Skip to content

Updating cryptography version - #86

Merged
Jannetty merged 4 commits into
mainfrom
patch/update-cryptography
Feb 11, 2026
Merged

Updating cryptography version#86
Jannetty merged 4 commits into
mainfrom
patch/update-cryptography

Conversation

@Jannetty

@Jannetty Jannetty commented Feb 11, 2026

Copy link
Copy Markdown
Member

Estimated time to review: xs

Description of changes:

  • Major change: Github notified us that there is a security vulnerability in older versions of the cryptography python package. Here I updated the cryptography package to a version without the vulnerability and made the necessary adjustment to allowed Python versions (the new cryptography version cannot run on Python 9.1).
  • Minor change: The github actions code we use to install poetry (snok/install-poetry@v1) now by default installs Poetry version 2.3.1, which is not compatible with this project. I specified that it should install Poetry 1.8.2 which is compatible.

How to verify changes:

  • pull changes, poetry install, poetry run python -c "import cryptography; print(cryptography.__version__)" should return "46.0.5".

Sidenote: The pandas version we specify here isn't happy about Python 12; while we are making changes here we may want to consider updating the pandas version.

@Jannetty Jannetty self-assigned this Feb 11, 2026
@Jannetty Jannetty added the priority: high Urgent problem that blocks the system until the issue is resolved label Feb 11, 2026

@jacob-evarts jacob-evarts left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

showing the updated version of the package after pulling and installing

@Jannetty
Jannetty marked this pull request as ready for review February 11, 2026 16:58

@jessicasyu jessicasyu left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thanks for fixing!

@Jannetty
Jannetty merged commit ffc068d into main Feb 11, 2026
6 checks passed
@Jannetty
Jannetty deleted the patch/update-cryptography branch February 11, 2026 17:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

priority: high Urgent problem that blocks the system until the issue is resolved

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants