Skip to content

chore(deps): bump pgp from 0.17.0 to 0.19.0 - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/pgp-0.19.0
Open

chore(deps): bump pgp from 0.17.0 to 0.19.0#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/pgp-0.19.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown

Bumps pgp from 0.17.0 to 0.19.0.

Release notes

Sourced from pgp's releases.

v0.19.0

⛰️ Features

  • Add helper to use multiple secret keys for decryption - (4176c07)
  • Add back capability to build a SignedPublicKey from a key held externally (#678) - (066d0c5)
  • Expand zeroizing of secret values - (4db0b6d)

🐛 Bug Fixes

  • Support RSA keys up to 8k by default (#664) - (4c42ec1)
  • Loosen trait requirements to KeyDetails, where appropriate (#680) - (9221ea1)
  • Adds CertCasual (#691) - (a3e387c)
  • Ensure trailing packets are consumed - (16c2457)
  • Recursion issues in deeply nested messages - (e82f2c7)
  • Handling of multiple trailing zeros in ecdh for malformed-artifact-compat - (7eb0682)

🚜 Refactor

  • [breaking] Drop encrypt methods from secret key types (#670) - (cf8a770)
  • [breaking] Simplify key generation by always signing immediately - (e111ba1)
  • [breaking] Introduce EncryptionKey trait (#668) - (4a85df9)
  • [breaking] New structure for key traits (#672) - (90999d9)
  • [breaking] Adjust subpacket name "Issuer Key ID", to align with RFC 9580 (#674) - (23214a8)
  • [breaking] Replace chrono::DateTime with custom Timestamp (#673) - (2435971)
  • [breaking] Verify -> verify_bindings (#675) - (7ac79b7)
  • [breaking] Introduce DecryptionKey (#679) - (86881b3)
  • [breaking] Don't export symbols in duplicate - (96d94e3)
  • Move support for large rsa keys into a separate feature (#696) - (135017f)
  • Move some unused decryption code behind cfg(test) - (73cb9d1)
  • [breaking] Distinguish can_encrypt_comms and can_encrypt_storage in key builder (#685) - (7e3b6c0)
  • [breaking] Clearly mark v3 key expiration fields as legacy (#695) - (f2aefc8)

📚 Documentation

🧪 Testing

  • (fuzz) Port to current API (#701) - (5fd74d0)
  • Armor with very long line (#704) - (36125a5)
  • Cleartext message with "NotDashEscaped" header - (21b56ad)

⚙️ Miscellaneous Tasks

  • (cargo-deny) Ignore ml-dsa advisory for now (#710) - (19e469b)
  • Update zeroize_derive to 1.4.3 - (d155807

v0.18.0

⛰️ Features

... (truncated)

Changelog

Sourced from pgp's changelog.

0.19.0 - 2026-02-02

⛰️ Features

  • Add helper to use multiple secret keys for decryption - (4176c07)
  • Add back capability to build a SignedPublicKey from a key held externally (#678) - (066d0c5)
  • Expand zeroizing of secret values - (4db0b6d)

🐛 Bug Fixes

  • Support RSA keys up to 8k by default (#664) - (4c42ec1)
  • Loosen trait requirements to KeyDetails, where appropriate (#680) - (9221ea1)
  • Adds CertCasual (#691) - (a3e387c)
  • Ensure trailing packets are consumed - (16c2457)
  • Recursion issues in deeply nested messages - (e82f2c7)
  • Handling of multiple trailing zeros in ecdh for malformed-artifact-compat - (7eb0682)

🚜 Refactor

  • [breaking] Drop encrypt methods from secret key types (#670) - (cf8a770)
  • [breaking] Simplify key generation by always signing immediately - (e111ba1)
  • [breaking] Introduce EncryptionKey trait (#668) - (4a85df9)
  • [breaking] New structure for key traits (#672) - (90999d9)
  • [breaking] Adjust subpacket name "Issuer Key ID", to align with RFC 9580 (#674) - (23214a8)
  • [breaking] Replace chrono::DateTime with custom Timestamp (#673) - (2435971)
  • [breaking] Verify -> verify_bindings (#675) - (7ac79b7)
  • [breaking] Introduce DecryptionKey (#679) - (86881b3)
  • [breaking] Don't export symbols in duplicate - (96d94e3)
  • Move support for large rsa keys into a separate feature (#696) - (135017f)
  • Move some unused decryption code behind cfg(test) - (73cb9d1)
  • [breaking] Distinguish can_encrypt_comms and can_encrypt_storage in key builder (#685) - (7e3b6c0)
  • [breaking] Clearly mark v3 key expiration fields as legacy (#695) - (f2aefc8)

📚 Documentation

🧪 Testing

  • (fuzz) Port to current API (#701) - (5fd74d0)
  • Armor with very long line (#704) - (36125a5)
  • Cleartext message with "NotDashEscaped" header - (21b56ad)

⚙️ Miscellaneous Tasks

  • (cargo-deny) Ignore ml-dsa advisory for now (#710) - (19e469b)
  • Update zeroize_derive to 1.4.3 - (d155807)

0.18.0 - 2025-11-16

... (truncated)

Commits
  • c530019 chore(pgp): release 0.19.0
  • f2aefc8 refactor!: clearly mark v3 key expiration fields as legacy (#695)
  • 29a668e docs: add some more API docs (#640)
  • 19e469b chore(cargo-deny): ignore ml-dsa advisory for now (#710)
  • 7eb0682 fix: handling of multiple trailing zeros in ecdh for malformed-artifact-compat
  • 21b56ad test: cleartext message with "NotDashEscaped" header
  • e82f2c7 fix: recursion issues in deeply nested messages
  • 36125a5 test: armor with very long line (#704)
  • 7e3b6c0 refactor!: distinguish can_encrypt_comms and can_encrypt_storage in key build...
  • 4db0b6d feat: expand zeroizing of secret values
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 17, 2026
Bumps [pgp](https://github.com/rpgp/rpgp) from 0.17.0 to 0.19.0.
- [Release notes](https://github.com/rpgp/rpgp/releases)
- [Changelog](https://github.com/rpgp/rpgp/blob/main/CHANGELOG.md)
- [Commits](rpgp/rpgp@v0.17.0...v0.19.0)

---
updated-dependencies:
- dependency-name: pgp
  dependency-version: 0.19.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/pgp-0.19.0 branch from cd28b05 to e7a93ce Compare August 18, 2026 01:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants