { "name": "William Woodruff", "email": "william@yossarian.net", "time": "Tue May 05 00:39:52 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 00:39:52 2026" }, "message": "Fix publish (#14799)\n\n* Fix publish\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n* Make it sparse\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n* bump\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n---------\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e" }, { "commit": "f482d284966b2fad46f34c2e3693070cb05a35fc", "tree": "bd44681acf6b61b339d687db48f1137921e5d969", "parents": [ "4c6e243294517b6190616cd49e247512ec3071f1" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Mon May 04 23:24:03 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 23:24:03 2026" }, "message": "Drop 32-bit Windows and x86-64 macOS support (#14738)\n\n* Drop 32-bit Windows and x86-64 macOS support\n\nRemoves 32-bit Windows and x86-64 macOS from CI, wheel-builder, and\nthe supported platforms documentation. macOS wheels are now built\narm64-only with a deployment target of 11.0.\n\nCloses #13519\nCloses #13520\n\n* Remove obsolete 32-bit Python on 64-bit Windows warning\n\nRemoves the runtime warning (and its PROCESSOR_ARCHITEW6432 detection,\nplus the now-unused os, sys, warnings imports) now that 32-bit Windows\nis no longer supported.\n\n---------\n\nCo-authored-by: Claude \u003cnoreply@anthropic.com\u003e" }, { "commit": "4c6e243294517b6190616cd49e247512ec3071f1", "tree": "6e68a8c68d65dd0a9fbaa9c21f114cf5125dd149", "parents": [ "8e03e30e3aae01632a697e903e3593c924f0139d" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 23:05:18 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 23:05:18 2026" }, "message": "reopen for v49 (#14797)" }, { "commit": "8e03e30e3aae01632a697e903e3593c924f0139d", "tree": "c27d020631f629d9ac9d76cec4df136dbf90e5ac", "parents": [ "295e0d254ef31ab864730aa41312ec355416ee71" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 22:41:23 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 22:41:23 2026" }, "message": "bump for 48.0.0 release (#14796)" }, { "commit": "295e0d254ef31ab864730aa41312ec355416ee71", "tree": "15fdd94216bddba3fe59f7c0b3ae039ba20a39cc", "parents": [ "104a2de19e268a433e6da92be9cb872dcf0003c8" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 22:41:15 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 22:41:15 2026" }, "message": "Add AGENTS.md with CLAUDE.md symlink (#14794)\n\n* Add AGENTS.md with CLAUDE.md symlink\n\nDocument project layout and the canonical commands (nox -e local, uv) for\nagent-based tooling. Exclude both files from the sdist via check-sdist\u0027s\ngit-only list.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n\n* Update AGENTS.md\n\nCo-authored-by: Alex Gaynor \u003calex.gaynor@gmail.com\u003e\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Alex Gaynor \u003calex.gaynor@gmail.com\u003e" }, { "commit": "104a2de19e268a433e6da92be9cb872dcf0003c8", "tree": "7699cb7465a546bd34d9f943e9353847981000ba", "parents": [ "67ec1e51988195e17993d2edef5258b27509b926" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Mon May 04 11:07:41 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 11:07:41 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14793)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "67ec1e51988195e17993d2edef5258b27509b926", "tree": "f7ae689547668218827c575704e07af007b5cc67", "parents": [ "b2da57a0d9e4bfd2b95364299091a18f74127b26" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 04:22:20 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 04:22:20 2026" }, "message": "call check_length early on AesSiv::encrypt (#14792)\n\nThis is an optimization to early exit before allocating a PyBytes when\nthe buffer is too large and would error inside the encrypt_into (which\nalso calls check_length)" }, { "commit": "b2da57a0d9e4bfd2b95364299091a18f74127b26", "tree": "b6ffda41b5a79b8431c7614860b34fb020d727c6", "parents": [ "3cf44adee25c368d4a136e072fa9f80465d91eb0" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 04:17:44 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 04:17:44 2026" }, "message": "changelog for mldsa/mlkem for openssl (#14791)" }, { "commit": "3cf44adee25c368d4a136e072fa9f80465d91eb0", "tree": "11c2c1800c303514f007361ebcd2daa71d1406fa", "parents": [ "2e31639666766f846fbab2c605879db0fa64fe83" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 04:01:21 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 04:01:21 2026" }, "message": "ML-KEM OpenSSL support (#14781)\n\n* support OpenSSL with ML-KEM\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n\n* better comment\n\n* change match to if/elif\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e" }, { "commit": "2e31639666766f846fbab2c605879db0fa64fe83", "tree": "f153678f37038d2190e130e40932fdda273a2dda", "parents": [ "5affe5a286a986fdf512c4a5cb280d28a96c10e3" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 03:29:27 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 03:29:27 2026" }, "message": "ML-DSA OpenSSL support (#14773)\n\n* support OpenSSL with ML-DSA\n\n* Address review feedback on ML-DSA OpenSSL support\n\nUnify is_mldsa_pkey across BoringSSL/AWS-LC/OpenSSL 3.5+ and collapse the\nduplicated match arms in pkcs8/spki/keys. Replace silly match-with-guards\nwith if/else chain in MlDsaVariant::from_pkey for OpenSSL 3.5+." }, { "commit": "5affe5a286a986fdf512c4a5cb280d28a96c10e3", "tree": "2ea5677df04437482c7a3035d33b32196e409ef3", "parents": [ "2e73ca448eaf64b6f0d4ffbb794cf96170cef5ec" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 03:14:17 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 03:14:17 2026" }, "message": "fix rust nightly clippy (#14790)" }, { "commit": "2e73ca448eaf64b6f0d4ffbb794cf96170cef5ec", "tree": "463b4c2449641a2692238f5a1dce02e07a4505a8", "parents": [ "82ebd3b9f49d49ad5fd8b4b1f1dd02487b6e1466" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Mon May 04 00:41:13 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 00:41:13 2026" }, "message": "bump rust-openssl dep and update EcPoint::mul_generator to mul_generator2 (#14789)" }, { "commit": "82ebd3b9f49d49ad5fd8b4b1f1dd02487b6e1466", "tree": "dfa6543a3cea68bae8a99da60d5403fb0121f744", "parents": [ "ca9427ecb721080406bce56a6672b66c7599f969" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sun May 03 12:02:48 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 03 12:02:48 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14785)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "ca9427ecb721080406bce56a6672b66c7599f969", "tree": "78bd739137da0bf2d6cd466f9de8839e510a8fdb", "parents": [ "631e6526cfa924f01d60581d8753f749a1585416" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sun May 03 12:02:30 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 03 12:02:30 2026" }, "message": "Bump x509-limbo and/or wycheproof in CI (#14786)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "631e6526cfa924f01d60581d8753f749a1585416", "tree": "337ed0577940bfdb2f2b811b8981f255b4927ccd", "parents": [ "62d0783211a329c5d1d27b52c527a245e9bc842b" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Sat May 02 21:18:41 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 21:18:41 2026" }, "message": "fix wycheproof JSON loading on Windows (#14784)\n\nML-KEM wycheproof vectors contain non-ASCII bytes that fail to decode\nwith Windows\u0027 default cp1252 codec. Open the file as UTF-8 explicitly.\n\nCo-authored-by: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e" }, { "commit": "62d0783211a329c5d1d27b52c527a245e9bc842b", "tree": "e2e91e4efc029268d7ccca6edb6eaa2c11fd7a83", "parents": [ "ce7f263d2b5492222497966e4132010caf650a70" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Sat May 02 21:05:19 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 21:05:19 2026" }, "message": "Raise MemoryError on Argon2 allocation failure (#14782)\n\n* Raise MemoryError on Argon2 allocation failure\n\nPreviously, Argon2 derivations that exceeded available memory (e.g. when\nrunning under mlockall with a low max-locked-memory ulimit, or when given\nan unreasonably large memory_cost) surfaced as an opaque InternalError.\nMatch Scrypt\u0027s behavior and raise MemoryError with a message that\nincludes the configured memory_cost, so callers can handle the failure\nprogrammatically.\n\nRefs #14778\n\n* Only map memory-allocation errors to MemoryError\n\nArgon2\u0027s derive can also raise PROV_R_INVALID_THREAD_POOL_SIZE on builds\nwithout thread-pool support, plus a couple of provider-lookup reasons.\nRestrict the MemoryError conversion to ERR_R_MALLOC_FAILURE (256) and\nPROV_R_INVALID_MEMORY_SIZE (235); let other errors fall through.\n\n* Note other init failures can occur\n\n* Drop reason-code branching; always map argon2 derive errors to MemoryError\n\n* Skip argon2 malloc failure test on macOS\n\nmacOS overcommits the 4 TiB virtual reservation, then the subsequent\nmemset in OPENSSL_secure_zalloc triggers an OOM-kill before our\nMemoryError mapping can fire. Linux (where allocation returns NULL\nup front) exercises the path across all supported OpenSSL versions.\n\n---------\n\nCo-authored-by: Claude \u003cnoreply@anthropic.com\u003e" }, { "commit": "ce7f263d2b5492222497966e4132010caf650a70", "tree": "dcc6448c2b6ec3d9007533225d4cf19e927c9021", "parents": [ "31dbabeb5ebd860792da4c3fb1e53ca6ec878460" ], "author": { "name": "Alex Gaynor", "email": "alex.gaynor@gmail.com", "time": "Sat May 02 20:33:18 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 20:33:18 2026" }, "message": "Parallelize test_no_circular_imports across xdist workers (#14783)\n\nConvert from a single test that loops with subtests to a parametrized\ntest, so each module\u0027s import check becomes an individual test case\nthat pytest-xdist can distribute across workers.\n\nhttps://claude.ai/code/session_011pDeYKpCUdSPQXLMuperTH\n\nCo-authored-by: Claude \u003cnoreply@anthropic.com\u003e" }, { "commit": "31dbabeb5ebd860792da4c3fb1e53ca6ec878460", "tree": "28cc65eae7ba2e081234cb4a341eed0772b81371", "parents": [ "328fd2a73599e30e01da9ed3a6b0de1e1a75054d" ], "author": { "name": "Daniel Roesler", "email": "github@diafygi.com", "time": "Sat May 02 19:46:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 19:46:04 2026" }, "message": "Fixes #14754 - Builds failing for BoringSSL and AWS-LC using GCC 14+ (#14770)\n\n* Fixes #14754 - Builds failing for BoringSSL and AWS-LC using GCC 14+\n\n* testing flag\n\n* cleaned up code to pass linting\n\n* updated based on feedback in pull request\n\n* made one line\n\n* fixed rust lint\n\n* fixed python linter" }, { "commit": "328fd2a73599e30e01da9ed3a6b0de1e1a75054d", "tree": "8dc6d16e4c759010f9da0cf655c99fae99a176ed", "parents": [ "df26f0179d4a8c9496d47aa5e0ff5fe048c4c368" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sat May 02 10:42:09 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 10:42:09 2026" }, "message": "Bump downstream dependencies in CI (#14780)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "df26f0179d4a8c9496d47aa5e0ff5fe048c4c368", "tree": "ea3c10b3a46c9a629f34f436b32dcaedd656fc3d", "parents": [ "ac3abca71ccdec370bcca095819e268f8a70a6f3" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sat May 02 10:40:53 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 10:40:53 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14779)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "ac3abca71ccdec370bcca095819e268f8a70a6f3", "tree": "714a787236b3a7ec2f9375e8f4621709a53bf890", "parents": [ "57e69d64ed4399119adf7f3005c1f82c3f85c480" ], "author": { "name": "Elena Washington", "email": "washingtoneg@users.noreply.github.com", "time": "Fri May 01 20:44:09 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 01 20:44:09 2026" }, "message": "fix: add -headerpad_max_install_names for macOS wheels (#14777)\n\n* fix: add -headerpad_max_install_names for macOS wheels\n\n* fix: add comment explaining macOS headerpad flag" }, { "commit": "57e69d64ed4399119adf7f3005c1f82c3f85c480", "tree": "1db4148bec71adfadabe21f636d679f5a545286e", "parents": [ "92de3a32832aa82bb06ec948fa04b2644d49d1ab" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Fri May 01 10:49:24 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 01 10:49:24 2026" }, "message": "Bump x509-limbo and/or wycheproof in CI (#14775)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "92de3a32832aa82bb06ec948fa04b2644d49d1ab", "tree": "ebc260e23a131d5b65d7843d4dae857298dbb774", "parents": [ "97ab2279c6419c171edc9c35ca002c7ed5f8fbec" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Fri May 01 10:48:20 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 01 10:48:20 2026" }, "message": "Bump downstream dependencies in CI (#14776)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "97ab2279c6419c171edc9c35ca002c7ed5f8fbec", "tree": "c1423beca712b4aba4219178136c205595b76a2b", "parents": [ "44152b9e62f685765e801f321062f640f931603a" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Fri May 01 10:41:11 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 01 10:41:11 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14774)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "44152b9e62f685765e801f321062f640f931603a", "tree": "fe50d0df8754c19d6b5a9af14e9729f9f96ca997", "parents": [ "0f91032dbd8a7a8f91b29e76c04b27f7dda51fca" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Thu Apr 30 12:26:32 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 30 12:26:32 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14771)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "0f91032dbd8a7a8f91b29e76c04b27f7dda51fca", "tree": "5ae392dab611391de858f9b4ae859211b018133f", "parents": [ "a8a54203ad906b8af75365885129fd92ce7c6da6" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Thu Apr 30 12:26:14 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 30 12:26:14 2026" }, "message": "Bump downstream dependencies in CI (#14772)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "a8a54203ad906b8af75365885129fd92ce7c6da6", "tree": "9b22cfdd8376327c62e357c5ec08f610d961863d", "parents": [ "fb0d878abe417f078e0e96491e3e753aa15e2631" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:31:03 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:31:03 2026" }, "message": "Bump x509-limbo and/or wycheproof in CI (#14767)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "fb0d878abe417f078e0e96491e3e753aa15e2631", "tree": "b7eeaa6e98c6436f3298ab5449535c79a7a947f4", "parents": [ "29555ce05608aae8b7449434d099119c0ef0f596" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:24:26 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:24:26 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14766)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "29555ce05608aae8b7449434d099119c0ef0f596", "tree": "c3d86eb7eb99b4ea88e782871d5e61ef64affa3e", "parents": [ "99de8d186717dffb964cb48c59beb9e261b6f119" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:22:59 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:22:59 2026" }, "message": "Bump downstream dependencies in CI (#14768)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "99de8d186717dffb964cb48c59beb9e261b6f119", "tree": "4e205203e60414077b090e1019fbdbe1836ea658", "parents": [ "5b9cffffa563f4f7cc16f6874b047da07fb397ff" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Tue Apr 28 11:24:16 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 11:24:16 2026" }, "message": "Bump downstream dependencies in CI (#14762)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "5b9cffffa563f4f7cc16f6874b047da07fb397ff", "tree": "9e70c2f327c31131ae083adf4c4a5512ea270b3a", "parents": [ "22d12f9c48ab03f0a4f8bc8270ee502847bbce69" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Tue Apr 28 11:19:32 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 11:19:32 2026" }, "message": "Bump x509-limbo and/or wycheproof in CI (#14761)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "22d12f9c48ab03f0a4f8bc8270ee502847bbce69", "tree": "3fdcee5d10d0e28d566a566248e2b033df520ca9", "parents": [ "acdcde92e688131299a9075b165ea04a4dca69df" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Tue Apr 28 11:19:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 11:19:04 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14760)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "acdcde92e688131299a9075b165ea04a4dca69df", "tree": "02606980db53f988095be9e19066fd9cc4862446", "parents": [ "58822221175010d4e182b72f92c7efc2f2a2cda7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 28 11:15:32 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 11:15:32 2026" }, "message": "chore(deps): bump uv from 0.11.7 to 0.11.8 in /.github/requirements (#14758)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.7 to 0.11.8.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.7...0.11.8)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "58822221175010d4e182b72f92c7efc2f2a2cda7", "tree": "59486fccb2c5b2b890f92551e6350e5c772b991b", "parents": [ "dd47016a65e2e5981c646c13ce2ff0c172bff6ae" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 28 11:15:11 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 11:15:11 2026" }, "message": "chore(deps): bump uv from 0.11.7 to 0.11.8 (#14757)\n\nBumps [uv](https://github.com/astral-sh/uv) from 0.11.7 to 0.11.8.\n- [Release notes](https://github.com/astral-sh/uv/releases)\n- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/uv/compare/0.11.7...0.11.8)\n\n---\nupdated-dependencies:\n- dependency-name: uv\n dependency-version: 0.11.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "dd47016a65e2e5981c646c13ce2ff0c172bff6ae", "tree": "146868353a324a94856396d7e451c5d4e3ec8270", "parents": [ "d6bd5c7f911ef36189d0f2e48af3a26310daefae" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 28 11:14:58 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 11:14:58 2026" }, "message": "chore(deps): bump virtualenv from 21.2.4 to 21.3.0 (#14756)\n\nBumps [virtualenv](https://github.com/pypa/virtualenv) from 21.2.4 to 21.3.0.\n- [Release notes](https://github.com/pypa/virtualenv/releases)\n- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)\n- [Commits](https://github.com/pypa/virtualenv/compare/21.2.4...21.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: virtualenv\n dependency-version: 21.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d6bd5c7f911ef36189d0f2e48af3a26310daefae", "tree": "1a8cd960ba277e67a200bd3dc1765b6ed47c1a23", "parents": [ "9268e30a03dccf70a703e55ca75fac83dab480a1" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Mon Apr 27 12:14:40 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 27 12:14:40 2026" }, "message": "Bump x509-limbo and/or wycheproof in CI (#14750)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "9268e30a03dccf70a703e55ca75fac83dab480a1", "tree": "c040a34122b4941397db2c130aefcb85e10b40ea", "parents": [ "c49166cc8ee3996a0654d0a51c62df9025e6b85e" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Mon Apr 27 12:14:21 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 27 12:14:21 2026" }, "message": "Bump downstream dependencies in CI (#14751)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "c49166cc8ee3996a0654d0a51c62df9025e6b85e", "tree": "7e15b5c3e8303f19f37f350bde970f4a0a331d24", "parents": [ "beff598499ad6992201f163d5a5859d74634127c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 27 12:14:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 27 12:14:04 2026" }, "message": "chore(deps): bump cc from 1.2.60 to 1.2.61 (#14752)\n\nBumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.60 to 1.2.61.\n- [Release notes](https://github.com/rust-lang/cc-rs/releases)\n- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/rust-lang/cc-rs/compare/cc-v1.2.60...cc-v1.2.61)\n\n---\nupdated-dependencies:\n- dependency-name: cc\n dependency-version: 1.2.61\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "beff598499ad6992201f163d5a5859d74634127c", "tree": "77f43709eba03655de3fc528135f25d66d952bf5", "parents": [ "e4c2b7c3932ed75b6a8db38e83c9f9a0c98bccd1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 27 12:13:46 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 27 12:13:46 2026" }, "message": "chore(deps): bump pathspec from 1.1.0 to 1.1.1 (#14753)\n\nBumps [pathspec](https://github.com/cpburnz/python-pathspec) from 1.1.0 to 1.1.1.\n- [Release notes](https://github.com/cpburnz/python-pathspec/releases)\n- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)\n- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.1.0...v1.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: pathspec\n dependency-version: 1.1.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "e4c2b7c3932ed75b6a8db38e83c9f9a0c98bccd1", "tree": "3dbdf7d5c267f09b8dca662e389e83dc27c140b0", "parents": [ "7cb32f451378d65905335c54416dd275534b7340" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Mon Apr 27 12:13:15 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 27 12:13:15 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14749)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "7cb32f451378d65905335c54416dd275534b7340", "tree": "5fee97fdf32717658bbe81a0e1ac46b6bb788a33", "parents": [ "9773418e9ab1d4cc0e677c06a8c0bc1823f1268b" ], "author": { "name": "pyca-boringbot[bot]", "email": "106132319+pyca-boringbot[bot]@users.noreply.github.com", "time": "Sun Apr 26 10:32:42 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Apr 26 10:32:42 2026" }, "message": "Bump BoringSSL, OpenSSL, AWS-LC in CI (#14748)\n\nCo-authored-by: pyca-boringbot[bot] \u003cpyca-boringbot[bot]+106132319@users.noreply.github.com\u003e" }, { "commit": "9773418e9ab1d4cc0e677c06a8c0bc1823f1268b", "tree": "81d8f5552317faed4da7bc4fc606b6e501b30a27", "parents": [ "f317915324c207a146083991fca5175d5a42278d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Apr 25 23:13:24 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Apr 25 23:13:24 2026" }, "message": "chore(deps): bump packaging from 26.1 to 26.2 (#14746)\n\nBumps [packaging](https://github.com/pypa/packaging) from 26.1 to 26.2.\n- [Release notes](https://github.com/pypa/packaging/releases)\n- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)\n- [Commits](https://github.com/pypa/packaging/compare/26.1...26.2)\n\n---\nupdated-dependencies:\n- dependency-name: packaging\n dependency-version: \u002726.2\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f317915324c207a146083991fca5175d5a42278d", "tree": "2e3c1e17fd3982becd435e34efb52ea08c9012ee", "parents": [ "bc646c42efeaf90bcb575a693f18d318cf0355ee" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Apr 25 23:11:19 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Apr 25 23:11:19 2026" }, "message": "chore(deps): bump nh3 from 0.3.4 to 0.3.5 (#14747)\n\nBumps [nh3](https://github.com/messense/nh3) from 0.3.4 to 0.3.5.\n- [Release notes](https://github.com/messense/nh3/releases)\n- [Commits](https://github.com/messense/nh3/compare/v0.3.4...v0.3.5)\n\n---\nupdated-dependencies:\n- dependency-name: nh3\n dependency-version: 0.3.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "bc646c42efeaf90bcb575a693f18d318cf0355ee", "tree": "36ac265f0a6fa907c9b613d92d034f9bd6084d1e", "parents": [ "b26f75ffb8a9af72256cfa68bbb47128b95bd483" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Apr 25 23:02:29 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Apr 25 23:02:29 2026" }, "message": "chore(deps): bump ruff from 0.15.11 to 0.15.12 (#14745)\n\nBumps [ruff](https://github.com/astral-sh/ruff) from 0.15.11 to 0.15.12.\n- [Release notes](https://github.com/astral-sh/ruff/releases)\n- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/ruff/compare/0.15.11...0.15.12)\n\n---\nupdated-dependencies:\n- dependency-name: ruff\n dependency-version: 0.15.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "b26f75ffb8a9af72256cfa68bbb47128b95bd483", "tree": "2d81e9af2daf3db19f891589c7d3d10428bdca45", "parents": [ "078d4db06eace6b187b1f4497ed17bc9cb8d53b5" ], "author": { "name": "William Woodruff", "email": "william@yossarian.net", "time": "Sat Apr 25 22:53:16 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Apr 25 22:53:16 2026" }, "message": "feat(ci): switch to uv publish for PyPI uploads (#13991)\n\n* feat(ci): switch to uv publish for PyPI uploads\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n* Bump attest-action\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n* Ensure uv is installed\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n* Switch to setup-python and bootstrap uv via pip\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n* Re-bump action\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n* Disable setup-python cache\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\n\n---------\n\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e" }, { "commit": "078d4db06eace6b187b1f4497ed17bc9cb8d53b5", "tree": "6606038bd5184728672e057fd37e7089d49dba78", "parents": [ "434914b08696935be24734132c672b8e2b05f0d6" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Sat Apr 25 20:20:34 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Apr 25 20:20:34 2026" }, "message": "remove node20 (#14744)" }, { "commit": "434914b08696935be24734132c672b8e2b05f0d6", "tree": "304f55bbfca52c89e33920dfe185ff5088b3a19c", "parents": [ "a7591915a9a0643898a67bb2d932d656757fa613" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Sat Apr 25 16:05:46 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Apr 25 16:05:46 2026" }, "message": "Reject CRLs with mismatched inner/outer signature algorithms (#14743)\n\nValidate at parse time that the inner TBSCertList.signature matches the\nouter signatureAlgorithm, raising ValueError on mismatch. This matches\nGo\u0027s behavior and closes #14267.\n\nCo-authored-by: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e" }, { "commit": "a7591915a9a0643898a67bb2d932d656757fa613", "tree": "68d5620149a654f66249d3da8cd11133a28cbd4e", "parents": [ "76229c3f1c4ef1201f95f2009893fc7aa3e47d70" ], "author": { "name": "Paul Kehrer", "email": "paul.l.kehrer@gmail.com", "time": "Sat Apr 25 16:01:06 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Apr 25 16:01:06 2026" }, "message": "Use pip install --group in noxfile sessions (#14741)\n\nuv (the configured nox backend) supports pip install --group natively,\nso dependency groups can be installed directly rather than via\nnox.project.dependency_groups.\n\nCo-authored-by: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e" } ], "next": "76229c3f1c4ef1201f95f2009893fc7aa3e47d70" }