Skip to content

deps: bump openpgp from 6.3.1 to 6.3.2 - #8

Merged
jaundre-van-staden merged 1 commit into
mainfrom
dependabot/npm_and_yarn/openpgp-6.3.2
Oct 16, 2026
Merged

jaundre-van-staden merged 1 commit into
mainfrom
dependabot/npm_and_yarn/openpgp-6.3.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps openpgp from 6.3.1 to 6.3.2.

Release notes

Sourced from openpgp's releases.

v6.3.2

What's Changed

  • Fix encrypting more than 4GB of data using AEAD (#2059)
  • config.maxDecompressedMessageSize: improve unbzip2 memory limit enforcement (openpgpjs/openpgpjs#2064)
  • Fix parsing of four-octet packet lengths of 2**31 and above (#2061)
  • UnparseablePacket: fix discarding of packets following an unparseable secret (sub)key (#2060)
  • Fix reading an empty trailing subpacket in v6 signatures (#2055)
  • Fix calling Message.signDetached directly (#2062)

Full Changelog: openpgpjs/openpgpjs@v6.3.1...v6.3.2

Commits
  • 5f33328 6.3.2
  • c8d0d68 Merge pull request #2059 (with Safari 14 fallback)
  • 38c9ec2 CI: enable on v6 branch
  • 16e32bb Fix parsing of four-octet packet lengths of 2**31 and above (#2061)
  • 20f2b1b Fix calling Message.signDetached directly (#2062)
  • 97d5023 UnparseablePacket: fix discarding of packets following an unparseable secre...
  • 95dbe0b config.maxDecompressedMessageSize: improve unbzip2 memory limit enforcement...
  • 545271c Merge pull request #2055
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Dependency update security Security-sensitive change or report labels Sep 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/openpgp-6.3.2 branch from 123ea42 to 9d470f0 Compare October 16, 2026 12:21
@jaundre-van-staden

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/openpgp-6.3.2 branch from 9d470f0 to 8fdf821 Compare October 16, 2026 17:41
@jaundre-van-staden

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/openpgp-6.3.2 branch from 8fdf821 to 4a7049c Compare October 16, 2026 22:14
@jaundre-van-staden

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [openpgp](https://github.com/openpgpjs/openpgpjs) from 6.3.1 to 6.3.2.
- [Release notes](https://github.com/openpgpjs/openpgpjs/releases)
- [Commits](openpgpjs/openpgpjs@v6.3.1...v6.3.2)

---
updated-dependencies:
- dependency-name: openpgp
  dependency-version: 6.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/openpgp-6.3.2 branch from 4a7049c to 574fed7 Compare October 16, 2026 22:47
@jaundre-van-staden
jaundre-van-staden merged commit 3762cdd into main Oct 16, 2026
2 checks passed
@jaundre-van-staden
jaundre-van-staden deleted the dependabot/npm_and_yarn/openpgp-6.3.2 branch October 16, 2026 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency update security Security-sensitive change or report

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant