#3409 Bump pyasn1 from 0.6.0 to 0.6.3 Pull request opened by dependabot[bot] Bumps pyasn1 from 0.6.0 to 0.6.3. Release notes Sourced from pyasn1's releases.

Release 0.6.3

It's a minor release.

• Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (CVE-2026-30922).

• Fixed OverflowError from oversized BER length field.

• Fixed DeprecationWarning stacklevel for deprecated attributes.

• Fixed asDateTime incorrect fractional seconds parsing.

All changes are noted in the CHANGELOG.

Release 0.6.2

It's a minor release.

• Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490).

• Added support for Python 3.14.

• Added SECURITY.md policy.

• Migrated to pyproject.toml packaging.

All changes are noted in the CHANGELOG.

Release 0.6.1

It's a minor release.

• Added support for Python 3.13.

• Cleaned Python 2-related code.

• Removed bdist_wheel universal flag from setup.cfg.

All changes are noted in the CHANGELOG.

Changelog Sourced from pyasn1's changelog.

Revision 0.6.3, released 16-03-2026

• CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (thanks for reporting, romanticpragmatism)

• Fixed OverflowError from oversized BER length field [issue #54](pyasn1/pyasn1#54) [pr #100](pyasn1/pyasn1#100)

• Fixed DeprecationWarning stacklevel for deprecated attributes [issue #86](pyasn1/pyasn1#86) [pr #101](pyasn1/pyasn1#101)

• Fixed asDateTime incorrect fractional seconds parsing [issue #81](pyasn1/pyasn1#81) [pr #102](pyasn1/pyasn1#102)

Revision 0.6.2, released 16-01-2026

• CVE-2026-23490 (GHSA-63vm-454h-vhhq): Fixed continuation octet limits in OID/RELATIVE-OID decoder (thanks to tsigouris007)

• Added support for Python 3.14 [pr #97](pyasn1/pyasn1#97)

• Added SECURITY.md policy

• Fixed unit tests failing due to missing code [issue #91](pyasn1/pyasn1#91) [pr #92](pyasn1/pyasn1#92)

• Migrated to pyproject.toml packaging [pr #90](pyasn1/pyasn1#90)

Revision 0.6.1, released 10-09-2024

• Added support for Python 3.13 and updated GitHub Actions [pr #73](pyasn1/pyasn1#73)

• Removed Python 2 support and related code [pr #62](pyasn1/pyasn1#62) [pr #61](pyasn1/pyasn1#61) [pr #60](pyasn1/pyasn1#60)

• Improved error handling and consistency [pr #71](pyasn1/pyasn1#71) [pr #70](pyasn1/pyasn1#70)

• Runtime deprecation of

tagMap

and

typeMap

aliases [pr #72](pyasn1/pyasn1#72)

• Fixed duplicated and missing declarations [pr #64](pyasn1/pyasn1#64)

• Cleaned documentation and comments [pr #63](pyasn1/pyasn1#63)

• Removed bdist_wheel universal flag from setup.cfg [pr #69](pyasn1/pyasn1#69)

Commits • `af65c3b` Prepare release 0.6.3 • `5a49bd1` Merge commit from fork • `5494ba4` Fix asDateTime incorrect fractional seconds parsing (#102) • `71f486e` Fix DeprecationWarning stacklevel for deprecated attributes (#101) • `d7cb42d` Fix OverflowError from oversized BER length field (#100) • `e7356f8` Prepare release 0.6.2 • `3908f14` Merge commit from fork • `0a7e067` Add support for Python 3.14 (#97) • `33656e9` Create Security Policy • `fa62307` fix for issue #91: unit tests failing due to missing code (#92) • Additional commits viewable in compare view Dependabot compatibility score Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting

@dependabot rebase

. --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: •

@dependabot rebase

will rebase this PR •

@dependabot recreate

will recreate this PR, overwriting any edits that have been made to it • `@dependabot show <… flyteorg/flytekit