{"action":"created","issue":{"url":"https://api.github.com/repos/astralblue/asynciotimemachine/issues/58","repository_url":"https://api.github.com/repos/astralblue/asynciotimemachine","labels_url":"https://api.github.com/repos/astralblue/asynciotimemachine/issues/58/labels{/name}","comments_url":"https://api.github.com/repos/astralblue/asynciotimemachine/issues/58/comments","events_url":"https://api.github.com/repos/astralblue/asynciotimemachine/issues/58/events","html_url":"https://github.com/astralblue/asynciotimemachine/pull/58","id":350539913,"node_id":"MDExOlB1bGxSZXF1ZXN0MjA4MzY2Njgz","number":58,"title":"Update cryptography to 2.3.1","user":{"login":"pyup-bot","id":16239342,"node_id":"MDQ6VXNlcjE2MjM5MzQy","avatar_url":"https://avatars0.githubusercontent.com/u/16239342?v=4","gravatar_id":"","url":"https://api.github.com/users/pyup-bot","html_url":"https://github.com/pyup-bot","followers_url":"https://api.github.com/users/pyup-bot/followers","following_url":"https://api.github.com/users/pyup-bot/following{/other_user}","gists_url":"https://api.github.com/users/pyup-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/pyup-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyup-bot/subscriptions","organizations_url":"https://api.github.com/users/pyup-bot/orgs","repos_url":"https://api.github.com/users/pyup-bot/repos","events_url":"https://api.github.com/users/pyup-bot/events{/privacy}","received_events_url":"https://api.github.com/users/pyup-bot/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-08-14T18:14:48Z","updated_at":"2018-11-12T01:04:44Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/astralblue/asynciotimemachine/pulls/58","html_url":"https://github.com/astralblue/asynciotimemachine/pull/58","diff_url":"https://github.com/astralblue/asynciotimemachine/pull/58.diff","patch_url":"https://github.com/astralblue/asynciotimemachine/pull/58.patch"},"body":"\nThis PR updates [cryptography](https://pypi.org/project/cryptography) from **2.1.3** to **2.3.1**.\n\n\n\n<details>\n  <summary>Changelog</summary>\n  \n  \n   ### 2.3\n   ```\n   ~~~~~~~~~~~~~~~~\n\n* **SECURITY ISSUE:**\n  :meth:`~cryptography.hazmat.primitives.ciphers.AEADDecryptionContext.finalize_with_tag`\n  allowed tag truncation by default which can allow tag forgery in some cases.\n  The method now enforces the ``min_tag_length`` provided to the\n  :class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` constructor.\n  *CVE-2018-10903*\n* Added support for Python 3.7.\n* Added :meth:`~cryptography.fernet.Fernet.extract_timestamp` to get the\n  authenticated timestamp of a :doc:`Fernet &lt;/fernet&gt;` token.\n* Support for Python 2.7.x without ``hmac.compare_digest`` has been deprecated.\n  We will require Python 2.7.7 or higher (or 2.7.6 on Ubuntu) in the next\n  ``cryptography`` release.\n* Fixed multiple issues preventing ``cryptography`` from compiling against\n  LibreSSL 2.7.x.\n* Added\n  :class:`~cryptography.x509.CertificateRevocationList.get_revoked_certificate_by_serial_number`\n  for quick serial number searches in CRLs.\n* The :class:`~cryptography.x509.RelativeDistinguishedName` class now\n  preserves the order of attributes. Duplicate attributes now raise an error\n  instead of silently discarding duplicates.\n* :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap` and\n  :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap_with_padding`\n  now raise :class:`~cryptography.hazmat.primitives.keywrap.InvalidUnwrap` if\n  the wrapped key is an invalid length, instead of ``ValueError``.\n\n.. _v2-2-2:\n   ```\n   \n  \n  \n   ### 2.2.2\n   ```\n   ~~~~~~~~~~~~~~~~~~\n\n* Updated Windows, macOS, and ``manylinux1`` wheels to be compiled with\n  OpenSSL 1.1.0h.\n\n.. _v2-2-1:\n   ```\n   \n  \n  \n   ### 2.2.1\n   ```\n   ~~~~~~~~~~~~~~~~~~\n\n* Reverted a change to ``GeneralNames`` which prohibited having zero elements,\n  due to breakages.\n* Fixed a bug in\n  :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap_with_padding`\n  that caused it to raise ``InvalidUnwrap`` when key length modulo 8 was\n  zero.\n\n\n.. _v2-2:\n   ```\n   \n  \n  \n   ### 2.2\n   ```\n   ~~~~~~~~~~~~~~~~\n\n* **BACKWARDS INCOMPATIBLE:** Support for Python 2.6 has been dropped.\n* Resolved a bug in ``HKDF`` that incorrectly constrained output size.\n* Added :class:`~cryptography.hazmat.primitives.asymmetric.ec.BrainpoolP256R1`,\n  :class:`~cryptography.hazmat.primitives.asymmetric.ec.BrainpoolP384R1`, and\n  :class:`~cryptography.hazmat.primitives.asymmetric.ec.BrainpoolP512R1` to\n  support inter-operating with systems like German smart meters.\n* Added token rotation support to :doc:`Fernet &lt;/fernet&gt;` with\n  :meth:`~cryptography.fernet.MultiFernet.rotate`.\n* Fixed a memory leak in\n  :func:`~cryptography.hazmat.primitives.asymmetric.ec.derive_private_key`.\n* Added support for AES key wrapping with padding via\n  :func:`~cryptography.hazmat.primitives.keywrap.aes_key_wrap_with_padding`\n  and\n  :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap_with_padding`\n  .\n* Allow loading DSA keys with 224 bit ``q``.\n\n.. _v2-1-4:\n   ```\n   \n  \n  \n   ### 2.1.4\n   ```\n   ~~~~~~~~~~~~~~~~~~\n\n* Added ``X509_up_ref`` for an upcoming ``pyOpenSSL`` release.\n\n.. _v2-1-3:\n   ```\n   \n  \n</details>\n\n\n \n\n<details>\n  <summary>Links</summary>\n  \n  - PyPI: https://pypi.org/project/cryptography\n  - Changelog: https://pyup.io/changelogs/cryptography/\n  - Repo: https://github.com/pyca/cryptography\n</details>\n\n"},"comment":{"url":"https://api.github.com/repos/astralblue/asynciotimemachine/issues/comments/437723353","html_url":"https://github.com/astralblue/asynciotimemachine/pull/58#issuecomment-437723353","issue_url":"https://api.github.com/repos/astralblue/asynciotimemachine/issues/58","id":437723353,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNzcyMzM1Mw==","user":{"login":"pyup-bot","id":16239342,"node_id":"MDQ6VXNlcjE2MjM5MzQy","avatar_url":"https://avatars0.githubusercontent.com/u/16239342?v=4","gravatar_id":"","url":"https://api.github.com/users/pyup-bot","html_url":"https://github.com/pyup-bot","followers_url":"https://api.github.com/users/pyup-bot/followers","following_url":"https://api.github.com/users/pyup-bot/following{/other_user}","gists_url":"https://api.github.com/users/pyup-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/pyup-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyup-bot/subscriptions","organizations_url":"https://api.github.com/users/pyup-bot/orgs","repos_url":"https://api.github.com/users/pyup-bot/repos","events_url":"https://api.github.com/users/pyup-bot/events{/privacy}","received_events_url":"https://api.github.com/users/pyup-bot/received_events","type":"User","site_admin":false},"created_at":"2018-11-12T01:04:44Z","updated_at":"2018-11-12T01:04:44Z","author_association":"CONTRIBUTOR","body":"Closing this in favor of #87"}}
{"actor":{"display_login":"pyup-bot"}}