dependabot-preview[bot]

Bump pynacl from 1.3.0 to 1.4.0

3

Bumps [pynacl](https://github.com/pyca/pynacl) from 1.3.0 to 1.4.0. Changelog Sourced from pynacl's changelog. 1.4.0 (2020-05-25) Update libsodium to 1.0.18. BACKWARDS INCOMPATIBLE: We no longer distribute 32-bit manylinux1 wheels. Continuing to produce them...

[Security] Bump cryptography from 2.9.2 to 3.2

1

Bumps [cryptography](https://github.com/pyca/cryptography) from 2.9.2 to 3.2. Changelog Sourced from cryptography's changelog. 3.2 - 2020-10-25 SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities....

Bumps [paramiko](https://github.com/paramiko/paramiko) from 2.7.1 to 2.7.2. Commits 93dba53 Cut 2.7.2 b99e878 Mark recent support tickets as backported 9019c9a Upgrade to newer Coverage version for Python 3.8 support 1953586 Experiment with...

Bumps [asn1crypto](https://github.com/wbond/asn1crypto) from 1.3.0 to 1.4.0. Changelog Sourced from asn1crypto's changelog. 1.4.0 core.ObjectIdentifier and all derived classes now obey X.660 §7.6 and thus restrict the first arc to 0 to...

Bumps [bcrypt](https://github.com/pyca/bcrypt) from 3.1.7 to 3.2.0. Commits d539425 bump for 3.2.0 (#223) 314c0f5 convert to workflow and improve (#222) e813ce2 major changes to wheel building (#221) 007d51f lock old issues...

Updates the requirements on [goblin](https://github.com/m4b/goblin) to permit the latest version. Changelog Sourced from goblin's changelog. [0.4.2] - 2021-7-4 Added strtab: preparses the string table to prevent certain class of DoS...

Create Dependabot config file

1

:wave: Dependabot is moving natively into GitHub! This pull request migrates your configuration from Dependabot.com to a config file, using the [new syntax](https://help.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates). When you merge this pull request, we'll...

Bumps [mongoose](https://github.com/Automattic/mongoose) from 5.9.29 to 5.13.5. Changelog Sourced from mongoose's changelog. 5.13.5 / 2021-07-30 perf(index.d.ts): improve typescript type checking performance #10515 andreialecu fix(index.d.ts): fix debug type in MongooseOptions #10510 thiagokisaki...

Bumps [mongodb-memory-server](https://github.com/nodkz/mongodb-memory-server/tree/HEAD/packages/mongodb-memory-server) from 6.2.1 to 7.3.4. Release notes Sourced from mongodb-memory-server's releases. v7.3.4 7.3.4 (2021-07-27) Fixes MongoInstance: assert "this.mongodProcess.pid" before usage (childprocess pid can be undefined) (394ea3a) MongoInstance: stdoutHandler: try...

Bumps [ws](https://github.com/websockets/ws) from 7.3.1 to 7.5.3. **This update includes security fixes.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. ReDoS in Sec-Websocket-Protocol header Impact A specially crafted value of...