Skip to content

deps(python): bump pwdlib[bcrypt] from 0.2.1 to 0.3.0 in /backend#277

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/backend/pwdlib-bcrypt--0.3.0
Open

deps(python): bump pwdlib[bcrypt] from 0.2.1 to 0.3.0 in /backend#277
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/backend/pwdlib-bcrypt--0.3.0

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps pwdlib[bcrypt] from 0.2.1 to 0.3.0.

Release notes

Sourced from pwdlib[bcrypt]'s releases.

v0.3.0

Bump version 0.2.1 → 0.3.0

Breaking changes

  • Drop Python 3.9

Bug fixes and improvements

  • Identify properly argon2d and argon2i variants (#21). Thanks @​ericwestfall
  • Validate runtime type of password and salt inputs (#24).
Commits
  • 729161f Bump version 0.2.1 → 0.3.0
  • b511d9f Enable Python 3.14
  • a2640fb Apply code review feedback: rename function, simplify error, consolidate tests
  • f0560fa Add type validation for identify, hash, and verify methods
  • f147422 Fix documentation workflow
  • a076617 Add Copilot instructions
  • bf49e0f Refinements
  • 5c95959 fix: add support for all valid Argon2 type variants
  • 4e8acd8 Move to uv and just to manage environment
  • c1797ed Remove VS Code settings
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Update pwdlib[bcrypt] from 0.2.1 to 0.3.0 to get stricter input validation and better Argon2 variant detection. This version drops Python 3.9 support.

  • Migration
    • Ensure the backend runs on Python 3.10+.
    • Check all pwdlib calls pass valid types for password and salt; stricter runtime checks may now raise errors.

Written for commit 372d135. Summary will update on new commits.

Bumps [pwdlib[bcrypt]](https://github.com/frankie567/pwdlib) from 0.2.1 to 0.3.0.
- [Release notes](https://github.com/frankie567/pwdlib/releases)
- [Commits](frankie567/pwdlib@v0.2.1...v0.3.0)

---
updated-dependencies:
- dependency-name: pwdlib[bcrypt]
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 9, 2026
@dependabot dependabot bot requested a review from HardMax71 as a code owner March 9, 2026 03:27
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 9, 2026
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 9, 2026

Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants