Bump securesystemslib[crypto,pynacl] from 0.19.0 to 0.25.0

[dependabot]

Bumps securesystemslib[crypto,pynacl] from 0.19.0 to 0.25.0.

Release notes

Sourced from securesystemslib[crypto,pynacl]'s releases.

v0.25.0

Changed

• Do not use max salt lengths in RSA PSS signature creation (#436)
• Restrict read and write access for new private keys (#231)
• Replaced deprecated distutils.version.StrictVersion (#433)
• Bumped dependencies: cryptography (#435)

Fixed

• GPG availability check in tests (#434)

v0.24.0

Added

• GPGSigner to support gpg signing via Signer interface (#341, #419)

Changed

• Use max salt lengths in RSA PSS signature creation & automatically verify previous/new sigs (#422)
• Speed up canonical json encoding (#410)
• Bumped dependencies: cffi (#415), colorama (#413), cryptography (#405, #406, #414, #417, #424, #425), ed25519 (#412)
• Changed Debian packaging metadata (#392)

Fixed

• Minor test fixes (#403, #420)

v0.23.0

Fixed

• Race condition in gpg test cleanup function (#397)

Changed

• Consistently raise custom FormatError in keys.verify_signature() (#391)
• Bumped dependencies: cryptography (#396), ed25519 (#394, #398)
• Updated Debian packaging metadata (#392)

v0.22.0

Fixed

• Removed broken Dependabot badge in README (#377)

Added

• Python 3.10 support (#380)
• __eq__ method for Signature objects (#383)
• unrecognized_fields attribute for Signature objects (#387)

Changed

• Bumped dependencies: cffi (#373), cryptography (#376, #379), ed25519 (#378, #390), pycparser (#375), pynacl (#382)
• Misc docstring improvements (#380, #381, #384)

Removed

• Python 3.6 support (#385)

... (truncated)

Changelog

Sourced from securesystemslib[crypto,pynacl]'s changelog.

securesystemslib v0.25.0

Changed

• Do not use max salt lengths in RSA PSS signature creation (#436)
• Restrict read and write access for new private keys (#231)
• Replaced deprecated distutils.version.StrictVersion (#433)
• Bumped dependencies: cryptography (#435)

Fixed

• GPG availability check in tests (#434)

securesystemslib v0.24.0

Added

• GPGSigner to support gpg signing via Signer interface (#341, #419)

Changed

• Use max salt lengths in RSA PSS signature creation & automatically verify previous/new sigs (#422)
• Speed up canonical json encoding (#410)
• Bumped dependencies: cffi (#415), colorama (#413), cryptography (#405, #406, #414, #417, #424, #425), ed25519 (#412)
• Changed Debian packaging metadata (#392)

Fixed

• Minor test fixes (#403, #420)

securesystemslib v0.23.0

Fixed

• Race condition in gpg test cleanup function (#397)

Changed

• Consistently raise custom FormatError in keys.verify_signature() (#391)
• Bumped dependencies: cryptography (#396), ed25519 (#394, #398)
• Updated Debian packaging metadata (#392)

securesystemslib v0.22.0

Fixed

• Removed broken Dependabot badge in README (#377)

Added

• Python 3.10 support (#380)
• __eq__ method for Signature objects (#383)
• unrecognized_fields attribute for Signature objects (#387)

... (truncated)

Commits

• 7ae6c54 Merge pull request #438 from lukpueh/bump_version_0.25.0
• b312500 Prepare v0.25.0 release
• 5d0f478 Merge pull request #436 from lukpueh/fix-pss-salt-len
• de3d1e5 Remove unused import
• dd42718 Revert to digest sized salts in rsassa-pss signing
• 50ea697 Merge pull request #435 from secure-systems-lab/dependabot/pip/cryptography-3...
• b83ae2e build(deps): bump cryptography from 38.0.1 to 38.0.2
• 57fbcdd Merge pull request #231 from sechkova/issue-222
• 9432937 Apply suggestions from code review
• 320f89d Merge pull request #433 from znewman01/removedeprecated
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #60.