chore(deps): bump pyasn1 from 0.6.2 to 0.6.3
What the developer wrote
Authored by dependabot[bot]
chore(deps): bump pyasn1 from 0.6.2 to 0.6.3
Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.6.2 to 0.6.3.
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](https://github.com/pyasn1/pyasn1/compare/v0.6.2...v0.6.3)
---
updated-dependencies:
- dependency-name: pyasn1
dependency-version: 0.6.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated dependency update by Dependabot that bumps the Python library pyasn1 from version 0.6.2 to 0.6.3 in the project's lock file. The commit itself only changes package metadata (download URLs and cryptographic hashes) and contains no code changes, bug fixes, or security claims. There is no evidence in the commit or supplied references that this update addresses a security issue.
No immediate security action is required. Treat as normal dependency hygiene. If the project has a policy of reviewing dependency updates, verify the pyasn1 0.6.3 release notes for any relevant fixes, but the commit itself provides no security rationale.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates a single pinned dependency entry in uv.lock for pyasn1, a pure-Python ASN.1 parsing library used by Trezor’s tooling. The diff changes only the version string, source tarball URL/hash, and wheel URL/hash. No source code, tests, changelog entries, or advisory references are included. No security signals are present in the commit message or diff.
Changed components
uv.lock dependency manifestpyasn1 0.6.2 -> 0.6.3Inspect captured patch +3 / −3
diff --git a/uv.lock b/uv.lock
index e9462af1..91075f26 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1281,11 +1281,11 @@ wheels = [
[[package]]
name = "pyasn1"
-version = "0.6.2"
+version = "0.6.3"
source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/fe/b6/6e630dff89739fcd427e3f72b3d905ce0acb85a45d4ec3e2678718a3487f/pyasn1-0.6.2.tar.gz", hash = "sha256:9b59a2b25ba7e4f8197db7686c09fb33e658b98339fadb826e9512629017833b", size = 146586, upload-time = "2026-01-16T18:04:18.534Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/5c/5f/6583902b6f79b399c9c40674ac384fd9cd77805f9e6205075f828ef11fb2/pyasn1-0.6.3.tar.gz", hash = "sha256:697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf", size = 148685, upload-time = "2026-03-17T01:06:53.382Z" }
wheels = [
- { url = "https://files.pythonhosted.org/packages/44/b5/a96872e5184f354da9c84ae119971a0a4c221fe9b27a4d94bd43f2596727/pyasn1-0.6.2-py3-none-any.whl", hash = "sha256:1eb26d860996a18e9b6ed05e7aae0e9fc21619fcee6af91cca9bad4fbea224bf", size = 83371, upload-time = "2026-01-16T18:04:17.174Z" },
+ { url = "https://files.pythonhosted.org/packages/5d/a0/7d793dce3fa811fe047d6ae2431c672364b462850c6235ae306c0efd025f/pyasn1-0.6.3-py3-none-any.whl", hash = "sha256:a80184d120f0864a52a073acc6fc642847d0be408e7c7252f31390c0f4eadcde", size = 83997, upload-time = "2026-03-17T01:06:52.036Z" },
]
[[package]]
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.