github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-05-06 02:48:13 -05:00
Code Issues 1.1k Packages Projects Releases 126 Wiki Activity

[PR #17093] [MERGED] build(deps): bump argon2-cffi from 23.1.0 to 25.1.0 in /backend #47366

New Issue
Closed
opened 2026-04-29 22:34:29 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-29 22:34:29 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/17093
Author: @dependabot[bot]
Created: 9/1/2025
Status: ✅ Merged
Merged: 9/1/2025
Merged by: @tjbck

Base: dev ← Head: dependabot/pip/backend/dev/argon2-cffi-25.1.0

📝 Commits (1)

  • bcc0cbf build(deps): bump argon2-cffi from 23.1.0 to 25.1.0 in /backend

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 backend/requirements.txt (+1 -1)

📄 Description

Bumps argon2-cffi from 23.1.0 to 25.1.0.

Release notes

Sourced from argon2-cffi's releases.

25.1.0

Highlights

This release is mostly about smoothing out packaging metadata and improve support for Pyodide / WebAssembly environments.

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Klaviyo (@klaviyo), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Doist (@Doist), nate nowack (@zzstoatzz), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Moving Content AG (@moving-content), ProteinQure (@ProteinQure), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Not to forget 14 more amazing humans who chose to be generous but anonymous!

Full Changelog

Added

  • Official support for Python 3.13 and 3.14. No code changes were necessary.

Removed

  • Python 3.7 is not supported anymore. #186

Changed

  • argon2.PasswordHasher.check_needs_rehash() now also accepts bytes like the rest of the API. #174

  • Improved parameter compatibility handling for Pyodide / WebAssembly environments. #190

This release contains contributions from @​alarmfox, @​hynek, @​isidroas, @​ngoldbaum, @​peterc-s, and @​twm.

Artifact Attestations

You can verify this release's artifact attestions using GitHub's CLI tool by downloading the sdist and wheel from PyPI and running:

... (truncated)

Changelog

Sourced from argon2-cffi's changelog.

25.1.0 - 2025-06-03

Added

  • Official support for Python 3.13 and 3.14. No code changes were necessary.

Removed

  • Python 3.7 and 3.8 are not supported anymore. #186

Changed

  • argon2.PasswordHasher.check_needs_rehash() now also accepts bytes like the rest of the API. #174

  • Improved parameter compatibility handling for Pyodide / WebAssembly environments. #190

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/17093 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 9/1/2025 **Status:** ✅ Merged **Merged:** 9/1/2025 **Merged by:** [@tjbck](https://github.com/tjbck) **Base:** `dev` ← **Head:** `dependabot/pip/backend/dev/argon2-cffi-25.1.0` --- ### 📝 Commits (1) - [`bcc0cbf`](https://github.com/open-webui/open-webui/commit/bcc0cbf895e59d06e254e77ce381ba3d9bd8ceb8) build(deps): bump argon2-cffi from 23.1.0 to 25.1.0 in /backend ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `backend/requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [argon2-cffi](https://github.com/hynek/argon2-cffi) from 23.1.0 to 25.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hynek/argon2-cffi/releases">argon2-cffi's releases</a>.</em></p> <blockquote> <h2>25.1.0</h2> <h2>Highlights</h2> <p>This release is mostly about smoothing out packaging metadata and improve support for Pyodide / WebAssembly environments.</p> <p><em>Full changelog below!</em></p> <h2>Special Thanks</h2> <p>This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If <em>you</em> would like to join them, go to <a href="https://github.com/sponsors/hynek">https://github.com/sponsors/hynek</a> and check out the sweet perks!</p> <h3>Above and Beyond</h3> <p><a href="https://www.variomedia.de/">Variomedia AG</a> (@<a href="https://github.com/variomedia">variomedia</a>), <a href="https://www.tidelift.com/">Tidelift</a> (@<a href="https://github.com/tidelift">tidelift</a>), <a href="https://www.klaviyo.com">Klaviyo</a> (@<a href="https://github.com/klaviyo">klaviyo</a>), <a href="https://privacy-solutions.org">Privacy Solutions GmbH</a> (@<a href="https://github.com/privacy-solutions">privacy-solutions</a>), <a href="http://filepreviews.io/">FilePreviews</a> (@<a href="https://github.com/filepreviews">filepreviews</a>), <a href="https://doist.com/">Doist</a> (@<a href="https://github.com/Doist">Doist</a>), <a href="https://blog.alternatebuild.dev">nate nowack</a> (@<a href="https://github.com/zzstoatzz">zzstoatzz</a>), Daniel Fortunov (@<a href="https://github.com/asqui">asqui</a>), and Kevin P. Fleming (@<a href="https://github.com/kpfleming">kpfleming</a>).</p> <h3>Maintenance Sustainers</h3> <p><a href="https://buttondown.com">Buttondown</a> (@<a href="https://github.com/buttondown">buttondown</a>), <a href="https://christopher.xyz">Christopher Dignam</a> (@<a href="https://github.com/chdsbd">chdsbd</a>), Magnus Watn (@<a href="https://github.com/magnuswatn">magnuswatn</a>), <a href="https://cra.mr">David Cramer</a> (@<a href="https://github.com/dcramer">dcramer</a>), Jesse Snyder (@<a href="https://github.com/jessesnyder">jessesnyder</a>), <a href="https://rivolaks.com">Rivo Laks</a> (@<a href="https://github.com/rivol">rivol</a>), <a href="https://polar.sh">Polar</a> (@<a href="https://github.com/polarsource">polarsource</a>), <a href="https://www.miketheman.net">Mike Fiedler</a> (@<a href="https://github.com/miketheman">miketheman</a>), Duncan Hill (@<a href="https://github.com/cricalix">cricalix</a>), Colin Marquardt (@<a href="https://github.com/cmarqu">cmarqu</a>), <a href="https://blog.journeythatcounts.nl">Pieter Swinkels</a> (@<a href="https://github.com/swinkels">swinkels</a>), Nick Libertini (@<a href="https://github.com/libertininick">libertininick</a>), <a href="https://mpr.crossjam.net/">Brian M. Dennis</a> (@<a href="https://github.com/crossjam">crossjam</a>), Moving Content AG (@<a href="https://github.com/moving-content">moving-content</a>), <a href="https://proteinqure.com/">ProteinQure</a> (@<a href="https://github.com/ProteinQure">ProteinQure</a>), <a href="https://westervelt.com">The Westervelt Company</a> (@<a href="https://github.com/westerveltco">westerveltco</a>), <a href="https://slafs.net">Sławomir Ehlert</a> (@<a href="https://github.com/slafs">slafs</a>), Mostafa Khalil (@<a href="https://github.com/khadrawy">khadrawy</a>), <a href="https://fmularczyk.pl">Filip Mularczyk</a> (@<a href="https://github.com/mukiblejlok">mukiblejlok</a>), Thomas Klinger (@<a href="https://github.com/thmsklngr">thmsklngr</a>), <a href="https://poehlmann.io">Andreas Poehlmann</a> (@<a href="https://github.com/ap--">ap--</a>), <a href="https://atbigelow.com">August Trapper Bigelow</a> (@<a href="https://github.com/atbigelow">atbigelow</a>), <a href="https://noumenal.es/">Carlton Gibson</a> (@<a href="https://github.com/carltongibson">carltongibson</a>), and <a href="https://roboflow.com">Roboflow</a> (@<a href="https://github.com/roboflow">roboflow</a>).</p> <p>Not to forget 14 more amazing humans who chose to be generous but anonymous!</p> <h2>Full Changelog</h2> <h3>Added</h3> <ul> <li>Official support for Python 3.13 and 3.14. No code changes were necessary.</li> </ul> <h3>Removed</h3> <ul> <li>Python 3.7 is not supported anymore. <a href="https://redirect.github.com/hynek/argon2-cffi/pull/186">#186</a></li> </ul> <h3>Changed</h3> <ul> <li> <p><code>argon2.PasswordHasher.check_needs_rehash()</code> now also accepts bytes like the rest of the API. <a href="https://redirect.github.com/hynek/argon2-cffi/pull/174">#174</a></p> </li> <li> <p>Improved parameter compatibility handling for Pyodide / WebAssembly environments. <a href="https://redirect.github.com/hynek/argon2-cffi/pull/190">#190</a></p> </li> </ul> <hr /> <p>This release contains contributions from <a href="https://github.com/alarmfox"><code>@​alarmfox</code></a>, <a href="https://github.com/hynek"><code>@​hynek</code></a>, <a href="https://github.com/isidroas"><code>@​isidroas</code></a>, <a href="https://github.com/ngoldbaum"><code>@​ngoldbaum</code></a>, <a href="https://github.com/peterc-s"><code>@​peterc-s</code></a>, and <a href="https://github.com/twm"><code>@​twm</code></a>.</p> <h2>Artifact Attestations</h2> <p>You can verify this release's <a href="https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds">artifact attestions</a> using <a href="https://cli.github.com">GitHub's CLI tool</a> by downloading the sdist and wheel from <a href="https://pypi.org/project/argon2-cffi">PyPI</a> and running:</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hynek/argon2-cffi/blob/main/CHANGELOG.md">argon2-cffi's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/hynek/argon2-cffi/compare/23.1.0...25.1.0">25.1.0</a> - 2025-06-03</h2> <h3>Added</h3> <ul> <li>Official support for Python 3.13 and 3.14. No code changes were necessary.</li> </ul> <h3>Removed</h3> <ul> <li>Python 3.7 and 3.8 are not supported anymore. <a href="https://redirect.github.com/hynek/argon2-cffi/pull/186">#186</a></li> </ul> <h3>Changed</h3> <ul> <li> <p><code>argon2.PasswordHasher.check_needs_rehash()</code> now also accepts bytes like the rest of the API. <a href="https://redirect.github.com/hynek/argon2-cffi/pull/174">#174</a></p> </li> <li> <p>Improved parameter compatibility handling for Pyodide / WebAssembly environments. <a href="https://redirect.github.com/hynek/argon2-cffi/pull/190">#190</a></p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hynek/argon2-cffi/commit/1fcae4fc1b7ff192b5ade54f6616771e5cf5f391"><code>1fcae4f</code></a> Prepare 25.1.0</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/18939b166b9df91402929394557c500d5bbf106b"><code>18939b1</code></a> ci: placate dr zizmor</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/8dcceb570941d5ea13d12d716335459d78461ec5"><code>8dcceb5</code></a> ci: pin &amp; trust</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/95422424750584fa8547ccb974c4845b7da81eb2"><code>9542242</code></a> Clean up trove classifiers</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/298af7e4db7c693de5d8889ec8b8d12558367f9b"><code>298af7e</code></a> Switch to dependency groups (<a href="https://redirect.github.com/hynek/argon2-cffi/issues/202">#202</a>)</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/2eedf07ac73ccdbf12846c4e243fcbbb03db9cb6"><code>2eedf07</code></a> Update &amp; rename Ruff</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/bc861f04ffa8a39e5c27fe963dc9b8815564c39b"><code>bc861f0</code></a> Add 3.14</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/f8260dd07d8e1e200f982a48039524ddacd8e4ec"><code>f8260dd</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/hynek/argon2-cffi/issues/200">#200</a>)</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/b8321fa3b6f220a132a5836cfc982b2db9aff8a0"><code>b8321fa</code></a> Add a multithreaded stress test (<a href="https://redirect.github.com/hynek/argon2-cffi/issues/199">#199</a>)</li> <li><a href="https://github.com/hynek/argon2-cffi/commit/9143d9092b6f93f9c893d995af0d249d5c5a9feb"><code>9143d90</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/hynek/argon2-cffi/issues/198">#198</a>)</li> <li>Additional commits viewable in <a href="https://github.com/hynek/argon2-cffi/compare/23.1.0...25.1.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=argon2-cffi&package-manager=pip&previous-version=23.1.0&new-version=25.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-29 22:34:29 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#47366
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?