Merge pull request #501 from AzureAD/release-1.19.0

rayluo · web-flow · commit e3b71acb1b18 · 2022-09-20T21:31:55.000-07:00
Merge Release 1.19.0 back to dev branch
diff --git a/msal/application.py b/msal/application.py
@@ -25,7 +25,7 @@
 
 
 # The __init__.py will import this. Not the other way around.
-__version__ = "1.18.0"  # When releasing, also check and bump our dependencies's versions if needed
+__version__ = "1.19.0"  # When releasing, also check and bump our dependencies's versions if needed
 
 logger = logging.getLogger(__name__)
 _AUTHORITY_TYPE_CLOUDSHELL = "CLOUDSHELL"
diff --git a/setup.py b/setup.py
@@ -76,7 +76,7 @@
         'requests>=2.0.0,<3',
         'PyJWT[crypto]>=1.0.0,<3',  # MSAL does not use jwt.decode(), therefore is insusceptible to CVE-2022-29217 so no need to bump to PyJWT 2.4+
 
-        'cryptography>=0.6,<40',
+        'cryptography>=0.6,<41',
             # load_pem_private_key() is available since 0.6
             # https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#06---2014-09-29
             #

Original file line number	Diff line number	Diff line change
`@@ -76,7 +76,7 @@`
`76`	`76`	`'requests>=2.0.0,<3',`
`77`	`77`	`'PyJWT[crypto]>=1.0.0,<3', # MSAL does not use jwt.decode(), therefore is insusceptible to CVE-2022-29217 so no need to bump to PyJWT 2.4+`
`78`	`78`
`79`		`- 'cryptography>=0.6,<40',`
	`79`	`+ 'cryptography>=0.6,<41',`
`80`	`80`	`# load_pem_private_key() is available since 0.6`
`81`	`81`	`# https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#06---2014-09-29`
`82`	`82`	`#`