Skip to content

chore(deps): bump pyasn1 from 0.6.1 to 0.6.3 - #285

Closed
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/uv/pyasn1-0.6.3
Closed

dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/uv/pyasn1-0.6.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pyasn1 from 0.6.1 to 0.6.3.

Release notes

Sourced from pyasn1's releases.

Release 0.6.3

It's a minor release.

  • Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (CVE-2026-30922).
  • Fixed OverflowError from oversized BER length field.
  • Fixed DeprecationWarning stacklevel for deprecated attributes.
  • Fixed asDateTime incorrect fractional seconds parsing.

All changes are noted in the CHANGELOG.

Release 0.6.2

It's a minor release.

  • Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490).
  • Added support for Python 3.14.
  • Added SECURITY.md policy.
  • Migrated to pyproject.toml packaging.

All changes are noted in the CHANGELOG.

Changelog

Sourced from pyasn1's changelog.

Revision 0.6.3, released 16-03-2026

Revision 0.6.2, released 16-01-2026

Commits
  • af65c3b Prepare release 0.6.3
  • 5a49bd1 Merge commit from fork
  • 5494ba4 Fix asDateTime incorrect fractional seconds parsing (#102)
  • 71f486e Fix DeprecationWarning stacklevel for deprecated attributes (#101)
  • d7cb42d Fix OverflowError from oversized BER length field (#100)
  • e7356f8 Prepare release 0.6.2
  • 3908f14 Merge commit from fork
  • 0a7e067 Add support for Python 3.14 (#97)
  • 33656e9 Create Security Policy
  • fa62307 fix for issue #91: unit tests failing due to missing code (#92)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 5, 2026
@cabljac

cabljac commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.6.1 to 0.6.3.
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.1...v0.6.3)

---
updated-dependencies:
- dependency-name: pyasn1
  dependency-version: 0.6.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/pyasn1-0.6.3 branch from 1929b1f to c6a28d5 Compare June 8, 2026 08:01
cabljac added a commit that referenced this pull request Jun 8, 2026
Combine open dependabot dependency PRs into a single lock update:

- pytest 8.4.1 -> 9.0.3 (dev; relaxes constraint <9 -> <10)
- cryptography 45.0.4 -> 48.0.0
- flask 3.1.1 -> 3.1.3
- protobuf 6.31.1 -> 6.33.6
- werkzeug 3.1.3 -> 3.1.8
- urllib3 2.5.0 -> 2.7.0
- pyasn1 0.6.1 -> 0.6.3
- cffi 1.17.1 -> 2.0.0 (transitive)

Supersedes #284, #285, #286, #287, #288, #290, #291.
@cabljac

cabljac commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Superseded by #292, which batches this and the other open dependency bumps into a single lock update to avoid a rebase cascade.

@cabljac cabljac closed this Jun 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/uv/pyasn1-0.6.3 branch June 8, 2026 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant