mirror of
https://github.com/pgadmin-org/pgadmin4.git
synced 2026-08-18 17:04:53 -05:00
Ashesh Vashi
25f0d853c8
Supersedes dependabot #9926 (and its /web/regression duplicate #9932). Inherited via `-r ../../requirements.txt`, so the single edit covers both. cryptography 48 is a smaller bump than its major-version label suggests: - Removed Python 3.8 support. pgAdmin requires Python 3.9+ across the supported platforms, so this is a no-op for us. (3.9.0 and 3.9.1 specifically are excluded by the new metadata; nothing in pgAdmin's CI / packaging runs those exact patch versions.) - Stricter X.509 CRL parsing: a CRL whose inner `TBSCertList.signature` does not match the outer `signatureAlgorithm` now raises `ValueError` instead of being parsed and rejected later during signature verification. - Added ML-KEM and ML-DSA post-quantum primitives (additive). pgAdmin's cryptography surface area is narrow and CRL-free: - web/pgadmin/settings/__init__.py Fernet - web/pgadmin/utils/session.py Fernet, hashes, HKDF - web/pgadmin/utils/crypto.py Cipher, AES, CFB8 No imports of `cryptography.x509`, `CertificateRevocationList`, or `load_pem_x509_crl` anywhere in the tree, so the stricter CRL parsing in 48 cannot affect pgAdmin. The OpenSSL 1.1.x / LibreSSL < 4.1 removal that I initially flagged as a concern actually happened in cryptography 47, which master is already on. No platform-support regression from this bump.
70 lines
2.1 KiB
Plaintext
70 lines
2.1 KiB
Plaintext
###############################################################################
|
|
#
|
|
# IMPORTANT:
|
|
#
|
|
# If runtime or build time dependencies are changed in this file, the committer
|
|
# *must* ensure the DEB and RPM package maintainers are informed as soon as
|
|
# possible.
|
|
#
|
|
# The packages listed below are sorted alphabetically. It is recommended to add
|
|
# new packages in alphabetical order. However, exceptions can be made to
|
|
# preserve dependency order—please add a comment in such cases and specify the
|
|
# relevant packages.
|
|
###############################################################################
|
|
|
|
Authlib==1.6.*; python_version <= '3.9'
|
|
Authlib==1.7.*; python_version > '3.9'
|
|
azure-identity==1.25.3
|
|
azure-mgmt-rdbms==10.1.1
|
|
azure-mgmt-resource==25.0.0
|
|
azure-mgmt-subscription==3.1.1
|
|
bcrypt==5.0.*
|
|
boto3==1.42.*; python_version <= '3.9'
|
|
boto3==1.43.*; python_version > '3.9'
|
|
certifi==2026.4.22
|
|
cryptography==48.0.*
|
|
Flask-Babel==4.0.*
|
|
Flask-Compress==1.*
|
|
Flask-Login==0.*
|
|
Flask-Mail==0.*
|
|
Flask-Migrate==4.*
|
|
Flask-Paranoid==0.*
|
|
Flask-Security-Too==5.4.*; python_version <= '3.9'
|
|
Flask-Security-Too==5.8.*; python_version > '3.9'
|
|
Flask-SocketIO==5.6.*
|
|
Flask-SQLAlchemy==3.1.*
|
|
Flask-WTF==1.2.*; python_version <= '3.9'
|
|
Flask-WTF==1.3.*; python_version > '3.9'
|
|
Flask==3.1.*
|
|
google-api-python-client==2.*
|
|
google-auth-oauthlib==1.3.1; python_version <= '3.9'
|
|
google-auth-oauthlib==1.4.0; python_version > '3.9'
|
|
gssapi==1.11.*
|
|
jsonformatter~=0.3.4
|
|
keyring==25.*
|
|
ldap3==2.*
|
|
libgravatar==1.0.*
|
|
paramiko==3.5.1
|
|
passlib==1.*
|
|
psutil==7.2.*
|
|
psycopg[c]==3.2.13; python_version < '3.10'
|
|
psycopg[c]==3.3.4; python_version >= '3.10'
|
|
pyotp==2.*
|
|
python-dateutil==2.*
|
|
pytz==2026.*
|
|
# pinned for https://github.com/andfoy/pywinpty/issues/545
|
|
pywinpty==2.0.*; sys_platform=="win32"
|
|
qrcode[pil]==8.*
|
|
setuptools==82.*
|
|
SQLAlchemy==2.*
|
|
sqlparse==0.*
|
|
sshtunnel==0.*
|
|
typer[all]==0.23.*; python_version <= '3.9'
|
|
typer==0.25.*; python_version > '3.9'
|
|
urllib3==1.26.*; python_version <= '3.9'
|
|
urllib3==2.6.*; python_version > '3.9'
|
|
user-agents==2.2.0
|
|
Werkzeug==3.1.*
|
|
WTForms==3.1.*; python_version <= '3.9'
|
|
WTForms==3.2.*; python_version > '3.9'
|