Skip to content

pip(deps): update truststore requirement from >=0.9 to >=0.10.4 - #3

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/truststore-gte-0.10.4
Open

pip(deps): update truststore requirement from >=0.9 to >=0.10.4#3
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/truststore-gte-0.10.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown

Updates the requirements on truststore to permit the latest version.

Release notes

Sourced from truststore's releases.

0.10.4

  • Fixed a thread-safety issue when configuring the internal ssl.SSLContext object.
Changelog

Sourced from truststore's changelog.

0.10.4

  • Fixed a thread-safety issue when configuring the internal ssl.SSLContext object.

0.10.3

  • Added support for the system certificate bundle in Fedora 43 and later.

0.10.2

  • Release failed to publish to PyPI due to outdated build tools. Created new release (0.10.3) after updating build to 1.2.2.post1.

0.10.1

  • Fixed the patching of Requests' globally-cached ssl.SSLContext object to work automagically with truststore.inject_into_ssl() regardless of import-order.
  • Speed up import times by skipping feature-checking for known Python implementations (CPython and PyPy).

0.10.0

  • Added support for macOS 10.13 and earlier using the SecTrustEvaluate API. Note that this API doesn't return fine-grained errors like SecTrustEvaluateWithError (requires macOS 10.14+).
  • Added SSLContext.set_default_verify_paths() method.
  • Changed method for disabling hostname verification for macOS and Windows. Previously would ignore hostname verification errors if SSLContext.check_hostname was False. Now for both macOS and Windows the certificate verification policy is configured to not check certificate hostname. This should have no effect on users.

0.9.2

  • Fixed an issue where implementations supporting Python 3.10 but not the peer certificate chain APIs would fail during the handshake instead of when importing the truststore module. The module now raises an error immediately instead of on first handshake. This was added for the GraalPy implementation specifically, but there may be others.

0.9.1

  • Fixed an issue for CPython 3.13 where ssl.SSLSocket and ssl.SSLObject certificate chain APIs would return different types.

0.9.0

  • Added support for Python 3.13.
  • Fixed loading additional certificates on macOS.
  • Changed error message for Windows when peer offers no certificates and verification is enabled. Previously was IndexError, now is SSLCertVerificationError.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [truststore](https://github.com/sethmlarson/truststore) to permit the latest version.
- [Release notes](https://github.com/sethmlarson/truststore/releases)
- [Changelog](https://github.com/sethmlarson/truststore/blob/main/CHANGELOG.md)
- [Commits](sethmlarson/truststore@v0.9.0...v0.10.4)

---
updated-dependencies:
- dependency-name: truststore
  dependency-version: 0.10.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants