Skip to content

[miniconda]- security update for cryptography (GHSA-m959-cc7f-wv43) #1861

Open
sireeshajonnalagadda wants to merge 3 commits into
devcontainers:mainfrom
sireeshajonnalagadda:miniconda_vulns
Open

[miniconda]- security update for cryptography (GHSA-m959-cc7f-wv43) #1861
sireeshajonnalagadda wants to merge 3 commits into
devcontainers:mainfrom
sireeshajonnalagadda:miniconda_vulns

Conversation

@sireeshajonnalagadda
Copy link
Copy Markdown
Contributor

@sireeshajonnalagadda sireeshajonnalagadda commented May 14, 2026

Update cryptography package version to 46.0.6 and increment manifest version to 1.2.5

GHSA ID Vulnerability ID Action Package Installed Version Required Version Language Install Path/ Note Image Digest
Python (Pip) Security Update for cryptography (GHSA-m959-cc7f-wv43) 5010145 Y cryptography 46.0.5 46.0.6 Python opt/conda/lib/python3.13/site-packages/cryptography-46.0.5.dist-info/METADATA sha256:da12786874c65d67f7ce12d0f9c9dc4158665a99a31f8af3777d589e6edc9a12

@sireeshajonnalagadda sireeshajonnalagadda marked this pull request as ready for review May 15, 2026 09:29
@sireeshajonnalagadda sireeshajonnalagadda requested a review from a team as a code owner May 15, 2026 09:29
Copilot AI review requested due to automatic review settings May 15, 2026 09:29
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Miniconda image security patch pin for cryptography and bumps the image patch version to publish the refreshed image.

Changes:

  • Pins cryptography to 46.0.6 in the Miniconda security patch script.
  • Updates Miniconda validation checks to require cryptography >= 46.0.6.
  • Bumps the image manifest and README semantic version example from 1.2.4 to 1.2.5.
Show a summary per file
File Description
src/miniconda/.devcontainer/apply_security_patches.sh Updates the cryptography patched package version.
src/miniconda/test-project/test.sh Updates Python and Conda package version checks for cryptography.
src/miniconda/manifest.json Bumps the Miniconda image version to 1.2.5.
src/miniconda/README.md Updates the documented semantic version tag example.

Copilot's findings

  • Files reviewed: 4/4 changed files
  • Comments generated: 2

Comment thread src/miniconda/.devcontainer/apply_security_patches.sh Outdated
Comment thread src/miniconda/.devcontainer/apply_security_patches.sh
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants