From 1b3ff557aefcb9982177211c4d91ad08ca3248c5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 28 Feb 2025 04:27:37 +0000
Subject: [PATCH] Update bcrypt requirement from 4.2.1 to 4.3.0 in /backend
 (#1137)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Updates the requirements on [bcrypt](https://github.com/pyca/bcrypt) to
permit the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyca/bcrypt/blob/main/release.py">bcrypt's
changelog</a>.</em></p>
<blockquote>
<h1>Licensed under the Apache License, Version 2.0 (the
&quot;License&quot;);</h1>
<h1>you may not use this file except in compliance with the
License.</h1>
<h1>You may obtain a copy of the License at</h1>
<h1></h1>
<h1><a
href="http://www.apache.org/licenses/LICENSE-2.0">http://www.apache.org/licenses/LICENSE-2.0</a></h1>
<h1></h1>
<h1>Unless required by applicable law or agreed to in writing,
software</h1>
<h1>distributed under the License is distributed on an &quot;AS IS&quot;
BASIS,</h1>
<h1>WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied.</h1>
<h1>See the License for the specific language governing permissions
and</h1>
<h1>limitations under the License.</h1>
<p>import subprocess</p>
<p>import click</p>
<p>def run(*args, **kwargs):
print(f&quot;[running] {list(args)}&quot;)
subprocess.check_call(list(args), **kwargs)</p>
<p><a href="https://github.com/click"><code>@​click</code></a>.command()
<a
href="https://github.com/click"><code>@​click</code></a>.argument(&quot;version&quot;)
def release(version):
&quot;&quot;&quot;
<code>version</code> should be a string like '0.4' or '1.0'.
&quot;&quot;&quot;
run(&quot;git&quot;, &quot;tag&quot;, &quot;-s&quot;, version,
&quot;-m&quot;, f&quot;{version} release&quot;)
run(&quot;git&quot;, &quot;push&quot;, &quot;--tags&quot;, &quot;<a
href="mailto:git@github.com">git@github.com</a>:pyca/bcrypt.git&quot;)</p>
<p>if <strong>name</strong> == &quot;<strong>main</strong>&quot;:
release()</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pyca/bcrypt/commit/16ba2ab22bfc31f23f34a7b678c9eee8c9d3dbe7"><code>16ba2ab</code></a>
4.3.0 release (<a
href="https://redirect.github.com/pyca/bcrypt/issues/985">#985</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/824feec917cae77110109bc3cd58c862daa983e0"><code>824feec</code></a>
PyPy 3.11 and armv7l wheels (<a
href="https://redirect.github.com/pyca/bcrypt/issues/984">#984</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/7567284964cfaa67d4a11b1ca39c87d5af8dd301"><code>7567284</code></a>
Add PyPy 3.11 and armv7l to matrix runner (<a
href="https://redirect.github.com/pyca/bcrypt/issues/983">#983</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/cbd93976b7623d8c8f8e9ea6a989bf2dc2c8643e"><code>cbd9397</code></a>
Bump actions/download-artifact from 4.1.8 to 4.1.9 (<a
href="https://redirect.github.com/pyca/bcrypt/issues/982">#982</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/94ba6f73a8f17f25f8fc9ad154a548f363038d4e"><code>94ba6f7</code></a>
Update PyO3 to 0.23.5 (<a
href="https://redirect.github.com/pyca/bcrypt/issues/980">#980</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/18df4c7b04a936126ac09494df416625eb25ad2f"><code>18df4c7</code></a>
Bump portable-atomic from 1.10.0 to 1.11.0 in /src/_bcrypt (<a
href="https://redirect.github.com/pyca/bcrypt/issues/978">#978</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/11cb6c8b066259f41365bfdcb7daf5d2b2973d4f"><code>11cb6c8</code></a>
Bump inout from 0.1.3 to 0.1.4 in /src/_bcrypt (<a
href="https://redirect.github.com/pyca/bcrypt/issues/977">#977</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/c0a88cbb50b5d4bec0a89507f083992e5bb8a045"><code>c0a88cb</code></a>
Bump libc from 0.2.169 to 0.2.170 in /src/_bcrypt (<a
href="https://redirect.github.com/pyca/bcrypt/issues/976">#976</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/43d3cac5ce44b18ffa981d56bbdc58e100c8d57b"><code>43d3cac</code></a>
Bump actions/upload-artifact from 4.6.0 to 4.6.1 (<a
href="https://redirect.github.com/pyca/bcrypt/issues/975">#975</a>)</li>
<li><a
href="https://github.com/pyca/bcrypt/commit/7a5b990e7c9de4d238c42d9eee33e5d0eb55d12c"><code>7a5b990</code></a>
Bump actions/cache from 4.2.0 to 4.2.1 (<a
href="https://redirect.github.com/pyca/bcrypt/issues/974">#974</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pyca/bcrypt/compare/4.2.1...4.3.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 backend/Pipfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/Pipfile b/backend/Pipfile
index 96c13270..72dcac1c 100644
--- a/backend/Pipfile
+++ b/backend/Pipfile
@@ -8,7 +8,7 @@ aiofiles = "24.1.0"
 aiohttp = "3.11.12"
 aiopg = "1.4.0"
 alembic = "1.14.1"
-bcrypt = "4.2.1"
+bcrypt = "4.3.0"
 click = "8.1.8"
 databases = {extras = ["asyncpg"], version = "<=0.8.0"}
 fastapi = "0.115.6"