chore: Update aws-encryption-sdk requirement from <4,>=3.1.1 to >=3.1.1,<5 by dependabot[bot] · Pull Request #37 · Specter099/envault-cli
Updates the requirements on aws-encryption-sdk to permit the latest version.
Release notes
Sourced from aws-encryption-sdk's releases.
4.0.4 -- 2026-02-26
Maintenance
deps: Extend supported
MPL_ versions to include v1.11.2 #788MPL v1.11.2 fixes de-serializing Error_OpaqueWithText and bumps cryptography upperbound to <47 due to CVE-2026-26007 (#1800)
NOTE
This library is NOT impacted by CVE-2026-26007. This library does not use SECT curves.
Changelog
Sourced from aws-encryption-sdk's changelog.
4.0.4 -- 2025-09-03
Maintenance
deps: Extend supported
MPL_ versions to include v1.11.2[#788](https://github.com/aws/aws-encryption-sdk-python/issues/788) <https://github.com/aws/aws-encryption-sdk-python/pull/788>_MPL v1.11.2 fixes de-serializing Error_OpaqueWithText
4.0.3 -- 2025-09-03
Maintenance
deps: Extend supported
MPL_ versions to include v1.11.1[#770](https://github.com/aws/aws-encryption-sdk-python/issues/770) <https://github.com/aws/aws-encryption-sdk-python/pull/770>_MPL v1.11.1 updates pytz version range to include 2025 releases.
4.0.2 -- 2025-06-30
Maintenance
deps: Extend supported
MPL_ versions to include v1.11.0[#763](https://github.com/aws/aws-encryption-sdk-python/issues/763) <https://github.com/aws/aws-encryption-sdk-python/pull/763>_MPL v1.11.0 contains performance improvements for the hierarchical keyring and extends the range of supported
cryptographyversions.4.0.1 -- 2025-03-26
Fixes
fix: Improve header serialization
[#747](https://github.com/aws/aws-encryption-sdk-python/issues/747) <https://github.com/aws/aws-encryption-sdk-python/pull/747>_ESDK-Python <4.0.1 would truncate non-ASCII key provider IDs it wrote to message headers. If a Raw or Custom MasterKeyProvider or Keyring supplied a non-ASCII key provider ID / key namespace, ESDK-Python would truncate the the key provider ID it wrote to the message's header. The message can be decrypted by replacing the truncated provider ID with the expected provider ID in decryption code. Contact AWS for any questions about this approach.
Maintenance
- deps: Extend supported
MPL_ versions to include v1.10.04.0.0 -- 2024-10-29
... (truncated)
Commits
2153057chore: preflight for 4.0.4 release (#789)5e0aed7chore: extend mpl support for 1.11.2 (#788)20ec402chore(CI): fix CI (#785)b441d84chore: : scope down GitHub Token permissions (#786)d316a18chore: update CHANGELOG for v4.0.3 (#770)cbfab66chore(CI): clean up gha and unused files (#767)ee9e3f8chore: remove uploading fake artifacts during release (#765)848f171chore: Update CHANGELOG for v4.0.2 (#763)b423f5cchore(CI): Use Github Actions to start CodeBuild builds (#762)0dd4e16chore: Update SUPPORT_POLICY.rst (#756)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)