Bump cryptography from 42.0.2 to 42.0.4 in /llvm/utils/git #12791

dependabot · 2024-02-21T20:49:07Z

Bumps cryptography from 42.0.2 to 42.0.4.

Changelog

Sourced from cryptography's changelog.

42.0.4 - 2024-02-20

* Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to **Alexander-Programming** for reporting the issue. **CVE-2024-26130** * Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields ``SMIMECapabilities`` and ``SignatureAlgorithmIdentifier`` should now be correctly encoded according to the definitions in :rfc:`2633` :rfc:`3370`. .. _v42-0-3:

42.0.3 - 2024-02-15

Fixed an initialization issue that caused key loading failures for some users.

.. _v42-0-2:

Commits

fe18470 Bump for 42.0.4 release (#10445)
aaa2dd0 Fix ASN.1 issues in PKCS#7 and S/MIME signing (#10373) (#10442)
7a4d012 Fixes #10422 -- don't crash when a PKCS#12 key and cert don't match (#10423) ...
df314bb backport actions m1 switch to 42.0.x (#10415)
c49a7a5 changelog and version bump for 42.0.3 (#10396)
396bcf6 fix provider loading take two (#10390) (#10395)
0e0e46f backport: initialize openssl's legacy provider in rust (#10323) (#10333)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [cryptography](https://github.com/pyca/cryptography) from 42.0.2 to 42.0.4. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@42.0.2...42.0.4) --- updated-dependencies: - dependency-name: cryptography dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

asudarsa

LGTM. Thanks

bader · 2024-02-21T22:09:43Z

@intel/dpcpp-devops-reviewers, @intel/llvm-reviewers-runtime, any ideas what could cause this error:

lit.py: D:\github\_work\llvm\llvm\llvm\sycl\test-e2e\lit.cfg.py:613: fatal: Cannot list device aspects for level_zero:gpu
Command ' d:\github\_work\llvm\llvm\install\bin\sycl-ls.exe --verbose' returned non-zero exit status 3221225477.
stdout:[level_zero:gpu] Intel(R) Level-Zero, Intel(R) Iris(R) Xe Graphics 1.3 [1.3.28044]

At the same time sycl-ls --verbose worked in the same workflow

Platforms: 2
Platform [#1]:
    Version  : 1.3
    Name     : Intel(R) Level-Zero
    Vendor   : Intel(R) Corporation
    Devices  : 1
        Device [#0]:
        Type       : gpu
        Version    : 1.3
        Name       : Intel(R) Iris(R) Xe Graphics
        Vendor     : Intel(R) Corporation
        Driver     : 1.3.28044
        Aspects    : gpu fp16 online_compiler online_linker queue_profiling usm_device_allocations usm_host_allocations usm_shared_allocations ext_intel_pci_address ext_intel_gpu_eu_count ext_intel_gpu_eu_simd_width ext_intel_gpu_slices ext_intel_gpu_subslices_per_slice ext_intel_gpu_eu_count_per_subslice atomic64 ext_intel_device_info_uuid ext_intel_gpu_hw_threads_per_eu ext_intel_free_memory ext_intel_device_id ext_intel_memory_clock_rate ext_intel_memory_bus_width ext_intel_legacy_image ext_intel_esimd ext_oneapi_ballot_group ext_oneapi_fixed_size_group ext_oneapi_opportunistic_group ext_oneapi_tangle_group
        info::device::sub_group_sizes: 8 16 32
Platform [#2]:
    Version  : OpenCL 3.0 
    Name     : Intel(R) OpenCL Graphics
    Vendor   : Intel(R) Corporation
    Devices  : 1
        Device [#0]:
        Type       : gpu
        Version    : OpenCL 3.0 NEO 
        Name       : Intel(R) Iris(R) Xe Graphics
        Vendor     : Intel(R) Corporation
        Driver     : 31.0.101.[51](https://github.com/intel/llvm/actions/runs/7995714644/job/21837847032#step:10:52)86
        Aspects    : gpu fp16 online_compiler online_linker queue_profiling usm_device_allocations usm_host_allocations usm_shared_allocations atomic[64](https://github.com/intel/llvm/actions/runs/7995714644/job/21837847032#step:10:65) ext_oneapi_srgb ext_intel_device_id ext_intel_legacy_image ext_intel_esimd ext_oneapi_ballot_group ext_oneapi_fixed_size_group ext_oneapi_opportunistic_group ext_oneapi_tangle_group
        info::device::sub_group_sizes: 8 16 32
default_selector()      : gpu, Intel(R) Level-Zero, Intel(R) Iris(R) Xe Graphics 1.3 [1.3.2[80](https://github.com/intel/llvm/actions/runs/7995714644/job/21837847032#step:10:81)44]
accelerator_selector()  : No device of requested type available. -1 (PI_ERRO...
cpu_selector()          : No device of requested type available. -1 (PI_ERRO...
gpu_selector()          : gpu, Intel(R) Level-Zero, Intel(R) Iris(R) Xe Graphics 1.3 [1.3.28044]
custom_selector(gpu)    : gpu, Intel(R) Level-Zero, Intel(R) Iris(R) Xe Graphics 1.3 [1.3.28044]
custom_selector(cpu)    : No device of requested type available. -1 (PI_ERRO...
custom_selector(acc)    : No device of requested type available. -1 (PI_ERRO...

Full log: https://github.com/intel/llvm/actions/runs/7995714644/job/21837847032

maarquitos14 · 2024-02-22T09:32:34Z

@intel/dpcpp-devops-reviewers, @intel/llvm-reviewers-runtime, any ideas what could cause this error:

It is weird that the first run works and the second doesn't. My guess is that the driver/hardware is left in a bad state after the first run. I've seen that happening before in PVC, but I don't remember it for Gen12. Still, I think it's worth checking locally to see if that's the issue.

bader · 2024-02-22T16:49:39Z

This failure is not related to patch, so I'm going to merge it.

Still, I think it's worth checking locally to see if that's the issue.

Can someone from @intel/dpcpp-devops-reviewers follow-up on this?

bader · 2024-02-22T19:00:26Z

Post-commit fails:

Complete job name: e2e-lin (Intel Arc A-Series Graphics with Level Zero, ["Linux", "arc"], --param matrix-xmx8=True ... / Intel Arc A-Series Graphics with Level Zero

Failed Tests (2):
SYCL :: Config/select_device.cpp
SYCL :: ESIMD/unified_memory_api/scatter_lacc_dg2_pvc.cpp

Complete job name: e2e-win / Intel GEN12 Graphics with Level Zero

Failed Tests (8):
SYCL :: Assert/assert_in_kernels_win.cpp
SYCL :: Assert/assert_in_multiple_tus_one_ndebug_win.cpp
SYCL :: Assert/assert_in_multiple_tus_win.cpp
SYCL :: Assert/assert_in_one_kernel_win.cpp
SYCL :: Assert/assert_in_simultaneous_kernels_win.cpp
SYCL :: Assert/assert_in_simultaneously_multiple_tus.cpp
SYCL :: Assert/assert_in_simultaneously_multiple_tus_one_ndebug.cpp
SYCL :: Plugin/sycl-ls-unified-runtime.cpp

bader · 2024-02-28T22:56:37Z

This failure is not related to patch, so I'm going to merge it.

Still, I think it's worth checking locally to see if that's the issue.

Can someone from @intel/dpcpp-devops-reviewers follow-up on this?

I hit this issue again in post-commit - https://github.com/intel/llvm/actions/runs/8087099887/job/22099917679. It's on the same runner - intel_sycl119893. It sounds like a potential issue with the environment.

UPDATE: I'm not the only one - https://github.com/intel/llvm/actions/runs/8084473526/job/22091081873 - pre-commit for #12855. The same runner.

maarquitos14 · 2024-03-07T10:10:35Z

I just saw the sycl-ls issue again in https://github.com/intel/llvm/actions/runs/8180367243/job/22368716100?pr=12925. Note that the runner is different this time: intel_sycl05.

maarquitos14 · 2024-03-08T10:53:18Z

Another failure with runner intel_sycl05: https://github.com/intel/llvm/actions/runs/8156710255/job/22297115170?pr=12582

dependabot bot requested a review from a team as a code owner February 21, 2024 20:49

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 21, 2024

dependabot bot had a problem deploying to WindowsCILock February 21, 2024 20:49 Error

Update llvm/utils/git/requirements.txt

f77cac4

bader temporarily deployed to WindowsCILock February 21, 2024 21:18 — with GitHub Actions Inactive

asudarsa approved these changes Feb 21, 2024

View reviewed changes

bader had a problem deploying to WindowsCILock February 21, 2024 21:55 — with GitHub Actions Failure

bader merged commit 033943c into sycl Feb 22, 2024
9 of 10 checks passed

bader deleted the dependabot/pip/llvm/utils/git/cryptography-42.0.4 branch February 22, 2024 16:49

maarquitos14 mentioned this pull request Feb 23, 2024

[SYCL] Enhance specialization constants testing. #12647

Merged

maarquitos14 mentioned this pull request Mar 7, 2024

[SYCL] Correct handling of enumeration specialization constants #12925

Merged

maarquitos14 mentioned this pull request Mar 8, 2024

[SYCL] Make PropertySetRegistry being owning it's content #12582

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump cryptography from 42.0.2 to 42.0.4 in /llvm/utils/git #12791

Bump cryptography from 42.0.2 to 42.0.4 in /llvm/utils/git #12791

dependabot bot commented on behalf of github Feb 21, 2024

asudarsa left a comment

bader commented Feb 21, 2024

maarquitos14 commented Feb 22, 2024

bader commented Feb 22, 2024

bader commented Feb 22, 2024

bader commented Feb 28, 2024 •

edited

Loading

maarquitos14 commented Mar 7, 2024

maarquitos14 commented Mar 8, 2024

Bump cryptography from 42.0.2 to 42.0.4 in /llvm/utils/git #12791

Bump cryptography from 42.0.2 to 42.0.4 in /llvm/utils/git #12791

Conversation

dependabot bot commented on behalf of github Feb 21, 2024

asudarsa left a comment

Choose a reason for hiding this comment

bader commented Feb 21, 2024

maarquitos14 commented Feb 22, 2024

bader commented Feb 22, 2024

bader commented Feb 22, 2024

bader commented Feb 28, 2024 • edited Loading

maarquitos14 commented Mar 7, 2024

maarquitos14 commented Mar 8, 2024

bader commented Feb 28, 2024 •

edited

Loading