Bump securesystemslib[crypto,pynacl] from 0.19.0 to 0.20.1

[dependabot]

Bumps securesystemslib[crypto,pynacl] from 0.19.0 to 0.20.1.

Release notes

Sourced from securesystemslib[crypto,pynacl]'s releases.

v0.20.1

NOTE: this will be the final release of securesystemslib that supports Python 2.7. This is because Python 2.7 was marked end-of-life in January of 2020, and since then several of securesystemslib's direct and transitive dependencies have stopped supporting Python 2.7. securesystemslib's major users, the Python implementations of tuf (v0.167.0) and in-toto (v1.1.0), have already dropped support for Python 2.7.

Changed

• Switched to GitHub-native Dependabot (#349)
• Updated Debian packaging metadata (#343)
• Bump cryptography dependency (#346)

Fixed

• Fix the Signer abstract base class's method signature to include self (#348)

v0.20.0

Added

• Add signing abstraction to facilitate custom implementations (#319)

Changed

• Refactor imports to allow vendoring for pip (#316)
• Limit GitHub Actions to avoid duplicate Dependabot builds (#335)
• Enhance GitHub Action reporting for ed25519 upstream check (#338)
• Bump dependencies: cryptography (#336)

Fixed

• Pad OpenPGP EdDSA signatures to avoid sporadic verification failures (#340)

Changelog

Sourced from securesystemslib[crypto,pynacl]'s changelog.

securesystemslib v0.20.1

NOTE: this will be the final release of securesystemslib that supports Python 2.7. This is because Python 2.7 was marked end-of-life in January of 2020, and since then several of securesystemslib's direct and transitive dependencies have stopped supporting Python 2.7. securesystemslib's major users, the Python implementations of tuf (v0.167.0) and in-toto (v1.1.0), have already dropped support for Python 2.7.

Changed

• Switched to GitHub-native Dependabot (#349)
• Updated Debian packaging metadata (#343)
• Bump cryptography dependency (#346)

Fixed

• Fix the Signer abstract base class's method signature to include self (#348)

securesystemslib v0.20.0

Added

• Add signing abstraction to facilitate custom implementations (#319)

Changed

• Refactor imports to allow vendoring for pip (#316)
• Limit GitHub Actions to avoid duplicate Dependabot builds (#335)
• Enhance GitHub Action reporting for ed25519 upstream check (#338)
• Bump dependencies: cryptography (#336)

Fixed

• Pad OpenPGP EdDSA signatures to avoid sporadic verification failures (#340)

Commits

• 576ea03 Merge pull request #351 from joshuagl/joshuagl/release-v0.20.1
• e258d10 Prepare 0.21.1 release
• 71426dd Merge pull request #349 from secure-systems-lab/dependabot/add-v2-config-file
• 664f332 Upgrade to GitHub-native Dependabot
• 2d33d91 Merge pull request #348 from jku/fix-signer-sign-signature
• 2b8ed43 signer: Add self to abstract method signature
• f8afa82 Merge pull request #346 from secure-systems-lab/dependabot/pip/cryptography-3...
• 0326fe6 build(deps): bump cryptography from 3.4.6 to 3.4.7
• f7eff3f Merge pull request #343 from secure-systems-lab/debian
• cc756be Prepare Debian downstream release 0.20.0-1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

[dependabot]

Superseded by #12.