Sourced from cryptography's changelog.
50.0.0 - 2026-07-31
* **SECURITY ISSUE**: :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der` and its PEM and S/MIME variants no longer expose distinguishable errors or timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could act as a Bleichenbacher oracle for callers that decrypt untrusted messages. A random key is now substituted on failure, as described in :rfc:`3218`. Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247** * Deprecated Diffie-Hellman key exchange over finite fields (FFDH). Everything FFDH is deprecated, including the types in ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or parameters with the key loading APIs. Users should migrate to a more modern key exchange algorithm. * Added ``xof()`` class methods to :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing algorithm instances configured for use with :class:`~cryptography.hazmat.primitives.hashes.XOFHash`. * The :mod:`X.509 verification <cryptography.x509.verification>` APIs are now considered stable and are subject to our API stability policy. * Added the :doc:`/cobblestone` recipe, an implementation of the Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP chunked-encryption specification <https://c2sp.org/chunked-encryption>`_ for streaming authenticated encryption of large messages. * Parsing a Signed Certificate Timestamp list now rejects encodings that carry trailing bytes after the list or after an individual SCT, instead of silently ignoring them. * Added support for using :class:`~cryptography.x509.Name` as a field type in the :doc:`/hazmat/asn1/index` module. * Loading a public key or an EC private key now rejects DER where the ``subjectPublicKey`` (or EC ``publicKey``) ``BIT STRING`` declares a non-zero number of unused bits, instead of silently ignoring it. * Parsing a CRL entry's ``InvalidityDate`` extension now rejects a ``GeneralizedTime`` that carries fractional seconds or another non-DER form, matching the strict encoding already required for every other X.509 time field. * :func:`~cryptography.x509.ocsp.load_der_ocsp_request` and :func:`~cryptography.x509.ocsp.load_der_ocsp_response` now reject a request or response whose ``version`` field is not ``v1``, the only version defined by RFC 6960, matching the version validation already performed when loading certificates, CSRs and CRLs. * :class:`~cryptography.hazmat.primitives.hashes.XOFHash` is now supported when building against AWS-LC. * HMAC (and therefore PBKDF2-HMAC) with SHA-3 hashes is now supported when building against AWS-LC. * Diffie-Hellman (:doc:`/hazmat/primitives/asymmetric/dh`) is now supported when building against AWS-LC. </tr></table>
... (truncated)
dcb7050
Prepare for 50.0.0 release (#15372)53fccd9
Don't leak how PKCS#7 encryptedKey decryption failed (#15369)d472f97
Add from __future__ import annotations to all src/ Python
files (#15371)908773d
Bump downstream dependencies in CI (#15368)2cc07cc
Bump BoringSSL, OpenSSL, AWS-LC in CI (#15367)c94ede9
chore(deps): bump ruff from 0.16.0 to 0.16.1 (#15366)67a8308
chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (#15365)95018ff
Release the GIL in one-shot AEAD encrypt/decrypt (#15361)6954733
Release the GIL during DH and DSA parameter generation (#15364)6893b94
Import _serialization instead of serialization in x509/extensions (#15363)Sourced from aiohttp's changelog.
3.14.3 (2026-07-22)
Bug fixes
Fixed the client dropping only the first
Authorization,CookieandProxy-Authorizationheader when a redirect crossed an origin -- by :user:arshsmith1.Related issues and pull requests on GitHub: :issue:
13180.Fixed error message construction in the C HTTP parser -- by :user:
bdraco.Related issues and pull requests on GitHub: :issue:
13222.
3.14.2 (2026-07-20)
Bug fixes
Fixed :py:attr:
~aiohttp.web.StreamResponse.last_modifiedrounding a :class:datetime.datetimewith a fractional second down.Related issues and pull requests on GitHub: :issue:
5303.Fixed resolving
localhoston Windows to fall back withoutAI_ADDRCONFIGwhen the first lookup fails, solocalhoststill works without an active network.Related issues and pull requests on GitHub: :issue:
5357.
... (truncated)
5e392ce
Release v3.14.3 (#13225)49f65d5
[PR #13222/f4866933
backport][3.14] Build C parser error message from bounded...240099e
[PR #13180/ee53d655
backport][3.14] drop every copy of credential headers on ...d93f30a
Bump version (#13202)c1b9212
Release v3.14.2 (#13201)380d4b5
[PR #13054/ed8b040c
backport][3.14] escape backslashes in digest auth quoted-...e1e1bee
Make llhttp method array size dynamic (#13174)
(#13196)aa4cf29
[PR #13170/2b906869
backport][3.14] Fix StreamResponse.last_modified rounding...71b57b4
[PR #13172/a57747ed
backport][3.14] Fix C parser folding fragment into query_...64a03fb
[PR #13169/1adc0cd7
backport][3.14] Upgrade http:// to https:// in README.rst...Sourced from datamodel-code-generator's releases.
0.64.0
Breaking Changes
Code Generation Changes
- Self-referencing fields are now quoted with
--disable-future-imports- When--disable-future-importsis set (nofrom __future__ import annotationsand no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regularBaseModelclasses are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raisedNameError(Ruff F821) at class-evaluation time. Output for the common case (withfrom __future__ import annotationsor Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the--disable-future-importsconfiguration with self-referencing models will see the annotation change from unquoted to quoted, e.g.children: Optional[List[Node]]→children: Optional[List["Node"]]. (#3387)What's Changed
- Update CHANGELOG for 0.63.0 by
@dcg-generated-docs[bot] in koxudaxi/datamodel-code-generator#3345- Deduplicate module content builder by
@koxudaxiin koxudaxi/datamodel-code-generator#3346- Deduplicate import reference helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3348- Refactor jsonschema root model registration by
@koxudaxiin koxudaxi/datamodel-code-generator#3352- Refactor XML Schema literal helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3349- Move builtin formatter helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3351- Deduplicate Pydantic v2 config helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3350- Deduplicate DataType type hint rendering by
@koxudaxiin koxudaxi/datamodel-code-generator#3354- Fix
constr()for string fields carrying minItems/maxItems by@DarkaMaulin koxudaxi/datamodel-code-generator#3353- Cover non-finite import idempotence by
@koxudaxiin koxudaxi/datamodel-code-generator#3367- Deduplicate input text detection by
@koxudaxiin koxudaxi/datamodel-code-generator#3357- Remove stale protobuf coverage pragma by
@koxudaxiin koxudaxi/datamodel-code-generator#3358- Cover explicit null OpenAPI media schemas by
@koxudaxiin koxudaxi/datamodel-code-generator#3360- Simplify Python version feature checks by
@koxudaxiin koxudaxi/datamodel-code-generator#3361- Speed up CI checks by
@koxudaxiin koxudaxi/datamodel-code-generator#3378- Add maintainer link to docs footer and README by
@koxudaxiin koxudaxi/datamodel-code-generator#3379- Use builtin formatter in CI by
@koxudaxiin koxudaxi/datamodel-code-generator#3380- Split coverage by OS by
@koxudaxiin koxudaxi/datamodel-code-generator#3381- Simplify import removal cleanup by
@koxudaxiin koxudaxi/datamodel-code-generator#3362- Pin deprecation warning stacklevel by
@koxudaxiin koxudaxi/datamodel-code-generator#3363- Pin public module exports by
@koxudaxiin koxudaxi/datamodel-code-generator#3364- Cover to_hashable branch cases by
@koxudaxiin koxudaxi/datamodel-code-generator#3366- Cover stable toposort behavior by
@koxudaxiin koxudaxi/datamodel-code-generator#3369- Extract registry render helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3371- Fix minItems for arrays of URI strings by
@sjh9714in koxudaxi/datamodel-code-generator#3377- Deduplicate config value validators by
@koxudaxiin koxudaxi/datamodel-code-generator#3372- Cover CLI option metadata helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3374- Cover Pydantic v2 version fallback by
@koxudaxiin koxudaxi/datamodel-code-generator#3368- Fix nullable JSON Schema const enums by
@koxudaxiin koxudaxi/datamodel-code-generator#3355- Pin patchable generation seams by
@koxudaxiin koxudaxi/datamodel-code-generator#3365- Cover utility helper behavior by
@koxudaxiin koxudaxi/datamodel-code-generator#3375- Cover DefaultPutDict behavior by
@koxudaxiin koxudaxi/datamodel-code-generator#3376- Cover validator config normalization by
@koxudaxiin koxudaxi/datamodel-code-generator#3373- Avoid expensive runtime type checks by
@koxudaxiin koxudaxi/datamodel-code-generator#3382- Avoid eager builtin formatter import by
@koxudaxiin koxudaxi/datamodel-code-generator#3383- Avoid eager TOML parser import by
@koxudaxiin koxudaxi/datamodel-code-generator#3384- Stabilize msgspec payload tests by
@koxudaxiin koxudaxi/datamodel-code-generator#3385- Avoid eager input parser imports by
@koxudaxiin koxudaxi/datamodel-code-generator#3386- Avoid eager parser model imports by
@koxudaxiin koxudaxi/datamodel-code-generator#3388- Avoid eager AsyncAPI converter imports by
@koxudaxiin koxudaxi/datamodel-code-generator#3389- Dispose parser on parse errors by
@koxudaxiin koxudaxi/datamodel-code-generator#3390
... (truncated)
Sourced from datamodel-code-generator's changelog.
0.64.0 - 2026-06-14
Breaking Changes
Code Generation Changes
- Self-referencing fields are now quoted with
--disable-future-imports- When--disable-future-importsis set (nofrom __future__ import annotationsand no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regularBaseModelclasses are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raisedNameError(Ruff F821) at class-evaluation time. Output for the common case (withfrom __future__ import annotationsor Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the--disable-future-importsconfiguration with self-referencing models will see the annotation change from unquoted to quoted, e.g.children: Optional[List[Node]]→children: Optional[List["Node"]]. (#3387)What's Changed
- Update CHANGELOG for 0.63.0 by
@dcg-generated-docs[bot] in koxudaxi/datamodel-code-generator#3345- Deduplicate module content builder by
@koxudaxiin koxudaxi/datamodel-code-generator#3346- Deduplicate import reference helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3348- Refactor jsonschema root model registration by
@koxudaxiin koxudaxi/datamodel-code-generator#3352- Refactor XML Schema literal helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3349- Move builtin formatter helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3351- Deduplicate Pydantic v2 config helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3350- Deduplicate DataType type hint rendering by
@koxudaxiin koxudaxi/datamodel-code-generator#3354- Fix
constr()for string fields carrying minItems/maxItems by@DarkaMaulin koxudaxi/datamodel-code-generator#3353- Cover non-finite import idempotence by
@koxudaxiin koxudaxi/datamodel-code-generator#3367- Deduplicate input text detection by
@koxudaxiin koxudaxi/datamodel-code-generator#3357- Remove stale protobuf coverage pragma by
@koxudaxiin koxudaxi/datamodel-code-generator#3358- Cover explicit null OpenAPI media schemas by
@koxudaxiin koxudaxi/datamodel-code-generator#3360- Simplify Python version feature checks by
@koxudaxiin koxudaxi/datamodel-code-generator#3361- Speed up CI checks by
@koxudaxiin koxudaxi/datamodel-code-generator#3378- Add maintainer link to docs footer and README by
@koxudaxiin koxudaxi/datamodel-code-generator#3379- Use builtin formatter in CI by
@koxudaxiin koxudaxi/datamodel-code-generator#3380- Split coverage by OS by
@koxudaxiin koxudaxi/datamodel-code-generator#3381- Simplify import removal cleanup by
@koxudaxiin koxudaxi/datamodel-code-generator#3362- Pin deprecation warning stacklevel by
@koxudaxiin koxudaxi/datamodel-code-generator#3363- Pin public module exports by
@koxudaxiin koxudaxi/datamodel-code-generator#3364- Cover to_hashable branch cases by
@koxudaxiin koxudaxi/datamodel-code-generator#3366- Cover stable toposort behavior by
@koxudaxiin koxudaxi/datamodel-code-generator#3369- Extract registry render helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3371- Fix minItems for arrays of URI strings by
@sjh9714in koxudaxi/datamodel-code-generator#3377- Deduplicate config value validators by
@koxudaxiin koxudaxi/datamodel-code-generator#3372- Cover CLI option metadata helpers by
@koxudaxiin koxudaxi/datamodel-code-generator#3374- Cover Pydantic v2 version fallback by
@koxudaxiin koxudaxi/datamodel-code-generator#3368- Fix nullable JSON Schema const enums by
@koxudaxiin koxudaxi/datamodel-code-generator#3355- Pin patchable generation seams by
@koxudaxiin koxudaxi/datamodel-code-generator#3365- Cover utility helper behavior by
@koxudaxiin koxudaxi/datamodel-code-generator#3375- Cover DefaultPutDict behavior by
@koxudaxiin koxudaxi/datamodel-code-generator#3376- Cover validator config normalization by
@koxudaxiin koxudaxi/datamodel-code-generator#3373- Avoid expensive runtime type checks by
@koxudaxiin koxudaxi/datamodel-code-generator#3382- Avoid eager builtin formatter import by
@koxudaxiin koxudaxi/datamodel-code-generator#3383- Avoid eager TOML parser import by
@koxudaxiin koxudaxi/datamodel-code-generator#3384- Stabilize msgspec payload tests by
@koxudaxiin koxudaxi/datamodel-code-generator#3385- Avoid eager input parser imports by
@koxudaxiin koxudaxi/datamodel-code-generator#3386- Avoid eager parser model imports by
@koxudaxiin koxudaxi/datamodel-code-generator#3388- Avoid eager AsyncAPI converter imports by
@koxudaxiin koxudaxi/datamodel-code-generator#3389- Dispose parser on parse errors by
@koxudaxiin koxudaxi/datamodel-code-generator#3390
... (truncated)
53a25ab
Fast path schema output (#3410)ee2087f
Skip discriminator import scan (#3411)bdf5ddf
fix: quote self-referencing fields when --disable-future-imports is set
(#3387)ad4ec87
Cache payload validation strategies (#3409)b191d52
Shard Python tests (#3408)29dd6d7
Cache parsed sources (#3407)93e2fe3
Defer generation refresh (#3406)bb01d9c
Lazy root format exports (#3405)48237ed
Fast path JSON schemas (#3404)b21d106
Slot generation facts (#3403)