【TRACKER】 [python-cryptography] commit 跟踪

该 issue 记录 rpm-tracker 工具爬取得到的社区 commit 信息，请对每个 commit 进行分析，具体操作如下：

1. 判断分类是否正确：
    - 正确：无需操作
    - 错误：评论 `/update_type` 更新 commit 分类
    - **支持类型**：CVE修复、Bug修复、性能优化、revert、CI/CD改进、测试代码改进、文档改进、主体代码新增函数或类、主体代码删除函数或类、开发者体验优化、其他、报错

2. 判断是否需要合入：
    - 合入：依次使用 `/pick`、`/recheck`、`/pr` 合入 commit，进行编译兼容性检查，创建 pr
    - 不需要合入-已存在：`/in_tarball` commit 已存在当前版本 source，不需要合入，隐藏 commit 不展示
    - 不需要合入-其他：`/hide` 基于其他原因，不需要合入，隐藏 commit 不展示

3. 反馈意见：
    - 对 commit 信息反馈：`/note` 针对 commit 信息进行反馈
    - 其他：若需要针对整体爬取过程进行反馈，请在 [tracker-feedback](https://gitee.com/OpenCloudOS/tracker-feedback/issues) 仓库中提交 issue

:loudspeaker:**commit_id 支持批量处理**：
- 要求使用 **英文单引号/双引号** 包起所有commit_id，使用空格分割；
- 请使用 commit 信息中展示的 **7位 commit id**，注意大小写敏感。
- Eg: `/update_type "ed96020 8c2782f" Bug修复`

---
详细命令说明：
| 命令 | 说明 |
|---|---|
| `/update_type "<commit_id>" <类型>` | 评论后 issue 页面刷新展示信息 |
| `/in_tarball "<commit_id>"` | 反馈后 issue 页面隐藏该 commit |
| `/hide "<commit_id>" <原因>` | 反馈后 issue 页面隐藏该 commit，原因记录于数据库 |
| `/pick "<commit_id>"` | 选择 commit 合入，进行编译、兼容性检查。|
| `/recheck` | 适配 commit 修改仓库，重新执行编译、兼容性检查 |
| `/pr "<commit_id>"` | 将 pick 后的 commit 提交 pr |
| `/note "<commit_id>" <反馈内容>` | 针对某条 commit 进行反馈，记录于 [tracker-feedback](https://gitee.com/OpenCloudOS/tracker-feedback/) 仓库 |

rpm-tracker 抓取数据如下：
| branch | id | date | message | type | 能否合入 |
| --- | --- | --- | --- | --- | --- |
| main | [49d31b8](https://github.com/pyca/cryptography/commit/49d31b8180a39b4ff1c8b4bea67ce77d4c4a1c5a) | 2025-03-16 | chore(deps): bump dtolnay/rust-toolchain (#12621) Bumps [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) from a54c7afa936fefeb4456b2dd8068152669aa8203 to 888c2e1ea69ab0d4330cbf0af1ecc7b68f368cc1. - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](https://github.com/dtolnay/rust-toolchain/compare/a54c7afa936fefeb4456b2dd8068152669aa8203...888c2e1ea69ab0d4330cbf0af1ecc7b68f368cc1) --- updated-dependencies: - dependency-name: dtolnay/rust-toolchain dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> | Bug修复 | True |
| main | [ddc364d](https://github.com/pyca/cryptography/commit/ddc364d28b480010f527c9838906992a27d4b55a) | 2025-03-17 | fixes #11450 -- warn on legacy provider load (#12601) enable disabling the legacy provider entirely | Bug修复 | True |
| main | [b18867c](https://github.com/pyca/cryptography/commit/b18867ca5bb47f6f6fd51e870ef4b0dbe008a71d) | 2025-03-17 | fixes #10958 -- support aes-siv with empty plaintext on latest openssl (#12521) | Bug修复 | False |
| main | [a908316](https://github.com/pyca/cryptography/commit/a9083162cfad17567869ed1c1bb5889120911661) | 2025-03-17 | see if merging windows and linux coverage works (#12629) we moved all the coverage merging to python | 性能优化 | True |
| main | [9cd7902](https://github.com/pyca/cryptography/commit/9cd7902d2cc090af22d15ec833834430e14a7fef) | 2025-03-17 | Enable strict bytes. This causes mypy to treat bytes as bytes, and not as a hodgepodge of buffer things (#12505) * Enable strict bytes. This causes mypy to treat bytes as bytes, and not as a hodgepodge of buffer things Then fix the 9000 places we violate this. I only updated things we had tests for, for better or worse. * Apply suggestions from code review Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> --------- Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> | Bug修复 | True |
| main | [aae8e48](https://github.com/pyca/cryptography/commit/aae8e48966294b245893b3cc5933094943a0bb2c) | 2025-03-20 | Improve the error message when a certificate is missing a required extension (#12655) (include the OID) | Bug修复 | True |
| main | [adb6250](https://github.com/pyca/cryptography/commit/adb6250ace9a6a6bf1d388aa173d0ffe524a22fc) | 2025-03-27 | friendlier error message converting a string to a buffer (#12694) * friendlier error message converting a string to a buffer * respond to review comments * drop leading carriage return * rename test | Bug修复 | True |
| main | [67072e5](https://github.com/pyca/cryptography/commit/67072e51e11c0a7f0d2c69c16c5f8bbbffcd7813) | 2025-03-27 | fixes #12664 -- don't include rust stuff in wheels (#12668) | Bug修复 | True |
| main | [30d6698](https://github.com/pyca/cryptography/commit/30d6698e041157a2bbdd8011091d5a96a6a52c31) | 2025-03-29 | CRL hash algorithm getter breaks with PSS padding (#12702) * add unit test assert to reproduce issue * use established hash identification function for CRLs | Bug修复 | True |
| main | [13e7cd1](https://github.com/pyca/cryptography/commit/13e7cd1c45ae2b07667baed38677b9b4b2c904ea) | 2025-04-09 | fixes #12746 -- raise proper error on invalid {ed,x}{25519,448} keys in PEM files (#12747) | Bug修复 | True |
| main | [f556350](https://github.com/pyca/cryptography/commit/f556350f62986275e3d3548f2fdc1964b2599142) | 2025-04-11 | Migrate parsing of private keys to Rust (#12296) * Migrate parsing of unencrypted PKCS#8 private keys to Rust * handle unencrypted PEMs as well * fixes * remove boringssl branches * ruff * fixes * xxx * this is fine now, I guess * cleanups * these pass * no more xfail! * we pass * added TODOs to sketch out missing bits * general progress * encrypted pkcs#8 support * 3des decryption * PEM decryption * forgotten file * cleanup * Fix FIPS? * Unit tests for hex_decode * Another test * replace todos with code where we have tests * roundtrip PKCS#12 through us * pass PEM tests * Remove unreachable code * for coverage * paramiko branch * oops * cleanups and fixes * cleanup * cleanup * fix * revert that * changelog * Support a variety of additional encryption algorithms * scrypt == no libressl * remove xfail * unused * improve rc2 * support no rc2 * lol * Revert "lol" This reverts commit 0eec1a3ce97e883ec0f6cc0ace8726bd1938bb6b. * skip on boringssl * update rust-openssl * review comments | revert（引擎分类） | True |
| main | [5161fb2](https://github.com/pyca/cryptography/commit/5161fb20d29de8fec29cf8e31144935025ebb7d7) | 2025-04-17 | fix mitmproxy downstream tests (#12776) | Bug修复 | True |
| main | [5d35009](https://github.com/pyca/cryptography/commit/5d3500945edddc25d58df970632e53455483b210) | 2025-04-23 | Bump deps that dependabot isn't doing right (#12795) | Bug修复 | False |
| main | [6dfb0ec](https://github.com/pyca/cryptography/commit/6dfb0eca28d0f7424fe1324b15c04cf8d6a0da71) | 2025-04-24 | fix new rust warning (#12802) * fix new rust warning * Update lib.rs * More fixes | Bug修复 | True |
| main | [b326c3c](https://github.com/pyca/cryptography/commit/b326c3c3446b620a84129494b13d2aecbf207f29) | 2025-05-02 | FIPS fixes (#12839) * attempt to fix wycheproof in CI on centos stream9 skip RSA PSS with SHA224 * Update test_rsa.py * Update backend.py * fix * make OpenSSL 3.5 FIPS work This replaces the rsa_pss_cert.pem with a new one that uses a salt length matching the digest length (previously it was max length) * simplify * comment * fix * update with new wycheproof --------- Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> | Bug修复 | True |
| main | [ce1167d](https://github.com/pyca/cryptography/commit/ce1167d54c3cedb8182d54fec2d919a1abe5ec70) | 2025-05-02 | stop testing with libressl 3.9 (#12836) its no longer used by any supported version of openbsd | Bug修复 | True |
| main | [ea3c9e1](https://github.com/pyca/cryptography/commit/ea3c9e19969636a9193e6750ef8665934c8e6974) | 2025-05-02 | Enforce validity of PRINTABLE STRING in names (#12812) | Bug修复 | True |
| main | [6801b2e](https://github.com/pyca/cryptography/commit/6801b2eb6554abfcb8e4bb48e97a01cdb6f69798) | 2025-05-06 | Add `py311` wheels with faster `PyBuffer` API for significant buffer performance gains (#12857) * Add `py311` wheels with faster `PyBuffer` API for significant buffer performance gains This pull request introduces support for optimized buffer handling using `pyo3::buffer::PyBuffer` on Python 3.11, along with related build system improvements. - **Optimized buffer access**: On Python 3.11, the `CffiBuf` type now uses `pyo3::buffer::PyBuffer` to significantly speed up operations on small buffers. - **New wheel builds**: Added publishing of `py311` wheels targeting `abi3-py311` using `pyo3::buffer`. - **Removed the default `abi3` feature** from the `pyo3` dependency to allow per-build customization. This change ensures that users building locally will receive a wheel compatible with their target system, rather than being restricted to a `py37`-specific wheel. Users can still build a limited wheel with `pip wheel --config-settings="build-args=--features=pyo3/abi3-py37"`. **Rationale**: This adjustment ensures that downstream projects, like `piwheels` or Home Assistant, which build their own wheels, won't be unknowingly limited to an `abi3-py37` wheel and missing out on the performance improvements. - **Added `pyo3-build-config`** as a build dependency to handle feature configuration cleanly. - **Extended `noxfile.py`** to forward `--features=` args via `build-args` to `pip install`, enabling feature-specific builds in CI. - **Updated `build.rs`** to print relevant PyO3 build script outputs. - **Added `Py_3_11` cfg check** in Rust lint configuration to ensure feature-gated code is validated. - Extended `.github/workflows/ci.yml` to test `rust,tests` jobs under different ABI3 feature flags to match the limited API used in the wheels. - `pyo3/abi3-py37` - `pyo3/abi3-py39` - `pyo3/abi3-py311` - Extended `.github/workflows/wheel-builder.yml` to include `py311` ABI wheels for CPython 3.11. - Documented the addition of `py311` wheels with improved buffer performance. - Updated the documentation with instruction on how to build a wheel with the limited api. \| Benchmark \| Base \| PR \| Delta \| \| --------- \| ---- \| -- \| ----- \| \| `tests/bench/test_aead.py::test_aesccm_decrypt` \| 2675.0 ns \| 1480.25 ns \| 45% faster \| \| `tests/bench/test_aead.py::test_aesccm_encrypt` \| 2665.0 ns \| 1633.0 ns \| 39% faster \| \| `tests/bench/test_aead.py::test_aesgcm_decrypt` \| 2895.0 ns \| 1683.0 ns \| 42% faster \| \| `tests/bench/test_aead.py::test_aesgcm_encrypt` \| 2785.0 ns \| 1683.0 ns \| 40% faster \| \| `tests/bench/test_aead.py::test_aesocb3_decrypt` \| 1867.0 ns \| 1008.0 ns \| 46% faster \| \| `tests/bench/test_aead.py::test_aesocb3_encrypt` \| 1964.0 ns \| 1132.0 ns \| 42% faster \| \| `tests/bench/test_aead.py::test_aessiv_decrypt` \| 1943.5 ns \| 1440.25 ns \| 26% faster \| \| `tests/bench/test_aead.py::test_aessiv_encrypt` \| 2034.0 ns \| 1533.0 ns \| 25% faster \| \| `tests/bench/test_aead.py::test_chacha20poly1305_decrypt` \| 3357.0 ns \| 1893.0 ns \| 44% faster \| \| `tests/bench/test_aead.py::test_chacha20poly1305_encrypt` \| 3346.0 ns \| 1884.0 ns \| 44% faster \| \| `tests/bench/test_ec_load.py::test_load_ec_private_numbers` \| 26379.0 ns \| 26249.0 ns \| 0% faster \| \| `tests/bench/test_ec_load.py::test_load_ec_public_numbers` \| 15629.0 ns \| 15518.0 ns \| 1% faster \| \| `tests/bench/test_fernet.py::test_fernet_encrypt` \| 20197.0 ns \| 16811.0 ns \| 17% faster \| \| `tests/bench/test_hashes.py::test_sha256` \| 2495.0 ns \| 1994.0 ns \| 20% faster \| \| `tests/bench/test_hmac.py::test_hmac_sha256` \| 3627.0 ns \| 2605.0 ns \| 28% faster \| \| `tests/bench/test_x509.py::test_aki_public_bytes` \| 631.0 ns \| 641.0 ns \| 2% slower \| \| `tests/bench/test_x509.py::test_load_der_certificate` \| 2985.0 ns \| 2925.0 ns \| 2% faster \| \| `tests/bench/test_x509.py::test_load_pem_certificate` \| 14557.0 ns \| 14357.0 ns \| 1% faster \| \| `tests/bench/test_x509.py::test_object_identifier_constructor` \| 325.1 ns \| 314.6 ns \| 3% faster \| \| `tests/bench/test_x509.py::test_verify_docs_python_org` \| 193217.5 ns \| 183409.0 ns \| 5% faster \| * Switch len to use bufobj.len_bytes * Drop py39 wheel builds * Update src/rust/build.rs Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> * remove unneeded unexpected_cfgs for Py_3_11 * Implement CffiMutBuf with PyBuffer * Reduce duplicate code * Additional code de-duplication pass * Implement Option suggestion * Implement build backend, revert abi3 feature change * Revert pyproject.toml, ci.yml, pep517 backend * Restore noxfile change * Revert "Restore noxfile change" This reverts commit 94ff8b38528d3e65ecd8589be9f071067432c07a. * split tests into run_tests so it can be reused * ruff format * Revert "ruff format" This reverts commit 321810614b88eb29966bf4e1e86c13366fce65e3. * Revert "split tests into run_tests so it can be reused" This reverts commit d7c364e398d515ff16f22fc649981d07d42ac2ce. * reimplement as branching --------- Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> | revert（引擎分类） | True |
| main | [d20fcd0](https://github.com/pyca/cryptography/commit/d20fcd0b439c6140772413aae589e3c617b39ac1) | 2025-05-06 | Align our handling of non-positive serial numbers. (#12853) Basically: for now we allow them, but when we drop them they'll be dropped everywhere. Closes #12771 Closes #12748 | Bug修复 | True |
| main | [c93ee38](https://github.com/pyca/cryptography/commit/c93ee3839379c109f17eea895796dc39415dc45c) | 2025-05-06 | fixes #12094 -- added support for argon2id phc format (#12855) * fixes #12094 -- added support for argon2id phc format * added secret, use PHC test vector | Bug修复 | True |
| main | [5063c16](https://github.com/pyca/cryptography/commit/5063c16cfe3a38899bba09937a7c74015e2d332c) | 2025-05-06 | fixes #12132 -- implement ssh public key fingerprints (#12673) | Bug修复 | False |
| main | [eed939b](https://github.com/pyca/cryptography/commit/eed939b6731a9727fdb9d861b5299d7435695e23) | 2025-05-13 | fix bump script token fetch (#12891) It should get the token for aws-lc too. | Bug修复 | False |
| main | [b3a45cf](https://github.com/pyca/cryptography/commit/b3a45cfd9eaa038a79c02f1fd698836c418700cf) | 2024-12-21 | Revert "Disable x86-64 manylinux_2_34 wheels for now (#12144)" (#12182) This reverts commit 6beb77d9eb166506b96d0fcdd84bb344c8cfffba. | revert（引擎分类） | True |
| main | [738598d](https://github.com/pyca/cryptography/commit/738598d1cf3d4f8cabc7730279b105846e4c5fd6) | 2024-12-07 | make x509.name.NameAttribute use Generic to overload get_attributes_for_oid (#12068) * make x509.name.NameAttribute use Generic to overload get_attributes_for_oid * reformat code using ruff format (not only ruff check) * use subtypes of ObjectIdentifier to allow type detection in get_attributes_for_oid * add missing overloads for test cases * revert most changes to achieve base plate * ruff format * try typing.Union for python 3.9 * add return_string to get_attributes_for_oid for overload * fix documentation link and flake8 * fixup docs * docs: add versionadded for param return_string * add test case * Revert "add return_string to get_attributes_for_oid for overload" This reverts commit c4a2a5f0273ea8e60f3d5425a015b0563586b67a. * Revert "fix documentation link and flake8" This reverts commit b79a4ecf73f1425bd9304aefd2eaf8a89329610b. * make NameAttributeValueType covariant | revert（引擎分类） | True |
| main | [43d84b1](https://github.com/pyca/cryptography/commit/43d84b11213d605ec25a8307d2251b83a3e23afb) | 2024-12-06 | Support for copying private keys (#12110) * Add tests * Implement __copy__ in private keys * Fix issue with tests for DHPrivateKey * Another attempt at fixing the tests * Revert "Another attempt at fixing the tests" This reverts commit cc7c2b301e635baa7b958dc1b02666f1c80c7c36. * Skip tests with weak key on FIPS * Add __copy__ to abstract base classes of both public and private keys | revert（引擎分类） | True |

rpm-tracker 抓取数据如下：
| branch | id | date | message | type | 能否合入 |
| --- | --- | --- | --- | --- | --- |
| main | [53035da](https://github.com/pyca/cryptography/commit/53035da3ddedd4b242eb818d7e6f39ca12378d15) | 2024-11-07 | feat(admissions): implement encoding of admissions extension (#11892) * feat: implement encoding of admissions extension Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * chore: add encoding tests Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * refactor: split encoding of inner objects into separate functions Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * fix: simplify code comment to pass the line length checks Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * chore: add test to check encoding of none values Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * chore: extend none values test to also check encoding of naming authority with none values Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * fix: use none checks when converting python data Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * fix: raise a valueerror if the url can not be encoded to an ia5string Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * chore: revert to truthness check for py_oids for now, will be amended in a separate pr Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * fix: raise a valueerror if the registration_number can not be encoded to a printablestring Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> * fix: encode none for profession_oids if profession_oids is none Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> --------- Signed-off-by: oleg.hoefling <oleg.hoefling@gmail.com> | revert（引擎分类） | True |
| main | [51970d4](https://github.com/pyca/cryptography/commit/51970d4e0b11d8ed4615485c0fc5cfd82fb04ff4) | 2024-06-19 | Revert "pin python version for downstream tests due to twisted/python bug (#1…" (#11124) This reverts commit fc6cc42e4f1bc308481c3538ce57d0d8e208ecb2. | revert（引擎分类） | True |
| main | [51a6dd2](https://github.com/pyca/cryptography/commit/51a6dd28ccbb7587fff9e951299b17aac39ee5cc) | 2024-03-22 | Adding support for OpenSSH ecdsa-sk & ed25519-sk public keys (#10608) * Adding support for OpenSSH ecdsa-sk & ed25519-sk public keys fixes #10604 * Revert changing the keygen * Add application string to sk key generation * Typing - fix load_application return value annotation * fix sk keys skipping loading in the tests * fix ruff E509 * Fix ruff … * comment wording Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> * requested changes * no subclassing * fix SyntaxError: annotated name '_KEY_FORMATS' can't be global in python 3.7 c.f. https://github.com/python/cpython/issues/79120 * typo * Update src/cryptography/hazmat/primitives/serialization/ssh.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> * Update src/cryptography/hazmat/primitives/serialization/ssh.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> --------- Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> | revert（引擎分类） | True |

OpenCloudOS Stream/python-cryptography

内容风险标识

评论 (2)

OpenCloudOS Stream/python-cryptography .gitee-modal { width: 500px !important; }

内容风险标识