Skip to content

chore(deps): bump pyasn1 from 0.4.8 to 0.6.2 in /jans-linux-setup#13035

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/jans-linux-setup/pyasn1-0.6.2
Open

chore(deps): bump pyasn1 from 0.4.8 to 0.6.2 in /jans-linux-setup#13035
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/jans-linux-setup/pyasn1-0.6.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026 •
edited
Loading

Bumps pyasn1 from 0.4.8 to 0.6.2.

Release notes

Sourced from pyasn1's releases.

Release 0.6.2

It's a minor release.

  • Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490).
  • Added support for Python 3.14.
  • Added SECURITY.md policy.
  • Migrated to pyproject.toml packaging.

All changes are noted in the CHANGELOG.

Release 0.6.1

It's a minor release.

  • Added support for Python 3.13.
  • Cleaned Python 2-related code.
  • Removed bdist_wheel universal flag from setup.cfg.

All changes are noted in the CHANGELOG.

Release 0.6.0

It's a major release where we drop Python 2 support entirely. The most significant changes are:

  • Removed support for EOL Python 2.7, 3.6, 3.7
  • Added support for previously missing RELATIVE-OID construct
  • Updated link to Layman's Guide

All changes are noted in the CHANGELOG.

Release 0.5.1

It's a minor release.

  • Added support for PyPy 3.10 and Python 3.12
  • Updated RTD configuration to include a dummy index.rst redirecting to contents.html, ensuring compatibility with third-party documentation and search indexes.
  • Fixed the API breakage wih decoder.decode(substrateFun=...). A substrateFun passed to decoder.decode() can now be either v0.4 Non-Streaming or v0.5 Streaming. pyasn1 will detect and handle both cases transparently. A substrateFun passed to one of the new streaming decoders is still expected to be v0.5 Streaming only.

All changes are noted in the CHANGELOG.

Release 0.5.0

It's a major release. The most important changes are:

  • PyPI package ownership for pyasn1 and pyasn1-module has been transferred to Christian Heimes and Simon Pichugin in [PyPI support ticket #2090](pypa/pypi-support#2090).
  • The upstream repositories for pyasn1 and pyasn1-modules are now in the GitHub organization https://github.com/pyasn1/.
  • Modernized packaging and testing. pyasn1 now uses setup.cfg, pyproject.toml, build, and GitHub Actions.
  • Make BER/CER/DER decoders streaming and suspendible
  • Added support for Python 3.8, 3.9, 3.10, 3.11
  • Removed support for EOL Pythons 2.4, 2.5, 2.6, 3.2, 3.3, 3.4, 3.5

... (truncated)

Changelog

Sourced from pyasn1's changelog.

Revision 0.6.2, released 16-01-2026

Revision 0.6.1, released 10-09-2024

Revision 0.6.0, released 26-03-2024

  • Added support for previously missing RELATIVE-OID construct [pr #48](pyasn1/pyasn1#48)
  • Updated link to Layman's Guide Now it provides a link to links to a formatted PDF version of the paper, at a stable domain (researchgate), using https [pr #50](pyasn1/pyasn1#50)
  • Removed support for EOL Python 2.7, 3.6, 3.7 [pr #56](pyasn1/pyasn1#56)

Revision 0.5.1, released 20-11-2023

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 19, 2026
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 19, 2026
@dependabot dependabot bot requested a review from iromli as a code owner January 19, 2026 12:22
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Jan 19, 2026 •
edited
Loading

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@mo-auto
Copy link
Member

mo-auto commented Jan 19, 2026 •
edited
Loading

✅ Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@dependabot dependabot bot force-pushed the dependabot/pip/jans-linux-setup/pyasn1-0.6.2 branch 6 times, most recently from 7e8f8b3 to a5dc461 Compare January 27, 2026 10:51
@dependabot dependabot bot force-pushed the dependabot/pip/jans-linux-setup/pyasn1-0.6.2 branch 6 times, most recently from ff17742 to 4d2b66d Compare February 3, 2026 10:53
@dependabot dependabot bot force-pushed the dependabot/pip/jans-linux-setup/pyasn1-0.6.2 branch 5 times, most recently from 2dac0eb to 0a59b56 Compare February 11, 2026 10:53
@dependabot dependabot bot force-pushed the dependabot/pip/jans-linux-setup/pyasn1-0.6.2 branch 3 times, most recently from 0e35fe5 to e313dd0 Compare February 17, 2026 10:53
@dependabot
chore(deps): bump pyasn1 from 0.4.8 to 0.6.2 in /jans-linux-setup
90af82f 
Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.4.8 to 0.6.2.
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.4.8...v0.6.2)

---
updated-dependencies:
- dependency-name: pyasn1
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/jans-linux-setup/pyasn1-0.6.2 branch from e313dd0 to 90af82f Compare February 18, 2026 10:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@devrimyatar devrimyatar Awaiting requested review from devrimyatar devrimyatar is a code owner

@yuriyz yuriyz Awaiting requested review from yuriyz yuriyz is a code owner

@yurem yurem Awaiting requested review from yurem yurem is a code owner

@yuriyzz yuriyzz Awaiting requested review from yuriyzz yuriyzz is a code owner

@iromli iromli Awaiting requested review from iromli iromli is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mo-auto